This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/DAx6kSb1RhGpO9yrUuteRaJtlP0.roa File: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (raw, json) Hash identifier: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU= Subject key identifier: 0C:0C:7A:91:26:F5:46:11:A9:3B:DC:AB:52:EB:5E:45:A2:6D:94:FD Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Certificate serial: 019B7EA6C30CCA3C8FA7D5A03B12F8E898F3 Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/DAx6kSb1RhGpO9yrUuteRaJtlP0.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206013 IP address blocks: 2001:67c:10e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c3:0c:ca:3c:8f:a7:d5:a0:3b:12:f8:e8:98:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c0c7a9126f54611a93bdcab52eb5e45a26d94fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:72:a0:77:9f:8e:74:d4:09:34:9d:4c:9b: dd:14:cd:a2:00:95:38:b7:23:b9:0d:85:d2:7b:30: c0:d2:81:0e:6d:9f:86:9a:b1:1d:e8:a8:78:03:8b: ad:69:92:b0:55:11:6a:1b:d4:d0:4a:db:e4:5a:cd: 79:e7:a1:8d:ef:31:61:4a:28:cf:cf:f4:85:42:da: be:7d:4b:c4:3e:49:86:37:a9:eb:53:f5:dc:13:03: f8:7b:c7:c7:93:af:7b:ef:35:a2:35:18:9f:eb:86: d4:e9:1d:bd:e9:7d:90:ac:32:ad:18:fc:3a:ed:a5: 50:79:ec:c5:eb:fe:71:7c:fd:0c:57:98:59:19:ad: 28:b8:44:c9:d2:8a:53:c3:13:52:d8:5f:23:99:92: eb:d1:74:a0:c0:2a:c2:91:91:ea:6b:3a:33:d5:4b: cb:0c:f0:f6:d5:02:19:18:d0:7a:b4:65:28:bb:c8: ac:36:1f:97:35:50:fc:45:ad:bd:63:48:bc:98:3d: a0:6b:5a:18:c5:58:0b:e7:79:71:25:69:28:84:46: 9f:97:4d:91:4c:3d:8a:cc:97:7f:e8:7b:a0:e3:7d: c7:c6:55:bc:58:0d:2f:38:26:12:17:ed:9e:01:1a: 9e:76:df:42:30:ec:0d:10:55:c3:a1:34:91:6b:72: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0C:7A:91:26:F5:46:11:A9:3B:DC:AB:52:EB:5E:45:A2:6D:94:FD X509v3 Authority Key Identifier: keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/DAx6kSb1RhGpO9yrUuteRaJtlP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:10e4::/48 Signature Algorithm: sha256WithRSAEncryption 7d:d0:fb:85:4c:e4:78:73:82:4e:7f:c8:30:4e:fd:bf:3a:71: 9b:b3:b0:8c:2e:55:7c:e0:c7:73:e7:ea:d8:41:4e:1b:75:16: d1:a5:24:d1:34:42:1a:16:51:ec:cb:8d:2c:a9:95:ce:6e:97: 3d:06:c1:cf:c9:5d:72:a5:fe:3b:96:ec:ff:15:98:e3:bf:9f: cb:31:75:e4:7f:3d:33:de:0e:fa:38:f5:8c:78:04:c7:a9:99: 82:ba:a0:36:2b:77:d9:ca:0a:4a:29:4a:e6:f0:30:cd:0e:ab: ef:d7:18:11:37:85:4a:b8:c1:e1:ff:9b:95:53:1e:95:9a:27: ad:10:50:9e:9c:cd:c8:05:8d:df:c8:a1:cb:aa:8e:2a:81:86: bd:ec:6e:7f:0b:2d:a4:97:1c:82:9e:cd:9a:07:15:19:e6:55: 90:b0:37:05:ee:14:21:ca:48:02:d9:2a:49:43:00:9c:c5:b5: fb:d0:ec:75:6c:52:85:30:d2:f1:61:8f:ee:c7:ec:c6:1a:09: d4:be:5c:6c:8c:28:86:25:6c:65:60:01:25:2c:c5:8a:39:de: c0:31:0c:10:e5:10:19:13:50:61:d7:88:7f:6a:37:fb:32:f5: 44:8d:82:cd:1d:48:a4:c4:48:1a:24:b3:69:ce:e8:ae:49:b6: 61:fa:19:80 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psMMyjyPp9WgOxL46JjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl MzlhYzYwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzBjN2E5MTI2ZjU0NjExYTkzYmRjYWI1MmViNWU0NWEyNmQ5NGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzthyoHefjnTUCTSdTJvdFM2iAJU4 tyO5DYXSezDA0oEObZ+GmrEd6Kh4A4utaZKwVRFqG9TQStvkWs1556GN7zFhSijP z/SFQtq+fUvEPkmGN6nrU/XcEwP4e8fHk6977zWiNRif64bU6R296X2QrDKtGPw6 7aVQeezF6/5xfP0MV5hZGa0ouETJ0opTwxNS2F8jmZLr0XSgwCrCkZHqazoz1UvL DPD21QIZGNB6tGUou8isNh+XNVD8Ra29Y0i8mD2ga1oYxVgL53lxJWkohEafl02R TD2KzJd/6Hug433HxlW8WA0vOCYSF+2eARqedt9CMOwNEFXDoTSRa3LWCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAwMepEm9UYRqTvcq1LrXkWibZT9MB8GA1UdIwQY MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt YTY1NjA1OGM1MzFmLzEvREF4NmtTYjFSaEdwTzl5clV1dGVSYUp0bFAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBDk MA0GCSqGSIb3DQEBCwUAA4IBAQB90PuFTOR4c4JOf8gwTv2/OnGbs7CMLlV84Mdz 5+rYQU4bdRbRpSTRNEIaFlHsy40sqZXObpc9BsHPyV1ypf47luz/FZjjv5/LMXXk fz0z3g76OPWMeATHqZmCuqA2K3fZygpKKUrm8DDNDqvv1xgRN4VKuMHh/5uVUx6V mietEFCenM3IBY3fyKHLqo4qgYa97G5/Cy2klxyCns2aBxUZ5lWQsDcF7hQhykgC 2SpJQwCcxbX70Ox1bFKFMNLxYY/ux+zGGgnUvlxsjCiGJWxlYAElLMWKOd7AMQwQ 5RAZE1Bh14h/ajf7MvVEjYLNHUikxEgaJLNpzuiuSbZh+hmA -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:24 2026 by rpki-client