This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/DqXib1Ly2xFoTm2bjcxnicthk1w.roa File: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (raw, json) Hash identifier: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo= Subject key identifier: 0E:A5:E2:6F:52:F2:DB:11:68:4E:6D:9B:8D:CC:67:89:CB:61:93:5C Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677 Certificate serial: 019B797E65D795247F1DC0DA9FEFF626DE73 Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/DqXib1Ly2xFoTm2bjcxnicthk1w.roa Signing time: Thu 01 Jan 2026 12:18:05 +0000 ROA not before: Thu 01 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215419 IP address blocks: 194.61.3.0/24 maxlen: 24 2a0f:5840:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:65:d7:95:24:7f:1d:c0:da:9f:ef:f6:26:de:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677 Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ea5e26f52f2db11684e6d9b8dcc6789cb61935c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:70:96:77:91:99:b3:b4:8f:2c:f2:d0:1a: 1b:a3:cb:f3:0f:67:06:73:81:11:b7:1d:ce:50:33: 57:75:a6:3d:6d:e5:b6:42:1e:ca:2e:e1:0e:e3:c4: 66:59:d3:73:9f:3a:68:5b:f5:f4:fe:20:1e:50:16: 84:09:5d:b5:6c:0a:67:15:10:f9:41:4c:61:4e:46: 25:83:e5:fa:89:57:6b:67:93:40:67:3b:d5:f2:6f: 90:17:92:43:cb:9d:da:6f:50:d3:cb:18:39:0c:5f: b0:76:70:46:7e:0c:e3:ea:41:10:c2:45:b1:8a:10: 4d:e0:e0:a8:0f:cc:27:b1:9a:b0:9b:fc:c9:33:dc: e8:14:d5:75:ac:3d:ef:23:27:26:ca:19:45:fe:09: ab:8b:b7:24:60:06:6a:90:74:87:bd:04:96:78:92: ea:76:40:44:70:1a:3f:3c:ac:77:bc:31:21:27:c2: 5c:07:48:63:ad:ff:8e:b5:6e:9b:9d:df:2d:c8:fc: 7b:d0:e5:fb:fc:2f:08:d1:c3:01:0d:40:2f:7a:e4: 4f:95:43:7d:ae:e1:e2:7e:83:7d:47:a4:78:e2:71: ef:c9:12:5c:f3:29:2e:b0:0a:35:2d:d6:11:50:19: 7a:f9:f0:e9:65:f6:4b:8f:8e:d2:e8:1f:a0:3a:cb: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A5:E2:6F:52:F2:DB:11:68:4E:6D:9B:8D:CC:67:89:CB:61:93:5C X509v3 Authority Key Identifier: keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/DqXib1Ly2xFoTm2bjcxnicthk1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.3.0/24 IPv6: 2a0f:5840:1::/48 Signature Algorithm: sha256WithRSAEncryption 98:a6:65:7a:9a:f3:86:f5:ff:25:31:39:26:95:01:ea:55:66: dd:13:60:ca:ad:86:08:5f:9b:14:fe:b9:fb:be:70:87:28:f9: bf:fe:02:d5:86:d4:eb:27:5f:d5:aa:6e:21:e9:79:78:78:22: b1:ab:b8:68:56:f2:37:3a:ea:0c:9b:3d:23:6b:ef:89:5f:f9: dd:32:a1:d8:39:d5:b1:c1:8f:03:71:0c:67:af:1f:57:36:e8: f2:ed:40:c9:24:75:92:f7:8b:28:ef:4f:71:a0:9b:c5:6a:b1: 4e:17:28:02:bb:05:0d:0d:48:69:c5:5d:22:f1:b5:f7:2e:cf: 62:cf:ff:05:22:95:2d:74:d0:83:bc:9f:0b:b7:75:4c:a4:70: 48:00:c8:87:72:04:21:1f:d5:91:f0:69:bb:06:cc:05:e2:e8: d2:e0:ce:81:0d:e4:f7:5d:0e:97:bc:37:a6:89:ef:ad:db:2f: 07:4f:99:07:b0:8c:95:67:77:37:9d:03:cd:6f:6d:27:db:3b: 8d:06:ed:db:da:8e:03:76:1d:5d:81:0b:a7:47:40:7e:32:24: 87:61:8c:8f:7b:99:1b:24:d3:07:d4:1c:75:6c:57:0a:1e:0b: d0:3c:33:5c:4a:34:3c:a1:a7:32:a5:ca:cb:99:17:00:26:8b: 5b:1f:3e:d2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fmXXlSR/HcDan+/2Jt5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj MmE2NzcwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWE1ZTI2ZjUyZjJkYjExNjg0ZTZkOWI4ZGNjNjc4OWNiNjE5MzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6dwlneRmbO0jyzy0Bobo8vzD2cG c4ERtx3OUDNXdaY9beW2Qh7KLuEO48RmWdNznzpoW/X0/iAeUBaECV21bApnFRD5 QUxhTkYlg+X6iVdrZ5NAZzvV8m+QF5JDy53ab1DTyxg5DF+wdnBGfgzj6kEQwkWx ihBN4OCoD8wnsZqwm/zJM9zoFNV1rD3vIycmyhlF/gmri7ckYAZqkHSHvQSWeJLq dkBEcBo/PKx3vDEhJ8JcB0hjrf+OtW6bnd8tyPx70OX7/C8I0cMBDUAveuRPlUN9 ruHifoN9R6R44nHvyRJc8ykusAo1LdYRUBl6+fDpZfZLj47S6B+gOsud2wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA6l4m9S8tsRaE5tm43MZ4nLYZNcMB8GA1UdIwQY MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt ZDY2OGM1M2Y2NjEyLzEvRHFYaWIxTHkyeEZvVG0yYmpjeG5pY3RoazF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwj0DMA8E AgACMAkDBwAqD1hAAAEwDQYJKoZIhvcNAQELBQADggEBAJimZXqa84b1/yUxOSaV AepVZt0TYMqthghfmxT+ufu+cIco+b/+AtWG1OsnX9WqbiHpeXh4IrGruGhW8jc6 6gybPSNr74lf+d0yodg51bHBjwNxDGevH1c26PLtQMkkdZL3iyjvT3Ggm8VqsU4X KAK7BQ0NSGnFXSLxtfcuz2LP/wUilS100IO8nwu3dUykcEgAyIdyBCEf1ZHwabsG zAXi6NLgzoEN5PddDpe8N6aJ763bLwdPmQewjJVndzedA81vbSfbO40G7dvajgN2 HV2BC6dHQH4yJIdhjI97mRsk0wfUHHVsVwoeC9A8M1xKNDyhpzKlysuZFwAmi1sf PtI= -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:40 2026 by rpki-client