This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/dGQiVCpdc4W3d5r4igqKBqQqts8.roa File: dGQiVCpdc4W3d5r4igqKBqQqts8.roa (raw, json) Hash identifier: jzdHGaPfp3Tb2dLRrBY8oNDM5z86/qIMHzx9U6KqRtg= Subject key identifier: 74:64:22:54:2A:5D:73:85:B7:77:9A:F8:8A:0A:8A:06:A4:2A:B6:CF Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80366AFFE5282761E30AF706160787 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/dGQiVCpdc4W3d5r4igqKBqQqts8.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215857 IP address blocks: 2a0f:7803:fe90::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:36:6a:ff:e5:28:27:61:e3:0a:f7:06:16:07:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=746422542a5d7385b7779af88a0a8a06a42ab6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:b7:d3:9e:48:4d:08:ea:51:ed:04:6d:03: 8f:26:5c:b1:a2:5e:ba:77:2f:3a:2c:b5:7a:dd:0a: 30:d1:dd:e1:b4:d5:ac:21:27:33:43:17:d2:44:24: 1a:f8:52:cc:46:e1:a2:1e:0d:df:56:f5:b2:08:8d: 36:c5:13:29:6d:54:9f:c6:eb:33:7d:d2:a2:5d:26: d8:33:79:95:44:b6:9e:95:1a:3e:07:ac:ac:cf:6b: 30:79:08:b4:50:73:0f:94:06:7d:df:a1:e8:97:06: 2a:75:5c:d8:63:7a:fc:30:31:ca:d0:70:f9:69:3d: c6:4f:dc:c3:72:89:bc:27:24:9b:16:8e:02:95:51: 9c:30:c0:44:33:c5:98:c2:d6:11:b5:24:f7:2a:37: ee:c3:91:04:ad:df:83:79:14:ee:a6:6b:e3:da:a7: d3:8e:b3:57:cf:5e:c3:de:6f:82:9c:28:b6:5e:b4: fb:ea:9d:37:8d:e6:b2:9c:00:4c:33:db:a8:d6:fe: 68:39:39:7e:73:2c:f0:0f:56:d0:a2:7b:ad:61:c7: 6c:c0:dd:6d:03:98:ad:7e:24:14:97:5e:aa:e1:b1: 4f:95:36:7a:c2:06:2d:96:8c:e7:1b:c2:6a:84:bc: d0:48:c1:b7:fb:9a:04:bd:80:f5:a2:7d:c1:bb:ca: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:64:22:54:2A:5D:73:85:B7:77:9A:F8:8A:0A:8A:06:A4:2A:B6:CF X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/dGQiVCpdc4W3d5r4igqKBqQqts8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fe90::/44 Signature Algorithm: sha256WithRSAEncryption 90:89:5c:4d:ed:d6:d6:4f:c8:6f:1d:ad:34:b6:e4:31:1c:f1: 9e:b1:9a:b8:d5:3e:1d:47:ec:07:2f:05:55:93:9d:b1:7c:c6: 8b:62:54:b9:82:60:19:d5:43:96:4a:9d:fa:cf:e1:9a:6f:1f: 26:ac:14:f2:02:99:ff:68:53:1f:2c:42:5b:7b:4d:01:da:21: c3:ae:be:37:b7:c9:bb:b6:20:42:8f:d5:a7:fc:bb:12:90:0f: ec:77:ba:3d:ab:b6:5b:f8:4e:36:df:10:ff:08:5d:bd:1d:f2: 10:86:ac:d7:c0:a6:3f:2d:c5:04:fb:62:54:e8:9b:57:64:50: aa:e2:26:45:d0:f7:b1:de:cc:79:dd:a5:6e:71:c4:ca:71:71: 41:4a:f1:64:12:3e:ff:90:29:b0:39:55:f7:c4:9c:2a:19:90: 09:7c:c8:91:a5:2b:1f:b3:c9:2b:6e:d1:6e:ed:89:18:d1:c7: c3:1c:b6:15:89:d0:48:de:69:02:fe:5d:8f:9d:d5:99:02:fc: 12:36:15:f9:5f:81:eb:6f:f1:ab:4e:ee:1a:cf:84:f0:66:35: f2:d0:c7:ce:80:f6:94:47:6f:f8:cc:60:db:80:e4:49:ba:44: 18:46:c5:67:a2:47:c4:d3:c3:42:92:5a:97:18:09:55:8a:ae: 1f:a1:8d:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDZq/+UoJ2HjCvcGFgeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDY0MjI1NDJhNWQ3Mzg1Yjc3NzlhZjg4YTBhOGEwNmE0MmFiNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokW3055ITQjqUe0EbQOPJlyxol66 dy86LLV63Qow0d3htNWsISczQxfSRCQa+FLMRuGiHg3fVvWyCI02xRMpbVSfxusz fdKiXSbYM3mVRLaelRo+B6ysz2sweQi0UHMPlAZ936HolwYqdVzYY3r8MDHK0HD5 aT3GT9zDcom8JySbFo4ClVGcMMBEM8WYwtYRtST3Kjfuw5EErd+DeRTupmvj2qfT jrNXz17D3m+CnCi2XrT76p03jeaynABMM9uo1v5oOTl+cyzwD1bQonutYcdswN1t A5itfiQUl16q4bFPlTZ6wgYtloznG8JqhLzQSMG3+5oEvYD1on3Bu8oK6QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHRkIlQqXXOFt3ea+IoKigakKrbPMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvZEdRaVZDcGRjNFczZDVyNGlncUtCcVFxdHM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/6Q MA0GCSqGSIb3DQEBCwUAA4IBAQCQiVxN7dbWT8hvHa00tuQxHPGesZq41T4dR+wH LwVVk52xfMaLYlS5gmAZ1UOWSp36z+Gabx8mrBTyApn/aFMfLEJbe00B2iHDrr43 t8m7tiBCj9Wn/LsSkA/sd7o9q7Zb+E423xD/CF29HfIQhqzXwKY/LcUE+2JU6JtX ZFCq4iZF0Pex3sx53aVuccTKcXFBSvFkEj7/kCmwOVX3xJwqGZAJfMiRpSsfs8kr btFu7YkY0cfDHLYVidBI3mkC/l2PndWZAvwSNhX5X4Hrb/GrTu4az4TwZjXy0MfO gPaUR2/4zGDbgORJukQYRsVnokfE08NCklqXGAlViq4foY1x -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:55 2026 by rpki-client