This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/DJqntjgYkfPW1Br18ErHhvNgn_M.roa File: DJqntjgYkfPW1Br18ErHhvNgn_M.roa (raw, json) Hash identifier: B5GRLWvmtpau9qTab26EepTDGZK6+L4FVVyJPZXWVFg= Subject key identifier: 0C:9A:A7:B6:38:18:91:F3:D6:D4:1A:F5:F0:4A:C7:86:F3:60:9F:F3 Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369 Certificate serial: 019B7CECD43F35806A203C53EB6634BF0870 Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/DJqntjgYkfPW1Br18ErHhvNgn_M.roa Signing time: Fri 02 Jan 2026 04:17:34 +0000 ROA not before: Fri 02 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216391 IP address blocks: 2001:67c:d0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d4:3f:35:80:6a:20:3c:53:eb:66:34:bf:08:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369 Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c9aa7b6381891f3d6d41af5f04ac786f3609ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:72:8b:93:26:69:8b:d0:1a:60:74:97:ec: 6d:3d:bc:5c:cc:14:eb:31:74:e1:f0:41:d6:dc:f4: c0:49:f9:7e:9a:0e:c2:ef:23:57:e0:a6:9f:e8:1e: b9:5e:af:a5:d7:11:35:2a:9d:bd:12:e1:dd:59:5c: 98:f5:31:92:cd:ee:7d:28:19:39:e0:c3:f6:bc:ff: ab:71:d7:c7:35:4d:4c:6a:bf:12:b7:ea:41:c2:b0: 57:0c:3c:3f:3a:ee:67:da:51:a4:4d:42:31:8d:2d: 02:d1:11:ec:64:5a:a0:d9:64:38:23:bf:88:1f:5c: 7e:6c:51:34:ca:1f:af:e6:d3:46:34:59:7f:2b:37: 0f:13:87:06:16:6a:6d:79:0e:a0:d2:ab:10:65:47: 92:67:6c:c2:3f:a3:9d:27:10:b8:b7:c4:c2:c7:50: 27:42:7a:85:14:63:57:75:ce:c8:24:1e:da:fa:57: a9:ed:14:bf:2a:6d:0f:8e:80:68:8b:e3:92:b6:dc: 81:e7:0d:d7:19:b9:db:84:10:d7:bb:fe:7b:65:65: 51:98:da:cc:f5:33:a2:8f:30:d2:81:80:b6:52:3f: 71:c0:2d:60:60:8f:0d:39:17:a1:c6:3c:f1:60:38: 74:c2:53:02:37:d0:17:7d:de:4d:bf:56:a4:2c:ae: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9A:A7:B6:38:18:91:F3:D6:D4:1A:F5:F0:4A:C7:86:F3:60:9F:F3 X509v3 Authority Key Identifier: keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/DJqntjgYkfPW1Br18ErHhvNgn_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d0c::/48 Signature Algorithm: sha256WithRSAEncryption 25:1d:39:07:a2:20:c4:cf:dd:22:36:5d:60:43:c0:17:ba:cb: 35:63:26:4b:33:7e:69:7d:16:b7:e7:64:4c:21:51:27:08:48: 73:2a:45:fd:05:47:83:58:ca:7c:0f:e9:f1:67:eb:89:b6:bb: 77:93:57:9c:69:de:55:7f:f3:29:a2:dc:c8:97:69:a8:20:33: 5b:4c:a1:32:85:47:0a:39:87:00:49:85:25:d5:50:fe:ac:56: 11:34:ea:c5:14:04:1c:d0:84:15:6a:af:72:b9:21:3b:f6:80: a8:f1:ef:2d:6c:af:66:e6:6b:22:20:da:3c:1e:36:80:a3:03: 7f:74:6d:ad:fd:b0:03:28:2d:a0:21:43:41:da:c5:42:fb:c1: a1:fe:3d:5c:2d:01:44:3b:96:4f:a8:29:d5:ff:62:5a:5f:7f: 3f:37:87:84:56:a1:fd:0a:4c:ca:2a:48:14:bd:61:9b:8d:57: 7a:f8:e2:71:44:d1:68:9f:bf:38:ee:ac:02:f3:59:fd:c5:1a: eb:28:5a:51:4b:96:d2:7b:ce:2c:bf:57:22:a8:21:c8:2d:78: 50:2b:cb:01:7d:1b:f5:81:bf:c8:84:67:db:78:ab:84:57:7a: a6:f3:3c:b9:f9:4e:c8:0c:d9:13:36:cf:a4:8a:e4:d7:5f:89: cd:a9:c6:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87NQ/NYBqIDxT62Y0vwhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYmYwMmYwNGVjNDMwOGNiNWI2MDc4YmQwNmExN2NiMDBk ODMzNjkwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzlhYTdiNjM4MTg5MWYzZDZkNDFhZjVmMDRhYzc4NmYzNjA5ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu65yi5MmaYvQGmB0l+xtPbxczBTr MXTh8EHW3PTASfl+mg7C7yNX4Kaf6B65Xq+l1xE1Kp29EuHdWVyY9TGSze59KBk5 4MP2vP+rcdfHNU1Mar8St+pBwrBXDDw/Ou5n2lGkTUIxjS0C0RHsZFqg2WQ4I7+I H1x+bFE0yh+v5tNGNFl/KzcPE4cGFmpteQ6g0qsQZUeSZ2zCP6OdJxC4t8TCx1An QnqFFGNXdc7IJB7a+lep7RS/Km0PjoBoi+OSttyB5w3XGbnbhBDXu/57ZWVRmNrM 9TOijzDSgYC2Uj9xwC1gYI8NORehxjzxYDh0wlMCN9AXfd5Nv1akLK7CmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAyap7Y4GJHz1tQa9fBKx4bzYJ/zMB8GA1UdIwQY MBaAFJ+/AvBOxDCMtbYHi9BqF8sA2DNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEt NWZhOWRhMDNmNTcwLzEvREpxbnRqZ1lrZlBXMUJyMThFckhodk5nbl9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEtNWZhOWRhMDNmNTcw LzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA0M MA0GCSqGSIb3DQEBCwUAA4IBAQAlHTkHoiDEz90iNl1gQ8AXuss1YyZLM35pfRa3 52RMIVEnCEhzKkX9BUeDWMp8D+nxZ+uJtrt3k1ecad5Vf/MpotzIl2moIDNbTKEy hUcKOYcASYUl1VD+rFYRNOrFFAQc0IQVaq9yuSE79oCo8e8tbK9m5msiINo8HjaA owN/dG2t/bADKC2gIUNB2sVC+8Gh/j1cLQFEO5ZPqCnV/2JaX38/N4eEVqH9CkzK KkgUvWGbjVd6+OJxRNFon7847qwC81n9xRrrKFpRS5bSe84sv1ciqCHILXhQK8sB fRv1gb/IhGfbeKuEV3qm8zy5+U7IDNkTNs+kiuTXX4nNqcYp -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:10 2026 by rpki-client