This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/DihOchgyqvrX3wbmz2p7YNtPbm0.roa File: DihOchgyqvrX3wbmz2p7YNtPbm0.roa (raw, json) Hash identifier: D/YoaRf202IQUwzZW6Lvodh9q8nu3167N4kugq26efs= Subject key identifier: 0E:28:4E:72:18:32:AA:FA:D7:DF:06:E6:CF:6A:7B:60:DB:4F:6E:6D Certificate issuer: /CN=bf817dc8552df3610ffc45441b3f81464e489dc8 Certificate serial: 019C1DD0B29B8C0E75AE9F6016A63C885C70 Authority key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/DihOchgyqvrX3wbmz2p7YNtPbm0.roa Signing time: Mon 02 Feb 2026 10:05:42 +0000 ROA not before: Mon 02 Feb 2026 10:05:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39029 IP address blocks: 2001:67c:21e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:d0:b2:9b:8c:0e:75:ae:9f:60:16:a6:3c:88:5c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf817dc8552df3610ffc45441b3f81464e489dc8 Validity Not Before: Feb 2 10:05:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e284e721832aafad7df06e6cf6a7b60db4f6e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a0:2a:a4:9c:4e:fb:05:bd:1a:eb:73:d5:11: 27:55:da:db:4a:25:2f:45:59:04:d6:05:32:c6:36: e7:ec:ef:39:f7:c9:98:07:75:f7:16:7c:6e:d9:b6: 24:eb:a5:ca:cf:17:52:2f:57:b1:b0:35:76:98:d6: 07:a6:38:97:7a:f6:62:61:57:b2:85:fb:0d:b0:9f: 03:bd:f4:c6:7d:a1:4b:bd:63:73:3f:ad:25:ce:03: 7e:5b:ca:9f:93:63:55:f0:8a:bf:19:f6:e7:25:db: e0:ab:e8:f3:29:82:2b:ba:ec:52:9c:89:57:0a:79: 1e:3e:94:58:40:ef:38:5c:7c:10:f8:e5:b3:85:6a: c8:e1:61:76:5b:a7:06:49:e9:2f:2c:c3:59:2b:0e: 30:7b:4c:1e:ea:a2:ab:7a:94:34:7a:34:cb:b4:ee: 99:03:fe:80:4e:93:05:4f:9e:19:2b:6c:4e:07:91: a6:e1:83:14:9c:cb:85:0f:1d:ee:28:03:c3:46:20: 09:37:23:86:82:59:97:e5:cd:6b:54:1d:7f:96:9f: 9b:d3:18:d7:e6:2d:21:fc:c0:03:ff:34:7d:32:bb: fb:d1:df:db:cd:8e:89:b6:ae:7f:76:3a:91:1e:f7: 08:fe:aa:ea:d7:09:ee:d6:6f:e7:4f:90:42:e6:c0: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:28:4E:72:18:32:AA:FA:D7:DF:06:E6:CF:6A:7B:60:DB:4F:6E:6D X509v3 Authority Key Identifier: keyid:BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/DihOchgyqvrX3wbmz2p7YNtPbm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:21e0::/48 Signature Algorithm: sha256WithRSAEncryption 97:ba:04:37:92:88:37:26:fe:ca:2a:1d:ed:50:6c:aa:62:db: 5a:52:8b:d2:f3:51:f2:59:5d:27:6a:8f:fb:a0:97:0c:c7:a6: fc:26:a3:cd:0c:a2:4b:52:65:81:1f:9b:04:cd:c9:d1:b7:61: cf:e1:4d:0a:56:9f:84:4d:59:ca:84:dc:81:68:75:5d:11:8c: 28:41:78:67:4f:a0:11:41:81:9a:97:6b:70:ea:a6:c8:cd:cc: d9:9f:a6:3d:0d:db:11:b0:12:d8:4f:15:32:aa:7f:86:8f:3f: d6:80:3f:fb:0a:ca:4b:87:6c:65:df:84:16:d2:e3:22:07:27: 20:c9:03:34:ac:75:00:32:60:bc:f9:f1:50:21:81:d1:18:88: f7:a1:a4:16:ac:88:46:11:95:25:de:dc:3d:cd:db:fa:d4:05: 3f:47:a2:95:38:9d:69:6f:51:ec:d5:8c:37:91:c1:bf:c7:12: 99:51:81:f7:e1:88:be:51:f7:5b:19:c9:80:5e:be:95:34:f4: 84:5b:8c:90:51:44:63:d3:da:42:9f:43:a5:e0:6c:df:68:80: 82:3b:92:5f:a9:c1:37:3e:bd:27:6a:8d:ab:73:5b:ab:aa:ec: 80:a2:09:58:4c:e0:85:eb:2a:46:4a:13:8b:4d:64:e8:d1:32: 6b:72:bc:5e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwd0LKbjA51rp9gFqY8iFxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODE3ZGM4NTUyZGYzNjEwZmZjNDU0NDFiM2Y4MTQ2NGU0 ODlkYzgwHhcNMjYwMjAyMTAwNTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTI4NGU3MjE4MzJhYWZhZDdkZjA2ZTZjZjZhN2I2MGRiNGY2ZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aAqpJxO+wW9Gutz1REnVdrbSiUv RVkE1gUyxjbn7O8598mYB3X3Fnxu2bYk66XKzxdSL1exsDV2mNYHpjiXevZiYVey hfsNsJ8DvfTGfaFLvWNzP60lzgN+W8qfk2NV8Iq/GfbnJdvgq+jzKYIruuxSnIlX CnkePpRYQO84XHwQ+OWzhWrI4WF2W6cGSekvLMNZKw4we0we6qKrepQ0ejTLtO6Z A/6ATpMFT54ZK2xOB5Gm4YMUnMuFDx3uKAPDRiAJNyOGglmX5c1rVB1/lp+b0xjX 5i0h/MAD/zR9Mrv70d/bzY6Jtq5/djqRHvcI/qrq1wnu1m/nT5BC5sAMWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA4oTnIYMqr6198G5s9qe2DbT25tMB8GA1UdIwQY MBaAFL+BfchVLfNhD/xFRBs/gUZOSJ3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNGU3ZTktZjZiZS00MWEzLWE0NTkt MTk1Mzg5MzMwZWRmLzEvRGloT2NoZ3lxdnJYM3dibXoycDdZTnRQYm0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jNGU3ZTktZjZiZS00MWEzLWE0NTktMTk1Mzg5MzMwZWRm LzEvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCHg MA0GCSqGSIb3DQEBCwUAA4IBAQCXugQ3kog3Jv7KKh3tUGyqYttaUovS81HyWV0n ao/7oJcMx6b8JqPNDKJLUmWBH5sEzcnRt2HP4U0KVp+ETVnKhNyBaHVdEYwoQXhn T6ARQYGal2tw6qbIzczZn6Y9DdsRsBLYTxUyqn+Gjz/WgD/7CspLh2xl34QW0uMi BycgyQM0rHUAMmC8+fFQIYHRGIj3oaQWrIhGEZUl3tw9zdv61AU/R6KVOJ1pb1Hs 1Yw3kcG/xxKZUYH34Yi+UfdbGcmAXr6VNPSEW4yQUURj09pCn0Ol4GzfaICCO5Jf qcE3Pr0nao2rc1urquyAoglYTOCF6ypGShOLTWTo0TJrcrxe -----END CERTIFICATE-----Generated at Tue Feb 10 01:15:29 2026 by rpki-client