This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dkg2cKArD_UoHzfRoyu_qd0I03Y.roa File: dkg2cKArD_UoHzfRoyu_qd0I03Y.roa (raw, json) Hash identifier: IrkR8aNLwLtdbVE4LcB+TUoxG29h6kVfhQZLJle+JO8= Subject key identifier: 76:48:36:70:A0:2B:0F:F5:28:1F:37:D1:A3:2B:BF:A9:DD:08:D3:76 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6D998DBE0F9A62AEF8B8024D0209 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dkg2cKArD_UoHzfRoyu_qd0I03Y.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.149.24.0/24 maxlen: 24 89.21.86.0/24 maxlen: 24 89.251.31.0/24 maxlen: 24 91.210.145.0/24 maxlen: 24 109.122.43.0/24 maxlen: 24 194.61.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6d:99:8d:be:0f:9a:62:ae:f8:b8:02:4d:02:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76483670a02b0ff5281f37d1a32bbfa9dd08d376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:dd:34:0a:e3:ee:0d:92:bb:91:1c:13:b7: c2:49:52:01:51:2a:28:f3:2c:ea:6d:a7:c8:d3:dc: 8b:d8:a2:19:d6:41:25:b3:85:ca:09:98:49:3c:a9: 01:a6:70:0b:e6:ac:94:84:05:1a:d8:4d:80:e8:19: 00:6f:3d:3a:f9:6c:3c:f4:80:83:ce:42:68:1f:56: 2c:9c:fd:c5:06:94:15:3f:6c:a4:2d:f2:b6:78:89: 5f:30:2b:05:5e:41:49:3d:25:cb:20:b4:50:80:05: 2f:29:17:d7:57:23:e4:92:d7:68:c5:74:41:87:21: e7:4e:e5:1a:0e:f0:65:21:2b:b1:e2:fa:2e:ed:29: ef:ec:03:54:a9:dc:ae:ea:09:4d:d7:82:93:c6:d9: 36:67:98:b3:11:5b:8e:ec:62:ff:04:bf:92:9a:df: e5:3b:fc:2e:03:dd:86:52:22:d7:b3:89:0c:d2:3c: de:42:a0:20:95:b1:b9:ec:13:9a:71:bb:50:7f:07: f9:81:39:5c:01:6b:f2:f3:56:d7:1d:71:d1:e6:98: 12:d6:fe:72:da:ac:84:72:d1:ba:78:fc:bb:da:1b: 3f:d6:d5:54:a4:cd:f4:8e:94:bf:87:a3:13:c3:90: 07:54:79:b6:72:0d:82:9b:db:1a:5d:6f:f5:ee:c9: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:48:36:70:A0:2B:0F:F5:28:1F:37:D1:A3:2B:BF:A9:DD:08:D3:76 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dkg2cKArD_UoHzfRoyu_qd0I03Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.24.0/24 89.21.86.0/24 89.251.31.0/24 91.210.145.0/24 109.122.43.0/24 194.61.75.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ca:9c:56:91:05:01:3f:d8:31:7d:e4:d4:9a:68:4d:33:e0: 83:68:d1:ba:43:d4:30:bf:35:c6:a5:84:a9:45:c6:f1:d5:0b: 27:76:25:eb:d4:a5:21:01:c7:09:5b:88:6b:6a:0c:d9:ab:ac: 66:1b:48:2a:fb:9f:01:b3:cd:e3:87:0d:4a:c1:21:c7:8f:11: 23:af:2f:1d:9f:11:09:9e:c1:a7:31:ce:fd:b2:a5:f0:3c:da: 87:a3:cf:a1:fc:3b:ce:bf:a8:9b:ee:d1:f0:26:6a:32:6e:7b: 28:f2:06:70:ac:2b:77:8d:74:40:63:96:c2:65:f7:37:96:0a: dd:c3:37:9a:f9:24:ca:11:0e:02:c9:29:b8:a0:2b:b1:a7:e3: 8a:b0:f1:6a:6f:75:69:34:02:e5:8f:0a:0d:11:87:98:d0:95: c3:d5:e3:2e:dc:b5:5e:80:58:a9:04:57:17:e8:e3:84:8b:25: 6d:49:ea:29:6f:c6:28:21:d2:1b:4c:65:d9:29:6b:75:da:b5: e1:76:06:4b:22:1a:53:b0:ea:50:36:42:5f:e0:1e:82:7c:2e: 65:49:47:9e:65:a3:e7:af:8c:b2:fa:03:f3:35:46:91:44:4a: 65:a8:7c:5a:6c:05:ec:1e:a8:0b:9e:25:88:81:d8:c1:39:f9: 02:e5:39:a2 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5fm2Zjb4PmmKu+LgCTQIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjQ4MzY3MGEwMmIwZmY1MjgxZjM3ZDFhMzJiYmZhOWRkMDhkMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6zdNArj7g2Su5EcE7fCSVIBUSoo 8yzqbafI09yL2KIZ1kEls4XKCZhJPKkBpnAL5qyUhAUa2E2A6BkAbz06+Ww89ICD zkJoH1YsnP3FBpQVP2ykLfK2eIlfMCsFXkFJPSXLILRQgAUvKRfXVyPkktdoxXRB hyHnTuUaDvBlISux4vou7Snv7ANUqdyu6glN14KTxtk2Z5izEVuO7GL/BL+Smt/l O/wuA92GUiLXs4kM0jzeQqAglbG57BOacbtQfwf5gTlcAWvy81bXHXHR5pgS1v5y 2qyEctG6ePy72hs/1tVUpM30jpS/h6MTw5AHVHm2cg2Cm9saXW/17sn/BQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHZINnCgKw/1KB830aMrv6ndCNN2MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvZGtnMmNLQXJEX1VvSHpmUm95dV9xZDBJMDNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALZUYAwQA WRVWAwQAWfsfAwQAW9KRAwQAbXorAwQAwj1LMA0GCSqGSIb3DQEBCwUAA4IBAQAj ypxWkQUBP9gxfeTUmmhNM+CDaNG6Q9QwvzXGpYSpRcbx1QsndiXr1KUhAccJW4hr agzZq6xmG0gq+58Bs83jhw1KwSHHjxEjry8dnxEJnsGnMc79sqXwPNqHo8+h/DvO v6ib7tHwJmoybnso8gZwrCt3jXRAY5bCZfc3lgrdwzea+STKEQ4CySm4oCuxp+OK sPFqb3VpNALljwoNEYeY0JXD1eMu3LVegFipBFcX6OOEiyVtSeopb8YoIdIbTGXZ KWt12rXhdgZLIhpTsOpQNkJf4B6CfC5lSUeeZaPnr4yy+gPzNUaRREplqHxabAXs HqgLniWIgdjBOfkC5Tmi -----END CERTIFICATE-----Generated at Thu Jan 8 12:55:35 2026 by rpki-client