This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DICwbFq63cyj4UVB3edqdNcLbUc.roa File: DICwbFq63cyj4UVB3edqdNcLbUc.roa (raw, json) Hash identifier: CR1eOnOeyeCFDQHYGkcGMA4K5/1db3fWjJl2fUvQkwU= Subject key identifier: 0C:80:B0:6C:5A:BA:DD:CC:A3:E1:45:41:DD:E7:6A:74:D7:0B:6D:47 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910BA426A2579236F3380BFBF06B03C Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DICwbFq63cyj4UVB3edqdNcLbUc.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215283 IP address blocks: 2a12:bec4:1100::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ba:42:6a:25:79:23:6f:33:80:bf:bf:06:b0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c80b06c5abaddcca3e14541dde76a74d70b6d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:bc:c0:c2:45:87:02:01:96:5d:77:1c:e9: ee:68:0b:65:03:5c:0d:91:5d:b7:a3:61:cc:fe:37: 55:17:d5:0c:80:20:1e:4d:a8:79:b0:bf:68:09:98: 90:35:7a:27:e9:0d:2e:26:3c:2b:4d:31:ff:72:ae: d3:0c:dc:08:a2:fa:70:57:6c:0c:c5:96:ef:29:35: fa:de:35:fb:a3:a1:ff:07:c3:a8:9b:c3:4b:eb:3e: 22:0e:46:14:78:16:5e:01:42:bd:f3:47:12:4c:7d: bf:e4:b5:9b:9c:ee:88:6a:b6:a4:d0:31:bf:a9:ac: 77:ff:e1:e6:79:59:34:65:c9:56:55:8a:5a:fc:b4: dd:ca:d8:6c:80:83:8d:7f:40:bc:d4:2b:a0:e2:20: ee:9c:b1:98:df:3a:c3:3f:70:c7:98:61:8d:2e:5a: 13:d4:70:a4:aa:bc:6e:c0:c4:40:9b:52:05:a2:00: ea:bd:bb:24:70:36:06:fd:8b:58:fe:54:7f:db:76: bf:7a:d4:77:52:0b:14:c6:a9:f2:1f:cf:8c:79:99: 7c:8e:ed:d7:0c:d8:a5:fc:c8:8e:53:21:4e:4c:09: bc:24:d6:c7:c8:46:b9:66:33:c7:ce:0a:26:21:5d: 1c:77:04:e1:e5:ae:da:67:db:1e:7b:a3:36:83:5b: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:80:B0:6C:5A:BA:DD:CC:A3:E1:45:41:DD:E7:6A:74:D7:0B:6D:47 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DICwbFq63cyj4UVB3edqdNcLbUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1100::/44 Signature Algorithm: sha256WithRSAEncryption ac:a3:e5:4c:2a:dd:37:4d:8e:fd:12:01:71:e4:77:78:a5:9e: 97:ef:fb:ec:dd:93:9e:55:b2:ac:a4:3e:97:92:f4:8f:17:b1: 4a:be:46:b7:a6:9c:59:34:8a:13:e9:6d:c3:2e:fc:aa:df:c1: ca:aa:90:da:3e:12:6a:35:fe:73:9c:79:f7:31:ac:95:bb:47: e3:4d:42:42:b5:32:34:8e:11:98:e7:e5:23:b0:2c:97:ee:a6: 90:80:14:a1:70:4a:9c:60:69:6d:9c:2c:de:e3:e5:ea:97:b5: c3:70:99:b1:00:f2:fe:5e:79:65:a2:a3:1c:62:fd:0b:eb:4b: 6d:ca:69:14:14:17:48:be:4d:0a:19:4d:d2:05:7e:14:92:95: d6:d0:cb:c7:b8:97:65:82:92:ad:a7:b6:5b:75:50:6f:15:32: 36:78:7a:33:ba:83:ac:b1:5b:4b:3d:5f:13:51:52:6d:ba:f6: f3:ce:bc:06:a7:4d:92:88:3a:1a:b0:fa:74:f0:e2:4b:63:18: 47:3b:c4:10:d0:05:b7:61:8c:0a:dd:c1:21:b2:61:51:eb:9b: 6b:ea:4a:06:ec:c7:57:e9:e9:58:7b:2c:1e:92:b8:d4:43:86: 0e:fd:36:c2:31:e5:d1:13:3b:20:93:1f:12:a1:2b:3e:4f:54: 5d:3c:91:c4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELpCaiV5I28zgL+/BrA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzgwYjA2YzVhYmFkZGNjYTNlMTQ1NDFkZGU3NmE3NGQ3MGI2ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuG8wMJFhwIBll13HOnuaAtlA1wN kV23o2HM/jdVF9UMgCAeTah5sL9oCZiQNXon6Q0uJjwrTTH/cq7TDNwIovpwV2wM xZbvKTX63jX7o6H/B8Oom8NL6z4iDkYUeBZeAUK980cSTH2/5LWbnO6Iarak0DG/ qax3/+HmeVk0ZclWVYpa/LTdythsgIONf0C81Cug4iDunLGY3zrDP3DHmGGNLloT 1HCkqrxuwMRAm1IFogDqvbskcDYG/YtY/lR/23a/etR3UgsUxqnyH8+MeZl8ju3X DNil/MiOUyFOTAm8JNbHyEa5ZjPHzgomIV0cdwTh5a7aZ9see6M2g1vowQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAyAsGxaut3Mo+FFQd3nanTXC21HMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvRElDd2JGcTYzY3lqNFVWQjNlZHFkTmNMYlVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBEA MA0GCSqGSIb3DQEBCwUAA4IBAQCso+VMKt03TY79EgFx5Hd4pZ6X7/vs3ZOeVbKs pD6XkvSPF7FKvka3ppxZNIoT6W3DLvyq38HKqpDaPhJqNf5znHn3MayVu0fjTUJC tTI0jhGY5+UjsCyX7qaQgBShcEqcYGltnCze4+Xql7XDcJmxAPL+XnlloqMcYv0L 60ttymkUFBdIvk0KGU3SBX4UkpXW0MvHuJdlgpKtp7ZbdVBvFTI2eHozuoOssVtL PV8TUVJtuvbzzrwGp02SiDoasPp08OJLYxhHO8QQ0AW3YYwK3cEhsmFR65tr6koG 7MdX6elYeywekrjUQ4YO/TbCMeXREzsgkx8SoSs+T1RdPJHE -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:41 2026 by rpki-client