This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/dhIuimCZB4PO82Y4wVepjTgpJks.roa File: dhIuimCZB4PO82Y4wVepjTgpJks.roa (raw, json) Hash identifier: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg= Subject key identifier: 76:12:2E:8A:60:99:07:83:CE:F3:66:38:C1:57:A9:8D:38:29:26:4B Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED454C41C5384FFE49559BA9732951 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/dhIuimCZB4PO82Y4wVepjTgpJks.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8095 IP address blocks: 2a0f:607:105a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:4c:41:c5:38:4f:fe:49:55:9b:a9:73:29:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76122e8a60990783cef36638c157a98d3829264b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:a2:65:c9:e0:14:be:e4:d5:69:05:4f:73: 01:62:6c:27:94:28:57:2d:88:1f:14:3d:d2:e3:3d: cc:9a:96:a6:59:ef:a7:91:3f:7f:25:c8:ac:68:d8: 74:e0:a7:e9:10:65:2d:2f:d0:20:54:27:1f:03:07: 3c:39:98:93:b8:1e:18:f7:3b:8b:a3:6f:7e:fe:42: 06:4a:86:f0:a1:04:3f:a3:e7:1d:e5:ea:d6:47:3e: 47:dc:8c:e1:e2:26:88:eb:27:ad:76:ec:44:eb:a1: 19:53:20:85:6b:41:95:8f:a6:0a:6e:10:03:a4:4e: c8:3e:70:9f:fc:58:d2:cb:7e:0f:1d:35:50:29:42: 37:dd:64:81:db:97:99:e2:37:fe:22:2c:80:18:cd: 28:39:75:1d:70:d3:57:1d:2e:63:46:65:56:ef:00: d7:f0:c6:33:ad:e5:cb:aa:79:02:2e:02:74:89:e9: 7b:fe:6f:fe:68:a8:a4:45:72:4f:78:28:1a:fc:8d: 37:ad:ed:44:55:09:e6:ed:e5:74:7c:63:c0:94:07: 40:ea:7e:b5:81:61:8f:24:47:c1:2a:b2:2d:13:3b: 84:d2:3a:2f:ac:55:ef:ba:d3:d3:d0:03:0f:b5:56: fa:65:40:75:15:e4:e8:9a:05:70:27:83:39:71:ab: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:12:2E:8A:60:99:07:83:CE:F3:66:38:C1:57:A9:8D:38:29:26:4B X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/dhIuimCZB4PO82Y4wVepjTgpJks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:105a::/47 Signature Algorithm: sha256WithRSAEncryption 5a:ac:76:6f:3f:10:3e:40:45:4e:64:52:11:c8:8e:bb:90:c3: 72:72:fd:2f:37:38:56:2f:7d:87:f1:c1:8f:ac:88:98:6b:2a: 57:5c:e3:68:c7:41:e2:8c:cf:b6:e8:19:56:9e:75:2c:13:33: 9f:97:fa:86:25:86:d6:d0:28:2e:21:03:55:b0:21:ab:4f:64: ab:b1:81:d8:6b:e8:5e:fc:3e:7a:e6:e0:6b:fd:49:4c:86:73: 8d:65:87:c0:fa:08:1e:e5:b4:de:6b:86:e5:6c:5f:8a:1a:e0: 13:ad:de:c2:7f:eb:02:ad:40:a2:5b:d1:71:39:f9:2e:c5:df: 20:ea:f8:7f:18:0e:7e:33:2f:1f:21:fb:6b:35:3b:bd:3a:49: 7b:c2:54:0f:ef:e8:b3:7c:61:c4:08:51:6c:a0:61:f7:a3:80: 3c:8f:a2:e4:b6:3e:13:a5:22:0a:06:43:52:29:b4:9f:d1:fa: 76:ae:52:06:a8:8d:94:fc:9f:0c:10:25:58:99:16:9e:97:ef: 20:e1:71:b3:23:f9:7c:c0:8e:77:62:a4:9f:05:f2:92:32:d2: ba:d4:b9:2d:60:59:a0:26:ef:0f:55:63:01:d7:d9:5c:42:10: 64:ec:60:6b:38:5b:4c:90:0f:8e:36:af:f7:35:03:24:cc:c2: 3f:10:13:7e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UVMQcU4T/5JVZupcylRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjEyMmU4YTYwOTkwNzgzY2VmMzY2MzhjMTU3YTk4ZDM4MjkyNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45yiZcngFL7k1WkFT3MBYmwnlChX LYgfFD3S4z3MmpamWe+nkT9/JcisaNh04KfpEGUtL9AgVCcfAwc8OZiTuB4Y9zuL o29+/kIGSobwoQQ/o+cd5erWRz5H3Izh4iaI6yetduxE66EZUyCFa0GVj6YKbhAD pE7IPnCf/FjSy34PHTVQKUI33WSB25eZ4jf+IiyAGM0oOXUdcNNXHS5jRmVW7wDX 8MYzreXLqnkCLgJ0iel7/m/+aKikRXJPeCga/I03re1EVQnm7eV0fGPAlAdA6n61 gWGPJEfBKrItEzuE0jovrFXvutPT0AMPtVb6ZUB1FeTomgVwJ4M5cat76wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHYSLopgmQeDzvNmOMFXqY04KSZLMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvZGhJdWltQ1pCNFBPODJZNHdWZXBqVGdwSmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg8GBxBa MA0GCSqGSIb3DQEBCwUAA4IBAQBarHZvPxA+QEVOZFIRyI67kMNycv0vNzhWL32H 8cGPrIiYaypXXONox0HijM+26BlWnnUsEzOfl/qGJYbW0CguIQNVsCGrT2SrsYHY a+he/D565uBr/UlMhnONZYfA+gge5bTea4blbF+KGuATrd7Cf+sCrUCiW9FxOfku xd8g6vh/GA5+My8fIftrNTu9Okl7wlQP7+izfGHECFFsoGH3o4A8j6Lktj4TpSIK BkNSKbSf0fp2rlIGqI2U/J8MECVYmRael+8g4XGzI/l8wI53YqSfBfKSMtK61Lkt YFmgJu8PVWMB19lcQhBk7GBrOFtMkA+ONq/3NQMkzMI/EBN+ -----END CERTIFICATE-----Generated at Thu Jan 8 00:39:22 2026 by rpki-client