This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/DCxoPrJjEa7qWoB-gjEM4Xv9VaY.roa File: DCxoPrJjEa7qWoB-gjEM4Xv9VaY.roa (raw, json) Hash identifier: 3Wh981N2gyw99M7Um5Xn6NkUJGJJByeGVM52rgH1Xc0= Subject key identifier: 0C:2C:68:3E:B2:63:11:AE:EA:5A:80:7E:82:31:0C:E1:7B:FD:55:A6 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80196C245F0115C6CE482678E0ED6D Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/DCxoPrJjEa7qWoB-gjEM4Xv9VaY.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35169 IP address blocks: 83.206.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:19:6c:24:5f:01:15:c6:ce:48:26:78:e0:ed:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c2c683eb26311aeea5a807e82310ce17bfd55a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:b6:d7:92:79:6e:4f:6f:60:0b:12:6f:19: 64:7b:73:79:5d:f0:b5:2b:5a:26:64:35:61:37:d9: e3:b3:05:05:32:f1:b1:3c:80:a0:61:2e:22:f3:a5: 19:24:2d:aa:c0:60:f6:de:16:b0:64:92:ed:17:06: 50:07:06:7c:09:5c:4b:22:cc:4e:a4:a1:cc:3b:79: 74:aa:b4:88:57:a2:27:4e:e2:e5:79:2e:28:d7:3b: f7:16:e1:f4:20:e7:5f:9f:a5:a3:41:f3:d2:91:32: 9d:04:ae:c0:0b:3f:59:3d:80:0d:11:e1:7e:75:4f: b8:1a:7e:cf:3c:ca:85:96:b3:9c:2b:ee:38:47:57: 7d:22:dc:7f:15:d7:90:b9:dd:77:4d:3c:cc:a3:9c: 98:7b:68:a4:13:e8:bd:b0:e2:8e:b4:97:36:3f:99: 9a:be:90:59:f7:c4:30:8e:42:24:88:b5:76:44:0d: cc:3c:db:e1:5a:84:4d:60:e6:9f:68:89:96:cd:65: 6f:92:66:90:4d:3e:48:01:4e:63:ae:97:43:47:8a: 09:7e:fe:7c:3a:e7:29:d2:a3:8c:69:14:9d:01:bd: 5d:d2:97:f2:4e:12:f1:be:c7:c3:1a:58:19:88:1f: e0:a3:a6:0f:ee:98:b8:98:ed:45:20:74:b6:f1:3a: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:68:3E:B2:63:11:AE:EA:5A:80:7E:82:31:0C:E1:7B:FD:55:A6 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/DCxoPrJjEa7qWoB-gjEM4Xv9VaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.206.66.0/24 Signature Algorithm: sha256WithRSAEncryption 84:02:04:7e:c5:db:ae:34:ef:04:d2:11:2d:33:a7:f5:e4:db: 0e:07:04:3d:6c:fe:91:33:34:31:ea:74:a6:1a:b2:7f:8d:2c: eb:dd:26:1c:7d:cd:08:61:3e:49:58:b6:cb:6e:b2:cf:00:ed: 06:2b:d9:dc:92:3a:a7:ac:ad:b5:5e:26:77:f0:27:b2:f8:bf: 5f:8c:32:43:a0:5b:78:a4:e1:68:15:87:f4:d0:62:42:23:1d: f4:70:a5:5f:ef:68:ec:d8:20:e9:61:77:b1:24:de:fc:77:3d: f2:f6:85:70:aa:2b:d5:8b:2a:49:62:1b:c9:c9:37:21:29:77: 9b:c6:3a:e2:89:4f:e5:e7:fd:bb:68:4c:ef:85:f0:8a:9a:58: ea:bd:a4:19:2b:92:23:8f:af:73:28:7c:ba:a0:63:b3:08:14: a1:c9:31:70:b9:82:1a:ad:fd:70:bd:6a:80:bb:36:60:e2:61: 9c:21:a1:ce:aa:1b:e3:72:d2:7c:b1:06:d3:4e:4a:0e:f5:74: 22:cd:85:6e:5f:9e:04:5a:99:16:8e:c4:c3:c7:54:04:b7:5f: 39:82:d2:b9:84:93:09:f0:09:ab:36:68:2d:d0:2d:6c:e0:24: 3d:98:a5:6b:d4:22:cf:10:c3:c9:51:1c:b1:0b:3d:5d:1c:c2: 2f:0d:29:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBlsJF8BFcbOSCZ44O1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzJjNjgzZWIyNjMxMWFlZWE1YTgwN2U4MjMxMGNlMTdiZmQ1NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmG215J5bk9vYAsSbxlke3N5XfC1 K1omZDVhN9njswUFMvGxPICgYS4i86UZJC2qwGD23hawZJLtFwZQBwZ8CVxLIsxO pKHMO3l0qrSIV6InTuLleS4o1zv3FuH0IOdfn6WjQfPSkTKdBK7ACz9ZPYANEeF+ dU+4Gn7PPMqFlrOcK+44R1d9Itx/FdeQud13TTzMo5yYe2ikE+i9sOKOtJc2P5ma vpBZ98QwjkIkiLV2RA3MPNvhWoRNYOafaImWzWVvkmaQTT5IAU5jrpdDR4oJfv58 Oucp0qOMaRSdAb1d0pfyThLxvsfDGlgZiB/go6YP7pi4mO1FIHS28Tqb8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwsaD6yYxGu6lqAfoIxDOF7/VWmMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvREN4b1BySmpFYTdxV29CLWdqRU00WHY5VmFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU85CMA0G CSqGSIb3DQEBCwUAA4IBAQCEAgR+xduuNO8E0hEtM6f15NsOBwQ9bP6RMzQx6nSm GrJ/jSzr3SYcfc0IYT5JWLbLbrLPAO0GK9nckjqnrK21XiZ38Cey+L9fjDJDoFt4 pOFoFYf00GJCIx30cKVf72js2CDpYXexJN78dz3y9oVwqivViypJYhvJyTchKXeb xjriiU/l5/27aEzvhfCKmljqvaQZK5Ijj69zKHy6oGOzCBShyTFwuYIarf1wvWqA uzZg4mGcIaHOqhvjctJ8sQbTTkoO9XQizYVuX54EWpkWjsTDx1QEt185gtK5hJMJ 8AmrNmgt0C1s4CQ9mKVr1CLPEMPJURyxCz1dHMIvDSm1 -----END CERTIFICATE-----Generated at Sun Jan 11 10:45:57 2026 by rpki-client