This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa File: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (raw, json) Hash identifier: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0= Subject key identifier: 0F:39:BD:DD:EE:B2:A6:5B:5F:3D:1D:19:A0:3F:88:98:F2:11:60:21 Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd Certificate serial: 019B79102B3858BA49F26DD28967B83A8C4C Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa Signing time: Thu 01 Jan 2026 10:17:41 +0000 ROA not before: Thu 01 Jan 2026 10:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200345 IP address blocks: 194.147.24.0/22 maxlen: 24 2a0d:840::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2b:38:58:ba:49:f2:6d:d2:89:67:b8:3a:8c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f39bdddeeb2a65b5f3d1d19a03f8898f2116021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:ea:b4:5d:3d:e2:4c:c8:10:bf:6f:e8:7d: f3:00:0b:62:af:3e:80:e6:05:21:5e:4b:a4:89:5d: 50:83:0b:d9:f6:d4:07:c0:5c:12:32:d2:06:d6:eb: 92:7b:5d:68:3f:e0:5a:d6:c4:cc:93:d7:6b:6e:e8: 9d:a2:41:56:d2:bc:ba:40:b3:55:db:f8:6c:45:91: 2c:ec:24:8c:0a:87:0d:53:34:12:7e:a4:c9:f8:28: 30:53:b4:ff:ab:8f:62:7f:fe:3c:4f:6c:20:35:eb: 14:cb:a7:08:bd:88:6d:f2:b0:65:21:a7:df:f8:7a: 21:c9:f4:e6:ba:2e:5c:01:f8:8d:a5:ea:1b:8f:5b: ac:bd:6b:1f:c0:0d:27:64:e3:cb:02:54:c0:b6:a9: 39:97:80:81:55:bf:27:69:60:5a:4a:00:db:8b:2b: d0:61:07:22:f7:02:26:d1:af:d0:dd:37:c0:92:6c: f0:10:bd:a7:ab:71:c6:06:93:74:57:4b:cf:e5:5c: 84:8c:fa:0e:32:01:5c:59:48:19:4d:14:e3:7a:06: a7:d0:f3:ee:a3:8d:b9:64:c1:05:29:94:c8:af:2e: f3:d3:a3:67:4f:2e:02:c5:40:b5:2f:2e:4e:1b:f1: 3e:3e:ca:5a:4d:ac:8d:a7:8c:f8:12:3c:86:2d:02: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:39:BD:DD:EE:B2:A6:5B:5F:3D:1D:19:A0:3F:88:98:F2:11:60:21 X509v3 Authority Key Identifier: keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.24.0/22 IPv6: 2a0d:840::/29 Signature Algorithm: sha256WithRSAEncryption 9c:66:04:05:71:82:d1:89:ed:bb:29:16:53:c5:27:29:9d:77: 26:f3:2d:c3:c2:ce:1f:52:b7:cd:b0:5d:a9:93:03:b2:df:0b: 76:be:f4:cd:dd:4d:9d:a2:73:e1:22:9f:2e:ee:ec:d9:a1:74: 2e:fd:e7:9a:f4:c2:cd:a3:81:fb:66:79:31:36:5f:b8:7e:c7: 15:4f:e2:d9:13:c3:67:4a:9a:e8:52:a4:3c:1a:61:08:de:dc: db:8b:e4:78:57:35:3a:28:a6:7e:40:5e:8a:f6:9c:36:8a:d8: 02:f3:0c:84:50:33:9f:c1:16:35:f2:00:a8:ad:72:e0:29:85: 93:b3:79:3a:18:5b:69:81:fb:11:7a:dd:0a:75:de:9f:02:76: 47:c9:9b:94:48:42:b0:7f:5a:02:8f:fa:5c:d4:7d:ea:96:ab: cb:10:d4:7a:13:91:16:85:0e:88:29:ad:b4:86:84:5b:2d:2a: 65:ef:b7:63:5f:bc:0f:91:93:b6:74:e0:40:60:8e:08:3e:ef: 88:95:f0:f5:3c:09:17:8a:18:af:c7:df:0f:ea:eb:00:22:7b: 22:c5:ee:cc:d4:fb:64:07:b5:fa:cd:81:bd:89:fb:61:46:57: b6:26:9e:68:30:30:c9:3f:91:7e:dd:e9:ea:66:d8:5b:92:9f: 6e:50:01:d8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ECs4WLpJ8m3SiWe4OoxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTlmZTNjOGE2OWQ1MDkzNWExZjc0OTY2NmUwOGRjNzU0 NTk0ZGQwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjM5YmRkZGVlYjJhNjViNWYzZDFkMTlhMDNmODg5OGYyMTE2MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwTqtF094kzIEL9v6H3zAAtirz6A 5gUhXkukiV1QgwvZ9tQHwFwSMtIG1uuSe11oP+Ba1sTMk9drbuidokFW0ry6QLNV 2/hsRZEs7CSMCocNUzQSfqTJ+CgwU7T/q49if/48T2wgNesUy6cIvYht8rBlIaff +HohyfTmui5cAfiNpeobj1usvWsfwA0nZOPLAlTAtqk5l4CBVb8naWBaSgDbiyvQ YQci9wIm0a/Q3TfAkmzwEL2nq3HGBpN0V0vP5VyEjPoOMgFcWUgZTRTjegan0PPu o425ZMEFKZTIry7z06NnTy4CxUC1Ly5OG/E+PspaTayNp4z4EjyGLQLRTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA85vd3usqZbXz0dGaA/iJjyEWAhMB8GA1UdIwQY MBaAFOGp/jyKadUJNaH3SWZuCNx1RZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGIt NmI2ZmRiNTRiYTMxLzEvRHptOTNlNnlwbHRmUFIwWm9ELUltUElSWUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGItNmI2ZmRiNTRiYTMx LzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwpMYMA0E AgACMAcDBQMqDQhAMA0GCSqGSIb3DQEBCwUAA4IBAQCcZgQFcYLRie27KRZTxScp nXcm8y3Dws4fUrfNsF2pkwOy3wt2vvTN3U2donPhIp8u7uzZoXQu/eea9MLNo4H7 ZnkxNl+4fscVT+LZE8NnSproUqQ8GmEI3tzbi+R4VzU6KKZ+QF6K9pw2itgC8wyE UDOfwRY18gCorXLgKYWTs3k6GFtpgfsRet0Kdd6fAnZHyZuUSEKwf1oCj/pc1H3q lqvLENR6E5EWhQ6IKa20hoRbLSpl77djX7wPkZO2dOBAYI4IPu+IlfD1PAkXihiv x98P6usAInsixe7M1PtkB7X6zYG9ifthRle2Jp5oMDDJP5F+3enqZthbkp9uUAHY -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:58 2026 by rpki-client