This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/Dule4tvJ3qFl2Zo7PutVO0GwX38.roa File: Dule4tvJ3qFl2Zo7PutVO0GwX38.roa (raw, json) Hash identifier: syF4br28pc65nkl9HefLa2vI5/Y6Wcc0BagaK/INN5U= Subject key identifier: 0E:E9:5E:E2:DB:C9:DE:A1:65:D9:9A:3B:3E:EB:55:3B:41:B0:5F:7F Certificate issuer: /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e Certificate serial: 019B76EAFC6F025EF6612F433A0A8ADB80EC Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/Dule4tvJ3qFl2Zo7PutVO0GwX38.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43420 IP address blocks: 77.87.216.0/21 maxlen: 21 85.202.32.0/20 maxlen: 20 87.199.124.0/23 maxlen: 23 109.95.168.0/21 maxlen: 21 109.196.224.0/20 maxlen: 20 185.129.76.0/22 maxlen: 22 193.46.68.0/24 maxlen: 24 2a03:9c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:6f:02:5e:f6:61:2f:43:3a:0a:8a:db:80:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ee95ee2dbc9dea165d99a3b3eeb553b41b05f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:81:32:09:b8:b8:9a:72:27:b9:35:4a:47: e8:e4:5a:3b:82:4c:6a:86:aa:72:23:4d:2b:1d:ed: 30:3e:dc:20:ff:33:37:32:7d:ed:a1:2a:cd:76:b3: ff:ac:a0:5b:3f:06:67:0d:55:3b:35:49:67:a7:0b: 3a:06:ff:41:e2:f1:1d:06:0e:d0:06:7b:59:5b:fa: 72:d1:34:22:46:4a:59:20:93:87:e3:d5:98:22:28: 93:19:d4:ae:da:6a:58:12:ea:29:d3:17:1f:e1:3a: 36:5d:7d:e4:fd:7d:71:9c:68:d9:eb:c7:22:0d:c1: 66:ee:ab:9a:b1:a2:f0:1a:95:65:bd:d3:1e:e4:02: e3:8f:5d:fc:15:98:09:7b:22:08:30:94:32:29:6b: 0c:d1:46:20:f8:cb:f1:1b:20:d0:f2:51:a0:62:82: db:3f:2a:8a:07:70:6e:72:73:62:b4:dc:c2:13:aa: 5e:c3:e5:c0:50:f6:54:7a:4d:fe:a1:bc:b9:92:46: 21:5f:44:b3:92:c8:94:b0:77:b4:0b:d9:fa:2a:a9: 59:a0:37:7e:42:3d:41:5a:df:88:c4:fb:ea:e7:e1: b7:49:ff:62:0c:ba:24:09:d9:2c:92:a3:01:68:96: 07:8b:7f:b6:e9:5d:4f:f0:b6:d0:0c:a3:cc:2d:a1: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E9:5E:E2:DB:C9:DE:A1:65:D9:9A:3B:3E:EB:55:3B:41:B0:5F:7F X509v3 Authority Key Identifier: keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/Dule4tvJ3qFl2Zo7PutVO0GwX38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.216.0/21 85.202.32.0/20 87.199.124.0/23 109.95.168.0/21 109.196.224.0/20 185.129.76.0/22 193.46.68.0/24 IPv6: 2a03:9c60::/32 Signature Algorithm: sha256WithRSAEncryption 7c:91:0b:b9:83:4f:54:d1:1f:e6:0d:78:61:dc:31:95:5e:a4: 60:fa:37:9a:b9:c6:ad:d6:a0:dc:57:cc:33:d4:a1:f0:84:dc: