This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/DzxlgYolYmYrOw6dLtHYtuvzTW4.roa File: DzxlgYolYmYrOw6dLtHYtuvzTW4.roa (raw, json) Hash identifier: snxX9+Dmsgw6Tf7GTwWvTcPR+yOEzI9Wj8zN8W2eCBE= Subject key identifier: 0F:3C:65:81:8A:25:62:66:2B:3B:0E:9D:2E:D1:D8:B6:EB:F3:4D:6E Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10 Certificate serial: 019B7E382BCF86E37125DB8C2D8B94AB6B25 Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/DzxlgYolYmYrOw6dLtHYtuvzTW4.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.24.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2b:cf:86:e3:71:25:db:8c:2d:8b:94:ab:6b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f3c65818a2562662b3b0e9d2ed1d8b6ebf34d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:96:62:2e:c9:12:f3:67:68:52:62:20:22: b2:ac:f6:52:83:c3:ae:41:72:50:05:86:a3:ec:5c: f6:90:0f:d2:39:58:7f:66:db:c1:d5:ac:66:f9:71: 94:53:09:a0:7a:9f:ab:b4:6d:04:cd:a9:9d:56:a9: 37:61:bb:b8:c0:d2:0a:2d:e7:eb:e2:59:cb:38:01: 41:ed:ab:d9:f2:b9:05:43:84:a4:b9:15:43:c6:ad: a0:ca:ce:d4:33:c6:c7:2c:4f:a2:83:c0:83:37:b4: cc:3f:ea:69:52:0f:3e:7f:e6:5d:cb:2e:7e:08:f3: 46:2a:d4:92:c9:c5:c1:3b:aa:ea:b0:47:93:9d:c9: 36:9b:15:ea:9e:5a:71:48:c9:a1:7a:df:d4:55:50: 7f:0d:b2:4d:a2:c9:69:28:cd:3f:31:7e:2a:9c:b6: 19:91:bc:c3:b3:30:7e:2a:aa:f0:ad:54:4f:ab:71: dc:2e:b7:a6:ba:3b:f8:eb:32:07:f2:dc:8f:ca:54: 9a:61:4a:15:5f:d7:34:06:73:44:d1:47:fd:b5:3d: 7a:51:ce:fb:21:b8:59:66:02:9d:a8:29:01:87:42: 2b:5f:ef:79:08:51:2c:72:a7:50:77:e5:dd:0d:de: e6:7b:05:49:64:e0:c4:73:41:8f:52:7c:b9:8c:41: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3C:65:81:8A:25:62:66:2B:3B:0E:9D:2E:D1:D8:B6:EB:F3:4D:6E X509v3 Authority Key Identifier: keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/DzxlgYolYmYrOw6dLtHYtuvzTW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.42.0/23 Signature Algorithm: sha256WithRSAEncryption 18:05:7f:13:32:0d:81:b1:78:2a:0b:d0:7b:48:82:8b:86:7d: 65:b0:94:ab:06:01:6b:46:db:20:d3:50:1e:55:87:64:3a:6e: ff:8e:52:93:25:dc:a6:c3:99:2d:1a:07:c7:42:a2:d4:02:f3: b4:e8:41:91:e1:2c:8f:7e:de:77:99:fc:46:0e:c8:f4:1c:65: 46:f2:f6:cf:b1:91:de:6c:70:00:cf:46:33:c6:31:eb:91:81: 94:86:d9:7f:e9:d0:88:e8:87:35:03:b0:07:15:ff:7d:05:6f: c4:ad:32:71:ec:c1:1e:22:36:7a:86:ea:c2:ab:9c:8d:26:73: 96:e2:69:ff:98:2e:c3:fe:aa:32:43:b3:4d:a4:da:df:5e:96: 08:87:27:9f:de:78:74:56:b5:3c:32:1b:a4:8d:3a:5f:55:ba: b8:7e:42:72:ce:08:f5:f0:20:7c:92:a4:63:e0:af:4e:5f:02: 13:96:0f:a5:e4:c2:28:f4:58:9c:80:d0:8b:8d:93:17:ea:f3: f6:22:e8:c0:c4:aa:30:b5:6f:aa:8f:5d:9a:a6:e1:15:ad:8f: 5c:ea:c4:f8:59:07:16:83:03:a8:f2:4f:aa:1b:c8:00:3e:d4: 08:40:be:71:1e:c6:2d:33:39:23:8a:aa:3a:26:de:ce:d8:93: e5:6c:f7:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCvPhuNxJduMLYuUq2slMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3 YzBlMTAwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjNjNjU4MThhMjU2MjY2MmIzYjBlOWQyZWQxZDhiNmViZjM0ZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0GWYi7JEvNnaFJiICKyrPZSg8Ou QXJQBYaj7Fz2kA/SOVh/ZtvB1axm+XGUUwmgep+rtG0EzamdVqk3Ybu4wNIKLefr 4lnLOAFB7avZ8rkFQ4SkuRVDxq2gys7UM8bHLE+ig8CDN7TMP+ppUg8+f+Zdyy5+ CPNGKtSSycXBO6rqsEeTnck2mxXqnlpxSMmhet/UVVB/DbJNoslpKM0/MX4qnLYZ kbzDszB+KqrwrVRPq3HcLremujv46zIH8tyPylSaYUoVX9c0BnNE0Uf9tT16Uc77 IbhZZgKdqCkBh0IrX+95CFEscqdQd+XdDd7mewVJZODEc0GPUny5jEGk0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA88ZYGKJWJmKzsOnS7R2Lbr801uMB8GA1UdIwQY MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt MDdlMzZlZmM1ZTQyLzEvRHp4bGdZb2xZbVlyT3c2ZEx0SFl0dXZ6VFc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRgqMA0G CSqGSIb3DQEBCwUAA4IBAQAYBX8TMg2BsXgqC9B7SIKLhn1lsJSrBgFrRtsg01Ae VYdkOm7/jlKTJdymw5ktGgfHQqLUAvO06EGR4SyPft53mfxGDsj0HGVG8vbPsZHe bHAAz0YzxjHrkYGUhtl/6dCI6Ic1A7AHFf99BW/ErTJx7MEeIjZ6hurCq5yNJnOW 4mn/mC7D/qoyQ7NNpNrfXpYIhyef3nh0VrU8MhukjTpfVbq4fkJyzgj18CB8kqRj 4K9OXwITlg+l5MIo9FicgNCLjZMX6vP2IujAxKowtW+qj12apuEVrY9c6sT4WQcW gwOo8k+qG8gAPtQIQL5xHsYtMzkjiqo6Jt7O2JPlbPeG -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:20 2026 by rpki-client