This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/DXWKP3MB1lGDghFM-NJLvzILH4w.roa File: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (raw, json) Hash identifier: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk= Subject key identifier: 0D:75:8A:3F:73:01:D6:51:83:82:11:4C:F8:D2:4B:BF:32:0B:1F:8C Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Certificate serial: 019B7E376ED815D835AF54E2B48CE1CF68B8 Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/DXWKP3MB1lGDghFM-NJLvzILH4w.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213701 IP address blocks: 2001:678:450::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6e:d8:15:d8:35:af:54:e2:b4:8c:e1:cf:68:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d758a3f7301d6518382114cf8d24bbf320b1f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8b:4c:90:10:76:3f:50:95:2b:f5:f3:13:94: 0b:6d:c4:06:d6:fe:e5:a3:16:0a:76:db:50:19:b9: 8f:3a:c2:3a:d0:37:c9:b3:20:aa:27:a3:fb:1e:4f: cf:b2:f6:ec:23:b1:24:ef:db:0c:2d:9e:1e:bf:a5: 8d:47:d5:63:b6:35:fc:d6:b5:f3:54:c7:03:34:1a: 14:be:02:8a:11:63:92:2f:cb:70:bf:03:75:e4:ae: 32:03:6d:95:4a:ab:74:bf:4a:ba:cb:86:5f:bd:c3: a5:5f:ac:e5:ad:92:09:6c:75:58:d6:3e:11:8e:64: fa:44:18:d1:a7:4e:db:0b:cd:c3:b8:5d:6c:ea:e4: 1f:aa:1a:c3:86:54:f8:89:b1:ec:fa:4a:d7:42:d7: 96:03:cc:93:b9:55:64:33:c9:03:85:97:a9:13:92: ee:14:0b:8b:24:0f:8d:a6:6a:e9:6e:b9:bd:2a:87: 59:e5:f4:08:8f:3e:a9:04:d1:71:16:9b:8a:e0:21: 3a:72:7c:d5:d3:3e:8c:c2:c2:05:aa:5d:df:bc:f7: 40:90:6e:34:8d:b4:78:a3:1c:4d:5b:7c:1e:7e:10: f8:8b:f2:b9:29:53:57:af:28:b6:47:44:d0:7e:9b: 9f:a5:94:62:df:54:cf:0c:d7:19:04:a5:6e:9e:56: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:75:8A:3F:73:01:D6:51:83:82:11:4C:F8:D2:4B:BF:32:0B:1F:8C X509v3 Authority Key Identifier: keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/DXWKP3MB1lGDghFM-NJLvzILH4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:450::/48 Signature Algorithm: sha256WithRSAEncryption 28:2c:63:fc:4f:59:f0:1d:a8:32:3d:21:6e:61:fd:2d:cd:0d: db:ac:b9:e4:c9:8f:67:72:98:40:73:32:05:6a:f0:40:69:0e: e5:a5:d8:35:c8:d2:f3:20:5d:f7:68:6a:3c:d4:04:d9:f4:e7: 40:80:f0:23:99:b1:2f:b3:56:60:8e:80:94:70:4f:29:5c:59: 5d:f9:ba:27:c9:61:96:94:65:fe:d6:d7:5c:7c:6a:69:2a:d4: 95:2b:f2:87:04:cd:27:58:3f:da:ae:b1:a3:6b:95:2e:a6:12: d5:1f:e9:46:d5:c6:64:2c:95:43:dc:1d:35:78:ef:cc:a6:ec: cd:2a:3f:51:2d:9b:0e:5d:46:f3:6c:93:4b:d8:e3:8d:d0:e1: 8a:d5:f2:1c:7c:b2:7b:10:98:76:e9:ec:8d:53:d7:c5:36:72: ca:fa:9a:de:78:2a:c6:38:3d:b4:5c:b7:91:a8:7f:17:ec:a3: 18:76:59:d7:0a:cb:9b:47:2c:9d:9d:7b:04:ca:a7:9a:3f:5d: 40:9e:03:96:24:a0:66:f7:bc:c3:ee:48:92:a2:28:8a:cb:be: c8:71:e0:2a:be:0e:71:fc:88:c0:18:17:75:9c:d0:11:af:d0: 6a:6f:78:82:ca:68:34:2f:70:3f:a1:90:ed:77:36:7b:ae:b5: aa:fc:5d:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N27YFdg1r1TitIzhz2i4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTJjYzIwZDY5YjMwZGRlMThlYzBkMDAyY2UyZjkxNDli ZmIwNmQwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDc1OGEzZjczMDFkNjUxODM4MjExNGNmOGQyNGJiZjMyMGIxZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlItMkBB2P1CVK/XzE5QLbcQG1v7l oxYKdttQGbmPOsI60DfJsyCqJ6P7Hk/PsvbsI7Ek79sMLZ4ev6WNR9VjtjX81rXz VMcDNBoUvgKKEWOSL8twvwN15K4yA22VSqt0v0q6y4ZfvcOlX6zlrZIJbHVY1j4R jmT6RBjRp07bC83DuF1s6uQfqhrDhlT4ibHs+krXQteWA8yTuVVkM8kDhZepE5Lu FAuLJA+Npmrpbrm9KodZ5fQIjz6pBNFxFpuK4CE6cnzV0z6MwsIFql3fvPdAkG40 jbR4oxxNW3wefhD4i/K5KVNXryi2R0TQfpufpZRi31TPDNcZBKVunlZ/jQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA11ij9zAdZRg4IRTPjSS78yCx+MMB8GA1UdIwQY MBaAFLvizCDWmzDd4Y7A0ALOL5FJv7BtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDIt YjExOWMyNThjZmFkLzEvRFhXS1AzTUIxbEdEZ2hGTS1OSkx2eklMSDR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDItYjExOWMyNThjZmFk LzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeARQ MA0GCSqGSIb3DQEBCwUAA4IBAQAoLGP8T1nwHagyPSFuYf0tzQ3brLnkyY9ncphA czIFavBAaQ7lpdg1yNLzIF33aGo81ATZ9OdAgPAjmbEvs1ZgjoCUcE8pXFld+bon yWGWlGX+1tdcfGppKtSVK/KHBM0nWD/arrGja5UuphLVH+lG1cZkLJVD3B01eO/M puzNKj9RLZsOXUbzbJNL2OON0OGK1fIcfLJ7EJh26eyNU9fFNnLK+preeCrGOD20 XLeRqH8X7KMYdlnXCsubRyydnXsEyqeaP11AngOWJKBm97zD7kiSoiiKy77IceAq vg5x/IjAGBd1nNARr9Bqb3iCymg0L3A/oZDtdzZ7rrWq/F2u -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:47 2026 by rpki-client