This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DPn9-50Ey7I03QmkCSNXnB7D2Fg.roa File: DPn9-50Ey7I03QmkCSNXnB7D2Fg.roa (raw, json) Hash identifier: lJkUaznCo3F1FT/m1SxcyPYhN8NsTAo0gIWjnnDF+Y8= Subject key identifier: 0C:F9:FD:FB:9D:04:CB:B2:34:DD:09:A4:09:23:57:9C:1E:C3:D8:58 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB10CEEBCA40824557531EB2AE6F7 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DPn9-50Ey7I03QmkCSNXnB7D2Fg.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209300 IP address blocks: 2a0e:aa06:490::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b1:0c:ee:bc:a4:08:24:55:75:31:eb:2a:e6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cf9fdfb9d04cbb234dd09a40923579c1ec3d858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:b1:da:84:1d:a3:8f:16:3d:a7:40:be:30: 2f:e6:20:a6:94:34:e7:ec:95:a6:9d:b4:0a:cf:b6: 30:9e:34:39:f4:eb:ba:db:e7:ae:8e:2f:dd:90:89: 54:30:f9:aa:a6:13:62:10:ab:88:45:0e:11:00:c5: 7e:22:7d:31:d1:05:15:90:2e:ca:dc:bc:7f:54:61: 0e:cf:27:d6:a6:83:a7:30:be:8e:87:59:8b:a3:82: cf:75:d7:b8:54:f1:83:fe:80:c9:04:9d:71:44:eb: 92:24:c5:e5:f4:d5:37:02:44:42:87:7a:31:d0:bf: 7d:2f:63:c8:9e:33:a7:67:ae:1e:73:f8:61:e5:2d: 9a:a0:c5:80:2a:a7:53:28:37:17:dd:93:b4:0a:de: 3c:91:e0:a3:56:b8:7c:90:e3:d0:f1:2a:a5:ab:36: 4b:09:14:48:0f:ff:9e:2a:c7:7d:eb:cc:af:d3:32: b2:cb:7a:a6:c2:33:f8:9d:ce:21:79:de:51:3f:0e: 4b:42:c1:46:16:10:aa:16:dd:30:24:a4:cd:fb:70: ff:0d:d1:ae:e2:76:2b:72:98:a1:cb:28:45:8b:88: cb:35:ee:eb:11:52:a1:46:60:df:51:f0:f8:5f:8c: 3a:0e:aa:01:ef:3c:a8:f4:dd:1c:36:08:fa:35:2a: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F9:FD:FB:9D:04:CB:B2:34:DD:09:A4:09:23:57:9C:1E:C3:D8:58 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DPn9-50Ey7I03QmkCSNXnB7D2Fg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:490::/44 Signature Algorithm: sha256WithRSAEncryption 56:b2:db:de:e8:82:33:6f:f4:83:3b:58:e2:cc:0a:a8:8a:90: 2e:3e:61:aa:b1:dc:19:9b:ce:42:7b:7d:6f:b0:c3:38:8a:e8: 64:bb:a3:17:0c:56:3a:d9:f6:38:d6:15:55:5a:31:33:75:d9: 06:13:a7:09:fb:9e:6f:3c:cb:01:a6:e5:90:f8:72:dd:e3:e0: 73:e6:1c:28:a1:2b:ef:e0:27:6e:b0:24:8d:1c:09:42:a3:bb: 6a:7a:43:b8:7e:f5:61:a0:ce:f2:2f:d2:50:84:dc:0e:34:6b: e7:11:16:96:a6:d3:be:28:c8:f9:f7:82:ee:d8:42:7e:60:48: 88:f3:8c:b1:a1:1e:d1:43:61:72:0d:18:c3:8b:fc:91:43:d2: 2a:d9:b4:56:02:0c:2f:1e:04:ff:3d:dc:13:2c:c8:c1:35:27: 59:f4:92:4c:95:9a:39:aa:32:28:b8:64:34:73:fe:17:62:a3: 63:14:e6:17:07:74:1d:ab:bd:31:f5:e7:62:f4:db:be:49:f3: 58:3f:c5:49:a8:f5:a7:90:2b:e1:ac:b0:c8:6e:51:91:c9:be: a2:16:8e:19:bd:99:a4:a4:e8:fe:84:d2:bf:f4:3a:45:e3:bc: 29:f4:24:2b:5e:91:b2:21:e9:ab:d6:34:e6:7c:43:cc:d9:7b: f5:e3:fb:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frEM7rykCCRVdTHrKub3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2Y5ZmRmYjlkMDRjYmIyMzRkZDA5YTQwOTIzNTc5YzFlYzNkODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Wx2oQdo48WPadAvjAv5iCmlDTn 7JWmnbQKz7YwnjQ59Ou62+euji/dkIlUMPmqphNiEKuIRQ4RAMV+In0x0QUVkC7K 3Lx/VGEOzyfWpoOnML6Oh1mLo4LPdde4VPGD/oDJBJ1xROuSJMXl9NU3AkRCh3ox 0L99L2PInjOnZ64ec/hh5S2aoMWAKqdTKDcX3ZO0Ct48keCjVrh8kOPQ8SqlqzZL CRRID/+eKsd968yv0zKyy3qmwjP4nc4hed5RPw5LQsFGFhCqFt0wJKTN+3D/DdGu 4nYrcpihyyhFi4jLNe7rEVKhRmDfUfD4X4w6DqoB7zyo9N0cNgj6NSo2IQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAz5/fudBMuyNN0JpAkjV5wew9hYMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvRFBuOS01MEV5N0kwM1Fta0NTTlhuQjdEMkZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgSQ MA0GCSqGSIb3DQEBCwUAA4IBAQBWstve6IIzb/SDO1jizAqoipAuPmGqsdwZm85C e31vsMM4iuhku6MXDFY62fY41hVVWjEzddkGE6cJ+55vPMsBpuWQ+HLd4+Bz5hwo oSvv4CdusCSNHAlCo7tqekO4fvVhoM7yL9JQhNwONGvnERaWptO+KMj594Lu2EJ+ YEiI84yxoR7RQ2FyDRjDi/yRQ9Iq2bRWAgwvHgT/PdwTLMjBNSdZ9JJMlZo5qjIo uGQ0c/4XYqNjFOYXB3Qdq70x9edi9Nu+SfNYP8VJqPWnkCvhrLDIblGRyb6iFo4Z vZmkpOj+hNK/9DpF47wp9CQrXpGyIemr1jTmfEPM2Xv14/td -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client