This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/DOL6_bM0cayFn6lDHZcPsYXxrCI.roa File: DOL6_bM0cayFn6lDHZcPsYXxrCI.roa (raw, json) Hash identifier: SL51iqqDzym7zDZje/TntRQN14HmuoWDKSbYF6rNrYk= Subject key identifier: 0C:E2:FA:FD:B3:34:71:AC:85:9F:A9:43:1D:97:0F:B1:85:F1:AC:22 Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb Certificate serial: 019B7A59A5285090EC617DCE139869D55E4C Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/DOL6_bM0cayFn6lDHZcPsYXxrCI.roa Signing time: Thu 01 Jan 2026 16:17:33 +0000 ROA not before: Thu 01 Jan 2026 16:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44747 IP address blocks: 62.205.0.0/19 maxlen: 19 185.158.188.0/22 maxlen: 22 2a07:7680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:a5:28:50:90:ec:61:7d:ce:13:98:69:d5:5e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb Validity Not Before: Jan 1 16:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ce2fafdb33471ac859fa9431d970fb185f1ac22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:20:b0:e7:45:a5:5e:79:81:5c:e0:bf:8a: 79:db:25:c6:09:5f:24:0a:f6:1b:82:c0:20:97:5e: 1b:c0:61:ae:f2:d9:fb:49:77:c4:2c:73:ad:d8:55: 60:1d:65:b8:5f:3e:35:bf:9b:95:f1:2b:cd:d5:8b: 8e:4c:09:ad:9b:e5:f4:ce:05:bd:04:e3:1f:3b:ae: 34:9b:68:3e:e7:f1:99:da:46:8d:eb:f2:bd:1d:1b: 05:79:66:c4:08:bf:98:36:20:36:d4:5b:6b:03:39: 03:d4:35:ec:79:51:6e:cf:36:ea:bf:7d:ff:54:13: 1f:f7:f9:e1:b7:63:ad:dc:14:14:4d:7c:83:32:d9: a3:1a:1c:30:f9:6b:1e:eb:dd:bd:6c:b3:74:22:d7: 2c:89:e4:17:eb:df:98:03:ba:aa:43:69:3d:43:52: 9c:d4:e3:40:2b:ff:c7:9b:f2:5b:04:40:22:a6:47: 9d:a7:1e:ad:03:3a:ab:08:f6:65:38:6d:90:6d:44: d3:78:91:98:7f:ed:f5:cb:6e:bb:bd:a5:20:9c:1e: fd:7a:e1:bf:32:0b:e3:52:98:7f:2c:b0:68:af:bb: 27:30:07:ee:1a:b0:74:77:eb:20:38:4a:dc:d9:3a: 00:f8:74:4d:cd:89:c8:88:b9:e0:d5:8d:d0:ce:ee: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E2:FA:FD:B3:34:71:AC:85:9F:A9:43:1D:97:0F:B1:85:F1:AC:22 X509v3 Authority Key Identifier: keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/DOL6_bM0cayFn6lDHZcPsYXxrCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.205.0.0/19 185.158.188.0/22 IPv6: 2a07:7680::/29 Signature Algorithm: sha256WithRSAEncryption 74:79:30:d1:ad:a2:a2:51:db:81:b9:f5:b5:c6:f4:24:74:48: 43:af:47:65:c7:eb:e2:23:76:f8:04:a1:c0:e3:5e:73:6f:a6: 2a:7d:38:f8:d0:23:7e:34:da:18:0c:96:63:b3:17:57:e6:5e: 2d:2c:7a:80:05:80:f2:cf:a4:47:64:d5:8c:67:d4:d4:10:21: a4:ec:dc:c5:c6:b2:be:e8:1a:36:f8:a0:ff:8d:c4:fb:c9:b4: c8:6f:5a:91:67:c9:40:da:16:23:50:97:e2:90:da:48:19:ff: fa:e3:0c:34:66:fc:95:82:09:83:b4:b7:fb:a5:e7:83:32:2b: 92:d8:11:89:64:b0:bd:65:22:0e:60:e2:14:63:2e:e5:b4:f3: 34:8b:67:a6:50:45:49:25:22:37:5b:24:e6:39:7b:5c:91:d2: 0a:03:ab:74:51:e3:7c:80:5e:15:c0:ab:ed:3a:5e:da:cc:a6: ce:bb:10:33:0f:57:92:b6:02:92:d3:15:65:81:35:a3:81:bb: 09:d3:be:db:84:d8:3c:f8:22:81:5b:06:3e:88:d3:02:fd:35: c8:4c:a3:15:8a:52:87:4f:97:26:9a:8a:dd:d0:85:64:eb:81: 65:9b:98:95:46:6b:dc:75:42:0d:0b:58:d2:ed:e5:f0:f2:b8: 9a:05:b4:52 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WaUoUJDsYX3OE5hp1V5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWUzYTU0ZGQwMzg5NTY4M2VlZGJjMzc5ZDFlMGRiYjA2 YjliZGIwHhcNMjYwMTAxMTYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2UyZmFmZGIzMzQ3MWFjODU5ZmE5NDMxZDk3MGZiMTg1ZjFhYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM8gsOdFpV55gVzgv4p52yXGCV8k CvYbgsAgl14bwGGu8tn7SXfELHOt2FVgHWW4Xz41v5uV8SvN1YuOTAmtm+X0zgW9 BOMfO640m2g+5/GZ2kaN6/K9HRsFeWbECL+YNiA21FtrAzkD1DXseVFuzzbqv33/ VBMf9/nht2Ot3BQUTXyDMtmjGhww+Wse6929bLN0ItcsieQX69+YA7qqQ2k9Q1Kc 1ONAK//Hm/JbBEAipkedpx6tAzqrCPZlOG2QbUTTeJGYf+31y267vaUgnB79euG/ MgvjUph/LLBor7snMAfuGrB0d+sgOErc2ToA+HRNzYnIiLng1Y3Qzu5OTwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAzi+v2zNHGshZ+pQx2XD7GF8awiMB8GA1UdIwQY MBaAFMquOlTdA4lWg+7bw3nR4Nuwa5vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jODNkY2UtMjk1NS00OGU2LWJkN2Mt NWJlYWZjODY2NTFiLzEvRE9MNl9iTTBjYXlGbjZsREhaY1BzWVh4ckNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jODNkY2UtMjk1NS00OGU2LWJkN2MtNWJlYWZjODY2NTFi LzEveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPs0AAwQC uZ68MA0EAgACMAcDBQMqB3aAMA0GCSqGSIb3DQEBCwUAA4IBAQB0eTDRraKiUduB ufW1xvQkdEhDr0dlx+viI3b4BKHA415zb6YqfTj40CN+NNoYDJZjsxdX5l4tLHqA BYDyz6RHZNWMZ9TUECGk7NzFxrK+6Bo2+KD/jcT7ybTIb1qRZ8lA2hYjUJfikNpI Gf/64ww0ZvyVggmDtLf7peeDMiuS2BGJZLC9ZSIOYOIUYy7ltPM0i2emUEVJJSI3 WyTmOXtckdIKA6t0UeN8gF4VwKvtOl7azKbOuxAzD1eStgKS0xVlgTWjgbsJ077b hNg8+CKBWwY+iNMC/TXITKMVilKHT5cmmord0IVk64Flm5iVRmvcdUINC1jS7eXw 8riaBbRS -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:04 2026 by rpki-client