This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dy12ueox4iemeyny5vY-mZAduiI.roa File: Dy12ueox4iemeyny5vY-mZAduiI.roa (raw, json) Hash identifier: TlSFsuGfZ5d+gxSWEzsL9O69Jb3O/hSnK0ssg9X6n9c= Subject key identifier: 0F:2D:76:B9:EA:31:E2:27:A6:7B:29:F2:E6:F6:3E:99:90:1D:BA:22 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DC40381392AF9C7FAFC7DDC9E716 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dy12ueox4iemeyny5vY-mZAduiI.roa Signing time: Thu 01 Jan 2026 18:19:02 +0000 ROA not before: Thu 01 Jan 2026 18:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15890 IP address blocks: 2a00:ec83::/32 maxlen: 32 2a04:800:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:dc:40:38:13:92:af:9c:7f:af:c7:dd:c9:e7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f2d76b9ea31e227a67b29f2e6f63e99901dba22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:ff:c5:9f:22:c4:7e:c7:69:5a:3a:a7:d1: d1:f4:23:68:a0:17:1e:58:0e:73:85:95:ea:0f:b4: 3a:26:f6:0a:6c:32:cd:bf:b6:09:40:73:08:97:f5: 81:65:86:d5:ec:fb:e9:81:9c:bd:bd:62:77:b9:c0: 47:6c:a1:6b:bb:f8:01:af:d1:b7:17:83:00:75:da: a1:5a:15:01:ab:6d:7b:73:85:e7:ac:69:0b:ad:19: 85:51:db:69:99:4f:d8:9a:81:af:c8:05:0e:a8:b4: 0e:77:dc:dc:d1:02:a3:d8:46:99:2c:bc:25:9b:f2: 40:da:6a:6b:fd:96:b9:42:f3:15:53:a9:c7:bd:90: 82:40:f7:5e:e8:7a:f9:fa:83:40:6c:26:52:17:fd: c1:7b:80:fa:f5:fe:55:b1:97:83:cc:1b:52:8a:a8: 0a:2d:18:ba:5d:45:f2:e9:73:ff:42:93:40:06:e7: 94:4c:8b:8b:ad:1b:07:6c:3b:55:77:20:5c:60:f0: fa:ee:6f:6e:a6:fd:15:91:b6:b3:04:30:00:93:4c: 44:ba:3f:16:f5:1e:6c:53:e6:cc:77:95:4c:43:e7: ce:33:45:60:3d:2c:ed:17:5d:17:b3:e0:9a:f9:82: c2:53:70:22:b5:07:4c:0e:a2:a5:f0:29:31:c4:84: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2D:76:B9:EA:31:E2:27:A6:7B:29:F2:E6:F6:3E:99:90:1D:BA:22 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dy12ueox4iemeyny5vY-mZAduiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:ec83::/32 2a04:800:5000::/36 Signature Algorithm: sha256WithRSAEncryption 51:22:40:71:ba:88:37:cf:4e:2c:15:32:73:8c:a9:20:b5:98: 92:cf:f5:6c:6e:88:32:92:9d:c0:47:c4:35:37:32:3f:ca:6e: c3:7a:2d:d7:3f:1d:ff:6b:98:11:d4:84:22:ee:5d:6a:f9:3c: e5:1e:13:1b:75:f3:fb:d6:48:0d:b6:bd:59:54:39:d5:61:d6: 14:29:88:80:90:8d:19:ed:68:2a:a5:dd:67:36:6f:96:62:5f: 80:a6:a4:57:99:7d:78:b8:b5:63:08:ec:99:ad:63:e2:70:c9: 50:c5:da:c5:d5:39:4f:a3:b1:8d:63:35:a6:bd:b5:a6:09:89: 02:7a:aa:68:e7:52:53:34:f8:a8:89:1a:19:ff:be:37:3e:81: 80:5d:88:16:f4:1e:7c:08:45:39:91:91:4c:3a:58:64:84:31: 58:cf:61:48:cc:21:c9:9c:3f:f8:55:ab:6d:30:d0:55:51:1d: 38:d6:f2:0d:82:39:78:29:91:25:e0:69:dd:99:7c:73:11:34: ad:b9:24:13:af:70:2b:70:4c:b0:24:fe:71:ac:6b:76:0e:4c: 83:1e:5a:ea:de:ff:52:5b:1f:58:ff:73:83:d9:2d:b4:c1:08: 95:d0:03:db:d9:d6:30:9a:13:92:f0:93:56:08:17:05:48:57: 4a:11:03:49 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt6yNxAOBOSr5x/r8fdyecWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjJkNzZiOWVhMzFlMjI3YTY3YjI5ZjJlNmY2M2U5OTkwMWRiYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwav/xZ8ixH7HaVo6p9HR9CNooBce WA5zhZXqD7Q6JvYKbDLNv7YJQHMIl/WBZYbV7PvpgZy9vWJ3ucBHbKFru/gBr9G3 F4MAddqhWhUBq217c4XnrGkLrRmFUdtpmU/YmoGvyAUOqLQOd9zc0QKj2EaZLLwl m/JA2mpr/Za5QvMVU6nHvZCCQPde6Hr5+oNAbCZSF/3Be4D69f5VsZeDzBtSiqgK LRi6XUXy6XP/QpNABueUTIuLrRsHbDtVdyBcYPD67m9upv0VkbazBDAAk0xEuj8W 9R5sU+bMd5VMQ+fOM0VgPSztF10Xs+Ca+YLCU3AitQdMDqKl8CkxxIRK7QIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFA8tdrnqMeInpnsp8ub2PpmQHboiMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvRHkxMnVlb3g0aWVtZXlueTV2WS1tWkFkdWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAKgDsgwMG BCoECABQMA0GCSqGSIb3DQEBCwUAA4IBAQBRIkBxuog3z04sFTJzjKkgtZiSz/Vs bogykp3AR8Q1NzI/ym7Dei3XPx3/a5gR1IQi7l1q+TzlHhMbdfP71kgNtr1ZVDnV YdYUKYiAkI0Z7Wgqpd1nNm+WYl+ApqRXmX14uLVjCOyZrWPicMlQxdrF1TlPo7GN YzWmvbWmCYkCeqpo51JTNPioiRoZ/743PoGAXYgW9B58CEU5kZFMOlhkhDFYz2FI zCHJnD/4VattMNBVUR041vINgjl4KZEl4GndmXxzETStuSQTr3ArcEywJP5xrGt2 DkyDHlrq3v9SWx9Y/3OD2S20wQiV0APb2dYwmhOS8JNWCBcFSFdKEQNJ -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:27 2026 by rpki-client