This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dmCxKN3pj6wLriDLBw09G7VIsA8.roa File: dmCxKN3pj6wLriDLBw09G7VIsA8.roa (raw, json) Hash identifier: Gic5YpTjA47EASsB0NfB6Ks84APwRPQifT8e3Gxj6KM= Subject key identifier: 76:60:B1:28:DD:E9:8F:AC:0B:AE:20:CB:07:0D:3D:1B:B5:48:B0:0F Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E85D1E9A040F817B839AAC1FE109298 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dmCxKN3pj6wLriDLBw09G7VIsA8.roa Signing time: Fri 02 Jan 2026 11:44:17 +0000 ROA not before: Fri 02 Jan 2026 11:44:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 195.178.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:85:d1:e9:a0:40:f8:17:b8:39:aa:c1:fe:10:92:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 11:44:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7660b128dde98fac0bae20cb070d3d1bb548b00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:cf:03:b0:91:54:07:2f:ff:53:f3:b9:5f: d5:23:f5:56:e1:43:ba:ed:02:5c:14:6a:29:82:89: 64:6f:6c:ea:9a:76:1a:be:6c:0a:d2:a5:c6:9e:aa: 29:b5:e6:a8:1c:a2:c4:c7:4d:79:2b:94:3b:3e:75: 4b:5d:29:ce:1b:d2:fc:f6:9c:04:3f:dc:b9:1a:21: 6e:b3:db:1e:82:03:a1:49:0a:d3:ba:9e:99:46:21: cd:21:5b:2f:39:79:05:9c:19:18:03:6f:63:81:d6: e8:26:01:b7:76:76:0b:f7:00:df:6b:9b:ff:80:f4: 09:85:a0:2e:e0:a9:9d:98:65:3f:b4:6d:d0:27:a9: 32:8b:a4:77:f7:45:e0:c5:ee:fc:f1:c5:12:46:2f: 8e:1d:24:55:54:7f:95:e2:cd:ad:9c:91:72:99:b1: 0d:9a:b1:44:cf:28:72:51:3f:0e:ec:c2:cf:7a:08: 5c:8f:f4:ae:53:ff:99:86:cc:d9:94:19:e1:26:1c: e0:e0:81:b9:d6:d2:29:2f:4a:8e:22:9f:1e:2c:f8: 51:82:8b:2a:c8:f6:12:a6:fb:db:04:d2:5e:7f:45: 81:64:4e:42:38:a8:e1:f4:5b:1d:bc:c9:a4:97:94: fd:a0:f6:bd:a3:ef:91:12:6d:8b:a7:79:a0:4b:a5: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:60:B1:28:DD:E9:8F:AC:0B:AE:20:CB:07:0D:3D:1B:B5:48:B0:0F X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dmCxKN3pj6wLriDLBw09G7VIsA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.159.0/24 Signature Algorithm: sha256WithRSAEncryption c9:6f:52:f7:fe:bb:bb:0f:83:8d:a9:44:de:66:45:c9:f7:51: 11:a0:5b:46:4f:8d:94:71:53:d9:97:58:29:a1:96:53:05:1a: d3:0c:16:63:23:9c:64:8d:f9:c6:6e:9a:7b:3b:9a:55:24:9d: 13:b5:c4:8b:44:43:eb:3b:43:e8:05:f0:27:93:74:d4:20:3b: ec:52:74:b8:dd:e8:1d:1f:a4:fb:85:db:e6:53:a1:f5:be:eb: d2:a3:07:45:a8:da:77:a3:1f:cf:92:51:c1:9b:be:76:b9:78: 39:ed:0d:16:94:8f:ff:6c:d9:71:54:b9:25:96:8d:1d:94:9d: be:94:c3:92:cb:e3:1c:c4:c7:a0:d9:3c:c4:7e:95:9e:82:fd: 6b:f8:5e:3c:a0:f6:69:f6:9a:8a:84:b7:55:1f:42:87:01:c1: 34:14:30:f2:19:3c:f0:af:c3:e9:93:f3:b8:9c:56:d5:01:85: 83:55:ba:19:a2:76:be:fd:a4:6a:cb:97:57:d6:94:5b:37:6f: 52:f2:f3:06:e5:e5:9a:85:96:7f:6c:c6:82:bb:46:a6:3d:35: db:8d:23:bf:9c:0d:28:f9:3b:33:19:3b:67:c9:b9:04:d6:98: 5c:14:1a:2d:4c:da:c5:9d:32:a1:12:5f:e9:20:47:7f:ec:62: 1d:d7:ae:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+hdHpoED4F7g5qsH+EJKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTE0NDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjYwYjEyOGRkZTk4ZmFjMGJhZTIwY2IwNzBkM2QxYmI1NDhiMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjzPA7CRVAcv/1PzuV/VI/VW4UO6 7QJcFGopgolkb2zqmnYavmwK0qXGnqopteaoHKLEx015K5Q7PnVLXSnOG9L89pwE P9y5GiFus9seggOhSQrTup6ZRiHNIVsvOXkFnBkYA29jgdboJgG3dnYL9wDfa5v/ gPQJhaAu4KmdmGU/tG3QJ6kyi6R390Xgxe788cUSRi+OHSRVVH+V4s2tnJFymbEN mrFEzyhyUT8O7MLPeghcj/SuU/+ZhszZlBnhJhzg4IG51tIpL0qOIp8eLPhRgosq yPYSpvvbBNJef0WBZE5COKjh9FsdvMmkl5T9oPa9o++REm2Lp3mgS6V30wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZgsSjd6Y+sC64gywcNPRu1SLAPMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvZG1DeEtOM3BqNndMcmlETEJ3MDlHN1ZJc0E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KfMA0G CSqGSIb3DQEBCwUAA4IBAQDJb1L3/ru7D4ONqUTeZkXJ91ERoFtGT42UcVPZl1gp oZZTBRrTDBZjI5xkjfnGbpp7O5pVJJ0TtcSLREPrO0PoBfAnk3TUIDvsUnS43egd H6T7hdvmU6H1vuvSowdFqNp3ox/PklHBm752uXg57Q0WlI//bNlxVLkllo0dlJ2+ lMOSy+McxMeg2TzEfpWegv1r+F48oPZp9pqKhLdVH0KHAcE0FDDyGTzwr8Ppk/O4 nFbVAYWDVboZona+/aRqy5dX1pRbN29S8vMG5eWahZZ/bMaCu0amPTXbjSO/nA0o +TszGTtnybkE1phcFBotTNrFnTKhEl/pIEd/7GId164d -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:26 2026 by rpki-client