This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/dUz1_BGuEwa1si0sC79DuRXSTMw.roa File: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (raw, json) Hash identifier: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA= Subject key identifier: 75:4C:F5:FC:11:AE:13:06:B5:B2:2D:2C:0B:BF:43:B9:15:D2:4C:CC Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 019B7B36CBC098753FF144CA154371E158E2 Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/dUz1_BGuEwa1si0sC79DuRXSTMw.roa Signing time: Thu 01 Jan 2026 20:19:07 +0000 ROA not before: Thu 01 Jan 2026 20:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 94.232.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cb:c0:98:75:3f:f1:44:ca:15:43:71:e1:58:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=754cf5fc11ae1306b5b22d2c0bbf43b915d24ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:4e:36:28:9f:af:3c:0b:3e:73:e0:07:d1: 6d:34:8f:73:04:01:4d:3a:9f:9a:e1:dd:af:ea:38: 66:6b:71:fd:ba:23:ef:50:b8:85:b9:63:c4:9d:d1: 87:44:e6:db:a6:77:7f:01:8a:2d:73:70:ff:1c:fb: ec:d1:09:69:84:12:69:2c:c6:40:2c:db:f9:88:f2: 46:88:42:ae:e9:1d:b4:b8:68:84:6c:0d:b5:4c:50: 91:83:8b:2a:af:2e:32:20:b4:57:87:44:87:cf:3a: 75:04:2f:1a:38:4c:73:af:df:1a:0d:5d:87:c7:5e: 1e:49:8e:d1:5d:7b:50:c2:fe:79:b1:7f:2b:a1:87: e6:ff:7e:1f:e4:71:3b:56:6a:86:8c:ce:80:03:30: 8c:33:41:f8:9f:58:7a:16:b0:bb:3d:1a:9e:5b:25: 3a:0f:d2:e6:89:a0:1e:50:73:a9:b3:bc:e6:f0:bd: 36:8c:45:5a:47:f2:96:6d:3d:a4:b9:ea:70:6b:42: e4:37:ae:8a:9a:e3:4e:e1:be:a3:94:5e:af:c0:42: 4b:0f:9e:32:30:05:5b:23:fc:80:be:18:3e:dd:27: 5e:31:0b:d1:c4:b8:24:f9:e2:10:79:40:bf:bd:75: e2:04:7e:41:36:32:6a:59:7c:3f:d1:c3:c6:cd:7b: cf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4C:F5:FC:11:AE:13:06:B5:B2:2D:2C:0B:BF:43:B9:15:D2:4C:CC X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/dUz1_BGuEwa1si0sC79DuRXSTMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.254.0/24 Signature Algorithm: sha256WithRSAEncryption 75:ea:49:01:15:a5:43:91:51:d2:57:15:f2:c0:06:7e:00:0d: ef:62:9a:d4:cc:c6:53:7c:06:70:56:7a:98:91:6d:30:dc:f0: ea:29:b1:08:5e:0b:f2:d2:e3:bc:0e:dd:73:c0:23:0b:10:7d: 53:7c:d5:9b:9e:9a:9a:13:62:06:cd:51:51:c8:ae:c5:02:c7: 94:41:ad:d4:fd:c1:12:66:60:1f:96:08:a9:70:67:7f:ed:1c: af:f2:ec:08:98:e1:5b:f7:a6:d3:e9:ee:78:71:07:6f:3c:80: d5:02:d9:a1:22:76:97:ca:be:b0:76:c8:24:fc:5c:a1:1a:0a: 0c:f4:c9:64:81:33:13:db:73:4b:0c:df:26:66:bc:42:4d:62: 6f:bf:72:8c:40:3a:e3:5c:24:cd:ce:a5:5a:cc:8f:a7:76:c0: 16:bb:73:d0:87:52:8c:95:99:2c:ad:1d:7a:ec:d5:27:29:4b: 00:53:05:18:fc:3d:cc:1c:8d:f1:93:02:5c:27:67:0d:ad:9d: 59:7e:09:1f:4e:72:e0:80:e2:72:21:8f:fd:da:59:9c:b1:16: 4c:87:84:83:ad:a9:db:53:cb:a2:47:70:cf:13:28:cf:97:ab: 34:9e:aa:8d:d1:11:60:b0:2d:d3:a4:38:50:8d:f7:2a:85:fd: 04:65:be:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsvAmHU/8UTKFUNx4VjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTRjZjVmYzExYWUxMzA2YjViMjJkMmMwYmJmNDNiOTE1ZDI0Y2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNxONiifrzwLPnPgB9FtNI9zBAFN Op+a4d2v6jhma3H9uiPvULiFuWPEndGHRObbpnd/AYotc3D/HPvs0QlphBJpLMZA LNv5iPJGiEKu6R20uGiEbA21TFCRg4sqry4yILRXh0SHzzp1BC8aOExzr98aDV2H x14eSY7RXXtQwv55sX8roYfm/34f5HE7VmqGjM6AAzCMM0H4n1h6FrC7PRqeWyU6 D9LmiaAeUHOps7zm8L02jEVaR/KWbT2kuepwa0LkN66KmuNO4b6jlF6vwEJLD54y MAVbI/yAvhg+3SdeMQvRxLgk+eIQeUC/vXXiBH5BNjJqWXw/0cPGzXvP2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHVM9fwRrhMGtbItLAu/Q7kV0kzMMB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvZFV6MV9CR3VFd2Exc2kwc0M3OUR1UlhTVE13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuj+MA0G CSqGSIb3DQEBCwUAA4IBAQB16kkBFaVDkVHSVxXywAZ+AA3vYprUzMZTfAZwVnqY kW0w3PDqKbEIXgvy0uO8Dt1zwCMLEH1TfNWbnpqaE2IGzVFRyK7FAseUQa3U/cES ZmAflgipcGd/7Ryv8uwImOFb96bT6e54cQdvPIDVAtmhInaXyr6wdsgk/FyhGgoM 9MlkgTMT23NLDN8mZrxCTWJvv3KMQDrjXCTNzqVazI+ndsAWu3PQh1KMlZksrR16 7NUnKUsAUwUY/D3MHI3xkwJcJ2cNrZ1ZfgkfTnLggOJyIY/92lmcsRZMh4SDranb U8uiR3DPEyjPl6s0nqqN0RFgsC3TpDhQjfcqhf0EZb57 -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:53 2026 by rpki-client