This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa File: dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa (raw, json) Hash identifier: AS2PEdg4UVrkHexwfvP85NaTExj06DZhVZRZTbTSV2U= Subject key identifier: 76:10:3D:DA:94:7C:35:53:CB:C9:6E:A6:CC:AD:17:1F:2E:99:81:69 Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e Certificate serial: 019B7F81FB6AFDDE900B17C587C037A29961 Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa Signing time: Fri 02 Jan 2026 16:19:43 +0000 ROA not before: Fri 02 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198024 IP address blocks: 31.172.152.0/21 maxlen: 21 37.44.48.0/21 maxlen: 21 185.59.116.0/22 maxlen: 22 185.127.60.0/22 maxlen: 22 185.127.84.0/22 maxlen: 22 185.227.44.0/22 maxlen: 22 2a03:7b80::/32 maxlen: 32 2a06:c780::/29 maxlen: 29 2a06:c840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:fb:6a:fd:de:90:0b:17:c5:87:c0:37:a2:99:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e Validity Not Before: Jan 2 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76103dda947c3553cbc96ea6ccad171f2e998169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7b:ea:97:5d:d6:ec:86:02:b5:38:49:c1:ce: e0:07:77:a8:4e:53:8a:30:1b:0b:3b:8a:33:a7:aa: 15:cb:f6:4f:a4:51:88:80:24:da:26:d2:8a:48:07: f2:21:36:a3:94:94:a2:07:e2:1c:12:f0:74:5b:a4: ad:98:7b:25:fd:71:df:55:79:a4:2a:b8:52:1c:b8: 83:6b:8c:59:30:01:68:59:19:04:fc:82:d1:2d:ba: f3:76:93:be:46:0e:9a:5a:54:d2:e8:00:97:f9:54: eb:49:82:68:7c:64:85:17:88:cb:ff:e1:fa:ae:2e: fe:a8:ee:6c:11:96:69:45:3b:da:45:fa:30:43:79: ae:73:82:a0:1d:aa:78:c2:a5:84:a0:0d:3c:8e:b5: 35:f5:d2:d4:7e:46:b5:25:fb:91:c0:0e:1a:59:dd: 6f:a0:a3:82:5c:18:74:55:2f:98:57:ef:2c:8d:78: 4a:e1:33:14:b6:7a:73:81:99:60:13:f1:0e:09:92: 57:de:c3:29:7d:4a:ef:0d:fc:d2:8a:86:a8:3d:0c: 0e:69:18:d0:54:4e:4f:56:45:ae:63:02:67:2f:0e: bc:14:63:ee:21:47:34:a0:88:cc:2e:88:1b:e5:c0: 9d:59:8f:30:3b:94:84:d3:d6:e7:f0:5d:c8:f7:f7: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:10:3D:DA:94:7C:35:53:CB:C9:6E:A6:CC:AD:17:1F:2E:99:81:69 X509v3 Authority Key Identifier: keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.152.0/21 37.44.48.0/21 185.59.116.0/22 185.127.60.0/22 185.127.84.0/22 185.227.44.0/22 IPv6: 2a03:7b80::/32 2a06:c780::/29 2a06:c840::/29 Signature Algorithm: sha256WithRSAEncryption a6:e2:b5:7a:6e:3d:00:1c:5b:61:de:23:78:e3:0f:c0:60:e1: 03:ba:65:28:83:f9:c5:f6:bc:92:83:a3:0a:44:8a:a8:03:47: 19:47:b1:85:7a:5e:e4:ec:6c:60:86:cf:be:88:fe:a9:ce:5c: b4:0b:03:69:39:6f:f8:80:09:b2:64:85:63:15:15:b0:70:5c: 00:5d:5e:9c:ab:82:66:21:7b:06:2a:60:99:a5:0f:af:b3:21: e0:e3:5e:1f:b5:53:3e:c5:5d:0e:d1:e3:6f:67:f6:53:ff:11: 8f:3a:ec:4a:43:a0:01:c6:ff:98:09:86:cd:92:cd:c7:f8:3d: 08:f3:b5:b7:f9:6a:f5:f2:55:a6:41:78:35:f0:58:9c:90:62: 1e:90:7f:de:f5:19:63:f0:64:32:e4:95:1e:cf:a9:32:a6:14: 63:bf:9a:e9:b8:3e:48:fb:75:55:97:8b:ba:9f:3e:bd:b1:8a: 51:c2:09:69:47:a7:c8:43:06:6a:e4:bd:2f:06:55:ee:d5:7a: 2d:25:30:30:31:d7:6e:e5:a9:27:f6:d7:4f:79:40:dd:e5:e9: f8:5b:64:d2:2c:b3:12:82:83:99:61:ce:1b:4d:ce:33:6f:9f: 15:e5:a7:9c:b7:09:3d:ac:c9:41:b1:60:e8:d7:92:58:92:e5: c5:a7:5a:5e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt/gftq/d6QCxfFh8A3oplhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDBmYzk2NDA0Mjg5YWM1OGI2MTA0N2RkZjg2MjE4N2Y1 YWIyN2UwHhcNMjYwMTAyMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjEwM2RkYTk0N2MzNTUzY2JjOTZlYTZjY2FkMTcxZjJlOTk4MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Hvql13W7IYCtThJwc7gB3eoTlOK MBsLO4ozp6oVy/ZPpFGIgCTaJtKKSAfyITajlJSiB+IcEvB0W6StmHsl/XHfVXmk KrhSHLiDa4xZMAFoWRkE/ILRLbrzdpO+Rg6aWlTS6ACX+VTrSYJofGSFF4jL/+H6 ri7+qO5sEZZpRTvaRfowQ3muc4KgHap4wqWEoA08jrU19dLUfka1JfuRwA4aWd1v oKOCXBh0VS+YV+8sjXhK4TMUtnpzgZlgE/EOCZJX3sMpfUrvDfzSioaoPQwOaRjQ VE5PVkWuYwJnLw68FGPuIUc0oIjMLogb5cCdWY8wO5SE09bn8F3I9/c2AQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFHYQPdqUfDVTy8lupsytFx8umYFpMB8GA1UdIwQY MBaAFKYA/JZAQomsWLYQR934Yhh/WrJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2Mjkt MjEyOGQ4NDBjNDI5LzEvZGhBOTJwUjhOVlBMeVc2bXpLMFhIeTZaZ1drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2MjktMjEyOGQ4NDBjNDI5 LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAqBAIAATAkAwQDH6yYAwQD JSwwAwQCuTt0AwQCuX88AwQCuX9UAwQCueMsMBsEAgACMBUDBQAqA3uAAwUDKgbH gAMFAyoGyEAwDQYJKoZIhvcNAQELBQADggEBAKbitXpuPQAcW2HeI3jjD8Bg4QO6 ZSiD+cX2vJKDowpEiqgDRxlHsYV6XuTsbGCGz76I/qnOXLQLA2k5b/iACbJkhWMV FbBwXABdXpyrgmYhewYqYJmlD6+zIeDjXh+1Uz7FXQ7R429n9lP/EY867EpDoAHG /5gJhs2Szcf4PQjztbf5avXyVaZBeDXwWJyQYh6Qf971GWPwZDLklR7PqTKmFGO/ mum4Pkj7dVWXi7qfPr2xilHCCWlHp8hDBmrkvS8GVe7Vei0lMDAx127lqSf21095 QN3l6fhbZNIssxKCg5lhzhtNzjNvnxXlp5y3CT2syUGxYOjXkliS5cWnWl4= -----END CERTIFICATE-----Generated at Tue Jan 27 00:30:17 2026 by rpki-client