This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/DC8THQNIT_ft_VIae0j7lr2XD3w.roa File: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (raw, json) Hash identifier: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U= Subject key identifier: 0C:2F:13:1D:03:48:4F:F7:ED:FD:52:1A:7B:48:FB:96:BD:97:0F:7C Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a Certificate serial: 019B7EA63F9F771BD3E569EC1FDB723911D8 Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/DC8THQNIT_ft_VIae0j7lr2XD3w.roa Signing time: Fri 02 Jan 2026 12:19:43 +0000 ROA not before: Fri 02 Jan 2026 12:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206509 IP address blocks: 159.15.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3f:9f:77:1b:d3:e5:69:ec:1f:db:72:39:11:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a Validity Not Before: Jan 2 12:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c2f131d03484ff7edfd521a7b48fb96bd970f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:cd:b1:31:a0:57:c9:44:eb:b2:83:98:b4: c9:07:05:a5:4f:88:93:1d:2d:13:bc:39:3a:49:b3: 9e:15:a2:da:eb:74:43:5a:f1:0c:14:e9:d4:ec:eb: 4c:bf:d4:12:a8:2f:5e:6a:be:73:b8:8d:61:83:b9: 31:e4:27:c8:3f:7c:6d:bb:fd:c0:bf:7c:d7:a1:09: 8d:9c:3f:5f:cd:86:c0:a0:c8:c7:80:10:b7:bc:fe: 1c:fb:52:05:9c:27:3c:11:5c:97:cd:78:56:7d:99: c0:04:51:ec:e7:8e:01:9d:ea:94:b1:82:4a:60:7b: a5:a7:9e:9e:80:14:09:a9:97:da:df:e6:52:61:c4: 13:f0:0d:0f:1a:68:0e:7e:97:a6:49:96:98:23:bf: aa:d1:8a:7c:9e:e4:0e:2d:a6:4c:f1:1e:ea:d0:2a: 9f:76:36:de:2d:91:53:71:10:7c:3e:6d:cd:4d:27: d0:55:56:59:51:a2:18:ec:cc:23:77:77:2c:9e:91: e8:62:c9:53:28:9d:ba:54:ad:fd:3f:34:a8:67:ec: d4:b1:fd:e7:17:32:37:e4:12:f9:40:e7:bb:49:ad: 53:79:83:2c:ea:91:24:8e:2c:8b:2d:96:8c:3d:d2: 61:40:aa:29:5d:07:08:00:d7:25:5b:a7:76:0b:69: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:13:1D:03:48:4F:F7:ED:FD:52:1A:7B:48:FB:96:BD:97:0F:7C X509v3 Authority Key Identifier: keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/DC8THQNIT_ft_VIae0j7lr2XD3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.15.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:1b:da:9e:cb:28:c4:93:38:2e:6a:a2:ac:94:29:2a:27:c8: 12:63:1b:9a:ff:d2:23:ff:e8:94:bb:8e:53:8d:95:6c:c8:c7: 10:f9:b4:13:a6:e3:fd:23:f1:5a:e1:37:e8:86:ec:f0:5a:62: ff:bc:73:3d:e5:09:07:1d:d4:2f:9c:50:85:ae:35:f4:49:e2: c6:57:a9:89:cf:06:29:79:c0:a5:6a:b3:ff:4c:0e:3e:66:dc: 1a:ba:9e:85:72:ad:59:4d:a4:0b:89:78:e3:ae:65:c1:9a:ce: 65:43:21:95:78:bb:ea:bb:91:78:96:d7:87:b4:b9:cf:bb:39: 5b:8e:5b:ff:c7:67:d9:c0:30:d7:2c:95:33:f5:77:33:07:d5: 13:76:4f:34:f1:91:82:85:20:b2:2a:cd:50:b9:30:3c:a0:28: b9:3a:70:24:30:d6:73:f5:e7:ef:aa:d6:10:82:27:99:31:38: 09:40:e8:e7:96:0b:2e:2a:df:dc:18:89:34:dd:e1:20:52:72: 31:1d:b8:b7:ac:9a:e4:f1:29:0d:c9:43:79:5d:eb:ee:5c:51: a1:aa:2d:d4:e5:0f:dd:e6:ed:32:74:38:f1:80:09:58:f2:af: 6d:7a:93:80:14:e7:55:01:8d:63:a5:f9:1d:83:fa:9d:62:0e: b4:a0:75:c3 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+pj+fdxvT5WnsH9tyORHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx OWUyOWEwHhcNMjYwMTAyMTIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzJmMTMxZDAzNDg0ZmY3ZWRmZDUyMWE3YjQ4ZmI5NmJkOTcwZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf3NsTGgV8lE67KDmLTJBwWlT4iT HS0TvDk6SbOeFaLa63RDWvEMFOnU7OtMv9QSqC9ear5zuI1hg7kx5CfIP3xtu/3A v3zXoQmNnD9fzYbAoMjHgBC3vP4c+1IFnCc8EVyXzXhWfZnABFHs544BneqUsYJK YHulp56egBQJqZfa3+ZSYcQT8A0PGmgOfpemSZaYI7+q0Yp8nuQOLaZM8R7q0Cqf djbeLZFTcRB8Pm3NTSfQVVZZUaIY7Mwjd3csnpHoYslTKJ26VK39PzSoZ+zUsf3n FzI35BL5QOe7Sa1TeYMs6pEkjiyLLZaMPdJhQKopXQcIANclW6d2C2mDCQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFAwvEx0DSE/37f1SGntI+5a9lw98MB8GA1UdIwQY MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt MGNjNTE2OGVhMTVhLzEvREM4VEhRTklUX2Z0X1ZJYWUwajdscjJYRDN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnw8wDQYJ KoZIhvcNAQELBQADggEBAI8b2p7LKMSTOC5qoqyUKSonyBJjG5r/0iP/6JS7jlON lWzIxxD5tBOm4/0j8VrhN+iG7PBaYv+8cz3lCQcd1C+cUIWuNfRJ4sZXqYnPBil5 wKVqs/9MDj5m3Bq6noVyrVlNpAuJeOOuZcGazmVDIZV4u+q7kXiW14e0uc+7OVuO W//HZ9nAMNcslTP1dzMH1RN2TzTxkYKFILIqzVC5MDygKLk6cCQw1nP15++q1hCC J5kxOAlA6OeWCy4q39wYiTTd4SBScjEduLesmuTxKQ3JQ3ld6+5cUaGqLdTlD93m 7TJ0OPGACVjyr216k4AU51UBjWOl+R2D+p1iDrSgdcM= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:29 2026 by rpki-client