This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/dRuHtag2W48upoirGox3mzp5yls.roa File: dRuHtag2W48upoirGox3mzp5yls.roa (raw, json) Hash identifier: pcW0qjbXLjHfD/4xJe2tmXXM1DU4kBxoW5dZ8O0Fexc= Subject key identifier: 75:1B:87:B5:A8:36:5B:8F:2E:A6:88:AB:1A:8C:77:9B:3A:79:CA:5B Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1 Certificate serial: 019B7A5AD91A5FD48EE419E066D78C0C871C Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/dRuHtag2W48upoirGox3mzp5yls.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29446 IP address blocks: 82.146.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d9:1a:5f:d4:8e:e4:19:e0:66:d7:8c:0c:87:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=751b87b5a8365b8f2ea688ab1a8c779b3a79ca5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:81:66:ea:75:04:08:ef:a8:31:7c:9f:b3: 33:14:02:1b:6f:1e:88:ec:0a:5b:4e:79:21:64:74: 62:5f:9e:25:53:7c:ab:1f:3f:3c:2e:fa:17:93:6f: 5d:2c:8f:f3:cd:6b:36:84:d3:98:19:60:ca:34:61: f6:9e:53:59:1c:f3:2d:4d:b2:19:96:67:93:1e:77: 7d:c5:0c:ad:bc:ed:54:2c:20:0a:92:7c:96:a9:ae: ce:a3:ea:a0:81:e9:d1:3c:76:3d:39:7f:e9:7a:a0: fe:59:de:f9:63:67:bd:5a:35:f1:37:29:41:f7:8e: 7b:72:be:bb:a8:c1:39:df:12:b4:94:3e:8d:92:c3: 7e:c0:ea:66:b0:33:39:a5:28:84:b7:02:9d:dc:51: 1f:6d:dd:ab:99:dd:8a:5a:2f:8b:69:83:6b:d3:2e: 07:33:59:f3:ae:64:73:a7:ad:09:f5:da:ae:19:1e: cb:bd:ac:71:2d:a4:43:11:16:a1:a8:ab:e8:86:f6: 36:c5:26:9b:27:c8:51:e7:a9:56:3f:70:da:20:87: 24:79:e3:d0:d2:2d:8b:82:37:1a:6b:00:21:c0:01: 22:aa:c2:bd:46:51:8c:b7:75:fe:7b:20:9f:58:34: b9:5d:6a:27:a8:87:7c:94:d5:33:6f:2f:ba:df:dd: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1B:87:B5:A8:36:5B:8F:2E:A6:88:AB:1A:8C:77:9B:3A:79:CA:5B X509v3 Authority Key Identifier: keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/dRuHtag2W48upoirGox3mzp5yls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.146.128.0/19 Signature Algorithm: sha256WithRSAEncryption 7d:38:6a:3e:6c:c7:f5:56:ec:f8:7e:21:6a:6d:ed:e9:a1:d9: 43:bc:1d:97:d4:3e:68:69:29:27:fe:08:71:3a:9d:70:66:af: a9:31:f4:22:05:0f:20:46:4c:0d:e1:6b:59:1c:b4:2e:a3:9d: c7:d1:11:fe:9c:93:58:56:cc:99:7f:6c:77:b1:4c:d7:9e:d7: e1:8c:50:a5:86:a3:78:f5:0d:a8:83:7d:9c:60:c9:e7:19:3e: 13:50:42:92:8b:68:42:04:8f:a4:7f:31:8c:45:f0:ba:d8:19: 0d:65:c6:a6:ec:92:62:be:61:a2:3b:e6:67:49:cd:bd:cf:43: 2d:98:b9:dd:61:29:82:c2:05:be:d2:a0:29:4e:6d:aa:31:c7: 00:23:6b:6f:f7:5f:a6:e4:41:05:d0:c1:94:e2:93:ab:f9:10: 0f:50:1b:ce:85:64:64:c7:6d:38:8e:e7:f0:88:18:fd:6e:fe: bb:b3:7c:d4:31:04:ca:41:92:4a:71:83:97:6d:1a:2e:75:69: 2f:a3:5a:34:6b:01:c6:ec:19:28:6e:e6:f8:20:72:c3:ea:2e: a7:cb:62:82:4c:c3:fb:f4:78:d5:3c:4a:9f:7c:84:8a:dc:25: 04:0b:ca:d0:b4:37:60:13:36:5e:0c:40:a1:aa:87:22:ec:ba: 29:6e:fc:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtkaX9SO5BngZteMDIccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzI0ZTRjZTc2OTM5YjRkYjU3ZDVkMzUwYzJhZDAwN2I1 OTgwZTEwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTFiODdiNWE4MzY1YjhmMmVhNjg4YWIxYThjNzc5YjNhNzljYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQuBZup1BAjvqDF8n7MzFAIbbx6I 7ApbTnkhZHRiX54lU3yrHz88LvoXk29dLI/zzWs2hNOYGWDKNGH2nlNZHPMtTbIZ lmeTHnd9xQytvO1ULCAKknyWqa7Oo+qggenRPHY9OX/peqD+Wd75Y2e9WjXxNylB 9457cr67qME53xK0lD6NksN+wOpmsDM5pSiEtwKd3FEfbd2rmd2KWi+LaYNr0y4H M1nzrmRzp60J9dquGR7LvaxxLaRDERahqKvohvY2xSabJ8hR56lWP3DaIIckeePQ 0i2LgjcaawAhwAEiqsK9RlGMt3X+eyCfWDS5XWonqId8lNUzby+6391IhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUbh7WoNluPLqaIqxqMd5s6ecpbMB8GA1UdIwQY MBaAFIoyTkznaTm021fV01DCrQB7WYDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzIt NjJiYzhmYzc1NWRkLzEvZFJ1SHRhZzJXNDh1cG9pckdveDNtenA1eWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzItNjJiYzhmYzc1NWRk LzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUpKAMA0G CSqGSIb3DQEBCwUAA4IBAQB9OGo+bMf1Vuz4fiFqbe3podlDvB2X1D5oaSkn/ghx Op1wZq+pMfQiBQ8gRkwN4WtZHLQuo53H0RH+nJNYVsyZf2x3sUzXntfhjFClhqN4 9Q2og32cYMnnGT4TUEKSi2hCBI+kfzGMRfC62BkNZcam7JJivmGiO+ZnSc29z0Mt mLndYSmCwgW+0qApTm2qMccAI2tv91+m5EEF0MGU4pOr+RAPUBvOhWRkx204jufw iBj9bv67s3zUMQTKQZJKcYOXbRoudWkvo1o0awHG7Bkobub4IHLD6i6ny2KCTMP7 9HjVPEqffISK3CUEC8rQtDdgEzZeDEChqoci7LopbvxW -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:06 2026 by rpki-client