This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/v47skhEQE84BTabypqito2-aQcw.roa File: v47skhEQE84BTabypqito2-aQcw.roa (raw, json) Hash identifier: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI= Subject key identifier: BF:8E:EC:92:11:10:13:CE:01:4D:A6:F2:A6:A8:AD:A3:6F:9A:41:CC Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED4B8B8DDD0038A56A5A082FF4772E Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/v47skhEQE84BTabypqito2-aQcw.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207469 IP address blocks: 2a0f:607:1053::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4b:8b:8d:dd:00:38:a5:6a:5a:08:2f:f4:77:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf8eec92111013ce014da6f2a6a8ada36f9a41cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:d3:d0:ac:89:f0:ce:70:3d:6c:77:a5:02: 42:70:7b:b9:a4:8f:75:0e:69:cb:56:a1:6b:28:85: 91:fc:66:12:ba:1b:fd:a4:df:ce:5c:1c:a4:fa:72: cf:f2:7c:a8:e0:48:37:e6:42:7a:5e:67:14:fe:74: 1f:f2:25:12:11:ad:88:97:f3:97:5b:41:09:37:9d: 60:4b:9e:a9:13:f2:e3:19:c1:15:ba:68:a3:1c:23: e6:49:c2:ff:3f:de:1a:79:08:d7:98:a3:3e:fd:d0: 4f:b6:4e:48:82:14:7e:21:b5:25:9f:15:fe:ca:3f: c7:c5:28:eb:9c:94:46:db:aa:02:10:18:11:80:28: f6:dd:f3:28:95:ef:ad:5b:e9:c9:0f:25:d4:ce:e6: 83:81:8e:4e:42:36:2b:7b:22:07:5e:1b:28:dc:9e: b7:10:95:13:d6:6c:61:98:9a:11:21:fc:ad:a0:f8: 5b:98:42:a2:37:28:7d:08:b9:f1:00:0f:93:62:b2: e4:df:88:29:70:92:c3:13:fa:83:76:b6:20:22:b9: 2f:61:67:89:b3:1b:0d:c0:25:11:8b:f2:42:f6:fc: 1a:be:14:36:a3:ca:71:bf:b1:93:0f:2d:d1:8c:3d: 2c:99:0a:7c:e1:fe:c4:1d:a8:86:04:c7:2a:16:3a: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:EC:92:11:10:13:CE:01:4D:A6:F2:A6:A8:AD:A3:6F:9A:41:CC X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/v47skhEQE84BTabypqito2-aQcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1053::/48 Signature Algorithm: sha256WithRSAEncryption 84:3a:16:5b:16:37:ac:ed:3c:bd:1f:6b:4e:54:29:0e:35:e1: c5:30:90:09:66:98:14:d4:03:4a:4b:ac:a2:8c:db:15:4e:13: 54:8f:e7:21:85:2b:8f:1d:4b:08:97:ff:16:23:6e:9e:b1:86: 8b:ae:98:90:9e:77:16:60:ec:4b:01:cb:f1:c0:c4:f8:6e:bd: 25:6b:46:b8:9a:2e:70:5e:2b:f9:d7:a9:f9:11:9b:94:e2:cc: a3:fa:49:a9:1f:e3:0b:7e:20:94:ef:6a:16:5e:b5:f8:6f:2a: 49:ff:4e:00:6d:25:d3:8d:2e:fc:21:e3:c7:88:39:f3:bf:d8: 48:02:02:7b:11:96:7d:ce:a8:57:9a:82:d1:53:3c:7c:3a:b1: 81:03:ea:b6:13:86:b6:40:3a:58:db:08:a0:7e:04:74:55:41: 4e:ec:fa:1d:6c:c9:1c:68:35:02:4e:04:1d:ae:6a:fa:05:40: fb:1d:a7:1a:0e:9d:3b:cc:df:d0:34:f5:46:96:fe:92:0e:b1: 33:55:d1:d3:cd:b2:f7:71:3d:18:bf:96:08:99:4f:9f:84:6f: 0e:aa:d2:ec:82:73:73:39:5c:8c:62:17:62:05:75:98:92:24: 8f:6d:0b:6d:cf:27:c1:de:a8:0d:9f:2c:d6:1c:ce:9e:ce:a2: b2:11:0b:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UuLjd0AOKVqWggv9HcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjhlZWM5MjExMTAxM2NlMDE0ZGE2ZjJhNmE4YWRhMzZmOWE0MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApczT0KyJ8M5wPWx3pQJCcHu5pI91 DmnLVqFrKIWR/GYSuhv9pN/OXByk+nLP8nyo4Eg35kJ6XmcU/nQf8iUSEa2Il/OX W0EJN51gS56pE/LjGcEVumijHCPmScL/P94aeQjXmKM+/dBPtk5IghR+IbUlnxX+ yj/HxSjrnJRG26oCEBgRgCj23fMole+tW+nJDyXUzuaDgY5OQjYreyIHXhso3J63 EJUT1mxhmJoRIfytoPhbmEKiNyh9CLnxAA+TYrLk34gpcJLDE/qDdrYgIrkvYWeJ sxsNwCURi/JC9vwavhQ2o8pxv7GTDy3RjD0smQp84f7EHaiGBMcqFjoT3QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL+O7JIREBPOAU2m8qaoraNvmkHMMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvdjQ3c2toRVFFODRCVGFieXBxaXRvMi1hUWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8GBxBT MA0GCSqGSIb3DQEBCwUAA4IBAQCEOhZbFjes7Ty9H2tOVCkONeHFMJAJZpgU1ANK S6yijNsVThNUj+chhSuPHUsIl/8WI26esYaLrpiQnncWYOxLAcvxwMT4br0la0a4 mi5wXiv516n5EZuU4syj+kmpH+MLfiCU72oWXrX4bypJ/04AbSXTjS78IePHiDnz v9hIAgJ7EZZ9zqhXmoLRUzx8OrGBA+q2E4a2QDpY2wigfgR0VUFO7PodbMkcaDUC TgQdrmr6BUD7HacaDp07zN/QNPVGlv6SDrEzVdHTzbL3cT0Yv5YImU+fhG8OqtLs gnNzOVyMYhdiBXWYkiSPbQttzyfB3qgNnyzWHM6ezqKyEQtM -----END CERTIFICATE-----Generated at Thu Jan 8 00:47:42 2026 by rpki-client