This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_dvnxbtK7TaXDHFiB97OOrSY3YQ.roa File: _dvnxbtK7TaXDHFiB97OOrSY3YQ.roa (raw, json) Hash identifier: e21qC9uletV7nCXY0ZYdFLn+AXPYO12V4EfZDl6TXCc= Subject key identifier: FD:DB:E7:C5:BB:4A:ED:36:97:0C:71:62:07:DE:CE:3A:B4:98:DD:84 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7BBC8FF3EBE22FDC1EFBF25B96BE4 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_dvnxbtK7TaXDHFiB97OOrSY3YQ.roa Signing time: Thu 01 Jan 2026 18:17:48 +0000 ROA not before: Thu 01 Jan 2026 18:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 89.191.120.0/22 maxlen: 22 91.123.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bb:c8:ff:3e:be:22:fd:c1:ef:bf:25:b9:6b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fddbe7c5bb4aed36970c716207dece3ab498dd84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:2f:13:66:fb:6a:5a:36:5c:9c:80:a2:52: 2f:02:57:80:60:86:85:4f:68:a4:c0:fe:16:ce:a7: c0:e7:80:1d:34:50:93:bb:72:82:11:2f:58:90:76: 8d:fb:76:f0:4c:ee:c3:c3:04:19:cb:ba:75:a7:62: 31:2a:91:51:ab:4e:1f:d7:d6:0d:cd:9c:6b:b9:29: 37:3f:35:f2:d2:88:a5:58:9e:1d:20:db:a0:27:36: 02:29:f4:91:82:b6:00:da:f4:08:47:51:0e:ad:8a: 66:c7:7a:48:88:e8:f9:11:03:bc:dd:f4:7a:7a:61: a1:d0:8a:fc:77:30:b9:69:a9:f5:0f:59:35:df:0d: 63:be:02:5e:2d:13:e8:6d:6e:f8:49:1c:8f:d2:b2: ef:e6:50:26:e8:60:5a:d6:69:f3:11:97:01:7d:61: 90:b6:24:0f:d8:7f:a9:4b:b1:40:46:c5:76:93:d9: 41:4c:97:79:e7:cf:b3:ec:05:ef:53:56:0a:91:5f: fe:cd:76:91:48:d9:e8:23:3a:f1:2b:3c:c8:d5:ff: 61:49:ba:88:be:d4:19:13:cb:0b:f8:66:72:a8:8d: 31:03:49:23:9b:1a:f0:dd:66:dd:20:f8:0a:77:30: 17:9e:9a:13:19:6f:bf:0e:22:1d:b9:50:40:ca:fc: 3e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DB:E7:C5:BB:4A:ED:36:97:0C:71:62:07:DE:CE:3A:B4:98:DD:84 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_dvnxbtK7TaXDHFiB97OOrSY3YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.191.120.0/22 91.123.64.0/20 Signature Algorithm: sha256WithRSAEncryption bf:88:75:f3:41:d8:39:d1:5a:78:42:e1:e0:fd:19:75:fa:ba: d8:ab:57:51:07:48:e5:88:05:93:50:74:53:59:e2:16:7f:21: 62:1e:50:2b:66:f3:37:0f:ad:d1:a7:53:a1:b3:4d:16:d5:d2: 64:dd:6b:df:36:b8:26:55:d3:f9:0a:88:a5:05:53:f6:c2:70: ba:8d:5e:94:e5:25:c5:e1:eb:b9:9f:41:79:2b:d9:46:12:f0: a5:01:1f:b4:ca:0e:ac:cb:3d:0e:12:eb:9e:50:7c:66:90:60: f6:09:c0:ba:cb:7a:eb:c3:a4:4d:5a:cc:18:57:2d:9b:57:be: aa:9b:7c:b2:94:a3:68:5b:4c:c0:de:db:bd:3d:c0:97:33:a6: 90:68:a5:90:b8:af:43:c8:9d:33:8a:09:29:1c:dd:06:2a:10: 03:af:fb:b6:62:51:46:7b:d5:2c:db:79:3c:ad:a1:f4:15:49: 47:7f:32:2d:1d:9e:db:be:de:18:9d:05:46:4c:54:79:b1:1b: 6c:a4:00:25:48:22:5c:c3:8f:b5:c8:ad:03:ac:91:45:68:63: 8c:2c:91:20:d9:64:19:a7:06:fe:b9:46:c7:ee:68:ab:3f:74: fb:63:d1:22:3a:9a:c3:5d:db:34:12:14:dd:f6:2c:5f:2a:e9: 84:ac:eb:f1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x7vI/z6+Iv3B778luWvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGRiZTdjNWJiNGFlZDM2OTcwYzcxNjIwN2RlY2UzYWI0OThkZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMMvE2b7alo2XJyAolIvAleAYIaF T2ikwP4WzqfA54AdNFCTu3KCES9YkHaN+3bwTO7DwwQZy7p1p2IxKpFRq04f19YN zZxruSk3PzXy0oilWJ4dINugJzYCKfSRgrYA2vQIR1EOrYpmx3pIiOj5EQO83fR6 emGh0Ir8dzC5aan1D1k13w1jvgJeLRPobW74SRyP0rLv5lAm6GBa1mnzEZcBfWGQ tiQP2H+pS7FARsV2k9lBTJd558+z7AXvU1YKkV/+zXaRSNnoIzrxKzzI1f9hSbqI vtQZE8sL+GZyqI0xA0kjmxrw3WbdIPgKdzAXnpoTGW+/DiIduVBAyvw+IQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP3b58W7Su02lwxxYgfezjq0mN2EMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvX2R2bnhidEs3VGFYREhGaUI5N09PclNZM1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWb94AwQE W3tAMA0GCSqGSIb3DQEBCwUAA4IBAQC/iHXzQdg50Vp4QuHg/Rl1+rrYq1dRB0jl iAWTUHRTWeIWfyFiHlArZvM3D63Rp1Ohs00W1dJk3WvfNrgmVdP5CoilBVP2wnC6 jV6U5SXF4eu5n0F5K9lGEvClAR+0yg6syz0OEuueUHxmkGD2CcC6y3rrw6RNWswY Vy2bV76qm3yylKNoW0zA3tu9PcCXM6aQaKWQuK9DyJ0zigkpHN0GKhADr/u2YlFG e9Us23k8raH0FUlHfzItHZ7bvt4YnQVGTFR5sRtspAAlSCJcw4+1yK0DrJFFaGOM LJEg2WQZpwb+uUbH7mirP3T7Y9EiOprDXds0EhTd9ixfKumErOvx -----END CERTIFICATE-----Generated at Mon Jan 12 00:54:07 2026 by rpki-client