This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DkBgdHllLtaqpYXM-pvAef56JHY.roa File: DkBgdHllLtaqpYXM-pvAef56JHY.roa (raw, json) Hash identifier: tReyGStF+T4CVIKvmr7roP5yPhn13IvflNhWsJRhH6U= Subject key identifier: 0E:40:60:74:79:65:2E:D6:AA:A5:85:CC:FA:9B:C0:79:FE:7A:24:76 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA76C0E58B0F605520C22D1BB79FBF6 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DkBgdHllLtaqpYXM-pvAef56JHY.roa Signing time: Fri 02 Jan 2026 12:20:59 +0000 ROA not before: Fri 02 Jan 2026 12:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400529 IP address blocks: 45.155.64.0/24 maxlen: 24 80.244.15.0/24 maxlen: 24 94.103.187.0/24 maxlen: 24 176.118.33.0/24 maxlen: 24 185.244.106.0/24 maxlen: 24 194.69.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6c:0e:58:b0:f6:05:52:0c:22:d1:bb:79:fb:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e40607479652ed6aaa585ccfa9bc079fe7a2476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bc:bc:54:a7:84:f2:23:1b:cc:00:ab:cf:7e: 3e:33:8e:4d:b6:33:d3:cb:1f:ee:8b:f2:b8:5c:e6: a0:57:b5:b7:9e:95:76:0f:a3:d9:96:2a:ef:9d:30: 53:4a:51:e5:7b:0e:4c:cd:8f:cc:ac:4c:09:fe:b3: 75:58:86:e4:82:97:3f:4b:a9:00:90:c3:d1:1e:7f: 6e:df:17:a5:a1:62:db:a7:bf:e3:13:3b:94:a9:3f: f1:9e:0d:55:56:05:3c:fe:0f:47:ce:e0:15:22:66: 3e:64:97:07:67:73:e2:75:a8:0b:54:84:29:56:47: 36:e4:6d:8c:98:c7:38:7b:4b:bc:bf:17:b5:ce:f5: 3d:5d:b2:1d:fb:20:e9:7f:d7:0d:48:d3:92:0d:77: 36:34:7d:02:71:f7:4c:f9:61:86:7b:3f:a1:f5:37: 91:50:a8:0d:fa:55:34:42:fb:66:3b:63:67:3f:de: b2:1e:13:2f:c8:29:bd:4f:2c:24:df:a1:af:b7:8b: fa:7b:22:ad:33:4c:d2:7d:52:64:de:27:ce:f5:cf: e3:69:53:78:b3:40:40:5b:61:e0:0c:89:3f:97:2a: 9d:df:57:78:86:05:42:2a:39:3d:4c:45:39:f6:f1: ba:45:9a:af:3c:33:86:f6:a3:80:8b:e8:eb:0c:64: 87:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:40:60:74:79:65:2E:D6:AA:A5:85:CC:FA:9B:C0:79:FE:7A:24:76 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DkBgdHllLtaqpYXM-pvAef56JHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.64.0/24 80.244.15.0/24 94.103.187.0/24 176.118.33.0/24 185.244.106.0/24 194.69.160.0/24 Signature Algorithm: sha256WithRSAEncryption db:92:53:22:52:ce:90:91:e0:00:b0:16:eb:37:b9:0a:dc:4e: c3:2f:f9:d8:d8:de:8e:97:e2:ed:c1:56:cd:f9:c7:29:d0:fa: 5e:cc:75:f5:6b:23:80:1f:76:39:00:16:16:77:ee:c9:d0:85: 44:ca:13:d4:55:28:60:23:d3:b7:13:f2:ac:f8:9e:4d:0a:1e: b2:b9:60:27:15:14:01:68:8a:10:bd:68:1d:2b:3c:20:aa:68: 25:08:d5:c6:94:73:04:77:25:22:18:c8:98:b0:c4:71:d2:43: be:dc:7d:7a:5f:79:bd:9e:7e:8f:1c:c6:d8:60:17:f0:8b:c6: ab:34:61:d5:3e:2d:76:d9:a1:2c:da:b7:92:d5:15:ee:86:bd: 32:2f:6d:33:3b:2a:ef:0f:9d:47:69:27:58:18:1f:f7:16:71: 68:8a:23:b8:29:12:27:1a:75:3f:46:2c:f8:5d:5a:23:3d:6a: a7:ef:27:82:73:c5:4e:d3:a4:18:07:2d:3a:dd:c4:ee:aa:6f: 7e:94:09:9f:04:53:c7:e4:89:e6:1a:5c:b3:b3:47:83:0e:1a: 89:db:a0:2f:8a:11:ee:0d:ab:04:e5:10:1c:63:48:bb:b3:68: 0b:04:71:11:55:5f:68:1f:eb:ff:87:61:28:b7:77:7e:b6:69: 54:62:82:a8 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+p2wOWLD2BVIMItG7efv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTQwNjA3NDc5NjUyZWQ2YWFhNTg1Y2NmYTliYzA3OWZlN2EyNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+by8VKeE8iMbzACrz34+M45NtjPT yx/ui/K4XOagV7W3npV2D6PZlirvnTBTSlHlew5MzY/MrEwJ/rN1WIbkgpc/S6kA kMPRHn9u3xeloWLbp7/jEzuUqT/xng1VVgU8/g9HzuAVImY+ZJcHZ3PidagLVIQp Vkc25G2MmMc4e0u8vxe1zvU9XbId+yDpf9cNSNOSDXc2NH0CcfdM+WGGez+h9TeR UKgN+lU0QvtmO2NnP96yHhMvyCm9Tywk36Gvt4v6eyKtM0zSfVJk3ifO9c/jaVN4 s0BAW2HgDIk/lyqd31d4hgVCKjk9TEU59vG6RZqvPDOG9qOAi+jrDGSHhwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFA5AYHR5ZS7WqqWFzPqbwHn+eiR2MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvRGtCZ2RIbGxMdGFxcFlYTS1wdkFlZjU2SkhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALZtAAwQA UPQPAwQAXme7AwQAsHYhAwQAufRqAwQAwkWgMA0GCSqGSIb3DQEBCwUAA4IBAQDb klMiUs6QkeAAsBbrN7kK3E7DL/nY2N6Ol+LtwVbN+ccp0PpezHX1ayOAH3Y5ABYW d+7J0IVEyhPUVShgI9O3E/Ks+J5NCh6yuWAnFRQBaIoQvWgdKzwgqmglCNXGlHME dyUiGMiYsMRx0kO+3H16X3m9nn6PHMbYYBfwi8arNGHVPi122aEs2reS1RXuhr0y L20zOyrvD51HaSdYGB/3FnFoiiO4KRInGnU/Riz4XVojPWqn7yeCc8VO06QYBy06 3cTuqm9+lAmfBFPH5InmGlyzs0eDDhqJ26AvihHuDasE5RAcY0i7s2gLBHERVV9o H+v/h2Eot3d+tmlUYoKo -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:00 2026 by rpki-client