This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/DK-XBDjvEUwNxsBmzqo8J9rquEU.roa File: DK-XBDjvEUwNxsBmzqo8J9rquEU.roa (raw, json) Hash identifier: r9pghvHN2qAAy+qaZ1juJScZuaWtFiuLGSgGufvS8U0= Subject key identifier: 0C:AF:97:04:38:EF:11:4C:0D:C6:C0:66:CE:AA:3C:27:DA:EA:B8:45 Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782 Certificate serial: 019B79100EA591B12477F889A12A5E90B1AB Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/DK-XBDjvEUwNxsBmzqo8J9rquEU.roa Signing time: Thu 01 Jan 2026 10:17:34 +0000 ROA not before: Thu 01 Jan 2026 10:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 45.8.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0e:a5:91:b1:24:77:f8:89:a1:2a:5e:90:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782 Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0caf970438ef114c0dc6c066ceaa3c27daeab845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:ff:79:bc:f9:db:f5:34:52:11:15:fd:94: 96:fb:dc:8f:e3:13:f6:88:83:df:27:88:64:b7:31: 7c:de:5c:e1:15:bf:59:bf:6c:d1:58:78:1d:c5:47: 3f:5f:93:2e:ed:c6:9a:c5:49:77:ab:e0:2b:8b:9f: b2:3d:dc:c5:72:f7:fe:c7:76:6a:36:6b:9b:aa:2d: 47:61:dc:cb:09:48:f0:9b:5c:79:f2:4b:e3:83:56: 8d:60:2a:b8:2b:fa:25:b8:94:8b:de:ea:ca:1d:ab: f3:f8:bd:ed:a5:2e:15:0a:24:9a:42:8a:5f:30:8b: ef:c8:b6:47:30:6b:66:8b:19:68:9a:a4:18:7c:76: c8:3f:92:5d:5f:2d:71:8d:40:9f:39:83:f2:c7:de: fa:7a:4f:9c:20:77:29:42:10:e8:d7:bb:08:a9:2f: bd:30:d6:d9:0a:d7:8f:a7:a8:6a:c7:e5:b9:06:10: 86:2e:ac:6d:25:89:b7:99:4d:c1:0d:d1:9e:fe:c5: 4b:f4:95:22:04:60:94:1d:e0:8e:d1:3e:bf:a9:d8: e2:0c:4c:c6:18:ef:1a:e6:6a:73:64:82:be:ee:b9: b3:2b:e7:4e:99:1c:16:1b:98:99:22:cd:75:1b:bc: e6:f9:7e:68:a1:3a:ad:c6:26:dd:c1:5e:a0:d0:17: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AF:97:04:38:EF:11:4C:0D:C6:C0:66:CE:AA:3C:27:DA:EA:B8:45 X509v3 Authority Key Identifier: keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/DK-XBDjvEUwNxsBmzqo8J9rquEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.43.0/24 Signature Algorithm: sha256WithRSAEncryption 84:61:23:59:03:b0:60:93:52:35:2d:d1:bb:26:29:cc:ab:1b: 9c:5c:e5:0e:8a:cc:a1:2a:f9:51:80:88:7d:da:34:54:a9:3e: 51:cc:0c:fc:c9:c1:3c:b5:e1:63:63:cf:ce:85:42:14:87:b8: fd:83:3b:4e:e4:e9:d6:b9:24:84:d0:97:52:99:c3:a8:61:5f: 2a:77:86:52:f1:43:cf:e9:6d:fa:e8:44:0b:2c:73:39:16:27: 88:e5:5e:2f:4f:c0:c0:c2:db:82:d7:27:f0:a8:3c:44:c2:f8: f4:40:77:24:3c:20:ef:b3:a9:d7:fb:ed:2a:7b:35:8e:51:14: 3b:31:d6:0c:53:34:39:b0:aa:4a:6a:fd:4c:b1:fe:0d:a1:5a: 1c:bd:d0:53:38:b9:c1:94:05:1c:f2:e5:ed:ff:d4:d1:c8:5c: 11:8a:f1:9f:4a:ff:2b:6c:45:fd:3f:23:de:44:f0:43:88:d6: ea:2a:7f:0f:63:71:5a:64:25:20:89:f6:bb:62:46:44:7e:13: b2:0f:c1:b9:da:db:c3:86:39:a9:f9:48:40:bc:93:a7:71:da: fb:ab:79:6a:34:95:4c:8c:3e:a0:37:bf:02:e5:1b:c1:97:a7: d4:e2:e6:92:ae:3a:03:ea:c4:f5:cd:16:cb:c5:8e:42:37:b6: b0:4b:19:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EA6lkbEkd/iJoSpekLGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTZjYTAzYThjMTM1Y2VlYWUyMzJjOTM3YzFlZTBiYWI4 N2U3ODIwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2FmOTcwNDM4ZWYxMTRjMGRjNmMwNjZjZWFhM2MyN2RhZWFiODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+b/ebz52/U0UhEV/ZSW+9yP4xP2 iIPfJ4hktzF83lzhFb9Zv2zRWHgdxUc/X5Mu7caaxUl3q+Ari5+yPdzFcvf+x3Zq Nmubqi1HYdzLCUjwm1x58kvjg1aNYCq4K/oluJSL3urKHavz+L3tpS4VCiSaQopf MIvvyLZHMGtmixlomqQYfHbIP5JdXy1xjUCfOYPyx976ek+cIHcpQhDo17sIqS+9 MNbZCtePp6hqx+W5BhCGLqxtJYm3mU3BDdGe/sVL9JUiBGCUHeCO0T6/qdjiDEzG GO8a5mpzZIK+7rmzK+dOmRwWG5iZIs11G7zm+X5ooTqtxibdwV6g0BeUHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAyvlwQ47xFMDcbAZs6qPCfa6rhFMB8GA1UdIwQY MBaAFL6mygOowTXO6uIyyTfB7gurh+eCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFiS0E2akJOYzdxNGpMSk44SHVDNnVINTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iYzY1ZjYtMGMzYi00MDRlLWJmYWQt OWZhNDIyOGMwMmVhLzEvREstWEJEanZFVXdOeHNCbXpxbzhKOXJxdUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iYzY1ZjYtMGMzYi00MDRlLWJmYWQtOWZhNDIyOGMwMmVh LzEvdnFiS0E2akJOYzdxNGpMSk44SHVDNnVINTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgrMA0G CSqGSIb3DQEBCwUAA4IBAQCEYSNZA7Bgk1I1LdG7JinMqxucXOUOisyhKvlRgIh9 2jRUqT5RzAz8ycE8teFjY8/OhUIUh7j9gztO5OnWuSSE0JdSmcOoYV8qd4ZS8UPP 6W366EQLLHM5FieI5V4vT8DAwtuC1yfwqDxEwvj0QHckPCDvs6nX++0qezWOURQ7 MdYMUzQ5sKpKav1Msf4NoVocvdBTOLnBlAUc8uXt/9TRyFwRivGfSv8rbEX9PyPe RPBDiNbqKn8PY3FaZCUgifa7YkZEfhOyD8G52tvDhjmp+UhAvJOncdr7q3lqNJVM jD6gN78C5RvBl6fU4uaSrjoD6sT1zRbLxY5CN7awSxnI -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:21 2026 by rpki-client