This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/dpXdts3AfZLIoFXIbwsOROmN3kw.roa File: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (raw, json) Hash identifier: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4= Subject key identifier: 76:95:DD:B6:CD:C0:7D:92:C8:A0:55:C8:6F:0B:0E:44:E9:8D:DE:4C Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Certificate serial: 019B7AC92EBB43DFC5AEAAB4202D698A54EF Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/dpXdts3AfZLIoFXIbwsOROmN3kw.roa Signing time: Thu 01 Jan 2026 18:19:23 +0000 ROA not before: Thu 01 Jan 2026 18:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207633 IP address blocks: 45.80.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:2e:bb:43:df:c5:ae:aa:b4:20:2d:69:8a:54:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Validity Not Before: Jan 1 18:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7695ddb6cdc07d92c8a055c86f0b0e44e98dde4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:3f:51:df:94:83:fa:3e:34:84:9f:78:a9: bd:c4:4f:c1:a2:95:ac:15:1e:22:1e:87:51:29:d3: 4b:4a:75:b9:ea:7e:95:2b:b2:96:87:0d:b5:f5:21: 7f:7a:13:89:20:de:32:6b:b0:66:f4:1c:ce:60:53: 88:27:b3:24:05:da:ba:06:e0:25:0c:79:9e:98:0c: cf:64:8f:38:56:1b:e0:0e:c7:24:07:00:88:ec:94: f1:20:d6:2d:d7:50:b1:f3:a9:ac:59:4e:ae:ea:00: 6a:f3:c3:39:39:84:e5:34:f2:91:d1:d2:68:84:93: 40:71:e6:de:84:c5:dd:59:86:91:5f:bd:a5:ee:07: f0:87:52:89:e4:e6:9d:f5:d2:dc:34:53:01:2e:28: b9:0f:9c:be:ac:ca:29:eb:7c:25:25:00:68:f7:07: 33:e2:04:ee:09:c5:66:cd:a3:a8:24:28:bf:b7:4c: f4:52:f1:ff:0f:c9:fa:c2:fd:95:58:94:c0:dd:ee: be:53:a7:59:34:cd:6b:97:2c:7c:59:cd:f4:a3:a2: 25:c9:5b:c3:78:4a:60:fd:76:d6:eb:1a:15:b2:f8: 98:de:0b:8a:a2:8e:70:32:4c:15:4e:5e:f1:6a:be: fd:a5:92:66:d8:7b:26:c8:08:fd:3c:de:26:82:19: df:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:95:DD:B6:CD:C0:7D:92:C8:A0:55:C8:6F:0B:0E:44:E9:8D:DE:4C X509v3 Authority Key Identifier: keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/dpXdts3AfZLIoFXIbwsOROmN3kw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.174.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:f9:2b:97:87:9e:fe:ed:9d:91:94:9c:5a:54:26:0e:9c:2e: 30:1e:1d:b6:d5:4e:a0:38:f5:66:46:b5:e6:1a:5f:55:2e:f9: cb:87:31:ed:2e:8d:4a:d8:09:48:ad:85:4c:ec:fe:fb:06:25: cb:76:30:6f:e1:47:47:bd:dd:ac:f5:56:79:de:f6:86:31:2f: 58:91:f5:ad:33:a2:58:8f:c5:67:8b:44:a0:da:ae:64:ad:93: e3:53:6e:b9:d8:03:96:f4:17:d2:80:08:bc:1b:fd:6e:fa:9a: b9:de:c0:d3:78:69:b8:e3:11:c6:98:83:0c:1c:c7:3c:09:d3: a1:d5:7c:c3:39:a6:bf:d0:b7:fe:4c:4f:f6:3f:11:93:c6:72: 7d:f4:b5:42:3a:30:7f:5e:dd:9f:ff:54:fd:c2:ea:a8:8d:f5: a8:30:62:a2:73:4e:ae:f6:be:4e:c5:19:bf:3f:a6:57:62:1e: 7f:94:13:60:e4:a4:71:4c:5c:82:e2:98:e6:1e:54:cd:49:7e: ae:15:74:9d:b9:64:a4:3f:a5:34:42:31:d8:7e:59:1a:4a:a5: 61:64:48:37:43:f5:d8:6c:41:28:62:1f:b6:96:a9:ab:d5:7c: 71:1e:e1:5e:ea:61:4d:45:1f:f3:a8:19:25:46:61:74:f3:c7: eb:3e:13:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yS67Q9/Frqq0IC1pilTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm YWM5YWUwHhcNMjYwMTAxMTgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njk1ZGRiNmNkYzA3ZDkyYzhhMDU1Yzg2ZjBiMGU0NGU5OGRkZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwA/Ud+Ug/o+NISfeKm9xE/BopWs FR4iHodRKdNLSnW56n6VK7KWhw219SF/ehOJIN4ya7Bm9BzOYFOIJ7MkBdq6BuAl DHmemAzPZI84VhvgDsckBwCI7JTxINYt11Cx86msWU6u6gBq88M5OYTlNPKR0dJo hJNAcebehMXdWYaRX72l7gfwh1KJ5Oad9dLcNFMBLii5D5y+rMop63wlJQBo9wcz 4gTuCcVmzaOoJCi/t0z0UvH/D8n6wv2VWJTA3e6+U6dZNM1rlyx8Wc30o6IlyVvD eEpg/XbW6xoVsviY3guKoo5wMkwVTl7xar79pZJm2HsmyAj9PN4mghnfQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHaV3bbNwH2SyKBVyG8LDkTpjd5MMB8GA1UdIwQY MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt MjY3NjY5ZjM1NjQ4LzEvZHBYZHRzM0FmWkxJb0ZYSWJ3c09ST21OM2t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4 LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVCuMA0G CSqGSIb3DQEBCwUAA4IBAQAN+SuXh57+7Z2RlJxaVCYOnC4wHh221U6gOPVmRrXm Gl9VLvnLhzHtLo1K2AlIrYVM7P77BiXLdjBv4UdHvd2s9VZ53vaGMS9YkfWtM6JY j8Vni0Sg2q5krZPjU2652AOW9BfSgAi8G/1u+pq53sDTeGm44xHGmIMMHMc8CdOh 1XzDOaa/0Lf+TE/2PxGTxnJ99LVCOjB/Xt2f/1T9wuqojfWoMGKic06u9r5OxRm/ P6ZXYh5/lBNg5KRxTFyC4pjmHlTNSX6uFXSduWSkP6U0QjHYflkaSqVhZEg3Q/XY bEEoYh+2lqmr1XxxHuFe6mFNRR/zqBklRmF088frPhP9 -----END CERTIFICATE-----Generated at Wed Jan 21 16:14:48 2026 by rpki-client