This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/DPfNU5hIo1-ciAEj9brIauBQL7Q.roa File: DPfNU5hIo1-ciAEj9brIauBQL7Q.roa (raw, json) Hash identifier: AtV2QPSAYmwpuehaFYlZOIVnxkZ4cKgkcGd5G/ierKU= Subject key identifier: 0C:F7:CD:53:98:48:A3:5F:9C:88:01:23:F5:BA:C8:6A:E0:50:2F:B4 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019B7CEE6B32F5CAAFD63104361F41D2B82B Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/DPfNU5hIo1-ciAEj9brIauBQL7Q.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a14:ae00:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6b:32:f5:ca:af:d6:31:04:36:1f:41:d2:b8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cf7cd539848a35f9c880123f5bac86ae0502fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:48:27:d5:93:8d:7c:6b:4e:08:11:3b:07: 23:1c:8b:84:f2:9b:bd:6b:36:0d:08:e1:4e:bf:c9: ab:d2:18:b9:35:06:1c:2a:f9:c2:6b:f0:d3:cf:63: a4:d7:8b:85:fd:d0:22:95:4f:1c:0f:dd:82:64:e0: 52:88:a5:3d:d9:f2:71:0f:55:7a:ca:42:ca:ee:61: b1:45:4e:14:d0:b2:7a:93:a9:02:d6:e2:c4:91:8c: b7:d9:19:c4:d5:fe:6c:a7:23:ed:f8:e1:2b:bf:12: 22:6e:8e:6d:b1:ce:c9:f6:f3:95:c6:e2:c1:54:68: a3:7f:e7:29:25:8c:65:96:db:db:22:f4:ba:1c:2a: da:a9:cf:c2:e5:2f:37:39:ee:dd:bb:47:5b:58:10: 08:e4:64:50:b2:1e:9f:11:a0:28:f9:f7:b2:df:2e: 35:74:2a:d6:0c:0d:6a:be:c1:08:07:9c:16:32:fa: 3c:c1:77:68:2c:6b:cd:4a:f3:91:7f:0b:dc:28:22: 6a:1e:b8:93:be:e7:e3:b4:96:79:40:57:18:ba:84: 15:09:8f:e3:a3:2b:75:7d:65:d6:b2:a5:00:93:f1: 4f:6b:09:08:58:5b:dd:b3:c3:3b:92:a0:d3:79:6c: 30:bf:8b:94:0f:06:91:70:b2:18:2a:61:16:f7:11: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F7:CD:53:98:48:A3:5F:9C:88:01:23:F5:BA:C8:6A:E0:50:2F:B4 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/DPfNU5hIo1-ciAEj9brIauBQL7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:5::/48 Signature Algorithm: sha256WithRSAEncryption 76:cb:6c:91:48:c6:9f:fe:9e:42:2d:c7:54:8c:cd:d0:f3:72: 39:32:a4:f3:f6:4c:24:f3:4e:b9:5b:c3:62:72:6b:a4:cf:39: 60:8b:6c:d6:e6:45:eb:da:d1:96:fc:37:fd:76:59:21:d2:db: 09:2a:67:8a:4a:f3:9e:cc:c7:e0:c2:6a:38:e9:dd:25:9b:af: a3:37:61:1e:d4:8e:c3:6e:e3:92:ce:dc:d2:bc:9a:3a:f7:f9: 38:c6:41:87:8e:37:5b:fa:c9:66:6b:fe:0a:53:d6:6b:fb:22: 93:81:81:1c:bc:79:c8:00:1e:31:92:8f:bd:b0:46:af:70:ae: 77:1e:a0:bd:94:69:42:12:c6:3d:2a:7e:ee:b6:6c:89:b0:3f: 85:93:63:fb:03:7f:ee:56:3a:fe:07:5d:8a:62:e3:20:df:00: 6a:4a:53:a4:67:03:60:39:31:cf:9e:eb:b6:d8:ac:d0:1c:a0: 7f:94:1f:2e:9e:9b:67:52:0b:a4:0f:e7:a9:d8:cc:a8:36:55: e1:d7:4f:c6:8c:2e:5d:da:82:fc:9b:43:b3:8c:ba:ec:15:76: ae:5e:0d:f5:db:ce:87:8c:56:39:ff:df:26:8b:e1:8d:72:8d: c8:03:8e:ab:fc:04:8e:45:6a:d6:fa:9c:b3:85:01:66:71:c4: bc:7a:ba:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87msy9cqv1jEENh9B0rgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2Y3Y2Q1Mzk4NDhhMzVmOWM4ODAxMjNmNWJhYzg2YWUwNTAyZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJIJ9WTjXxrTggROwcjHIuE8pu9 azYNCOFOv8mr0hi5NQYcKvnCa/DTz2Ok14uF/dAilU8cD92CZOBSiKU92fJxD1V6 ykLK7mGxRU4U0LJ6k6kC1uLEkYy32RnE1f5spyPt+OErvxIibo5tsc7J9vOVxuLB VGijf+cpJYxlltvbIvS6HCraqc/C5S83Oe7du0dbWBAI5GRQsh6fEaAo+fey3y41 dCrWDA1qvsEIB5wWMvo8wXdoLGvNSvORfwvcKCJqHriTvufjtJZ5QFcYuoQVCY/j oyt1fWXWsqUAk/FPawkIWFvds8M7kqDTeWwwv4uUDwaRcLIYKmEW9xGbAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAz3zVOYSKNfnIgBI/W6yGrgUC+0MB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvRFBmTlU1aElvMS1jaUFFajlicklhdUJRTDdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAF MA0GCSqGSIb3DQEBCwUAA4IBAQB2y2yRSMaf/p5CLcdUjM3Q83I5MqTz9kwk8065 W8Nicmukzzlgi2zW5kXr2tGW/Df9dlkh0tsJKmeKSvOezMfgwmo46d0lm6+jN2Ee 1I7DbuOSztzSvJo69/k4xkGHjjdb+slma/4KU9Zr+yKTgYEcvHnIAB4xko+9sEav cK53HqC9lGlCEsY9Kn7utmyJsD+Fk2P7A3/uVjr+B12KYuMg3wBqSlOkZwNgOTHP nuu22KzQHKB/lB8unptnUgukD+ep2MyoNlXh10/GjC5d2oL8m0OzjLrsFXauXg31 286HjFY5/98mi+GNco3IA46r/ASORWrW+pyzhQFmccS8erot -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:18 2026 by rpki-client