This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/dYPKia158SIrrNF4l9j5f3SItUA.roa File: dYPKia158SIrrNF4l9j5f3SItUA.roa (raw, json) Hash identifier: /mvbSwmPXlWJfBXD/fmkRZb24RyV5+E4SIG3bbAtRas= Subject key identifier: 75:83:CA:89:AD:79:F1:22:2B:AC:D1:78:97:D8:F9:7F:74:88:B5:40 Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a Certificate serial: 019B79ECCCAF83B8A02A6C5F3AF450811F71 Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/dYPKia158SIrrNF4l9j5f3SItUA.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12792 IP address blocks: 2a09:f040::/29 maxlen: 29 2a0b:2fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cc:af:83:b8:a0:2a:6c:5f:3a:f4:50:81:1f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7583ca89ad79f1222bacd17897d8f97f7488b540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:5e:e4:5a:85:c2:75:db:d1:91:5e:de:df: dc:1d:74:9f:8b:b3:cf:04:f8:d4:e8:94:b9:ac:08: 5a:06:4e:66:91:ed:98:07:fa:89:9f:88:b7:2c:86: 9e:3a:91:6d:f3:a1:cb:a2:69:3f:5b:b8:13:81:a1: 2b:68:84:af:eb:50:75:b5:2c:e5:5e:d6:f1:fd:00: 3c:f5:dc:11:19:bb:f0:2b:28:bc:94:ff:a6:23:7b: 23:4b:42:b0:cd:6b:d9:14:f2:1e:68:89:39:6d:86: 87:60:b4:b6:1b:db:ba:77:81:d2:08:dc:fc:bb:3e: a8:7a:1c:02:af:c6:cb:6d:7d:26:bd:53:c2:a3:ac: 24:69:2b:82:0f:8b:1e:63:7d:17:f7:bc:d8:fe:49: 7a:cb:47:36:64:14:42:db:98:49:f1:95:51:a9:59: 97:ea:38:c1:62:28:8b:d1:f9:bf:ea:05:86:a4:df: 2a:44:5b:31:12:df:46:91:32:cb:18:62:a1:a9:8e: 8f:dd:49:c3:ee:6a:fb:3a:63:41:14:80:28:14:d9: ca:2a:13:f0:46:30:ab:c0:64:00:9c:88:f3:16:58: a0:4b:b9:b2:1f:19:fd:61:e4:f5:53:28:94:a0:37: 3c:73:8d:e7:5e:0d:c4:60:4d:75:76:8a:c8:97:31: c8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:83:CA:89:AD:79:F1:22:2B:AC:D1:78:97:D8:F9:7F:74:88:B5:40 X509v3 Authority Key Identifier: keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/dYPKia158SIrrNF4l9j5f3SItUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:f040::/29 2a0b:2fc0::/29 Signature Algorithm: sha256WithRSAEncryption bd:11:06:75:2e:60:f9:c1:49:bc:1f:cd:5e:4c:ad:ef:a7:8a: 1b:14:f3:70:34:b1:e9:c5:9b:c7:f5:6c:71:99:86:22:33:42: 2a:4a:a8:26:c4:56:da:9e:7a:77:43:53:a5:5a:73:f6:05:db: 2a:d6:fa:bb:0d:52:59:28:66:dc:76:d7:4d:0e:9a:f8:a4:a2: 64:d7:ef:31:d4:78:04:77:00:f4:a6:92:88:83:44:6f:93:a8: a7:b0:e9:09:76:8d:e3:6c:cf:db:be:d3:ad:4e:b6:f9:83:97: b6:5c:c9:a6:ac:14:92:c2:78:67:ed:91:9e:da:c9:3e:36:41: 08:a8:be:86:d2:dc:0d:22:01:1a:27:de:43:d8:c4:07:8e:46: da:57:4a:95:7a:ec:9c:6a:9b:12:c1:a1:5c:50:b5:2a:41:f9: ad:6d:6d:13:c3:37:7f:d1:f8:9b:87:f0:04:81:ad:ee:64:ff: 09:7b:b4:09:e3:15:53:71:b9:93:a4:b3:06:41:0a:da:bd:4f: 6b:e0:2c:e6:10:df:8e:8f:1c:45:db:c6:9c:67:ad:28:11:a5: 97:3f:50:73:db:73:f8:6a:c4:b5:d5:1c:9d:a3:2e:b7:a2:6e: b9:3c:77:fb:07:14:49:b9:9e:92:78:bc:af:fa:3e:77:e0:77: b4:e0:5c:a4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57Myvg7igKmxfOvRQgR9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx NDAzOGEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTgzY2E4OWFkNzlmMTIyMmJhY2QxNzg5N2Q4Zjk3Zjc0ODhiNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKJe5FqFwnXb0ZFe3t/cHXSfi7PP BPjU6JS5rAhaBk5mke2YB/qJn4i3LIaeOpFt86HLomk/W7gTgaEraISv61B1tSzl Xtbx/QA89dwRGbvwKyi8lP+mI3sjS0KwzWvZFPIeaIk5bYaHYLS2G9u6d4HSCNz8 uz6oehwCr8bLbX0mvVPCo6wkaSuCD4seY30X97zY/kl6y0c2ZBRC25hJ8ZVRqVmX 6jjBYiiL0fm/6gWGpN8qRFsxEt9GkTLLGGKhqY6P3UnD7mr7OmNBFIAoFNnKKhPw RjCrwGQAnIjzFligS7myHxn9YeT1UyiUoDc8c43nXg3EYE11dorIlzHI9QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHWDyomtefEiK6zReJfY+X90iLVAMB8GA1UdIwQY MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt MmE1ZTk4YWJkMWYzLzEvZFlQS2lhMTU4U0lyck5GNGw5ajVmM1NJdFVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgnwQAMF AyoLL8AwDQYJKoZIhvcNAQELBQADggEBAL0RBnUuYPnBSbwfzV5Mre+nihsU83A0 senFm8f1bHGZhiIzQipKqCbEVtqeendDU6Vac/YF2yrW+rsNUlkoZtx2100Omvik omTX7zHUeAR3APSmkoiDRG+TqKew6Ql2jeNsz9u+061OtvmDl7ZcyaasFJLCeGft kZ7ayT42QQiovobS3A0iARon3kPYxAeORtpXSpV67JxqmxLBoVxQtSpB+a1tbRPD N3/R+JuH8ASBre5k/wl7tAnjFVNxuZOkswZBCtq9T2vgLOYQ346PHEXbxpxnrSgR pZc/UHPbc/hqxLXVHJ2jLreibrk8d/sHFEm5npJ4vK/6Pnfgd7TgXKQ= -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:08 2026 by rpki-client