This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa File: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (raw, json) Hash identifier: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw= Subject key identifier: 74:AC:FF:8F:F3:BE:94:0A:03:EA:A8:36:A4:EF:6F:65:40:38:04:6C Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019B7E37F368EFED7A253D552B8E81923D2B Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12643 IP address blocks: 129.233.208.0/23 maxlen: 23 153.96.244.0/22 maxlen: 22 192.44.32.0/22 maxlen: 22 192.67.200.0/21 maxlen: 21 2a03:db80:3410::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f3:68:ef:ed:7a:25:3d:55:2b:8e:81:92:3d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74acff8ff3be940a03eaa836a4ef6f654038046c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c9:2c:15:ac:16:aa:43:a4:72:5c:ca:78:02: b4:df:3c:64:84:a8:90:a8:67:a9:bf:53:14:29:ca: 2f:f7:a0:ad:31:a5:67:13:35:87:14:78:5f:15:9c: 7d:cf:24:4f:e1:88:91:12:ec:44:df:8d:ed:a6:34: 52:d9:83:b5:03:0b:63:c6:7a:0f:be:42:e8:64:d7: e9:3a:76:ed:fa:9f:b7:10:48:47:e5:d5:77:3d:19: c9:09:a5:48:86:22:76:1c:8b:bb:4d:5a:36:25:ec: 00:b7:e3:3c:43:17:6c:a6:cb:d1:56:18:8e:39:c0: e0:c0:16:82:b6:d8:0d:33:14:93:a8:fd:06:82:0b: 21:46:40:1c:53:53:c9:ba:08:9d:a4:c2:a7:3c:26: 65:ae:15:3c:6c:57:8f:b3:44:fb:42:57:a3:ee:92: 04:0d:a3:bb:79:2a:60:bc:fe:d5:2d:d1:12:13:da: 2c:79:cc:a4:32:db:94:21:a9:f9:91:be:72:07:2e: 3e:62:82:ce:e4:90:e8:f0:83:5f:f1:9e:53:b4:63: 67:58:fc:20:bc:62:4c:b8:87:ae:8c:e2:c3:5b:f8: a0:a9:8b:dc:98:24:75:ed:f1:0c:62:5c:ad:55:58: 4c:fd:de:10:44:15:20:42:8c:3e:bb:49:b2:b5:d2: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:FF:8F:F3:BE:94:0A:03:EA:A8:36:A4:EF:6F:65:40:38:04:6C X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.233.208.0/23 153.96.244.0/22 192.44.32.0/22 192.67.200.0/21 IPv6: 2a03:db80:3410::/48 Signature Algorithm: sha256WithRSAEncryption b2:a7:03:7f:fe:82:1c:31:ee:f2:c7:7b:f8:77:4b:a7:70:7f: 71:e4:d0:29:3c:fc:d9:2a:77:4a:6a:e3:45:8b:8e:6d:9a:a6: b4:b0:a4:86:72:90:4a:e7:cf:0b:9f:f7:7d:38:b4:ee:c8:64: 2f:8a:28:b3:0e:ec:66:da:47:2d:2e:61:e3:a2:f6:f7:1e:8b: 59:d9:2b:b1:9b:1d:8c:6e:d0:ec:c3:b8:c1:0f:cd:9e:e1:85: 6b:38:ca:71:45:ed:38:c8:ac:f7:17:a7:bc:41:4d:21:ba:81: 80:b8:2f:c3:af:98:ae:c2:23:f2:87:91:5c:f6:f6:cf:56:a1: 21:88:b0:e2:cb:22:53:62:fc:15:ff:18:58:8f:23:a2:e5:4e: 51:45:de:42:5b:3a:c9:e3:e2:6d:91:e2:3a:b7:54:2a:5c:2c: 08:ab:a8:eb:df:6a:c5:a5:a8:c0:35:2a:eb:93:c8:54:a8:b3: 9d:04:96:e4:e7:64:91:43:b9:63:80:93:78:46:aa:67:11:4f: ba:cf:aa:cc:54:23:35:85:43:d6:b6:f8:fd:3a:84:a5:95:53: 41:49:d3:41:d3:1a:e1:7f:c5:b0:9f:06:7f:f7:f1:ef:82:0b: bc:3d:95:34:de:aa:b4:c4:f2:5a:a3:82:82:82:82:13:2e:a7: 8c:ca:61:cb -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+N/No7+16JT1VK46Bkj0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGFjZmY4ZmYzYmU5NDBhMDNlYWE4MzZhNGVmNmY2NTQwMzgwNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58ksFawWqkOkclzKeAK03zxkhKiQ qGepv1MUKcov96CtMaVnEzWHFHhfFZx9zyRP4YiREuxE343tpjRS2YO1AwtjxnoP vkLoZNfpOnbt+p+3EEhH5dV3PRnJCaVIhiJ2HIu7TVo2JewAt+M8QxdspsvRVhiO OcDgwBaCttgNMxSTqP0GggshRkAcU1PJugidpMKnPCZlrhU8bFePs0T7Qlej7pIE DaO7eSpgvP7VLdESE9osecykMtuUIan5kb5yBy4+YoLO5JDo8INf8Z5TtGNnWPwg vGJMuIeujOLDW/igqYvcmCR17fEMYlytVVhM/d4QRBUgQow+u0mytdLS9wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFHSs/4/zvpQKA+qoNqTvb2VAOARsMB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvZEt6X2pfTy1sQW9ENnFnMnBPOXZaVUE0Qkd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBgenQAwQC mWD0AwQCwCwgAwQDwEPIMA8EAgACMAkDBwAqA9uANBAwDQYJKoZIhvcNAQELBQAD ggEBALKnA3/+ghwx7vLHe/h3S6dwf3Hk0Ck8/Nkqd0pq40WLjm2aprSwpIZykErn zwuf9304tO7IZC+KKLMO7GbaRy0uYeOi9vcei1nZK7GbHYxu0OzDuMEPzZ7hhWs4 ynFF7TjIrPcXp7xBTSG6gYC4L8OvmK7CI/KHkVz29s9WoSGIsOLLIlNi/BX/GFiP I6LlTlFF3kJbOsnj4m2R4jq3VCpcLAirqOvfasWlqMA1KuuTyFSos50EluTnZJFD uWOAk3hGqmcRT7rPqsxUIzWFQ9a2+P06hKWVU0FJ00HTGuF/xbCfBn/38e+CC7w9 lTTeqrTE8lqjgoKCghMup4zKYcs= -----END CERTIFICATE-----Generated at Wed Jan 21 14:41:24 2026 by rpki-client