This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Dpgo4cDU1mscMX_CBOiypw89lis.roa File: Dpgo4cDU1mscMX_CBOiypw89lis.roa (raw, json) Hash identifier: 8mfwVN6lhdlH9CLh9R1lsuHG76iz8iY1mnvSJDuNBqo= Subject key identifier: 0E:98:28:E1:C0:D4:D6:6B:1C:31:7F:C2:04:E8:B2:A7:0F:3D:96:2B Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Certificate serial: 019B7E38B8F0A246426B545470F0693C3218 Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Dpgo4cDU1mscMX_CBOiypw89lis.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209718 IP address blocks: 2001:678:c44::/48 maxlen: 48 2001:678:c6c::/48 maxlen: 48 2001:67c:e7c::/48 maxlen: 48 2001:67c:2908::/48 maxlen: 48 2001:67c:2ea8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b8:f0:a2:46:42:6b:54:54:70:f0:69:3c:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e9828e1c0d4d66b1c317fc204e8b2a70f3d962b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:ff:7a:98:3f:66:7d:94:ea:37:f1:6a:4a: 01:99:20:c2:2c:88:4d:2f:eb:1f:e5:ac:71:20:47: 98:f9:f1:84:79:94:d8:20:5c:67:6b:45:af:4f:88: 30:69:d1:63:d4:39:91:51:40:77:53:d0:ba:ff:a6: 2e:9f:a6:01:da:11:8d:11:49:ac:49:9c:bf:e3:cf: 74:4f:27:8b:02:82:5b:3b:fd:24:dd:13:5b:96:c9: 06:be:41:97:bf:71:67:6a:42:ad:6f:af:38:b5:ee: c5:fb:02:fa:58:2e:84:29:37:f8:ad:32:64:1c:16: b4:0c:60:87:1d:19:72:64:87:d2:cf:1d:43:27:71: b3:b6:a6:be:2a:f3:c8:86:bc:2f:b5:a0:d9:18:20: a0:a3:f8:aa:00:aa:8e:7e:0f:ef:e0:cf:97:af:5f: 0c:90:a4:71:39:90:a4:cb:7f:e1:51:14:cb:10:93: bd:a0:b4:20:43:32:d6:44:60:62:a5:44:9e:d4:fd: c1:bd:d3:24:c6:88:1d:ba:00:66:c1:d6:ef:19:3c: 4b:62:de:f6:31:c1:63:2a:1b:13:c1:35:fb:8d:3e: a5:7c:51:08:d8:a8:1f:ec:e1:69:b9:bf:d5:4b:8b: 17:47:f4:ec:da:72:3c:5a:89:b7:27:a2:a0:d5:4a: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:98:28:E1:C0:D4:D6:6B:1C:31:7F:C2:04:E8:B2:A7:0F:3D:96:2B X509v3 Authority Key Identifier: keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Dpgo4cDU1mscMX_CBOiypw89lis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c44::/48 2001:678:c6c::/48 2001:67c:e7c::/48 2001:67c:2908::/48 2001:67c:2ea8::/48 Signature Algorithm: sha256WithRSAEncryption 09:e2:c5:37:3d:3d:fe:d3:9a:ce:1a:fc:dc:7e:ae:0f:98:78: 95:25:72:f5:a9:c6:17:48:30:c2:37:7b:fd:8c:8b:df:75:31: 9e:da:fc:74:29:93:73:38:ad:e8:d2:b6:14:6b:82:89:cb:d4: 0d:ba:13:7a:48:f6:bf:2f:b4:8c:5d:a5:07:7b:3c:d6:e8:64: 53:4f:6c:3f:43:c8:f3:12:f4:23:02:73:62:31:a2:97:13:3a: 41:d5:d7:97:6c:dd:37:b6:4f:40:c8:6e:80:1e:ea:74:92:d7: 2a:c5:db:01:4d:05:0d:77:89:a2:7d:46:c4:8d:9d:75:af:fe: 7b:9e:cd:41:18:05:13:39:5e:49:43:ab:dc:44:1c:f3:8c:8c: 20:53:e5:26:5c:2b:ef:bd:c4:f0:71:55:f5:ce:50:ad:9c:07: 85:e8:e8:34:b7:d7:0a:9b:8e:37:fd:b4:54:f8:ce:e3:b2:55: 3b:0d:bf:6d:4b:83:2c:89:57:71:62:9f:9a:8b:bb:6b:45:d7: e0:41:19:b3:bd:cb:b8:14:05:dd:df:61:96:3a:c4:47:3b:bd: 55:b5:2e:1f:b0:22:51:40:77:4d:37:ce:4e:a7:11:8f:34:2c: 1d:4b:76:e6:19:d1:4c:be:57:e4:58:19:b5:18:0a:a4:8d:b5: 4a:bf:a4:93 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+OLjwokZCa1RUcPBpPDIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWYxNGI2N2UwNTFjZmJkNWUxYjFkNTE2OTNkNDQ2ODIz OTI3OTIwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTk4MjhlMWMwZDRkNjZiMWMzMTdmYzIwNGU4YjJhNzBmM2Q5NjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcT/epg/Zn2U6jfxakoBmSDCLIhN L+sf5axxIEeY+fGEeZTYIFxna0WvT4gwadFj1DmRUUB3U9C6/6Yun6YB2hGNEUms SZy/4890TyeLAoJbO/0k3RNblskGvkGXv3FnakKtb684te7F+wL6WC6EKTf4rTJk HBa0DGCHHRlyZIfSzx1DJ3Gztqa+KvPIhrwvtaDZGCCgo/iqAKqOfg/v4M+Xr18M kKRxOZCky3/hURTLEJO9oLQgQzLWRGBipUSe1P3BvdMkxogdugBmwdbvGTxLYt72 McFjKhsTwTX7jT6lfFEI2Kgf7OFpub/VS4sXR/Ts2nI8Wom3J6Kg1Urp3wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFA6YKOHA1NZrHDF/wgTosqcPPZYrMB8GA1UdIwQY MBaAFE6vFLZ+BRz71eGx1RaT1EaCOSeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQt YmQ1MTJlZDU4Zjc4LzEvRHBnbzRjRFUxbXNjTVhfQ0JPaXlwdzg5bGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQtYmQ1MTJlZDU4Zjc4 LzEvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAIAEGeAxE AwcAIAEGeAxsAwcAIAEGfA58AwcAIAEGfCkIAwcAIAEGfC6oMA0GCSqGSIb3DQEB CwUAA4IBAQAJ4sU3PT3+05rOGvzcfq4PmHiVJXL1qcYXSDDCN3v9jIvfdTGe2vx0 KZNzOK3o0rYUa4KJy9QNuhN6SPa/L7SMXaUHezzW6GRTT2w/Q8jzEvQjAnNiMaKX EzpB1deXbN03tk9AyG6AHup0ktcqxdsBTQUNd4mifUbEjZ11r/57ns1BGAUTOV5J Q6vcRBzzjIwgU+UmXCvvvcTwcVX1zlCtnAeF6Og0t9cKm443/bRU+M7jslU7Db9t S4MsiVdxYp+ai7trRdfgQRmzvcu4FAXd32GWOsRHO71VtS4fsCJRQHdNN85OpxGP NCwdS3bmGdFMvlfkWBm1GAqkjbVKv6ST -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:42 2026 by rpki-client