This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DHm6iEa0lWlgi9qKUupdG3L9iGA.roa File: DHm6iEa0lWlgi9qKUupdG3L9iGA.roa (raw, json) Hash identifier: d5GWxeNR0wrfCJ3vzVOTFtgHqJkbNb7ujqPaRZwfBqk= Subject key identifier: 0C:79:BA:88:46:B4:95:69:60:8B:DA:8A:52:EA:5D:1B:72:FD:88:60 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79108C4CC4D679EC4832ADBB58797888 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DHm6iEa0lWlgi9qKUupdG3L9iGA.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197970 IP address blocks: 2a12:bec0:370::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8c:4c:c4:d6:79:ec:48:32:ad:bb:58:79:78:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c79ba8846b49569608bda8a52ea5d1b72fd8860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:9f:a1:45:68:a0:e7:26:ab:39:64:84:37: 03:77:a4:14:8d:92:8b:53:37:27:8d:0f:17:49:bd: 51:59:b8:1d:cc:62:13:40:ed:d8:1e:e9:86:4e:90: 76:d3:04:84:40:64:e2:94:b4:9a:b2:20:4f:bf:6c: da:91:31:e5:ef:a3:4e:59:ff:64:08:b2:44:90:f4: 5c:75:99:8e:5b:f3:28:8e:83:45:9d:01:ff:23:21: 9e:a3:3a:f1:7f:a3:0d:ce:79:16:31:f1:03:d8:a1: 3a:e4:b4:07:2a:05:b8:07:64:4d:ed:90:45:65:7b: 5f:80:80:d3:d1:8f:07:32:5d:bb:89:c0:d2:96:06: a0:72:ea:7a:da:3f:f2:02:0f:a2:18:09:49:37:e6: da:1d:f3:f9:50:34:4d:1e:b1:03:fc:3d:f1:be:1e: 0e:e2:5d:bb:94:dd:2e:04:c7:bd:f8:d1:af:71:c9: 39:2f:58:65:b7:9a:1b:65:90:32:5b:3c:cc:22:73: e8:d2:48:c0:f7:16:12:ea:e3:8d:32:15:08:0f:c3: fe:94:ae:17:3b:6b:6f:c1:b3:38:03:41:35:62:59: 57:9c:ff:ef:d8:0b:47:8a:d7:01:1c:29:90:4a:b7: 2a:71:42:04:8c:bd:49:3f:46:e3:2f:89:20:7c:15: 68:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:79:BA:88:46:B4:95:69:60:8B:DA:8A:52:EA:5D:1B:72:FD:88:60 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DHm6iEa0lWlgi9qKUupdG3L9iGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:370::/44 Signature Algorithm: sha256WithRSAEncryption 0c:3c:19:af:67:44:0b:53:cb:4d:17:e3:3d:99:41:3b:36:90: 24:b7:f8:4e:48:8b:c9:38:a5:2a:d2:ff:dd:5f:9b:c9:1f:1b: f4:a6:31:37:5a:f6:77:c9:9d:88:d8:f6:e8:5d:f1:3f:38:92: 91:a0:3a:79:66:d5:8a:c4:5e:07:bc:eb:17:a1:d6:bf:1e:45: 63:96:89:b7:9d:6d:1b:b7:fa:3a:3b:6c:b1:6e:1d:ee:f8:9f: 33:f1:6e:5c:da:44:64:f7:7f:e2:1e:0b:58:15:a2:b3:e6:77: 1e:b7:41:ca:7c:9f:82:61:53:04:18:56:e8:a2:8d:68:14:2e: 19:d9:b1:98:71:36:4f:98:28:cd:e4:42:69:62:b2:0f:73:4c: 9b:5a:80:91:97:66:96:9a:4a:00:d9:52:c0:9c:c4:e8:37:ac: bc:79:f4:34:cf:ac:25:c3:1f:1d:35:0a:d4:f1:13:54:28:62: 32:7a:bd:59:fa:c4:de:89:3a:6d:c0:eb:b6:8c:c6:c0:b6:83: b6:ca:97:74:6c:64:c0:9e:b4:2a:af:d9:68:27:9d:69:d2:8d: 40:e5:69:ad:0b:f0:1a:82:ff:1e:11:08:99:1e:32:24:9e:ff: a5:69:14:ea:2c:60:a1:f2:db:03:82:6d:59:47:3f:09:8a:76: 04:81:03:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EIxMxNZ57EgyrbtYeXiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzc5YmE4ODQ2YjQ5NTY5NjA4YmRhOGE1MmVhNWQxYjcyZmQ4ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lCfoUVooOcmqzlkhDcDd6QUjZKL UzcnjQ8XSb1RWbgdzGITQO3YHumGTpB20wSEQGTilLSasiBPv2zakTHl76NOWf9k CLJEkPRcdZmOW/MojoNFnQH/IyGeozrxf6MNznkWMfED2KE65LQHKgW4B2RN7ZBF ZXtfgIDT0Y8HMl27icDSlgagcup62j/yAg+iGAlJN+baHfP5UDRNHrED/D3xvh4O 4l27lN0uBMe9+NGvcck5L1hlt5obZZAyWzzMInPo0kjA9xYS6uONMhUID8P+lK4X O2tvwbM4A0E1YllXnP/v2AtHitcBHCmQSrcqcUIEjL1JP0bjL4kgfBVo8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAx5uohGtJVpYIvailLqXRty/YhgMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvREhtNmlFYTBsV2xnaTlxS1V1cGRHM0w5aUdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wANw MA0GCSqGSIb3DQEBCwUAA4IBAQAMPBmvZ0QLU8tNF+M9mUE7NpAkt/hOSIvJOKUq 0v/dX5vJHxv0pjE3WvZ3yZ2I2PboXfE/OJKRoDp5ZtWKxF4HvOsXoda/HkVjlom3 nW0bt/o6O2yxbh3u+J8z8W5c2kRk93/iHgtYFaKz5ncet0HKfJ+CYVMEGFbooo1o FC4Z2bGYcTZPmCjN5EJpYrIPc0ybWoCRl2aWmkoA2VLAnMToN6y8efQ0z6wlwx8d NQrU8RNUKGIyer1Z+sTeiTptwOu2jMbAtoO2ypd0bGTAnrQqr9loJ51p0o1A5Wmt C/Aagv8eEQiZHjIknv+laRTqLGCh8tsDgm1ZRz8JinYEgQOk -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:04 2026 by rpki-client