This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DY6cvwCbA8CuHNCCyADh66MXVQo.roa File: DY6cvwCbA8CuHNCCyADh66MXVQo.roa (raw, json) Hash identifier: BThpk5WnlPG14lLCtpTOLG7Y9qQ5aM/v9pQR0qZyNqA= Subject key identifier: 0D:8E:9C:BF:00:9B:03:C0:AE:1C:D0:82:C8:00:E1:EB:A3:17:55:0A Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C771952DC65DF76BD568EC62D4B242 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DY6cvwCbA8CuHNCCyADh66MXVQo.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60623 IP address blocks: 213.182.168.0/24 maxlen: 24 213.182.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:71:95:2d:c6:5d:f7:6b:d5:68:ec:62:d4:b2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d8e9cbf009b03c0ae1cd082c800e1eba317550a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:95:3e:bc:93:82:e9:0d:d4:11:f2:00:6f: f8:72:90:c6:bd:8d:9a:cd:bf:80:01:81:b7:a4:f5: 20:5c:13:11:41:18:31:63:88:b5:71:d9:15:de:d5: 6c:36:40:7b:14:4e:bc:3b:55:6d:b2:b1:e9:24:36: fe:fc:fb:09:dd:7e:75:99:b1:8c:10:70:0f:34:91: fb:b9:bc:93:17:92:52:0f:25:86:89:fc:84:95:33: 25:5e:45:9c:05:e6:f8:44:cf:f7:3c:16:75:86:29: ad:47:98:dc:e2:27:87:58:58:95:64:ee:a8:51:78: ca:16:e4:38:e6:6c:55:c5:4b:37:73:f6:3a:62:be: 32:ee:e3:88:3c:2a:71:0c:b4:52:69:fd:0d:e3:a2: 79:d7:ca:71:a3:28:4a:43:fd:d9:04:e7:12:1a:f7: 72:10:6d:92:8f:98:67:9c:98:ee:56:bf:f8:da:ca: 8f:96:05:c1:0d:d5:34:d2:bf:9e:0e:6c:57:e7:d4: 82:4e:ea:58:38:b1:f3:b5:e5:b0:fe:40:92:7e:c2: f1:00:d8:4a:a2:c2:39:c4:fd:8d:36:84:12:9e:84: f6:4e:9e:0d:13:15:a0:b0:cd:2e:77:86:93:7b:1f: 2a:5f:aa:91:b1:04:8f:3f:b3:f4:7c:66:59:dc:fd: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8E:9C:BF:00:9B:03:C0:AE:1C:D0:82:C8:00:E1:EB:A3:17:55:0A X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DY6cvwCbA8CuHNCCyADh66MXVQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.182.168.0/23 Signature Algorithm: sha256WithRSAEncryption 82:40:dd:29:aa:82:0f:53:88:f3:c9:a4:b7:0d:5a:1c:17:c8: 56:a9:44:d2:06:aa:3a:7a:bc:fd:bb:ce:5c:a0:09:44:94:1c: d4:65:c3:e2:85:a6:52:5b:4b:fb:10:fa:c0:e6:c1:08:6f:ef: ea:64:bc:9b:23:0c:78:99:85:cd:a6:34:70:2f:3a:46:61:60: f4:90:b1:a4:71:34:7f:db:a6:a0:a9:6b:75:fb:f5:67:11:55: d3:75:eb:28:79:f6:14:56:2d:6c:8a:ca:f3:b0:59:f7:13:d7: f8:ea:0a:ba:a9:f2:0b:aa:e0:20:df:fe:4e:e1:5b:1d:6f:6d: a2:ef:cf:78:71:d0:4f:f3:c1:84:87:ef:27:73:8b:10:00:4b: b9:d7:22:67:f5:46:ce:7d:65:02:b3:61:52:f3:4c:3b:1a:f1: 50:64:62:4c:d1:fc:2a:31:5b:8d:66:b7:93:38:49:99:88:46: 6d:40:22:db:df:e6:7b:0b:5b:e2:dd:7c:65:ff:e8:18:0b:f7: 4f:1a:61:80:0f:59:26:f0:f9:06:c0:b2:ce:4d:45:91:3b:8c: 1c:81:e4:8e:65:db:a0:42:90:5a:4e:b3:d2:1c:e5:b4:f5:e5: 2b:a6:94:92:bb:0b:f9:cf:c4:be:63:50:6a:a9:f2:2d:64:10: dc:d2:fa:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3GVLcZd92vVaOxi1LJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDhlOWNiZjAwOWIwM2MwYWUxY2QwODJjODAwZTFlYmEzMTc1NTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquWVPryTgukN1BHyAG/4cpDGvY2a zb+AAYG3pPUgXBMRQRgxY4i1cdkV3tVsNkB7FE68O1VtsrHpJDb+/PsJ3X51mbGM EHAPNJH7ubyTF5JSDyWGifyElTMlXkWcBeb4RM/3PBZ1himtR5jc4ieHWFiVZO6o UXjKFuQ45mxVxUs3c/Y6Yr4y7uOIPCpxDLRSaf0N46J518pxoyhKQ/3ZBOcSGvdy EG2Sj5hnnJjuVr/42sqPlgXBDdU00r+eDmxX59SCTupYOLHzteWw/kCSfsLxANhK osI5xP2NNoQSnoT2Tp4NExWgsM0ud4aTex8qX6qRsQSPP7P0fGZZ3P0AVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2OnL8AmwPArhzQgsgA4eujF1UKMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvRFk2Y3Z3Q2JBOEN1SE5DQ3lBRGg2Nk1YVlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1baoMA0G CSqGSIb3DQEBCwUAA4IBAQCCQN0pqoIPU4jzyaS3DVocF8hWqUTSBqo6erz9u85c oAlElBzUZcPihaZSW0v7EPrA5sEIb+/qZLybIwx4mYXNpjRwLzpGYWD0kLGkcTR/ 26agqWt1+/VnEVXTdesoefYUVi1sisrzsFn3E9f46gq6qfILquAg3/5O4Vsdb22i 7894cdBP88GEh+8nc4sQAEu51yJn9UbOfWUCs2FS80w7GvFQZGJM0fwqMVuNZreT OEmZiEZtQCLb3+Z7C1vi3Xxl/+gYC/dPGmGAD1km8PkGwLLOTUWRO4wcgeSOZdug QpBaTrPSHOW09eUrppSSuwv5z8S+Y1BqqfItZBDc0vq6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:50 2026 by rpki-client