This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa File: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (raw, json) Hash identifier: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk= Subject key identifier: 0C:1A:F1:47:C9:93:8B:A4:84:84:19:AF:6F:7D:24:F0:46:FC:8F:6B Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6 Certificate serial: 019B7C806E7808CC5930B9769B5C1E6E00ED Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213813 IP address blocks: 2001:67c:fa4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6e:78:08:cc:59:30:b9:76:9b:5c:1e:6e:00:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c1af147c9938ba4848419af6f7d24f046fc8f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:5d:f8:94:0d:ea:60:15:90:0e:07:78:f2: 12:90:6a:d4:63:bf:05:d0:c7:dd:db:cb:10:5d:fb: f4:40:50:a3:2a:fa:9a:91:12:6a:61:8e:98:c7:d3: 77:20:8f:43:1d:c5:e2:b2:64:9d:94:c0:80:4f:36: d1:59:aa:8a:6e:8f:e1:67:72:49:a4:84:e5:dc:3e: f5:bb:9b:3c:12:8e:da:05:24:30:cf:61:44:a8:93: 6b:5b:79:19:f8:10:9b:30:d9:6e:fe:0f:67:cf:b0: 37:8b:76:79:8a:93:c5:81:a6:1d:06:c0:71:75:86: 62:fc:ec:18:8c:74:a0:2d:62:e6:7b:bf:93:71:1c: 05:a7:23:52:9e:57:df:5c:6e:c3:99:4b:13:57:4e: 57:8b:a1:82:4a:6f:0b:13:f2:f2:38:a5:b8:2c:93: f3:27:56:54:90:8b:c3:54:f9:e0:38:a8:64:4b:42: 9a:72:29:da:77:0e:9b:c1:26:79:f5:1a:44:d1:4d: 0f:ac:6b:83:95:f7:14:19:84:8b:bc:0d:af:ca:71: 2c:39:93:08:8d:d5:c9:a4:0e:06:a7:cb:6b:53:60: 77:0b:79:5f:df:55:74:2e:82:4b:30:c8:22:5b:2d: 73:1e:84:78:04:52:05:fe:30:e3:01:6a:97:16:99: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1A:F1:47:C9:93:8B:A4:84:84:19:AF:6F:7D:24:F0:46:FC:8F:6B X509v3 Authority Key Identifier: keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:fa4::/48 Signature Algorithm: sha256WithRSAEncryption a2:8b:81:8f:aa:33:26:0a:c3:9c:7c:ae:07:d9:14:ab:59:d9: 32:a8:7a:b8:70:5c:0a:cd:6c:21:55:84:0e:01:38:b8:5c:0e: 6b:af:a9:08:57:1a:42:66:38:ab:59:22:4a:7e:44:68:0b:7e: 06:bd:04:3e:37:f7:7b:fe:b4:e1:10:e0:93:29:37:12:41:00: 54:8a:e5:91:6c:66:a7:6b:49:82:36:3e:f4:f5:ed:fa:27:e8: 13:6c:96:31:8b:ec:57:9e:87:a5:6f:98:ee:f4:d4:76:5f:95: c0:fe:51:00:64:80:9f:b6:1b:be:e6:af:00:1d:8a:21:aa:b7: f3:f7:a9:b0:e2:b2:49:a9:12:c1:06:b6:33:d0:da:b6:23:19: 0a:15:ad:1b:0e:62:52:02:56:96:66:49:10:95:5d:ce:d4:5d: e9:e6:10:a7:2f:ba:f0:aa:71:15:70:b7:a0:de:2c:cc:d0:f3: 63:56:18:51:5c:b3:cd:32:81:52:cf:07:76:3f:65:85:34:6b: f5:c4:e5:3c:b9:13:49:af:bc:05:c9:a5:22:0d:21:0a:6d:03: d6:06:a1:ae:01:b5:67:98:b4:84:7d:bb:1d:51:4b:fd:c5:63: 1e:d7:08:19:b5:97:7b:43:4d:41:d0:92:14:aa:ae:9c:23:c8: b2:8c:be:b2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gG54CMxZMLl2m1webgDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx MzcyZTYwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzFhZjE0N2M5OTM4YmE0ODQ4NDE5YWY2ZjdkMjRmMDQ2ZmM4ZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eVd+JQN6mAVkA4HePISkGrUY78F 0Mfd28sQXfv0QFCjKvqakRJqYY6Yx9N3II9DHcXismSdlMCATzbRWaqKbo/hZ3JJ pITl3D71u5s8Eo7aBSQwz2FEqJNrW3kZ+BCbMNlu/g9nz7A3i3Z5ipPFgaYdBsBx dYZi/OwYjHSgLWLme7+TcRwFpyNSnlffXG7DmUsTV05Xi6GCSm8LE/LyOKW4LJPz J1ZUkIvDVPngOKhkS0Kacinadw6bwSZ59RpE0U0PrGuDlfcUGYSLvA2vynEsOZMI jdXJpA4Gp8trU2B3C3lf31V0LoJLMMgiWy1zHoR4BFIF/jDjAWqXFpnsawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAwa8UfJk4ukhIQZr299JPBG/I9rMB8GA1UdIwQY MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt ZDc1ODI1ODliYjU5LzEvREJyeFI4bVRpNlNFaEJtdmIzMGs4RWI4ajJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5 LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA+k MA0GCSqGSIb3DQEBCwUAA4IBAQCii4GPqjMmCsOcfK4H2RSrWdkyqHq4cFwKzWwh VYQOATi4XA5rr6kIVxpCZjirWSJKfkRoC34GvQQ+N/d7/rThEOCTKTcSQQBUiuWR bGana0mCNj709e36J+gTbJYxi+xXnoelb5ju9NR2X5XA/lEAZICfthu+5q8AHYoh qrfz96mw4rJJqRLBBrYz0Nq2IxkKFa0bDmJSAlaWZkkQlV3O1F3p5hCnL7rwqnEV cLeg3izM0PNjVhhRXLPNMoFSzwd2P2WFNGv1xOU8uRNJr7wFyaUiDSEKbQPWBqGu AbVnmLSEfbsdUUv9xWMe1wgZtZd7Q01B0JIUqq6cI8iyjL6y -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:59 2026 by rpki-client