This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/DCjkvpD_ulnCiu50xRH7vfyj8Z8.roa File: DCjkvpD_ulnCiu50xRH7vfyj8Z8.roa (raw, json) Hash identifier: GhWbmT/ccSmGK7MXgJ3YFU4Byveo2K+FzqXT4zrtxYs= Subject key identifier: 0C:28:E4:BE:90:FF:BA:59:C2:8A:EE:74:C5:11:FB:BD:FC:A3:F1:9F Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab Certificate serial: 019B7910C316F6EB4B9EE48298DD1665C73A Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/DCjkvpD_ulnCiu50xRH7vfyj8Z8.roa Signing time: Thu 01 Jan 2026 10:18:20 +0000 ROA not before: Thu 01 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197782 IP address blocks: 195.160.168.0/23 maxlen: 23 2001:67c:275c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 10:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c3:16:f6:eb:4b:9e:e4:82:98:dd:16:65:c7:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c28e4be90ffba59c28aee74c511fbbdfca3f19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:b8:bf:db:4c:80:b3:5a:a0:f5:a1:4d:b8: af:3d:da:67:c8:0e:0d:03:40:d7:78:2b:73:d3:dd: 89:8f:08:95:f6:e5:66:d3:97:b3:b8:0e:d5:e0:5e: 05:c7:e7:54:57:c4:12:07:93:16:66:03:be:17:bc: 80:8f:77:e8:bf:d0:e1:30:4f:c0:3a:3f:ce:fd:f2: b1:e4:d5:d2:7a:0f:82:e2:84:a0:81:88:f3:eb:06: b0:d4:41:3c:90:f7:4e:bf:5c:b7:1c:62:f0:71:bf: 22:4a:c9:c5:bb:cf:92:ae:6c:e5:a5:1f:5f:24:9e: df:38:ad:e4:dd:81:0d:cc:92:2b:f1:75:fb:a8:c3: fa:3a:84:90:3e:3b:b4:5e:b3:24:a5:db:51:be:45: 8a:af:26:3d:15:75:32:24:7a:c9:e1:4c:cc:8b:d4: 51:51:9a:72:c1:ba:0b:c6:bb:a7:2b:f1:1e:55:ad: be:88:16:9b:df:7a:90:19:00:9f:41:0e:b6:45:23: 97:00:52:3e:c6:bc:e6:97:7e:1d:d4:f2:6b:27:54: a5:a1:68:da:46:bf:72:c6:ee:5b:63:20:66:a3:aa: 98:3f:35:58:c9:62:d2:3e:99:a8:a7:8b:8f:1b:a8: c4:8d:4c:dc:4f:f4:e5:6e:f1:07:70:b2:b6:f4:44: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:E4:BE:90:FF:BA:59:C2:8A:EE:74:C5:11:FB:BD:FC:A3:F1:9F X509v3 Authority Key Identifier: keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/DCjkvpD_ulnCiu50xRH7vfyj8Z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.168.0/23 IPv6: 2001:67c:275c::/48 Signature Algorithm: sha256WithRSAEncryption 4d:3c:48:af:8d:06:78:1b:a9:a5:3e:cc:83:70:28:ff:1f:84: b0:f5:19:28:ad:61:b9:18:65:11:7a:b8:46:fa:ae:45:79:39: 32:57:5b:46:9e:f2:30:46:3d:eb:7f:a2:18:1a:17:d3:bb:50: 82:28:44:84:1d:fd:d3:b5:aa:7e:17:10:67:fc:04:72:a3:7e: 57:d0:7f:cd:cf:7e:f7:7e:b6:40:88:d1:41:d8:45:6c:83:2a: 7d:9a:1d:fb:a9:de:4e:d0:2a:2e:b7:95:ef:4a:13:2c:0d:b6: a4:00:d2:1f:e3:52:47:3d:c2:bb:6b:d3:dd:86:29:6d:74:79: ad:56:bd:2f:1f:fa:fd:b4:37:84:a3:f8:4f:7d:f2:31:2e:f7: 87:37:82:1e:72:5e:de:a3:2e:39:10:7e:d0:0b:fc:34:d3:6c: 27:04:4d:24:ed:bf:3f:0d:e5:33:19:74:8b:d0:4f:15:e6:13: bb:24:ad:fb:97:33:ec:9e:8d:10:e2:78:a9:32:b0:c5:84:23: 40:ca:6c:6d:52:91:a8:e2:42:36:89:1c:a2:40:d9:68:62:d4: 45:f3:7e:38:40:13:ee:88:a2:4b:36:a7:a7:31:0f:2e:61:bf: bd:5f:c3:9f:8b:a7:02:38:1f:84:13:2f:83:62:f1:ec:37:96: 77:0d:e6:2c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EMMW9utLnuSCmN0WZcc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNGZiZTU1OTQ3MDdmZGNmOTQwMjVlYTE1NTcxYTY4YzI0 ZGE5YWIwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzI4ZTRiZTkwZmZiYTU5YzI4YWVlNzRjNTExZmJiZGZjYTNmMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8G4v9tMgLNaoPWhTbivPdpnyA4N A0DXeCtz092JjwiV9uVm05ezuA7V4F4Fx+dUV8QSB5MWZgO+F7yAj3fov9DhME/A Oj/O/fKx5NXSeg+C4oSggYjz6waw1EE8kPdOv1y3HGLwcb8iSsnFu8+SrmzlpR9f JJ7fOK3k3YENzJIr8XX7qMP6OoSQPju0XrMkpdtRvkWKryY9FXUyJHrJ4UzMi9RR UZpywboLxrunK/EeVa2+iBab33qQGQCfQQ62RSOXAFI+xrzml34d1PJrJ1SloWja Rr9yxu5bYyBmo6qYPzVYyWLSPpmop4uPG6jEjUzcT/TlbvEHcLK29ETf7QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAwo5L6Q/7pZworudMUR+738o/GfMB8GA1UdIwQY MBaAFH1PvlWUcH/c+UAl6hVXGmjCTamrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMt N2M3MzA1OTI3OGVmLzEvRENqa3ZwRF91bG5DaXU1MHhSSDd2ZnlqOFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMtN2M3MzA1OTI3OGVm LzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw6CoMA8E AgACMAkDBwAgAQZ8J1wwDQYJKoZIhvcNAQELBQADggEBAE08SK+NBngbqaU+zINw KP8fhLD1GSitYbkYZRF6uEb6rkV5OTJXW0ae8jBGPet/ohgaF9O7UIIoRIQd/dO1 qn4XEGf8BHKjflfQf83Pfvd+tkCI0UHYRWyDKn2aHfup3k7QKi63le9KEywNtqQA 0h/jUkc9wrtr092GKW10ea1WvS8f+v20N4Sj+E998jEu94c3gh5yXt6jLjkQftAL /DTTbCcETSTtvz8N5TMZdIvQTxXmE7skrfuXM+yejRDieKkysMWEI0DKbG1Skaji QjaJHKJA2Whi1EXzfjhAE+6Ioks2p6cxDy5hv71fw5+LpwI4H4QTL4Ni8ew3lncN 5iw= -----END CERTIFICATE-----Generated at Thu Jan 1 19:07:05 2026 by rpki-client