This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/dcTwMDgwodHIo-S4yL4e4K41UJY.roa File: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (raw, json) Hash identifier: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw= Subject key identifier: 75:C4:F0:30:38:30:A1:D1:C8:A3:E4:B8:C8:BE:1E:E0:AE:35:50:96 Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305 Certificate serial: 019B7DCB2E54EDF33BD91C50767903ED7DF5 Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/dcTwMDgwodHIo-S4yL4e4K41UJY.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56841 IP address blocks: 2001:67c:ac8::/48 maxlen: 48 2001:67c:acc::/48 maxlen: 48 2001:67c:ad0::/48 maxlen: 48 2001:67c:2788::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2e:54:ed:f3:3b:d9:1c:50:76:79:03:ed:7d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66501165645aa80dcba315885cf374acb6d21305 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75c4f0303830a1d1c8a3e4b8c8be1ee0ae355096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:b2:58:50:e1:e2:ae:ab:40:a5:12:bc:aa: bc:5b:48:22:44:44:eb:41:8b:b1:2f:55:9d:c1:42: 96:06:29:42:9d:b8:65:35:b7:fa:40:e2:38:67:e3: dd:6e:93:7a:53:11:7e:db:f8:ff:2b:1d:85:a2:88: 83:d8:84:31:d5:7d:3d:94:7c:4a:49:be:8d:25:05: 8c:e0:03:95:90:b8:7b:88:42:17:90:bb:10:5f:eb: f1:7d:d1:42:d0:72:7e:b0:1c:a3:2a:ab:8c:86:35: 62:f5:6b:b2:c8:6a:2f:83:80:fa:95:0c:24:06:28: 4c:ef:9e:ec:51:9b:6e:9f:d8:4b:96:fd:08:f5:87: 05:fc:20:00:a0:f0:4e:f9:02:53:60:c1:9c:17:6b: 6a:7c:be:6c:44:4e:47:50:07:87:45:7e:e9:48:6a: 94:4c:94:92:f1:c5:ef:9a:7d:a1:ca:2d:05:e6:91: 9b:b6:d4:0e:77:89:67:20:cb:06:9e:36:84:1b:51: 2a:91:a0:21:6b:4f:d5:36:5e:e4:15:34:47:9a:74: 85:92:1d:a2:e9:df:f6:6e:44:96:01:6e:76:21:54: bd:6b:69:81:4e:e3:4b:34:36:ad:73:ca:68:61:bf: 9c:07:6d:98:97:8c:db:87:c4:a5:e4:ee:f3:2b:94: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C4:F0:30:38:30:A1:D1:C8:A3:E4:B8:C8:BE:1E:E0:AE:35:50:96 X509v3 Authority Key Identifier: keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/dcTwMDgwodHIo-S4yL4e4K41UJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ac8::/48 2001:67c:acc::/48 2001:67c:ad0::/48 2001:67c:2788::/48 Signature Algorithm: sha256WithRSAEncryption 6c:a7:d7:a5:48:1e:49:5d:6c:f8:b7:99:ed:7d:fa:71:c1:d9: ea:ce:2e:80:6a:b8:ff:c9:cc:1c:97:34:15:77:c5:3a:6d:28: 64:e2:8f:26:7e:2b:80:9a:55:2e:16:78:97:6f:2e:27:12:89: e1:30:b0:a9:cb:b8:12:4b:81:c1:e5:5a:13:41:85:c9:45:23: d9:23:e9:75:d9:b4:da:c0:bf:45:ed:fa:12:fc:75:4b:10:dc: 7d:89:8d:21:e4:42:32:0c:a9:51:cb:ff:c9:71:0a:49:1c:d4: cf:f2:c6:8b:10:01:4a:96:e8:8a:37:cf:57:b2:6a:f8:87:73: 32:cf:fb:85:fe:24:8f:a0:1d:c2:8e:37:bb:c2:d3:3c:6c:ad: a4:10:04:7f:64:47:b1:97:1f:b8:4e:1a:5a:34:3c:2c:c7:6f: 26:ba:96:6a:55:08:bc:cf:f9:7f:ad:ca:32:86:14:69:11:c4: 32:76:bb:02:de:ce:d9:5f:d5:43:b8:cc:c6:fb:ba:a1:ac:7d: f0:bd:00:a2:03:f6:46:15:ff:93:f2:6d:c4:f5:60:5c:71:b3: 9c:43:7c:6c:41:e3:14:c1:68:dc:db:f7:d1:01:bc:ba:cb:af: a2:44:77:05:9f:da:46:72:f7:65:79:60:e4:64:f0:55:a2:2f: de:8b:47:74 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9yy5U7fM72RxQdnkD7X31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk MjEzMDUwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWM0ZjAzMDM4MzBhMWQxYzhhM2U0YjhjOGJlMWVlMGFlMzU1MDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b6yWFDh4q6rQKUSvKq8W0giRETr QYuxL1WdwUKWBilCnbhlNbf6QOI4Z+PdbpN6UxF+2/j/Kx2FooiD2IQx1X09lHxK Sb6NJQWM4AOVkLh7iEIXkLsQX+vxfdFC0HJ+sByjKquMhjVi9WuyyGovg4D6lQwk BihM757sUZtun9hLlv0I9YcF/CAAoPBO+QJTYMGcF2tqfL5sRE5HUAeHRX7pSGqU TJSS8cXvmn2hyi0F5pGbttQOd4lnIMsGnjaEG1EqkaAha0/VNl7kFTRHmnSFkh2i 6d/2bkSWAW52IVS9a2mBTuNLNDatc8poYb+cB22Yl4zbh8Sl5O7zK5STBQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHXE8DA4MKHRyKPkuMi+HuCuNVCWMB8GA1UdIwQY MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt MWQwMjBlY2UwN2VhLzEvZGNUd01EZ3dvZEhJby1TNHlMNGU0SzQxVUpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGfArI AwcAIAEGfArMAwcAIAEGfArQAwcAIAEGfCeIMA0GCSqGSIb3DQEBCwUAA4IBAQBs p9elSB5JXWz4t5ntffpxwdnqzi6Aarj/ycwclzQVd8U6bShk4o8mfiuAmlUuFniX by4nEonhMLCpy7gSS4HB5VoTQYXJRSPZI+l12bTawL9F7foS/HVLENx9iY0h5EIy DKlRy//JcQpJHNTP8saLEAFKluiKN89Xsmr4h3Myz/uF/iSPoB3Cjje7wtM8bK2k EAR/ZEexlx+4ThpaNDwsx28mupZqVQi8z/l/rcoyhhRpEcQydrsC3s7ZX9VDuMzG +7qhrH3wvQCiA/ZGFf+T8m3E9WBccbOcQ3xsQeMUwWjc2/fRAby6y6+iRHcFn9pG cvdleWDkZPBVoi/ei0d0 -----END CERTIFICATE-----Generated at Mon Jan 12 09:54:38 2026 by rpki-client