This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa File: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (raw, json) Hash identifier: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE= Subject key identifier: 0C:2A:A4:FC:88:50:E0:54:A2:13:F2:BD:A0:3D:B6:0D:5F:05:6B:16 Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Certificate serial: 019B77C73C9B68F873B38BBA14A916878EC9 Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 46.183.64.0/21 maxlen: 21 2a0b:c180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3c:9b:68:f8:73:b3:8b:ba:14:a9:16:87:8e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c2aa4fc8850e054a213f2bda03db60d5f056b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:30:00:a5:d1:c5:17:f6:81:09:28:67:b8: 63:fd:d9:8a:42:8c:f1:fe:fb:3d:4d:c0:d8:6a:57: 67:d8:1b:9f:f4:29:0a:22:af:d5:4b:06:9f:2a:44: 7b:e5:f2:30:95:3a:00:ec:3c:ed:74:b3:73:95:9d: f3:4c:ee:01:81:73:dd:5a:72:7b:b1:e6:58:51:be: 09:42:e7:94:ea:a5:71:3a:f3:28:5d:51:36:ea:2c: 79:09:be:b0:c7:0e:59:81:d3:fa:70:20:74:e7:ed: aa:dc:68:2c:22:a7:f6:5b:49:99:21:a8:8b:17:6f: bd:49:4c:22:95:71:d8:2b:f4:6a:98:1b:63:37:04: 69:c5:3a:3f:f9:34:52:55:16:5c:99:10:8a:20:9c: fa:ed:34:f6:bb:58:7a:f2:9a:b8:3b:da:15:9b:29: 7b:6d:52:b0:67:c6:06:46:35:eb:4f:dd:8c:3c:41: 46:ca:1a:0d:f2:90:7f:b3:b2:6f:c8:0b:63:4d:c6: 13:96:dd:cb:f1:d5:dc:6f:7a:86:bf:01:8f:9a:e5: 7d:cb:4a:3c:3e:20:66:cb:3c:d4:be:6c:62:85:cc: c7:3e:b6:60:66:2b:3c:33:b9:58:89:ee:12:22:f7: 6c:97:8b:2b:3f:b7:b4:4e:d6:43:e8:0d:6d:a9:a0: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2A:A4:FC:88:50:E0:54:A2:13:F2:BD:A0:3D:B6:0D:5F:05:6B:16 X509v3 Authority Key Identifier: keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.64.0/21 IPv6: 2a0b:c180::/32 Signature Algorithm: sha256WithRSAEncryption 5d:39:57:00:9f:07:69:e3:55:36:09:42:2c:2c:92:76:46:e9: 2e:82:15:c4:3d:bd:3f:81:1d:9e:fa:ab:fc:6a:36:0e:b3:92: 7c:44:8f:22:1f:f2:6a:4c:c5:36:ac:04:11:f4:23:af:3f:0b: bc:0b:6c:5c:12:fd:1a:23:5e:f9:12:66:04:05:7f:54:6e:17: 1f:f8:06:57:31:13:a4:18:fc:1c:46:e0:bd:52:d3:b4:c6:58: 2b:71:16:90:09:5c:4a:3d:ff:8d:3e:9e:48:a2:c4:94:8e:ff: 1e:79:17:c1:bd:12:8c:b1:10:17:08:a6:30:97:16:34:7c:22: 58:e7:2f:3b:af:c3:a5:c7:c3:7d:07:8a:9d:61:a5:e5:c6:f5: 4f:49:6d:7f:4a:3a:98:6d:d2:df:d3:0a:af:16:f6:49:10:be: b3:92:17:16:8d:9e:82:1f:df:10:87:fe:1d:c2:c1:a5:f1:d8: 02:38:99:45:0a:7c:c2:01:c2:0b:dd:65:09:cb:3c:f0:45:29: 3c:24:0c:d7:09:1b:36:a4:54:1c:6d:ba:da:2b:d3:50:5e:d5: 8a:3e:59:cf:1a:73:8f:93:2c:78:9b:af:9b:5e:10:38:b4:38: eb:e8:3b:e6:4f:53:1f:8a:f7:8d:96:df:a5:46:50:2e:37:64: 67:fa:c0:78 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xzybaPhzs4u6FKkWh47JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy ZWE3NTYwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzJhYTRmYzg4NTBlMDU0YTIxM2YyYmRhMDNkYjYwZDVmMDU2YjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg4wAKXRxRf2gQkoZ7hj/dmKQozx /vs9TcDYaldn2Buf9CkKIq/VSwafKkR75fIwlToA7DztdLNzlZ3zTO4BgXPdWnJ7 seZYUb4JQueU6qVxOvMoXVE26ix5Cb6wxw5ZgdP6cCB05+2q3GgsIqf2W0mZIaiL F2+9SUwilXHYK/RqmBtjNwRpxTo/+TRSVRZcmRCKIJz67TT2u1h68pq4O9oVmyl7 bVKwZ8YGRjXrT92MPEFGyhoN8pB/s7JvyAtjTcYTlt3L8dXcb3qGvwGPmuV9y0o8 PiBmyzzUvmxihczHPrZgZis8M7lYie4SIvdsl4srP7e0TtZD6A1tqaAlGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAwqpPyIUOBUohPyvaA9tg1fBWsWMB8GA1UdIwQY MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt ZjJlNTRkZGVhM2IzLzEvRENxa19JaFE0RlNpRV9LOW9EMjJEVjhGYXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLrdAMA0E AgACMAcDBQAqC8GAMA0GCSqGSIb3DQEBCwUAA4IBAQBdOVcAnwdp41U2CUIsLJJ2 RukughXEPb0/gR2e+qv8ajYOs5J8RI8iH/JqTMU2rAQR9COvPwu8C2xcEv0aI175 EmYEBX9Ubhcf+AZXMROkGPwcRuC9UtO0xlgrcRaQCVxKPf+NPp5IosSUjv8eeRfB vRKMsRAXCKYwlxY0fCJY5y87r8Olx8N9B4qdYaXlxvVPSW1/SjqYbdLf0wqvFvZJ EL6zkhcWjZ6CH98Qh/4dwsGl8dgCOJlFCnzCAcIL3WUJyzzwRSk8JAzXCRs2pFQc bbraK9NQXtWKPlnPGnOPkyx4m6+bXhA4tDjr6DvmT1MfiveNlt+lRlAuN2Rn+sB4 -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:47 2026 by rpki-client