This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa File: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (raw, json) Hash identifier: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE= Subject key identifier: C0:32:0F:88:57:29:5F:53:71:D4:F9:DB:83:22:55:B9:D7:9A:5E:82 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED46519357FFFA538D5F5D2BB515F3 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38008 IP address blocks: 2a0f:607:1060::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:46:51:93:57:ff:fa:53:8d:5f:5d:2b:b5:15:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0320f8857295f5371d4f9db832255b9d79a5e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:b9:00:1f:3f:db:1b:b9:f3:eb:94:d5:76: f0:3a:04:bf:43:af:a7:b5:e6:d5:9d:03:53:93:86: 73:03:29:4c:da:7d:cf:cd:49:ad:4a:71:0c:ff:1d: e4:a5:6b:87:4a:cf:c8:c0:a7:9a:1a:26:48:7b:a5: 9e:ff:55:94:57:9a:e2:17:6c:ee:96:00:75:bf:14: 31:1a:c5:10:82:7d:24:f0:cd:ad:05:60:12:be:d0: 7d:61:e0:c8:32:74:e3:c5:4e:89:51:87:1c:97:a2: 27:cb:a3:7a:95:46:69:8c:f5:40:1c:03:f2:30:4b: 3e:41:2c:e9:c8:01:39:ff:d9:b9:0e:23:b4:24:df: 58:10:1b:08:80:f7:4e:01:b9:3b:c3:77:ff:61:b7: b7:c9:b9:fb:c3:f4:4a:03:87:60:d9:81:14:ad:7f: d1:84:b5:62:f5:32:8b:d9:23:5b:f7:ad:e1:cc:1e: 42:15:13:22:69:6a:66:7d:63:41:46:ca:fc:8d:e8: 80:ca:55:01:38:54:23:0b:12:39:80:40:aa:ee:65: 1d:f9:bf:e3:8c:bf:d9:e2:49:bb:12:1f:ef:a1:fe: a4:3f:d6:7f:fa:f2:04:12:b0:13:c9:38:a9:28:04: 8b:ac:f1:71:c6:44:bf:7d:4a:f8:27:f2:19:d1:8a: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:32:0F:88:57:29:5F:53:71:D4:F9:DB:83:22:55:B9:D7:9A:5E:82 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1060::/44 Signature Algorithm: sha256WithRSAEncryption 34:a1:dc:c2:79:02:e3:ca:c4:16:14:33:27:5a:81:0d:92:40: 00:27:68:4d:9d:57:31:2a:24:1f:70:cd:75:00:69:36:7e:51: 00:98:bf:a1:94:97:72:25:ef:6a:f0:c1:37:8e:5a:af:cc:89: b9:fd:1a:24:e8:6a:0a:2e:d4:6b:a2:c0:d2:23:bc:b4:16:ba: 1a:c8:c2:90:19:21:81:93:65:53:f1:67:64:57:de:d3:31:88: e9:09:06:30:50:0a:99:5f:57:c9:b4:f6:d9:cd:6c:26:d9:b9: ce:23:be:ad:0f:b2:fc:d4:55:04:7f:e6:ff:03:f7:0e:85:9e: 28:72:47:f2:6c:e8:10:c8:e0:4b:f4:0c:01:90:3d:c4:27:d9: 81:ee:4c:09:18:d1:cb:a3:d0:17:05:06:3b:03:b5:43:a8:fd: 5d:06:3e:46:e1:5d:4a:5f:ab:c9:e7:f2:b7:25:ef:83:ad:2a: 5b:ce:05:05:7a:58:e2:82:b6:72:ee:7a:ea:7a:ae:22:7b:00: 24:73:9a:a4:bf:51:ab:d2:88:42:c1:9a:b9:fb:54:ec:61:64: ae:0b:85:0f:e4:38:ba:b1:cf:28:0b:5f:60:5a:3d:6f:28:2e: 20:d9:62:b0:07:de:53:c4:bb:bc:8d:80:f6:13:ff:af:f9:b1: 2c:00:36:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UZRk1f/+lONX10rtRXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDMyMGY4ODU3Mjk1ZjUzNzFkNGY5ZGI4MzIyNTViOWQ3OWE1ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXK5AB8/2xu58+uU1XbwOgS/Q6+n tebVnQNTk4ZzAylM2n3PzUmtSnEM/x3kpWuHSs/IwKeaGiZIe6We/1WUV5riF2zu lgB1vxQxGsUQgn0k8M2tBWASvtB9YeDIMnTjxU6JUYccl6Iny6N6lUZpjPVAHAPy MEs+QSzpyAE5/9m5DiO0JN9YEBsIgPdOAbk7w3f/Ybe3ybn7w/RKA4dg2YEUrX/R hLVi9TKL2SNb963hzB5CFRMiaWpmfWNBRsr8jeiAylUBOFQjCxI5gECq7mUd+b/j jL/Z4km7Eh/vof6kP9Z/+vIEErATyTipKASLrPFxxkS/fUr4J/IZ0YrT6QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMAyD4hXKV9TcdT524MiVbnXml6CMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvd0RJUGlGY3BYMU54MVBuYmd5SlZ1ZGVhWG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg8GBxBg MA0GCSqGSIb3DQEBCwUAA4IBAQA0odzCeQLjysQWFDMnWoENkkAAJ2hNnVcxKiQf cM11AGk2flEAmL+hlJdyJe9q8ME3jlqvzIm5/Rok6GoKLtRrosDSI7y0FroayMKQ GSGBk2VT8WdkV97TMYjpCQYwUAqZX1fJtPbZzWwm2bnOI76tD7L81FUEf+b/A/cO hZ4ockfybOgQyOBL9AwBkD3EJ9mB7kwJGNHLo9AXBQY7A7VDqP1dBj5G4V1KX6vJ 5/K3Je+DrSpbzgUFeljigrZy7nrqeq4iewAkc5qkv1Gr0ohCwZq5+1TsYWSuC4UP 5Di6sc8oC19gWj1vKC4g2WKwB95TxLu8jYD2E/+v+bEsADZ7 -----END CERTIFICATE-----Generated at Thu Jan 8 00:47:48 2026 by rpki-client