This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DNYFEY0c1k_Fxo_Ar5JQKws8lLg.roa File: DNYFEY0c1k_Fxo_Ar5JQKws8lLg.roa (raw, json) Hash identifier: IBfrUvmF+B/UlRL/znYNrmyA2OmNK8XQLORmqsWO2WE= Subject key identifier: 0C:D6:05:11:8D:1C:D6:4F:C5:C6:8F:C0:AF:92:50:2B:0B:3C:94:B8 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A2E8DD327871E95D4D6B697BE7AB Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DNYFEY0c1k_Fxo_Ar5JQKws8lLg.roa Signing time: Fri 02 Jan 2026 16:23:42 +0000 ROA not before: Fri 02 Jan 2026 16:23:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213655 IP address blocks: 2a0f:b244:130::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a2:e8:dd:32:78:71:e9:5d:4d:6b:69:7b:e7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cd605118d1cd64fc5c68fc0af92502b0b3c94b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:b0:81:7d:54:ec:30:9b:4e:62:d4:83:e4: fc:4b:11:b2:db:71:3b:80:81:85:da:12:e4:e6:d2: 1b:1e:cb:92:98:0e:6b:e2:b4:c7:1f:9b:68:f3:01: 49:3f:03:72:bf:0e:11:44:68:15:7f:aa:fb:c0:08: 30:fe:68:00:cb:5e:30:84:6a:e1:c7:a4:77:ea:a8: 44:f1:07:30:8b:ee:61:01:b4:06:b5:2d:53:a6:2d: d5:40:a2:26:09:c0:48:a6:62:a8:c0:19:00:f9:32: 2c:52:3f:a2:03:48:c2:5b:1b:1b:b0:a4:ae:61:4d: 5a:bc:1e:7b:3e:a3:58:d7:32:a9:bb:61:a5:2e:90: a5:06:ff:17:e8:27:bd:1b:98:60:a8:18:d2:7e:86: 9c:d9:7f:53:98:98:be:cf:58:ce:7a:81:9f:53:15: c9:fa:19:bf:a8:2e:3a:5e:ae:17:28:fc:7e:94:4c: 16:75:47:95:a1:9b:46:94:a9:e1:ac:2b:81:83:5b: f3:37:b1:84:45:ad:70:10:62:b4:57:fe:55:f3:5e: 4a:3a:87:ab:e7:33:7f:e3:23:c3:15:3b:9d:b1:53: 14:cc:1c:f6:73:11:cf:4a:29:48:ed:91:38:e0:b5: 5e:0d:3c:1f:fd:77:04:cc:36:97:0c:d7:22:60:c1: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D6:05:11:8D:1C:D6:4F:C5:C6:8F:C0:AF:92:50:2B:0B:3C:94:B8 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DNYFEY0c1k_Fxo_Ar5JQKws8lLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b244:130::/44 Signature Algorithm: sha256WithRSAEncryption 65:e1:ed:a5:33:dd:6d:6e:5c:e7:04:21:eb:b0:41:d0:85:01: b2:79:d0:e2:28:9b:ab:fa:4b:54:74:a3:6f:6d:8a:f4:fa:ef: 75:02:62:9a:a0:6b:0c:dc:bd:6f:03:d1:0b:37:43:b0:92:d8: bc:fa:4c:78:3f:d6:cb:95:26:89:57:73:d4:93:c3:50:c0:51: 46:a3:8a:48:69:cd:ce:b9:8b:27:80:ca:89:c0:71:3f:2b:75: 97:4f:bc:53:ba:ca:75:55:20:62:c6:94:8e:43:af:06:8e:6c: c1:3f:48:91:a1:b6:2c:d8:2a:eb:d8:cc:50:01:ce:d0:ad:97: 72:44:8b:0a:5b:78:07:c3:b9:ab:d3:4c:ac:f4:f9:55:46:65: 6b:ba:5d:0b:b7:e5:82:ee:39:ff:ed:16:c9:41:da:e2:6c:01: a8:70:07:d9:9c:aa:4c:e3:f1:57:73:fb:82:bb:8e:ae:29:65: d7:d5:af:ca:3c:af:02:4f:7e:86:0b:35:ed:4f:cb:72:20:9d: dd:6b:e8:c9:bd:59:ac:66:0a:c1:f9:25:d2:c4:43:02:9f:13: e8:3a:e5:39:6a:ef:92:47:f1:90:43:98:6a:e7:b7:06:9d:79: b9:c0:72:5a:b5:2f:a7:da:45:02:9b:b3:a2:9e:5f:b4:22:1d: 74:57:b2:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/haLo3TJ4celdTWtpe+erMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2Q2MDUxMThkMWNkNjRmYzVjNjhmYzBhZjkyNTAyYjBiM2M5NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQqwgX1U7DCbTmLUg+T8SxGy23E7 gIGF2hLk5tIbHsuSmA5r4rTHH5to8wFJPwNyvw4RRGgVf6r7wAgw/mgAy14whGrh x6R36qhE8Qcwi+5hAbQGtS1Tpi3VQKImCcBIpmKowBkA+TIsUj+iA0jCWxsbsKSu YU1avB57PqNY1zKpu2GlLpClBv8X6Ce9G5hgqBjSfoac2X9TmJi+z1jOeoGfUxXJ +hm/qC46Xq4XKPx+lEwWdUeVoZtGlKnhrCuBg1vzN7GERa1wEGK0V/5V815KOoer 5zN/4yPDFTudsVMUzBz2cxHPSilI7ZE44LVeDTwf/XcEzDaXDNciYMHMJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAzWBRGNHNZPxcaPwK+SUCsLPJS4MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvRE5ZRkVZMGMxa19GeG9fQXI1SlFLd3M4bExnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+yRAEw MA0GCSqGSIb3DQEBCwUAA4IBAQBl4e2lM91tblznBCHrsEHQhQGyedDiKJur+ktU dKNvbYr0+u91AmKaoGsM3L1vA9ELN0Owkti8+kx4P9bLlSaJV3PUk8NQwFFGo4pI ac3OuYsngMqJwHE/K3WXT7xTusp1VSBixpSOQ68GjmzBP0iRobYs2Crr2MxQAc7Q rZdyRIsKW3gHw7mr00ys9PlVRmVrul0Lt+WC7jn/7RbJQdribAGocAfZnKpM4/FX c/uCu46uKWXX1a/KPK8CT36GCzXtT8tyIJ3da+jJvVmsZgrB+SXSxEMCnxPoOuU5 au+SR/GQQ5hq57cGnXm5wHJatS+n2kUCm7Oinl+0Ih10V7Jt -----END CERTIFICATE-----Generated at Wed Jan 21 12:00:07 2026 by rpki-client