This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/DhAYsKxO8WwtTQM9qN9EaLihdkc.roa File: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (raw, json) Hash identifier: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc= Subject key identifier: 0E:10:18:B0:AC:4E:F1:6C:2D:4D:03:3D:A8:DF:44:68:B8:A1:76:47 Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Certificate serial: 019B797EAED727A7AFC87490FE378DEF6430 Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/DhAYsKxO8WwtTQM9qN9EaLihdkc.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44486 IP address blocks: 62.68.75.0/24 maxlen: 24 2a12:edc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ae:d7:27:a7:af:c8:74:90:fe:37:8d:ef:64:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e1018b0ac4ef16c2d4d033da8df4468b8a17647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:b7:5a:70:3d:41:65:d3:52:d8:fe:50:0d: 5b:6d:4c:2c:9a:69:18:a8:6e:e8:84:82:4b:fa:99: 23:95:ef:7b:65:34:13:49:7a:c0:52:da:e6:6f:0f: 48:6d:5b:5b:63:42:37:aa:8b:c5:06:c3:61:8e:87: fe:b5:a1:9d:f3:c8:a9:1a:b2:81:20:4b:59:0c:d4: 0d:52:7e:b5:f7:fc:b8:70:c7:fe:f5:88:b5:00:fe: df:e7:d4:98:1e:2e:b7:f5:66:e7:7f:e2:2d:7e:c6: 15:dc:22:39:14:87:b9:3b:f1:4b:a7:e3:f0:12:7d: bc:09:ba:15:1b:77:3d:af:f9:10:12:3e:1a:1f:ba: de:cb:60:09:80:63:86:83:ff:bf:b7:4c:d9:b6:21: 50:45:7e:5e:96:f3:6b:13:36:0b:e5:f1:b1:41:fb: 6e:94:24:b8:c8:00:93:f6:af:f6:aa:24:51:9a:54: 52:88:ef:02:2b:4e:7d:9f:2c:30:77:30:92:a1:f2: 46:dc:28:cb:0c:af:60:98:fe:24:92:79:be:2b:06: 2b:e1:f5:01:ea:f9:9f:ce:f4:09:72:04:69:58:20: 6f:ad:08:e6:f7:89:38:a2:fe:22:8d:15:44:f6:de: b6:55:df:5d:7d:94:c8:83:01:60:e1:59:41:f4:fd: 46:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:10:18:B0:AC:4E:F1:6C:2D:4D:03:3D:A8:DF:44:68:B8:A1:76:47 X509v3 Authority Key Identifier: keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/DhAYsKxO8WwtTQM9qN9EaLihdkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.75.0/24 IPv6: 2a12:edc0::/29 Signature Algorithm: sha256WithRSAEncryption 1f:e4:ba:f5:8a:27:56:3d:d9:6a:7b:78:42:6e:84:5d:72:c9: ad:1b:7d:11:c0:20:6a:25:8e:a7:40:38:1a:e7:db:39:f7:9b: ec:af:91:51:ef:48:d3:f0:af:ac:a5:fc:8c:4d:ca:92:70:2b: 53:8b:ce:30:3f:71:8b:50:0b:a4:24:00:8e:c7:22:8b:e2:fa: b6:4b:ab:31:6e:39:c3:95:fb:82:0e:ae:d1:91:43:52:a1:70: 66:37:71:76:6e:4f:bb:b8:00:16:63:61:55:3d:df:24:88:49: 68:a0:6c:28:37:d5:da:17:a0:50:16:20:cb:51:0a:00:33:8d: a8:ee:f6:ca:7d:08:9a:d4:1c:a1:9f:f1:a7:03:a1:19:28:62: 63:99:15:c6:ec:7a:84:07:aa:bf:01:15:c2:1c:c6:8f:26:2b: 6e:60:9c:e2:57:45:d0:1f:81:11:1a:28:8b:70:00:75:b5:0b: f4:31:a9:b2:4f:8b:a1:d2:fd:a8:3b:e2:19:30:4f:6b:59:7c: a9:e5:a6:9a:72:9b:82:88:6d:f8:cd:a2:bf:47:fa:af:c5:f8: d9:24:cd:bf:a2:c8:50:6f:aa:ac:d9:1f:3f:5c:ab:60:31:1e: d7:75:79:df:62:71:15:65:1b:e7:6a:a0:bf:84:8d:a4:17:f5: e3:a5:2b:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fq7XJ6evyHSQ/jeN72QwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1 MmJiOTQwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTEwMThiMGFjNGVmMTZjMmQ0ZDAzM2RhOGRmNDQ2OGI4YTE3NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz823WnA9QWXTUtj+UA1bbUwsmmkY qG7ohIJL+pkjle97ZTQTSXrAUtrmbw9IbVtbY0I3qovFBsNhjof+taGd88ipGrKB IEtZDNQNUn619/y4cMf+9Yi1AP7f59SYHi639Wbnf+ItfsYV3CI5FIe5O/FLp+Pw En28CboVG3c9r/kQEj4aH7rey2AJgGOGg/+/t0zZtiFQRX5elvNrEzYL5fGxQftu lCS4yACT9q/2qiRRmlRSiO8CK059nywwdzCSofJG3CjLDK9gmP4kknm+KwYr4fUB 6vmfzvQJcgRpWCBvrQjm94k4ov4ijRVE9t62Vd9dfZTIgwFg4VlB9P1G4QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA4QGLCsTvFsLU0DPajfRGi4oXZHMB8GA1UdIwQY MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt YmM5MTM0NjZkNDNkLzEvRGhBWXNLeE84V3d0VFFNOXFOOUVhTGloZGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAPkRLMA0E AgACMAcDBQMqEu3AMA0GCSqGSIb3DQEBCwUAA4IBAQAf5Lr1iidWPdlqe3hCboRd csmtG30RwCBqJY6nQDga59s595vsr5FR70jT8K+spfyMTcqScCtTi84wP3GLUAuk JACOxyKL4vq2S6sxbjnDlfuCDq7RkUNSoXBmN3F2bk+7uAAWY2FVPd8kiElooGwo N9XaF6BQFiDLUQoAM42o7vbKfQia1Byhn/GnA6EZKGJjmRXG7HqEB6q/ARXCHMaP JituYJziV0XQH4ERGiiLcAB1tQv0MamyT4uh0v2oO+IZME9rWXyp5aaacpuCiG34 zaK/R/qvxfjZJM2/oshQb6qs2R8/XKtgMR7XdXnfYnEVZRvnaqC/hI2kF/XjpSsl -----END CERTIFICATE-----Generated at Sun Jan 18 08:34:15 2026 by rpki-client