This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/DFkzO0MNhMNW_pQxEI5P0thppG4.roa File: DFkzO0MNhMNW_pQxEI5P0thppG4.roa (raw, json) Hash identifier: i3uk5uTS1uq8XOzh/UGNedtV1LEwATUEpA6CSHEyV4Y= Subject key identifier: 0C:59:33:3B:43:0D:84:C3:56:FE:94:31:10:8E:4F:D2:D8:69:A4:6E Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Certificate serial: 019B7CECF7125C36DD3BCAADA24E49C7E220 Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/DFkzO0MNhMNW_pQxEI5P0thppG4.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213488 IP address blocks: 2a14:9401:6000::/36 maxlen: 36 2a14:9401:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f7:12:5c:36:dd:3b:ca:ad:a2:4e:49:c7:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c59333b430d84c356fe9431108e4fd2d869a46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:49:37:b8:74:4b:80:2e:94:d3:89:b4:4a:31: 08:13:ff:28:e2:45:4c:0c:41:7f:0d:ce:a0:71:db: 5c:50:5c:ec:c8:04:63:fb:6b:66:33:ac:d1:cf:e1: 06:3d:e6:63:50:e4:31:b7:29:1d:32:bb:c3:8d:7e: 3f:19:8c:19:cb:be:b5:ac:ec:bd:81:50:21:53:e1: a0:f8:1c:13:d6:77:7a:4c:c1:13:58:f5:a7:13:d3: 8f:40:f2:59:00:b3:cd:c1:5c:d6:15:cb:38:09:c5: 2c:5f:8e:cb:33:97:c8:28:f3:65:98:18:ab:b9:d6: 98:44:ab:6a:49:34:08:c4:27:a6:3a:86:20:7a:45: d7:da:6b:2e:00:02:d6:6a:39:e8:84:f9:28:94:46: 0f:07:4f:c7:d3:d1:fd:29:08:8d:58:f6:6c:b3:68: 2c:78:86:67:f0:2a:18:dd:1c:8a:82:26:a3:78:88: 8e:91:a7:11:21:11:22:fc:a2:e5:d2:38:9d:27:6d: 61:9b:88:22:c7:6e:7e:1e:b1:41:5f:55:4f:0d:b4: a9:3b:f7:41:a6:c3:63:d2:f9:b9:a8:c6:84:45:0d: c0:ae:64:25:74:e8:d2:f7:35:4b:14:ba:4c:99:41: 97:13:1c:60:5c:4f:b4:bd:ce:b9:9b:75:4c:7a:6b: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:59:33:3B:43:0D:84:C3:56:FE:94:31:10:8E:4F:D2:D8:69:A4:6E X509v3 Authority Key Identifier: keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/DFkzO0MNhMNW_pQxEI5P0thppG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9401:6000::/35 Signature Algorithm: sha256WithRSAEncryption 66:1a:65:28:7e:5a:e5:f4:54:bd:f6:9b:5e:9a:32:bf:49:35: 91:62:59:1f:2a:c7:18:32:ad:73:1e:e6:02:51:7b:ae:d7:74: d8:22:ec:b9:cc:9a:12:01:37:56:a8:ab:e2:07:f0:bd:01:a4: c2:21:08:1b:4b:c2:bf:f1:f5:8e:f1:0b:e0:c8:4e:1f:9d:94: b7:48:8d:40:c9:0a:59:d0:8d:dc:ae:b4:2a:49:a1:da:80:91: 04:67:44:57:0a:7b:51:58:e4:45:b5:e5:6f:15:df:b1:28:5b: 60:72:ee:c3:d4:47:1c:8b:76:06:5a:cc:af:56:5f:8c:51:e1: 78:97:32:7b:14:d8:df:08:8f:20:e8:2a:8a:2d:55:8d:6e:c1: ed:ea:b2:94:f4:a3:b0:d1:e9:74:de:7d:f1:13:89:ca:6b:c6: d0:0c:67:8d:3f:cf:16:77:24:54:38:43:09:ad:06:1e:fc:d7: 52:b3:82:04:da:2d:ff:9f:74:d0:46:05:b8:9e:56:2b:85:29: b9:3a:a9:e8:93:05:8d:b6:6a:8b:79:2b:67:41:18:a9:67:d6: 05:66:10:07:40:ee:a3:3a:a3:bf:9f:e0:58:4b:37:94:bc:aa: aa:13:3b:b5:2c:d3:2f:78:a0:72:b5:73:09:39:9c:74:4f:11: f6:73:09:03 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87PcSXDbdO8qtok5Jx+IgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTY0YTY0N2JkMmE1NTU3ZjcwZjY3NmFkY2M3NjkwNGZi ODcyYWIwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzU5MzMzYjQzMGQ4NGMzNTZmZTk0MzExMDhlNGZkMmQ4NjlhNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ek3uHRLgC6U04m0SjEIE/8o4kVM DEF/Dc6gcdtcUFzsyARj+2tmM6zRz+EGPeZjUOQxtykdMrvDjX4/GYwZy761rOy9 gVAhU+Gg+BwT1nd6TMETWPWnE9OPQPJZALPNwVzWFcs4CcUsX47LM5fIKPNlmBir udaYRKtqSTQIxCemOoYgekXX2msuAALWajnohPkolEYPB0/H09H9KQiNWPZss2gs eIZn8CoY3RyKgiajeIiOkacRIREi/KLl0jidJ21hm4gix25+HrFBX1VPDbSpO/dB psNj0vm5qMaERQ3ArmQldOjS9zVLFLpMmUGXExxgXE+0vc65m3VMemv2VwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAxZMztDDYTDVv6UMRCOT9LYaaRuMB8GA1UdIwQY MBaAFG+mSmR70qVVf3D2dq3MdpBPuHKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQt ZTkxYjNhYmQxZmU4LzEvREZrek8wTU5oTU5XX3BReEVJNVAwdGhwcEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQtZTkxYjNhYmQxZmU4 LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKhSUAWAw DQYJKoZIhvcNAQELBQADggEBAGYaZSh+WuX0VL32m16aMr9JNZFiWR8qxxgyrXMe 5gJRe67XdNgi7LnMmhIBN1aoq+IH8L0BpMIhCBtLwr/x9Y7xC+DITh+dlLdIjUDJ ClnQjdyutCpJodqAkQRnRFcKe1FY5EW15W8V37EoW2By7sPURxyLdgZazK9WX4xR 4XiXMnsU2N8IjyDoKootVY1uwe3qspT0o7DR6XTeffETicprxtAMZ40/zxZ3JFQ4 QwmtBh7811KzggTaLf+fdNBGBbieViuFKbk6qeiTBY22aot5K2dBGKln1gVmEAdA 7qM6o7+f4FhLN5S8qqoTO7Us0y94oHK1cwk5nHRPEfZzCQM= -----END CERTIFICATE-----Generated at Fri Jan 9 00:11:54 2026 by rpki-client