This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/daN1af44TDD-5KyCb7G5K92Gjfw.roa File: daN1af44TDD-5KyCb7G5K92Gjfw.roa (raw, json) Hash identifier: nddT0RY/8zIawPlYsyuteqH1tjgTi4pAyBRBnbLn5ts= Subject key identifier: 75:A3:75:69:FE:38:4C:30:FE:E4:AC:82:6F:B1:B9:2B:DD:86:8D:FC Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019B6C6F1493FC3E440B951B2B317A5648E2 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/daN1af44TDD-5KyCb7G5K92Gjfw.roa Signing time: Mon 29 Dec 2025 23:26:17 +0000 ROA not before: Mon 29 Dec 2025 23:26:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31130 IP address blocks: 2001:3785::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:6f:14:93:fc:3e:44:0b:95:1b:2b:31:7a:56:48:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Dec 29 23:26:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75a37569fe384c30fee4ac826fb1b92bdd868dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:76:ef:e0:34:32:f8:44:8e:0e:dd:ba:e7: 00:fa:1f:f8:70:59:db:39:23:a2:8c:96:8a:c5:3a: fb:46:c0:20:7f:03:0b:54:bf:40:b9:3b:c4:83:0c: 44:0b:94:66:31:90:00:da:00:6b:e3:24:df:66:7f: af:30:6b:a6:57:8d:ea:0f:1c:a9:ff:40:0a:e0:ee: 7c:c1:99:c4:18:5b:b8:66:94:5b:b7:14:8e:6b:d9: d3:96:7d:53:45:df:1f:58:e8:7d:dd:d8:1e:26:87: b7:82:46:d8:23:78:3d:cb:c6:d8:45:a9:c7:e0:de: 0c:04:8d:5b:8b:11:1f:bf:74:45:98:fe:f0:cd:ad: f8:21:85:0f:23:66:2c:56:5b:27:04:8a:d1:13:96: 68:af:0d:ef:7f:ee:fa:ce:35:0f:74:6e:95:a8:83: 41:88:0e:cc:e2:b8:9b:c5:5f:43:11:74:59:8f:ac: e6:5c:0a:8b:59:15:76:d1:1f:d3:2d:07:de:67:28: 52:86:e6:3f:37:46:cc:0b:e7:6d:a1:c1:f1:b3:f5: 4d:d2:11:e8:75:7d:c0:13:2b:ca:98:4f:97:7e:7c: fa:34:01:23:f7:17:1d:0c:74:ba:29:93:a8:24:ec: f1:62:59:7a:9f:48:5b:49:1d:64:76:7d:4d:38:4a: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A3:75:69:FE:38:4C:30:FE:E4:AC:82:6F:B1:B9:2B:DD:86:8D:FC X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/daN1af44TDD-5KyCb7G5K92Gjfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3785::/32 Signature Algorithm: sha256WithRSAEncryption 11:62:2f:64:b9:cf:e1:02:f2:6d:3f:1d:ad:65:5b:49:2b:7e: 54:c1:a5:6d:ed:ad:d6:95:a7:39:94:16:e9:f4:05:eb:86:7c: 22:1b:f0:74:c6:9c:8f:5a:7a:75:66:e0:c8:b4:74:2d:dc:f8: 4a:bd:5c:b6:49:9c:29:4c:ad:5b:e1:b3:bc:c6:ca:d2:27:ec: e6:23:cb:28:bf:96:13:b5:68:d4:2a:fa:8c:02:2a:ac:17:a7: f6:63:15:6c:f9:42:a0:c6:ef:f5:42:5e:50:57:35:21:92:14: 0e:df:eb:a8:dd:75:a2:9f:a1:8a:a9:18:2a:5c:d0:8b:19:1f: e5:95:22:d7:26:bb:be:bd:58:70:3b:10:a7:7c:40:62:c2:ab: 2b:de:4a:b6:45:cf:91:97:b7:68:62:99:1a:10:4b:17:67:4f: 06:21:f8:5b:25:d7:8c:4b:02:a6:8d:80:c9:2f:ee:c7:40:93: 38:aa:42:a0:c8:b1:ec:9c:db:a5:31:7e:ad:23:b0:66:ce:d6: e4:92:3d:55:e0:0b:6a:cb:90:c8:e7:71:1a:c8:a1:83:20:25: 80:a0:7b:f2:5e:fd:bb:34:91:94:9f:61:b5:08:3f:b2:27:20: cf:72:27:2b:38:f5:dd:42:9a:85:fd:89:99:ee:dc:68:09:ff: 85:50:a3:9b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZtsbxST/D5EC5UbKzF6VkjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjUxMjI5MjMyNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWEzNzU2OWZlMzg0YzMwZmVlNGFjODI2ZmIxYjkyYmRkODY4ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVx27+A0MvhEjg7duucA+h/4cFnb OSOijJaKxTr7RsAgfwMLVL9AuTvEgwxEC5RmMZAA2gBr4yTfZn+vMGumV43qDxyp /0AK4O58wZnEGFu4ZpRbtxSOa9nTln1TRd8fWOh93dgeJoe3gkbYI3g9y8bYRanH 4N4MBI1bixEfv3RFmP7wza34IYUPI2YsVlsnBIrRE5Zorw3vf+76zjUPdG6VqINB iA7M4ribxV9DEXRZj6zmXAqLWRV20R/TLQfeZyhShuY/N0bMC+dtocHxs/VN0hHo dX3AEyvKmE+Xfnz6NAEj9xcdDHS6KZOoJOzxYll6n0hbSR1kdn1NOEqO6QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHWjdWn+OEww/uSsgm+xuSvdho38MB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvZGFOMWFmNDRUREQtNUt5Q2I3RzVLOTJHamZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAE3hTAN BgkqhkiG9w0BAQsFAAOCAQEAEWIvZLnP4QLybT8drWVbSSt+VMGlbe2t1pWnOZQW 6fQF64Z8IhvwdMacj1p6dWbgyLR0Ldz4Sr1ctkmcKUytW+GzvMbK0ifs5iPLKL+W E7Vo1Cr6jAIqrBen9mMVbPlCoMbv9UJeUFc1IZIUDt/rqN11op+hiqkYKlzQixkf 5ZUi1ya7vr1YcDsQp3xAYsKrK95KtkXPkZe3aGKZGhBLF2dPBiH4WyXXjEsCpo2A yS/ux0CTOKpCoMix7JzbpTF+rSOwZs7W5JI9VeALasuQyOdxGsihgyAlgKB78l79 uzSRlJ9htQg/sicgz3InKzj13UKahf2Jme7caAn/hVCjmw== -----END CERTIFICATE-----Generated at Wed Dec 31 10:42:00 2025 by rpki-client