This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DQxePk3Dufpar_CjAW-kWECEnvA.roa File: DQxePk3Dufpar_CjAW-kWECEnvA.roa (raw, json) Hash identifier: BJDNv9lZP5sXriFUWQDPWJPK6GnoLvs6FXHtAO62+n0= Subject key identifier: 0D:0C:5E:3E:4D:C3:B9:FA:5A:AF:F0:A3:01:6F:A4:58:40:84:9E:F0 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8036333F2A70FDA498576BEAF43A4C Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DQxePk3Dufpar_CjAW-kWECEnvA.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215832 IP address blocks: 2a0f:7803:fe80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:36:33:3f:2a:70:fd:a4:98:57:6b:ea:f4:3a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d0c5e3e4dc3b9fa5aaff0a3016fa45840849ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:b7:4a:f7:2f:b6:75:48:fb:e1:b5:a9:e3: 95:a0:c6:0d:d3:0c:ab:bf:44:da:28:d7:62:41:af: d4:d7:81:00:bb:2c:ed:fa:a7:a5:6d:9a:04:7a:8a: c8:78:f5:a0:1d:e7:b3:78:3a:65:3c:73:b4:20:08: bc:0f:44:6e:88:50:b9:ce:b5:83:4e:91:01:c9:3a: 12:a7:96:60:b3:68:3a:d9:43:c2:34:93:f6:fc:17: 8b:82:db:f1:97:b2:fd:8a:cd:5e:4e:12:0d:72:42: 3a:3a:8b:b8:e7:31:5f:85:b0:48:b6:ae:87:70:5a: 9d:76:cf:dd:a9:43:fe:5b:73:9a:3c:20:8d:e9:0c: 23:5a:1e:f3:ec:23:5d:92:32:ab:b4:38:b6:83:9f: 55:e2:cd:59:4c:38:0c:5b:ee:b2:8b:d6:1f:0d:74: c1:8a:40:50:41:69:e6:9b:f5:35:e7:02:4e:10:d2: 44:9d:26:1a:5e:4a:8e:54:02:0b:a8:a8:52:d3:78: f2:28:4a:8d:af:97:ee:b7:a3:65:93:21:40:d1:08: c1:9d:1d:90:cd:0a:80:cf:f9:fb:4b:ed:5a:b8:72: 9d:d9:6d:0a:20:6f:9f:a9:7f:40:f7:fe:e5:54:44: 43:b3:d2:cf:1f:22:1d:57:db:dc:e0:44:bb:b2:d7: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0C:5E:3E:4D:C3:B9:FA:5A:AF:F0:A3:01:6F:A4:58:40:84:9E:F0 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DQxePk3Dufpar_CjAW-kWECEnvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fe80::/44 Signature Algorithm: sha256WithRSAEncryption 66:8e:7f:bb:05:6e:72:b5:ba:ae:18:a3:63:a7:50:1e:50:11: f0:58:2b:77:74:a6:13:68:99:09:f7:2e:06:97:43:b3:7b:94: a9:45:e6:23:59:36:a6:a5:7f:31:d7:b0:ed:7c:d1:c7:81:ea: 24:62:9e:bf:4c:af:74:d6:43:b6:08:bf:11:ef:2d:56:02:27: aa:10:b9:ab:d1:ce:f5:4c:86:ac:e7:e0:5a:30:4d:48:50:5b: 22:50:35:d2:0a:dc:ef:17:8f:11:54:97:45:4f:4f:1b:8a:d1: c3:39:9a:71:9c:47:22:d2:54:c6:83:bd:0f:c9:2a:82:ed:eb: e4:49:56:e9:f3:9a:65:8e:7b:95:38:d3:53:57:a9:8f:4d:a9: 6b:0d:c9:36:0a:ec:94:7f:fa:ff:53:f8:6f:c3:69:52:b0:fc: df:40:aa:60:f3:75:69:e4:4f:1d:aa:64:1b:9b:d2:36:d9:e8: b6:6b:3e:3c:97:01:23:b0:74:c9:c5:ac:82:ac:f5:6e:2f:8a: 45:81:a1:22:9c:20:2a:66:bd:b0:69:57:4f:94:20:5d:5c:07: f9:65:9b:dd:a6:10:2f:c7:c7:f4:56:ba:df:fe:95:e0:72:9d: 65:33:29:98:ee:34:af:71:54:10:96:90:25:3c:8b:d5:3f:0c: ab:ed:11:83 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDYzPypw/aSYV2vq9DpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDBjNWUzZTRkYzNiOWZhNWFhZmYwYTMwMTZmYTQ1ODQwODQ5ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMq3SvcvtnVI++G1qeOVoMYN0wyr v0TaKNdiQa/U14EAuyzt+qelbZoEeorIePWgHeezeDplPHO0IAi8D0RuiFC5zrWD TpEByToSp5Zgs2g62UPCNJP2/BeLgtvxl7L9is1eThINckI6Oou45zFfhbBItq6H cFqdds/dqUP+W3OaPCCN6QwjWh7z7CNdkjKrtDi2g59V4s1ZTDgMW+6yi9YfDXTB ikBQQWnmm/U15wJOENJEnSYaXkqOVAILqKhS03jyKEqNr5fut6NlkyFA0QjBnR2Q zQqAz/n7S+1auHKd2W0KIG+fqX9A9/7lVERDs9LPHyIdV9vc4ES7stfSmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA0MXj5Nw7n6Wq/wowFvpFhAhJ7wMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvRFF4ZVBrM0R1ZnBhcl9DakFXLWtXRUNFbnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/6A MA0GCSqGSIb3DQEBCwUAA4IBAQBmjn+7BW5ytbquGKNjp1AeUBHwWCt3dKYTaJkJ 9y4Gl0Oze5SpReYjWTampX8x17DtfNHHgeokYp6/TK901kO2CL8R7y1WAieqELmr 0c71TIas5+BaME1IUFsiUDXSCtzvF48RVJdFT08bitHDOZpxnEci0lTGg70PySqC 7evkSVbp85pljnuVONNTV6mPTalrDck2CuyUf/r/U/hvw2lSsPzfQKpg83Vp5E8d qmQbm9I22ei2az48lwEjsHTJxayCrPVuL4pFgaEinCAqZr2waVdPlCBdXAf5ZZvd phAvx8f0Vrrf/pXgcp1lMymY7jSvcVQQlpAlPIvVPwyr7RGD -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:57 2026 by rpki-client