a6:21:ac:77:44:8a:a4:c8:34:91:0f:18:db:20:82:62:fe:84: 66:0f:d2:3d:9d:24:bf:7c:5c:e2:d1:a1:11:0a:64:14:f8:f1: e3:64:4a:ae:db:b6:87:5e:c0:93:d5:b9:c4:1b:01:bc:b9:fa: e6:6a:ed:2c:85:5d:ce:6d:59:dc:74:08:34:25:3f:10:9e:70: e0:af:f0:97:d9:07:fb:ad:91:28:1e:27:8e:40:e2:5f:3f:1f: db:d0:8e:53:95:a9:10:92:1a:fd:13:bf:f8:7c:f6:5f:2e:d9: d9:ce:44:be:22:85:43:38:ad:05:4e:d2:14:78:88:3c:ae:70: 06:45:f2:a7:64:cb:41:f2:1a:31:b7:d1:59:dc:58:b5:cd:ad: 16:4e:84:8f:af:e8:90:27:67:be:2e:19:37:c3:7f:08:9f:9b: a0:7a:36:2d:66:65:41:19:4f:75:fa:d4:35:84:9b:2b:f8:79: b0:c8:75:ed:f8:9d:c4:5c:c9:01:78:85:62:10:0f:2b:e1:ba: d4:da:de:79:e2:ec:65:7c:61:88:d4:54:d8:7a:b1:76:2f:a8: 78:33:d4:3e -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt26vxvAl72YS9DOgqK24DsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZmNjOTc2ZWY5MDM4M2FjZTdmMGI0ZTA5ZTRkODE5ZWQw ZDliNWUwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWU5NWVlMmRiYzlkZWExNjVkOTlhM2IzZWViNTUzYjQxYjA1ZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzeBMgm4uJpyJ7k1Skfo5Fo7gkxq hqpyI00rHe0wPtwg/zM3Mn3toSrNdrP/rKBbPwZnDVU7NUlnpws6Bv9B4vEdBg7Q BntZW/py0TQiRkpZIJOH49WYIiiTGdSu2mpYEuop0xcf4To2XX3k/X1xnGjZ68ci DcFm7quasaLwGpVlvdMe5ALjj138FZgJeyIIMJQyKWsM0UYg+MvxGyDQ8lGgYoLb PyqKB3BucnNitNzCE6pew+XAUPZUek3+oby5kkYhX0SzksiUsHe0C9n6KqlZoDd+ Qj1BWt+IxPvq5+G3Sf9iDLokCdkskqMBaJYHi3+26V1P8LbQDKPMLaH0PQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFA7pXuLbyd6hZdmaOz7rVTtBsF9/MB8GA1UdIwQY MBaAFI78yXbvkDg6zn8LTgnk2BntDZteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni85ZTQ3NjQtNzIzNC00YmE0LThlOGEt ZTI3NTRmNmZiNGM1LzEvRHVsZTR0dkozcUZsMlpvN1B1dFZPMEd3WDM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni85ZTQ3NjQtNzIzNC00YmE0LThlOGEtZTI3NTRmNmZiNGM1 LzEvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDTVfYAwQE VcogAwQBV8d8AwQDbV+oAwQEbcTgAwQCuYFMAwQAwS5EMA0EAgACMAcDBQAqA5xg MA0GCSqGSIb3DQEBCwUAA4IBAQB8kQu5g09U0R/mDXhh3DGVXqRg+jeaucat1qDc V8wz1KHwhNymIax3RIqkyDSRDxjbIIJi/oRmD9I9nSS/fFzi0aERCmQU+PHjZEqu 27aHXsCT1bnEGwG8ufrmau0shV3ObVncdAg0JT8QnnDgr/CX2Qf7rZEoHieOQOJf Px/b0I5TlakQkhr9E7/4fPZfLtnZzkS+IoVDOK0FTtIUeIg8rnAGRfKnZMtB8hox t9FZ3Fi1za0WToSPr+iQJ2e+Lhk3w38In5ugejYtZmVBGU91+tQ1hJsr+HmwyHXt +J3EXMkBeIViEA8r4brU2t554uxlfGGI1FTYerF2L6h4M9Q+ -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:28 2026 by rpki-client