This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dZvvGjppIllcLNGXvIZuNHPfltU.roa File: dZvvGjppIllcLNGXvIZuNHPfltU.roa (raw, json) Hash identifier: 17i6LdqdUZJMb+qMQBAIhpm7+Juiy/kSoF+nd9HHc1k= Subject key identifier: 75:9B:EF:1A:3A:69:22:59:5C:2C:D1:97:BC:86:6E:34:73:DF:96:D5 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F855A48308E42E49A9E17C9A069EA0C Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dZvvGjppIllcLNGXvIZuNHPfltU.roa Signing time: Fri 02 Jan 2026 16:23:24 +0000 ROA not before: Fri 02 Jan 2026 16:23:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198071 IP address blocks: 194.87.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5a:48:30:8e:42:e4:9a:9e:17:c9:a0:69:ea:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=759bef1a3a6922595c2cd197bc866e3473df96d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:63:5a:6a:61:4d:98:16:f1:78:a0:cd:8b: e0:e3:6f:63:3f:fb:ae:cd:fe:43:6c:12:12:76:60: e8:5f:98:04:d6:a2:1e:00:b2:fb:29:f1:ee:1a:c2: 6b:48:53:07:2f:69:29:63:02:af:d3:2b:a4:02:b0: 8c:4f:a3:d2:b7:58:b4:8f:9f:bd:20:5f:78:c7:b0: d5:63:3d:46:bd:72:ab:ad:d4:bd:46:a2:6b:3a:eb: bf:16:ed:53:df:d5:df:8b:ed:b1:11:cc:74:c5:3d: 29:05:17:47:3d:2c:f4:d7:5a:b2:7f:1c:66:9b:9a: e2:93:b0:90:ad:31:a2:29:bd:32:11:5c:5a:03:1a: bb:8f:e0:56:95:1a:b1:18:89:c8:ee:d1:33:50:76: 65:bb:1a:1d:9a:07:44:3c:0f:5e:80:b0:bd:47:36: 6b:84:6c:92:77:0f:2e:2e:ce:5e:af:7b:0c:0b:16: 0e:74:81:bc:e7:dd:16:b7:e1:bb:19:de:ea:b1:29: 08:ff:cc:78:af:ae:f5:6c:3c:44:8b:47:57:13:d6: ef:c9:93:6c:38:bd:dd:00:63:ae:a8:e2:34:b5:db: 30:22:b7:d9:4d:0b:5f:3f:58:42:6d:e2:3e:1e:6c: 6d:e4:cc:82:45:1f:b1:49:2c:a7:45:35:07:13:d5: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9B:EF:1A:3A:69:22:59:5C:2C:D1:97:BC:86:6E:34:73:DF:96:D5 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dZvvGjppIllcLNGXvIZuNHPfltU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.141.0/24 Signature Algorithm: sha256WithRSAEncryption 72:66:82:d5:e0:29:6a:30:e3:14:af:0e:a1:55:23:d4:f0:ab: 1b:2b:3d:22:74:3c:f9:23:8a:a8:8c:2d:45:00:3f:ba:6d:20: 85:7d:de:cf:6e:2a:69:bf:c1:fa:97:41:63:61:4e:37:22:08: 66:b6:ed:0d:59:50:f5:e6:da:18:f9:5f:a2:97:aa:89:87:ea: 61:e1:2e:aa:4b:41:8c:6d:33:82:9d:15:18:24:46:b2:0c:d7: 3c:c5:d5:64:02:8b:aa:de:be:3a:65:e2:d2:ea:47:b7:52:98: ac:cc:70:b7:46:20:39:6f:4a:0a:47:f4:d2:09:84:7f:6c:6c: 92:59:be:5a:cb:e5:6e:bd:9e:ee:74:0c:7d:67:ef:a9:fc:f4: af:f9:df:08:c7:85:70:57:2e:48:eb:9d:7e:cf:5a:ae:cb:b9: d8:76:96:2e:ec:33:30:32:a9:4a:5f:3a:53:18:ca:33:a8:d9: 44:ea:b6:dc:0e:53:3f:b0:dd:97:bb:03:68:41:4e:7d:a2:61: 05:e8:0f:c8:ae:ba:41:a0:5f:88:76:69:1b:bb:25:ae:69:da: 83:1d:2e:59:9f:a5:0d:5f:75:ad:ad:5c:22:10:fb:56:67:9a: 91:f2:eb:bd:42:dd:6f:f9:c8:46:be:d1:99:2c:93:95:09:1a: e9:1c:52:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hVpIMI5C5JqeF8mgaeoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTliZWYxYTNhNjkyMjU5NWMyY2QxOTdiYzg2NmUzNDczZGY5NmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpljWmphTZgW8XigzYvg429jP/uu zf5DbBISdmDoX5gE1qIeALL7KfHuGsJrSFMHL2kpYwKv0yukArCMT6PSt1i0j5+9 IF94x7DVYz1GvXKrrdS9RqJrOuu/Fu1T39Xfi+2xEcx0xT0pBRdHPSz011qyfxxm m5rik7CQrTGiKb0yEVxaAxq7j+BWlRqxGInI7tEzUHZluxodmgdEPA9egLC9RzZr hGySdw8uLs5er3sMCxYOdIG8590Wt+G7Gd7qsSkI/8x4r671bDxEi0dXE9bvyZNs OL3dAGOuqOI0tdswIrfZTQtfP1hCbeI+Hmxt5MyCRR+xSSynRTUHE9UUlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWb7xo6aSJZXCzRl7yGbjRz35bVMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvZFp2dkdqcHBJbGxjTE5HWHZJWnVOSFBmbHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwleNMA0G CSqGSIb3DQEBCwUAA4IBAQByZoLV4ClqMOMUrw6hVSPU8KsbKz0idDz5I4qojC1F AD+6bSCFfd7Pbippv8H6l0FjYU43Ighmtu0NWVD15toY+V+il6qJh+ph4S6qS0GM bTOCnRUYJEayDNc8xdVkAouq3r46ZeLS6ke3UpiszHC3RiA5b0oKR/TSCYR/bGyS Wb5ay+VuvZ7udAx9Z++p/PSv+d8Ix4VwVy5I651+z1quy7nYdpYu7DMwMqlKXzpT GMozqNlE6rbcDlM/sN2XuwNoQU59omEF6A/IrrpBoF+IdmkbuyWuadqDHS5Zn6UN X3WtrVwiEPtWZ5qR8uu9Qt1v+chGvtGZLJOVCRrpHFIq -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client