This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Daz8bhqhbaAz3OEyLaZDp_txPzA.roa File: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (raw, json) Hash identifier: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA= Subject key identifier: 0D:AC:FC:6E:1A:A1:6D:A0:33:DC:E1:32:2D:A6:43:A7:FB:71:3F:30 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019B77589AAAC5BEB6ED80355ADE488C028D Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Daz8bhqhbaAz3OEyLaZDp_txPzA.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212085 IP address blocks: 2a0f:ca81:1330::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9a:aa:c5:be:b6:ed:80:35:5a:de:48:8c:02:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dacfc6e1aa16da033dce1322da643a7fb713f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:ef:fd:0e:74:c7:c2:6a:3a:eb:b8:85:a9: 69:de:70:26:dd:ab:e0:a2:81:fa:b1:5e:47:af:25: 52:33:44:51:76:c5:e5:61:7c:63:12:ea:a8:26:35: 93:c1:23:ab:59:5b:65:5b:1e:37:45:6b:c0:aa:bd: 46:c9:a8:3e:be:8e:7e:16:cf:3a:71:c7:8a:8d:62: 07:22:78:bc:c8:c6:1c:84:fd:c5:bd:b3:bc:1d:2a: 2d:93:f7:b0:f4:24:c8:2d:0b:ef:7a:f1:bb:b6:60: f5:a0:45:bf:b1:8d:17:07:fa:0f:9e:00:7f:57:1d: c4:e4:40:5f:ec:3a:e0:3f:ea:80:aa:a8:d8:7b:2e: e7:d4:43:25:9f:60:51:52:00:30:9b:6b:e3:b9:22: b1:66:a7:19:d9:44:4b:8f:41:02:9c:a1:c6:86:88: 2e:7b:0e:36:cd:b6:ba:a1:ef:dc:34:6f:29:a7:ed: 63:0b:b8:5e:89:23:ba:54:89:4e:1e:9d:89:a7:e4: c5:f5:8e:34:8b:9c:49:10:28:41:ce:70:a9:f9:3b: 09:88:46:54:e1:87:83:54:1b:44:ca:d1:a0:fa:cd: 6f:6a:65:ae:75:5b:6a:57:99:ae:4d:f2:9b:cb:10: 8d:a9:a4:11:74:e5:52:84:fb:d0:00:29:3f:4a:9f: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AC:FC:6E:1A:A1:6D:A0:33:DC:E1:32:2D:A6:43:A7:FB:71:3F:30 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Daz8bhqhbaAz3OEyLaZDp_txPzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ca81:1330::/44 Signature Algorithm: sha256WithRSAEncryption a7:1a:8e:97:fc:b4:9a:ff:b5:ac:e7:c6:92:72:9a:78:c3:a6: a4:e3:40:d6:49:c2:3f:3e:6f:69:fa:88:e4:55:50:26:01:48: 2e:42:e9:e1:8c:3c:7c:c1:25:d2:91:2f:5f:de:ea:ed:c8:46: 09:1c:a3:37:f7:c4:46:40:7a:ee:60:0a:bd:29:d2:f4:9f:73: f4:17:0b:88:c3:98:38:3e:fb:19:7c:a1:8b:20:17:97:9b:b8: c6:48:d3:b0:0c:75:7d:6c:3e:9a:03:96:da:4e:8a:a6:fd:41: c4:0e:ab:ad:b1:63:b7:b2:b3:bb:f9:d7:df:6e:71:47:4f:67: 1d:6b:ed:56:29:59:1c:96:2b:91:32:61:6a:65:86:35:1f:a5: 1e:58:1c:86:d7:23:35:57:e3:88:7b:0d:79:3f:0e:1b:74:1a: 32:a5:64:7f:7a:85:c2:cf:14:0f:92:56:5b:9c:b9:40:c8:b7: 02:7c:43:b3:95:51:ac:22:7d:b9:dc:15:13:3e:2f:93:32:3f: 34:9f:4e:92:a5:29:c8:2e:14:d1:7f:94:cd:63:38:d7:53:f6: 5e:4f:39:34:5c:c3:b5:a1:15:bc:4d:96:cb:09:f6:51:51:3f: 26:32:f9:df:2a:80:32:e5:76:1a:04:82:95:71:a7:35:8d:06: b9:25:bb:59 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WJqqxb627YA1Wt5IjAKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGFjZmM2ZTFhYTE2ZGEwMzNkY2UxMzIyZGE2NDNhN2ZiNzEzZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCnv/Q50x8JqOuu4halp3nAm3avg ooH6sV5HryVSM0RRdsXlYXxjEuqoJjWTwSOrWVtlWx43RWvAqr1Gyag+vo5+Fs86 cceKjWIHIni8yMYchP3FvbO8HSotk/ew9CTILQvvevG7tmD1oEW/sY0XB/oPngB/ Vx3E5EBf7DrgP+qAqqjYey7n1EMln2BRUgAwm2vjuSKxZqcZ2URLj0ECnKHGhogu ew42zba6oe/cNG8pp+1jC7heiSO6VIlOHp2Jp+TF9Y40i5xJEChBznCp+TsJiEZU 4YeDVBtEytGg+s1vamWudVtqV5muTfKbyxCNqaQRdOVShPvQACk/Sp+/1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA2s/G4aoW2gM9zhMi2mQ6f7cT8wMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvRGF6OGJocWhiYUF6M09FeUxhWkRwX3R4UHpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg/KgRMw MA0GCSqGSIb3DQEBCwUAA4IBAQCnGo6X/LSa/7Ws58aScpp4w6ak40DWScI/Pm9p +ojkVVAmAUguQunhjDx8wSXSkS9f3urtyEYJHKM398RGQHruYAq9KdL0n3P0FwuI w5g4PvsZfKGLIBeXm7jGSNOwDHV9bD6aA5baToqm/UHEDqutsWO3srO7+dffbnFH T2cda+1WKVkcliuRMmFqZYY1H6UeWByG1yM1V+OIew15Pw4bdBoypWR/eoXCzxQP klZbnLlAyLcCfEOzlVGsIn253BUTPi+TMj80n06SpSnILhTRf5TNYzjXU/ZeTzk0 XMO1oRW8TZbLCfZRUT8mMvnfKoAy5XYaBIKVcac1jQa5JbtZ -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:13 2026 by rpki-client