This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/DPy9szbNMOQKof88htrB5gYXHg8.roa File: DPy9szbNMOQKof88htrB5gYXHg8.roa (raw, json) Hash identifier: KpMcLwZt2U9k9KODAobx45vqz6G1VYYTX/rJeTqqTFA= Subject key identifier: 0C:FC:BD:B3:36:CD:30:E4:0A:A1:FF:3C:86:DA:C1:E6:06:17:1E:0F Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA558855B1633993B11E59B7FD282E5 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/DPy9szbNMOQKof88htrB5gYXHg8.roa Signing time: Fri 02 Jan 2026 12:18:43 +0000 ROA not before: Fri 02 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199297 IP address blocks: 2a10:4646:430::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:58:85:5b:16:33:99:3b:11:e5:9b:7f:d2:82:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cfcbdb336cd30e40aa1ff3c86dac1e606171e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:74:55:c4:a4:c9:af:05:9f:46:9b:6b:9d: 4f:0c:e3:61:0d:f5:18:1c:96:be:c9:0d:cb:24:c2: 67:8e:9b:7a:3d:e3:de:04:3b:d0:c5:94:cb:bd:f7: a5:9f:ac:ff:b8:e6:83:f9:be:f8:bc:3f:a2:f9:00: 35:6a:78:0c:b3:cc:65:eb:4b:df:c8:13:7c:07:88: b4:48:01:7e:1c:4d:78:b8:08:64:25:a4:bb:ac:ff: 1c:5c:4a:58:cb:d8:5c:7f:b6:b2:1a:88:48:1b:82: 7c:4f:3b:01:1b:e8:29:14:62:53:00:db:66:e0:17: fe:03:e5:be:ab:4f:76:47:2b:b4:e0:0d:fe:81:11: 23:aa:20:93:16:7f:ba:8c:1c:85:8a:95:10:58:91: bf:42:6e:7c:0c:3d:05:77:d6:84:95:a3:9a:f0:94: 23:89:ec:d0:16:97:90:30:9c:37:fb:8f:89:f2:d1: aa:1c:4c:b3:59:c8:87:7e:df:2e:6c:e6:fe:73:39: bb:a0:b4:de:05:53:0d:b2:26:f7:d2:7f:de:6d:9f: 85:e2:32:8d:be:2f:78:71:6d:fc:af:8a:1c:67:08: 8e:85:ca:17:6d:44:77:95:f4:96:26:20:6f:bf:a8: 62:83:05:14:0d:e3:d8:fa:3d:b0:d7:09:e7:2f:82: 8f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FC:BD:B3:36:CD:30:E4:0A:A1:FF:3C:86:DA:C1:E6:06:17:1E:0F X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/DPy9szbNMOQKof88htrB5gYXHg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:430::/44 Signature Algorithm: sha256WithRSAEncryption cd:0d:80:fc:59:bb:df:0a:e5:c4:d7:67:c2:05:20:41:87:1b: ed:25:5a:2f:3c:7f:08:14:1a:61:ea:67:ae:6b:a2:af:92:b6: f8:29:b8:0e:c9:db:87:c4:9c:f5:a6:c2:65:a9:b0:eb:21:c1: 6b:b8:00:ea:1c:d9:55:41:3d:30:02:05:a1:2f:d1:28:40:9c: e1:12:0f:fa:be:ee:49:6c:a4:50:5b:65:54:46:c1:89:b4:6c: e3:82:18:ea:2b:3b:0c:71:e3:1c:0a:69:48:eb:4a:56:48:6a: 52:8e:65:58:2a:45:67:91:f9:d9:ae:6f:76:69:bd:db:68:34: 21:e9:69:47:d8:74:97:07:c0:22:5c:dd:80:c9:8a:3f:26:d9: ad:16:94:72:1c:1c:ba:1e:d3:66:21:da:88:35:dc:be:f6:43: 47:f1:06:79:44:34:00:c2:71:76:84:74:02:bf:e1:de:ed:60: b4:c4:cf:c7:e6:0e:19:8f:90:1a:9f:91:87:f0:4a:4e:f3:be: 3e:84:62:7e:6c:9f:a7:77:3e:83:eb:5b:a2:2c:6d:99:c6:15: 9a:bb:74:28:49:39:91:48:92:25:1d:6c:6c:8c:0c:c0:3d:7e: 69:99:42:35:8c:06:71:b4:55:c4:1a:18:48:4f:27:50:eb:71: fe:18:e3:ba -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pViFWxYzmTsR5Zt/0oLlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2ZjYmRiMzM2Y2QzMGU0MGFhMWZmM2M4NmRhYzFlNjA2MTcxZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGd0VcSkya8Fn0aba51PDONhDfUY HJa+yQ3LJMJnjpt6PePeBDvQxZTLvfeln6z/uOaD+b74vD+i+QA1angMs8xl60vf yBN8B4i0SAF+HE14uAhkJaS7rP8cXEpYy9hcf7ayGohIG4J8TzsBG+gpFGJTANtm 4Bf+A+W+q092Ryu04A3+gREjqiCTFn+6jByFipUQWJG/Qm58DD0Fd9aElaOa8JQj iezQFpeQMJw3+4+J8tGqHEyzWciHft8ubOb+czm7oLTeBVMNsib30n/ebZ+F4jKN vi94cW38r4ocZwiOhcoXbUR3lfSWJiBvv6higwUUDePY+j2w1wnnL4KP/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAz8vbM2zTDkCqH/PIbaweYGFx4PMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvRFB5OXN6Yk5NT1FLb2Y4OGh0ckI1Z1lYSGc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgQw MA0GCSqGSIb3DQEBCwUAA4IBAQDNDYD8WbvfCuXE12fCBSBBhxvtJVovPH8IFBph 6meua6Kvkrb4KbgOyduHxJz1psJlqbDrIcFruADqHNlVQT0wAgWhL9EoQJzhEg/6 vu5JbKRQW2VURsGJtGzjghjqKzsMceMcCmlI60pWSGpSjmVYKkVnkfnZrm92ab3b aDQh6WlH2HSXB8AiXN2AyYo/JtmtFpRyHBy6HtNmIdqINdy+9kNH8QZ5RDQAwnF2 hHQCv+He7WC0xM/H5g4Zj5Aan5GH8EpO874+hGJ+bJ+ndz6D61uiLG2ZxhWau3Qo STmRSJIlHWxsjAzAPX5pmUI1jAZxtFXEGhhITydQ63H+GOO6 -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:23 2026 by rpki-client