This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/dfRokVERntavg7crGxooophhw2o.roa File: dfRokVERntavg7crGxooophhw2o.roa (raw, json) Hash identifier: dzmKtO5BwwS+q/g1dZDUTHyL/+SV4Ar/R5p2e9o6kHE= Subject key identifier: 75:F4:68:91:51:11:9E:D6:AF:83:B7:2B:1B:1A:28:A2:98:61:C3:6A Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Certificate serial: 019B7F15F0BDBF184A6212AC04B2898D4394 Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/dfRokVERntavg7crGxooophhw2o.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41356 IP address blocks: 89.238.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f0:bd:bf:18:4a:62:12:ac:04:b2:89:8d:43:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75f4689151119ed6af83b72b1b1a28a29861c36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:e1:02:3e:f7:0d:cf:bc:9f:ee:09:e5:14: 1f:82:10:cf:59:cf:84:0b:30:d3:25:da:0e:91:ab: 67:a7:0c:c2:9e:58:83:f5:62:45:c9:69:1e:7f:73: 31:a6:b4:a3:18:31:66:5a:d4:fd:b7:77:5e:09:cc: ee:56:6e:df:47:9b:6f:2a:7a:e5:2a:41:a9:e2:26: 59:b9:34:0b:d6:0d:66:d7:5f:b5:b1:f1:d1:6e:4a: 56:4b:33:76:bc:f7:7c:ff:32:41:66:ca:0c:ed:9e: 9f:25:fa:12:ff:3d:05:eb:06:53:d2:02:cc:4a:5f: 48:7a:47:6a:cf:aa:9f:74:0f:11:7e:54:72:cc:5d: 5f:aa:42:2b:4d:d0:a9:71:e1:3e:a8:7b:25:43:37: c2:e9:92:d4:9c:18:d2:c9:aa:f6:6d:2c:02:2f:96: bb:ce:df:64:54:2d:67:f0:c3:33:ac:ad:66:d0:4c: 61:ea:00:76:46:dc:df:fe:be:d9:f9:f1:3d:a2:9c: 71:7a:1d:f8:75:fc:e8:a6:8b:17:87:0a:46:e5:e8: 8b:92:43:da:f8:af:96:96:68:16:3c:e0:91:bc:eb: 00:9c:b4:ec:6a:69:27:6f:86:e9:bb:b4:6d:46:c3: 2f:b1:fc:10:76:4b:01:66:b5:b4:c2:ff:77:10:1c: 7e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F4:68:91:51:11:9E:D6:AF:83:B7:2B:1B:1A:28:A2:98:61:C3:6A X509v3 Authority Key Identifier: keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/dfRokVERntavg7crGxooophhw2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.238.0.0/18 Signature Algorithm: sha256WithRSAEncryption 1d:8b:21:9b:6f:8c:3c:a7:af:50:ca:25:ec:75:0b:a9:78:69: d3:06:25:29:80:b8:0c:5b:b4:c2:be:64:89:be:38:32:64:3a: 54:54:7f:f7:76:0f:85:02:ce:8f:f7:9c:6b:3d:33:52:ee:b7: 85:07:0b:22:56:20:57:78:96:9a:96:ef:c3:ad:ce:8b:bc:f8: ab:07:c6:79:17:13:93:72:2c:6e:91:bb:f9:f0:4c:5a:39:3a: cc:78:b1:75:f4:36:65:48:63:64:b6:b3:70:ae:3d:43:97:a7: 64:be:05:60:c0:1a:fd:18:4e:b0:57:52:1c:e2:83:80:b6:c8: 58:bd:e9:8d:2a:ef:d9:80:5e:54:a0:ae:18:2f:12:0c:e3:04: 0b:a3:00:d6:d3:b1:df:ad:dc:4c:3a:f9:1e:0b:ce:4a:6e:97: c9:26:b9:91:d5:6d:44:0f:b5:f3:77:34:39:ae:1f:59:03:7f: 21:19:c9:9c:21:8b:eb:7e:87:76:01:68:b0:eb:a2:45:fc:3c: e9:69:67:ed:b0:9d:53:dd:43:6a:11:d7:2c:e5:34:a9:78:d4: 4e:55:3c:96:6c:75:91:48:2d:30:44:52:84:33:45:b3:a9:70: 4d:d7:49:f1:ec:9c:59:e4:42:7f:3e:1c:f5:f5:53:e0:01:c9: 73:61:7f:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfC9vxhKYhKsBLKJjUOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNWZhYjVjOWE0ZTEzODAzMmU1YjMwMGVhM2VkZDllNGQy YjY5MDEwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWY0Njg5MTUxMTE5ZWQ2YWY4M2I3MmIxYjFhMjhhMjk4NjFjMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzbhAj73Dc+8n+4J5RQfghDPWc+E CzDTJdoOkatnpwzCnliD9WJFyWkef3MxprSjGDFmWtT9t3deCczuVm7fR5tvKnrl KkGp4iZZuTQL1g1m11+1sfHRbkpWSzN2vPd8/zJBZsoM7Z6fJfoS/z0F6wZT0gLM Sl9Iekdqz6qfdA8RflRyzF1fqkIrTdCpceE+qHslQzfC6ZLUnBjSyar2bSwCL5a7 zt9kVC1n8MMzrK1m0Exh6gB2Rtzf/r7Z+fE9opxxeh34dfzoposXhwpG5eiLkkPa +K+WlmgWPOCRvOsAnLTsamknb4bpu7RtRsMvsfwQdksBZrW0wv93EBx+zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHX0aJFREZ7Wr4O3KxsaKKKYYcNqMB8GA1UdIwQY MBaAFC9fq1yaThOAMuWzAOo+3Z5NK2kBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMt YWE1MmMwMGRlOWMxLzEvZGZSb2tWRVJudGF2Zzdjckd4b29vcGhodzJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMtYWE1MmMwMGRlOWMx LzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGWe4AMA0G CSqGSIb3DQEBCwUAA4IBAQAdiyGbb4w8p69QyiXsdQupeGnTBiUpgLgMW7TCvmSJ vjgyZDpUVH/3dg+FAs6P95xrPTNS7reFBwsiViBXeJaalu/Drc6LvPirB8Z5FxOT cixukbv58ExaOTrMeLF19DZlSGNktrNwrj1Dl6dkvgVgwBr9GE6wV1Ic4oOAtshY vemNKu/ZgF5UoK4YLxIM4wQLowDW07HfrdxMOvkeC85KbpfJJrmR1W1ED7XzdzQ5 rh9ZA38hGcmcIYvrfod2AWiw66JF/DzpaWftsJ1T3UNqEdcs5TSpeNROVTyWbHWR SC0wRFKEM0WzqXBN10nx7JxZ5EJ/Phz19VPgAclzYX+9 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:27 2026 by rpki-client