This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/Dv951AUIUaLuX0MPAgSurBs_Q4o.roa File: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (raw, json) Hash identifier: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc= Subject key identifier: 0E:FF:79:D4:05:08:51:A2:EE:5F:43:0F:02:04:AE:AC:1B:3F:43:8A Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1 Certificate serial: 019B7C808A5C516C9C1E4660D7CEC07AF494 Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/Dv951AUIUaLuX0MPAgSurBs_Q4o.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 193.192.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8a:5c:51:6c:9c:1e:46:60:d7:ce:c0:7a:f4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eff79d4050851a2ee5f430f0204aeac1b3f438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:b6:6a:88:d6:09:8e:f9:e9:7d:6f:83:ed: 4e:3b:b7:73:1e:d8:b2:ce:5e:ca:e0:1b:e4:7d:63: 40:70:3d:b1:14:39:3d:77:46:2f:03:8f:a5:85:36: bb:ec:78:b5:af:5d:9b:7b:b9:c6:94:cc:b5:01:fa: 07:53:b3:80:0f:14:9c:da:9a:b9:ab:cd:d3:61:66: 9b:96:ef:90:31:4b:72:d0:3a:57:64:05:85:aa:d3: c8:bf:85:36:78:a1:e1:db:74:6f:13:15:94:a0:64: 69:4d:d0:30:3a:6b:e6:e1:e7:db:c8:c2:6f:9a:a5: f9:a3:cc:3e:0a:52:41:47:83:48:1e:5c:bd:32:55: fe:56:d8:39:6f:dc:ea:94:e0:c2:0f:48:b2:c4:d2: 42:4a:75:49:4f:f4:a7:5c:9e:b4:56:29:cf:1e:76: 3d:c3:eb:4f:cb:a8:99:57:b7:24:aa:8b:6b:62:68: 91:97:aa:e1:d8:c9:4a:fb:19:33:7b:54:2d:75:ab: 3c:af:d1:28:04:8b:76:a3:af:f9:50:b9:1c:a0:ba: 18:19:68:e7:41:0c:cc:fb:12:f6:12:f2:5b:3b:ff: 39:fe:e3:47:dc:2d:09:8e:d6:45:8d:41:10:85:ee: 54:d4:b9:dc:64:9d:b5:1b:2a:10:c5:30:b7:a8:3c: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FF:79:D4:05:08:51:A2:EE:5F:43:0F:02:04:AE:AC:1B:3F:43:8A X509v3 Authority Key Identifier: keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/Dv951AUIUaLuX0MPAgSurBs_Q4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.50.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:ec:58:7e:28:2e:c7:58:19:84:e0:06:39:58:d9:83:89:ef: 25:24:b0:6d:f7:ab:07:b9:27:6b:59:08:c7:b6:7e:f0:60:10: 23:ec:80:8f:ea:a4:39:0d:5c:14:07:95:d2:b2:73:4a:60:c7: 62:92:68:58:e8:bd:dd:39:8a:23:b4:69:e1:43:d5:e4:6d:0d: 05:9b:a4:40:30:e1:bd:e2:0c:55:7a:3f:09:2e:93:98:a5:ca: b4:a2:79:3f:df:a7:f8:9e:b4:b5:c5:0c:11:c9:52:f3:e5:48: 31:d6:a6:d3:a4:47:21:ae:dd:96:89:65:82:d3:fa:38:e0:56: 90:96:d6:b8:d1:25:c2:87:c8:a2:0f:0c:c5:eb:de:54:87:24: b0:61:aa:0a:8c:93:f7:94:36:ae:76:83:13:7f:e2:5b:76:37: e9:84:ae:c1:27:b0:7b:88:32:83:b3:64:3e:ae:09:32:db:6d: bd:ce:ab:9b:e5:a9:53:c4:71:56:d6:83:4d:9d:a4:83:f9:80: 9e:1d:03:76:40:41:68:8f:86:0d:fb:2a:92:5a:42:e4:4f:ad: 6e:27:eb:a3:40:31:53:a9:94:d7:3c:b8:c1:9b:b1:1f:4a:6d: e4:33:e0:82:1d:06:84:85:b3:69:fd:17:f1:dd:26:28:7e:55: 85:d9:7b:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIpcUWycHkZg187AevSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl ZTRiYzEwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWZmNzlkNDA1MDg1MWEyZWU1ZjQzMGYwMjA0YWVhYzFiM2Y0MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yG2aojWCY756X1vg+1OO7dzHtiy zl7K4BvkfWNAcD2xFDk9d0YvA4+lhTa77Hi1r12be7nGlMy1AfoHU7OADxSc2pq5 q83TYWablu+QMUty0DpXZAWFqtPIv4U2eKHh23RvExWUoGRpTdAwOmvm4efbyMJv mqX5o8w+ClJBR4NIHly9MlX+Vtg5b9zqlODCD0iyxNJCSnVJT/SnXJ60VinPHnY9 w+tPy6iZV7ckqotrYmiRl6rh2MlK+xkze1Qtdas8r9EoBIt2o6/5ULkcoLoYGWjn QQzM+xL2EvJbO/85/uNH3C0JjtZFjUEQhe5U1LncZJ21GyoQxTC3qDzx5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7/edQFCFGi7l9DDwIErqwbP0OKMB8GA1UdIwQY MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt ZDdiOGViNDYwOGUyLzEvRHY5NTFBVUlVYUx1WDBNUEFnU3VyQnNfUTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcAyMA0G CSqGSIb3DQEBCwUAA4IBAQCa7Fh+KC7HWBmE4AY5WNmDie8lJLBt96sHuSdrWQjH tn7wYBAj7ICP6qQ5DVwUB5XSsnNKYMdikmhY6L3dOYojtGnhQ9XkbQ0Fm6RAMOG9 4gxVej8JLpOYpcq0onk/36f4nrS1xQwRyVLz5Ugx1qbTpEchrt2WiWWC0/o44FaQ lta40SXCh8iiDwzF695UhySwYaoKjJP3lDaudoMTf+JbdjfphK7BJ7B7iDKDs2Q+ rgky2229zqub5alTxHFW1oNNnaSD+YCeHQN2QEFoj4YN+yqSWkLkT61uJ+ujQDFT qZTXPLjBm7EfSm3kM+CCHQaEhbNp/Rfx3SYoflWF2XvO -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:18 2026 by rpki-client