This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DHyVsLz5jYrviddQ9c6qstwKnzI.roa File: DHyVsLz5jYrviddQ9c6qstwKnzI.roa (raw, json) Hash identifier: tT19Y15cGpfmTrZkIIPvYzsd1R/27f+wUOfcPNk627Y= Subject key identifier: 0C:7C:95:B0:BC:F9:8D:8A:EF:89:D7:50:F5:CE:AA:B2:DC:0A:9F:32 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910CA07CA392B2CF9FB0D6D293C0BE5 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DHyVsLz5jYrviddQ9c6qstwKnzI.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216327 IP address blocks: 2a12:bec0:450::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ca:07:ca:39:2b:2c:f9:fb:0d:6d:29:3c:0b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c7c95b0bcf98d8aef89d750f5ceaab2dc0a9f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:3b:81:4c:d8:8c:4d:13:0e:19:76:0c:e9: 0a:d2:a0:24:b9:ab:d8:3e:06:ff:51:0c:6c:cf:06: 6a:85:3e:50:77:e9:18:d8:4d:9c:d6:20:ce:d1:27: f4:33:d9:57:c9:94:4a:6b:65:68:c6:c7:10:fb:29: 1d:16:b4:de:a8:fc:a6:a2:6f:e8:94:a6:f9:21:c2: 2a:3b:a4:c0:29:fe:5d:b0:1f:fb:a9:b2:a1:be:e1: b5:4e:ed:94:3b:cd:8e:98:b2:53:b9:1a:b2:7f:78: 66:47:00:96:08:02:cb:fd:1c:37:6d:14:8d:de:45: f9:56:c2:1a:5f:0b:7d:12:83:8c:84:64:f7:12:80: cc:fe:e9:31:f2:3f:85:92:9b:4a:41:fe:10:b8:57: a6:21:13:98:bd:1a:88:a8:c7:bc:85:4d:d0:8d:98: 72:42:66:f0:99:2c:f3:43:4b:38:74:69:6f:fc:5f: fe:12:4d:01:38:98:06:41:28:c5:aa:d3:0f:b3:68: b6:d3:fa:e9:6b:a8:e9:d9:60:4a:11:e7:96:d9:24: 6b:9f:4a:bf:da:ac:f4:88:de:69:11:25:a9:61:fc: 17:5d:d3:28:b3:c4:5e:67:66:1a:b7:08:65:e2:5e: 8e:e0:6e:e3:5e:2e:66:6f:f2:32:83:b5:a9:af:53: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7C:95:B0:BC:F9:8D:8A:EF:89:D7:50:F5:CE:AA:B2:DC:0A:9F:32 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DHyVsLz5jYrviddQ9c6qstwKnzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:450::/44 Signature Algorithm: sha256WithRSAEncryption 48:45:bc:d7:ef:c3:89:00:f3:80:86:c2:68:ff:6b:3c:90:f0: 87:e4:5b:28:c2:a5:ae:72:5a:5e:12:23:b6:c2:8f:a0:7d:65: 57:b6:25:02:e5:77:d2:54:03:4a:29:b8:0c:a7:62:c6:3b:0f: a5:a3:2f:8e:4a:43:03:57:c8:42:b7:0b:62:1d:2a:86:bd:ea: 8f:ea:3f:d3:e2:59:03:a2:4b:b4:0b:1d:e6:92:38:28:61:06: 65:1b:4e:b1:b0:40:c2:87:ae:c5:e8:28:8f:d2:7b:70:5c:36: 33:6c:74:07:3c:62:a7:c3:4c:55:34:36:f0:3c:ac:16:56:45: 68:49:4e:de:11:40:9e:57:97:bc:90:08:ef:33:90:a7:02:18: 0c:ea:0c:a1:f0:3b:2a:1d:99:9d:8f:ef:7e:ae:48:de:83:fb: 2a:f3:2b:fc:22:6e:3a:99:ae:53:12:e2:c6:e6:37:ab:da:d9: cc:50:4c:03:a0:74:b1:30:23:cb:84:cf:31:58:d1:ea:5a:ed: 20:e2:8d:50:8b:50:9e:37:25:35:9c:88:0a:ea:52:47:d5:cc: f7:be:67:63:0e:21:78:cc:ce:08:97:0e:69:97:34:24:43:84: 91:c1:7f:9b:29:1d:65:b5:50:e7:82:f3:71:86:e3:92:64:a5: 86:f4:f6:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMoHyjkrLPn7DW0pPAvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzdjOTViMGJjZjk4ZDhhZWY4OWQ3NTBmNWNlYWFiMmRjMGE5ZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNk7gUzYjE0TDhl2DOkK0qAkuavY Pgb/UQxszwZqhT5Qd+kY2E2c1iDO0Sf0M9lXyZRKa2VoxscQ+ykdFrTeqPymom/o lKb5IcIqO6TAKf5dsB/7qbKhvuG1Tu2UO82OmLJTuRqyf3hmRwCWCALL/Rw3bRSN 3kX5VsIaXwt9EoOMhGT3EoDM/ukx8j+FkptKQf4QuFemIROYvRqIqMe8hU3QjZhy QmbwmSzzQ0s4dGlv/F/+Ek0BOJgGQSjFqtMPs2i20/rpa6jp2WBKEeeW2SRrn0q/ 2qz0iN5pESWpYfwXXdMos8ReZ2Yatwhl4l6O4G7jXi5mb/Iyg7Wpr1P/4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAx8lbC8+Y2K74nXUPXOqrLcCp8yMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvREh5VnNMejVqWXJ2aWRkUTljNnFzdHdLbnpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wARQ MA0GCSqGSIb3DQEBCwUAA4IBAQBIRbzX78OJAPOAhsJo/2s8kPCH5FsowqWuclpe EiO2wo+gfWVXtiUC5XfSVANKKbgMp2LGOw+loy+OSkMDV8hCtwtiHSqGveqP6j/T 4lkDoku0Cx3mkjgoYQZlG06xsEDCh67F6CiP0ntwXDYzbHQHPGKnw0xVNDbwPKwW VkVoSU7eEUCeV5e8kAjvM5CnAhgM6gyh8DsqHZmdj+9+rkjeg/sq8yv8Im46ma5T EuLG5jer2tnMUEwDoHSxMCPLhM8xWNHqWu0g4o1Qi1CeNyU1nIgK6lJH1cz3vmdj DiF4zM4Ilw5plzQkQ4SRwX+bKR1ltVDngvNxhuOSZKWG9PYt -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:05 2026 by rpki-client