This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/dPHqIY7qbdPlJuiUMKI9vu705BQ.roa File: dPHqIY7qbdPlJuiUMKI9vu705BQ.roa (raw, json) Hash identifier: iEFUmiIqI94qx/d/ZIh+kjuR+jCUesRKMo6DZPKrgqY= Subject key identifier: 74:F1:EA:21:8E:EA:6D:D3:E5:26:E8:94:30:A2:3D:BE:EE:F4:E4:14 Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3 Certificate serial: 019B7F85323E7ADFA253B2AD18CCA2F646A5 Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/dPHqIY7qbdPlJuiUMKI9vu705BQ.roa Signing time: Fri 02 Jan 2026 16:23:14 +0000 ROA not before: Fri 02 Jan 2026 16:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203462 IP address blocks: 2.57.84.0/22 maxlen: 24 2.57.84.0/24 maxlen: 24 2.57.85.0/24 maxlen: 24 2.57.86.0/24 maxlen: 24 2.57.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:32:3e:7a:df:a2:53:b2:ad:18:cc:a2:f6:46:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3 Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74f1ea218eea6dd3e526e89430a23dbeeef4e414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:42:ef:cc:eb:10:97:c2:10:23:36:69:7b: ee:c3:13:14:2b:ae:d7:40:f4:c4:9e:04:fa:ce:25: 31:ee:00:e6:15:19:11:ef:f2:8a:1c:df:b5:4c:0a: fc:4f:2a:90:90:fa:32:41:0f:03:eb:91:82:56:9b: 6d:a1:92:e7:43:16:03:3a:ac:d3:1b:c8:be:d2:19: 80:db:ad:54:34:ed:0b:41:b3:a1:97:30:b5:d2:de: 19:4e:bd:f1:c8:3c:10:e9:a2:5d:c5:da:65:e4:a2: 92:50:ed:07:e5:0b:df:a6:5b:39:4e:a4:d8:a8:7a: 46:36:1d:24:c5:38:1f:c5:72:5d:03:cb:8f:22:ef: 8b:e0:96:33:c1:f5:70:73:5c:d5:54:dd:09:ca:9f: f2:6d:48:fb:2d:dd:50:f6:be:84:49:bc:ec:a2:22: 40:42:5c:5c:e6:18:e8:8b:6e:19:42:62:e7:db:d8: 26:dd:c2:73:31:2b:b6:ea:29:bd:52:10:d6:c5:a3: 28:66:50:0f:f5:14:51:62:58:98:5c:a4:0a:7b:14: a6:a0:c5:92:55:23:69:90:ad:b7:8f:e3:17:75:6f: c3:61:d8:d5:c9:1b:c4:31:1f:73:5c:55:22:fc:3e: ef:a1:26:be:20:04:a7:3d:61:f6:ee:2f:ad:60:2f: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F1:EA:21:8E:EA:6D:D3:E5:26:E8:94:30:A2:3D:BE:EE:F4:E4:14 X509v3 Authority Key Identifier: keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/dPHqIY7qbdPlJuiUMKI9vu705BQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.84.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:9b:1b:8f:f0:9f:c1:4b:65:d6:b7:53:cc:98:22:cf:b0:4a: df:10:0d:e5:7a:83:89:1a:ee:cf:c2:10:90:74:96:15:b8:5e: 25:05:16:df:e4:97:c0:ab:70:f8:04:44:80:b3:ac:df:6d:40: 21:9c:a4:f9:68:89:24:a8:f4:55:a6:4b:6c:ba:bc:79:72:e0: 60:ed:42:e6:58:91:08:f4:1c:87:98:86:d2:ca:5a:de:77:00: eb:7a:fe:2b:e6:27:81:c6:85:81:1c:b2:ca:83:56:0b:7c:0d: 30:0b:5c:5f:f8:aa:02:64:42:c0:77:2a:7a:fd:9e:2d:fe:1e: 03:e1:3b:98:39:a9:a7:c2:3b:f3:1a:d0:a6:a8:4e:ba:6e:28: 8b:ad:22:2a:58:39:4f:fa:7c:f6:0e:8d:8c:9c:76:e7:eb:48: 61:32:59:e3:52:53:4b:73:ab:e2:e5:93:e0:bc:8a:e7:cc:5e: 5e:fc:b4:b7:7a:55:3e:6a:94:46:ac:40:00:39:9f:8b:76:9e: 40:65:d8:b6:5c:33:94:f5:ce:c6:d4:0c:a9:f1:bd:6d:c6:a4: 27:00:12:c3:51:c2:65:95:65:af:3a:5e:46:15:1d:39:0a:f7: 4a:16:91:6c:f0:5b:70:a8:44:f5:18:9e:69:ff:2e:a5:1f:be: 5b:3a:a8:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTI+et+iU7KtGMyi9kalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTEwNmRhYWQzYTk3M2ZkZTk4OTE0ZjdjYzFjY2QzNWQ4 Y2MzYzMwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGYxZWEyMThlZWE2ZGQzZTUyNmU4OTQzMGEyM2RiZWVlZjRlNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZhC78zrEJfCECM2aXvuwxMUK67X QPTEngT6ziUx7gDmFRkR7/KKHN+1TAr8TyqQkPoyQQ8D65GCVpttoZLnQxYDOqzT G8i+0hmA261UNO0LQbOhlzC10t4ZTr3xyDwQ6aJdxdpl5KKSUO0H5Qvfpls5TqTY qHpGNh0kxTgfxXJdA8uPIu+L4JYzwfVwc1zVVN0Jyp/ybUj7Ld1Q9r6ESbzsoiJA Qlxc5hjoi24ZQmLn29gm3cJzMSu26im9UhDWxaMoZlAP9RRRYliYXKQKexSmoMWS VSNpkK23j+MXdW/DYdjVyRvEMR9zXFUi/D7voSa+IASnPWH27i+tYC8aNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHTx6iGO6m3T5SbolDCiPb7u9OQUMB8GA1UdIwQY MBaAFMhRBtqtOpc/3piRT3zBzNNdjMPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUt ZmVmNDg3MTJhY2FiLzEvZFBIcUlZN3FiZFBsSnVpVU1LSTl2dTcwNUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUtZmVmNDg3MTJhY2Fi LzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjlUMA0G CSqGSIb3DQEBCwUAA4IBAQB/mxuP8J/BS2XWt1PMmCLPsErfEA3leoOJGu7PwhCQ dJYVuF4lBRbf5JfAq3D4BESAs6zfbUAhnKT5aIkkqPRVpktsurx5cuBg7ULmWJEI 9ByHmIbSylredwDrev4r5ieBxoWBHLLKg1YLfA0wC1xf+KoCZELAdyp6/Z4t/h4D 4TuYOamnwjvzGtCmqE66biiLrSIqWDlP+nz2Do2MnHbn60hhMlnjUlNLc6vi5ZPg vIrnzF5e/LS3elU+apRGrEAAOZ+Ldp5AZdi2XDOU9c7G1Ayp8b1txqQnABLDUcJl lWWvOl5GFR05CvdKFpFs8FtwqET1GJ5p/y6lH75bOqg/ -----END CERTIFICATE-----Generated at Thu Feb 5 13:37:27 2026 by rpki-client