This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/DDkvvm20UwOj8A7Y_U-N1JKON2M.roa File: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (raw, json) Hash identifier: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w= Subject key identifier: 0C:39:2F:BE:6D:B4:53:03:A3:F0:0E:D8:FD:4F:8D:D4:92:8E:37:63 Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Certificate serial: 019B76EAAB73AB10622E8A224DB26E1F56F7 Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/DDkvvm20UwOj8A7Y_U-N1JKON2M.roa Signing time: Thu 01 Jan 2026 00:17:29 +0000 ROA not before: Thu 01 Jan 2026 00:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44765 IP address blocks: 209.92.64.0/22 maxlen: 24 209.92.64.0/24 maxlen: 24 209.92.65.0/24 maxlen: 24 209.92.66.0/24 maxlen: 24 209.92.67.0/24 maxlen: 24 2a00:8e40::/32 maxlen: 48 2a00:8e40:b00b::/48 maxlen: 48 2a00:8e41::/32 maxlen: 48 2a00:8e42::/32 maxlen: 48 2a00:8e43::/32 maxlen: 48 2a00:8e44::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ab:73:ab:10:62:2e:8a:22:4d:b2:6e:1f:56:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Validity Not Before: Jan 1 00:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c392fbe6db45303a3f00ed8fd4f8dd4928e3763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:f1:5a:65:28:d6:43:9a:9d:e6:fe:30:81: 0d:54:0b:17:1a:92:7c:6e:98:03:a7:ac:a3:1f:5f: ad:ab:89:ee:34:f4:ac:ff:1b:bd:2a:e5:24:33:cb: 0c:93:e8:9e:df:e4:1b:8b:a9:1b:75:bd:d3:6f:99: f3:da:bb:08:92:51:18:c8:77:c3:aa:f5:df:75:cb: 6f:63:d7:20:0b:92:fe:53:5f:be:0a:57:11:bc:57: ec:18:5c:1f:ea:79:49:b4:bd:f1:6c:b5:77:0f:be: 26:dd:6c:fe:e1:f0:05:13:7a:5b:72:68:3e:04:6b: 5a:cd:25:61:d5:a7:94:0f:35:3a:c4:f7:07:a9:e1: b4:fb:03:65:d4:91:66:7a:0b:85:ff:e3:5b:cf:f9: 3c:8b:ed:17:be:46:89:cb:dd:0b:82:2b:2f:59:5c: 0d:71:40:3f:8c:94:bc:4d:71:d0:92:7a:39:3b:e4: 69:94:4b:40:f2:46:d2:26:f7:ff:cf:94:6a:ef:98: d2:68:2b:90:3f:42:46:f8:a7:16:00:46:43:c0:f2: a5:17:78:7d:7f:03:c5:59:61:46:8b:dd:ba:29:ae: 76:a1:2f:cc:1c:14:72:6d:e1:1c:da:a4:d7:18:3d: 0f:e3:e1:22:82:56:56:99:33:92:bc:89:a5:e9:af: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:2F:BE:6D:B4:53:03:A3:F0:0E:D8:FD:4F:8D:D4:92:8E:37:63 X509v3 Authority Key Identifier: keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/DDkvvm20UwOj8A7Y_U-N1JKON2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.64.0/22 IPv6: 2a00:8e40::-2a00:8e44:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7e:19:d6:f3:5d:75:8c:68:8e:76:a0:22:9a:92:02:31:cb:ac: 0d:3a:71:16:ed:17:9b:11:fd:67:ee:e1:64:ab:74:00:49:f7: dc:f9:8b:65:ff:8c:6e:ae:76:ff:34:dc:18:34:32:db:8e:2a: f7:37:44:99:4a:44:cd:9b:12:f7:68:4c:fc:fa:75:0a:f7:94: 04:88:0d:50:6a:50:b6:f2:a6:bf:af:cc:02:54:5e:18:be:f0: 1c:1a:be:fe:57:b0:cd:91:f6:d0:76:a9:f6:e7:d0:7b:19:48: 74:f7:75:b8:94:62:08:27:4a:3e:bd:d3:1e:48:15:60:7b:2f: fa:ba:be:f7:01:3e:d5:3a:96:cc:4c:9e:3d:76:3e:fe:35:08: 36:b3:59:92:ca:01:4b:ee:98:b1:fd:29:27:85:fc:c2:0f:6f: 08:04:f2:c1:d8:20:76:cf:c0:9a:dc:f9:2c:c2:da:13:13:73: 63:01:97:17:83:72:a8:47:a4:3a:5d:82:09:01:ba:2a:69:cb: ca:d6:51:24:a4:07:13:ac:cd:35:e2:e2:61:71:36:f0:81:95: a0:7d:64:44:7f:cd:55:5f:12:95:82:4c:df:81:2d:39:6b:b9: 06:82:b7:d5:d7:a8:54:6e:fa:f3:47:40:d4:bf:ef:29:77:48: 4d:e5:fb:a4 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt26qtzqxBiLooiTbJuH1b3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl OTI3NGIwHhcNMjYwMTAxMDAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzM5MmZiZTZkYjQ1MzAzYTNmMDBlZDhmZDRmOGRkNDkyOGUzNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTLxWmUo1kOaneb+MIENVAsXGpJ8 bpgDp6yjH1+tq4nuNPSs/xu9KuUkM8sMk+ie3+Qbi6kbdb3Tb5nz2rsIklEYyHfD qvXfdctvY9cgC5L+U1++ClcRvFfsGFwf6nlJtL3xbLV3D74m3Wz+4fAFE3pbcmg+ BGtazSVh1aeUDzU6xPcHqeG0+wNl1JFmeguF/+Nbz/k8i+0XvkaJy90LgisvWVwN cUA/jJS8TXHQkno5O+RplEtA8kbSJvf/z5Rq75jSaCuQP0JG+KcWAEZDwPKlF3h9 fwPFWWFGi926Ka52oS/MHBRybeEc2qTXGD0P4+EiglZWmTOSvIml6a8zhwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAw5L75ttFMDo/AO2P1PjdSSjjdjMB8GA1UdIwQY MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt MDJhMDliN2E0ZWI3LzEvRERrdnZtMjBVd09qOEE3WV9VLU4xSktPTjJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3 LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQC0VxAMBYE AgACMBAwDgMFBioAjkADBQAqAI5EMA0GCSqGSIb3DQEBCwUAA4IBAQB+GdbzXXWM aI52oCKakgIxy6wNOnEW7RebEf1n7uFkq3QASffc+Ytl/4xurnb/NNwYNDLbjir3 N0SZSkTNmxL3aEz8+nUK95QEiA1QalC28qa/r8wCVF4YvvAcGr7+V7DNkfbQdqn2 59B7GUh093W4lGIIJ0o+vdMeSBVgey/6ur73AT7VOpbMTJ49dj7+NQg2s1mSygFL 7pix/SknhfzCD28IBPLB2CB2z8Ca3PkswtoTE3NjAZcXg3KoR6Q6XYIJAboqacvK 1lEkpAcTrM014uJhcTbwgZWgfWREf81VXxKVgkzfgS05a7kGgrfV16hUbvrzR0DU v+8pd0hN5fuk -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:05 2026 by rpki-client