This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/dizEX_iSYkDBVGUBivY0AsRq6PU.roa File: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (raw, json) Hash identifier: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98= Subject key identifier: 76:2C:C4:5F:F8:92:62:40:C1:54:65:01:8A:F6:34:02:C4:6A:E8:F5 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37E5252EF9ADDEB4ADA688917DE312 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/dizEX_iSYkDBVGUBivY0AsRq6PU.roa Signing time: Fri 02 Jan 2026 10:19:10 +0000 ROA not before: Fri 02 Jan 2026 10:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 31.22.74.0/24 maxlen: 24 31.22.78.0/24 maxlen: 24 31.22.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 18:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e5:25:2e:f9:ad:de:b4:ad:a6:88:91:7d:e3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=762cc45ff8926240c15465018af63402c46ae8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:86:55:5c:d2:7e:41:2e:02:98:fc:74:f3: 75:7c:cc:c0:e9:bb:79:42:d4:38:73:65:32:3d:f4: 59:56:a9:e4:fe:c8:72:9a:ff:3b:fb:e4:70:d1:ad: 12:6f:d1:44:e3:a4:2e:cd:4b:45:f8:44:7b:68:34: 9f:1a:f9:ea:c3:d2:25:94:37:61:6d:16:bd:44:10: ed:84:8a:1b:63:9d:22:50:98:0a:6a:72:bd:4d:b2: 42:6c:30:ce:d8:ff:ac:4e:dc:a8:ed:6c:59:56:d4: 32:d4:2b:95:5a:0c:d6:58:65:19:cd:fa:1d:b3:58: d2:fe:ca:0c:8c:b6:60:95:6e:81:b6:3d:c5:93:c4: 6c:b0:59:f7:ba:2f:06:0c:62:41:02:3b:48:5e:0c: 88:86:77:b2:cd:81:91:5b:9c:a1:d3:88:12:71:f4: 7e:49:5d:6c:67:5b:51:07:e2:c6:94:81:d0:69:5a: b3:f5:ed:5c:77:08:80:ed:07:9e:0f:97:fa:29:52: 76:38:98:a2:4e:b7:a9:11:55:e5:03:a8:48:94:dc: ec:fe:e7:1d:ec:d9:22:e9:ba:cf:67:a5:81:d9:4b: e5:e9:7d:ee:99:f7:62:ec:46:76:ff:7e:f1:6e:44: 52:8a:e1:4b:e0:c7:59:ff:56:c0:4f:c2:0f:6f:0c: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2C:C4:5F:F8:92:62:40:C1:54:65:01:8A:F6:34:02:C4:6A:E8:F5 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/dizEX_iSYkDBVGUBivY0AsRq6PU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.74.0/24 31.22.78.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:ad:02:ae:49:0b:67:52:43:bc:2b:e3:17:eb:14:92:33:ab: 5c:78:06:cf:01:04:f8:f7:3f:4a:8b:a7:5a:1a:5d:a1:bb:69: 03:6f:71:5b:fa:e0:c9:fc:47:89:1f:3d:ed:cc:91:44:6e:ba: 86:84:7c:75:d9:81:7c:34:da:7f:89:11:b8:19:82:5b:63:51: 90:61:a3:d3:cd:b3:66:84:c7:c2:5c:84:bc:c7:1c:86:2e:6f: 1e:18:0a:b7:64:ee:09:b0:c1:a9:4b:57:da:d3:05:38:70:08: b1:63:c1:be:ae:d4:c2:2c:ef:b5:3e:2f:3b:aa:67:e6:b2:b4: 5f:34:7f:9e:48:81:7d:f3:9e:41:4e:1e:1e:e0:04:15:6a:4c: ef:04:b3:b8:4a:d6:61:a6:2f:41:26:ff:c7:55:07:5a:c8:e3: 76:13:ee:00:80:c2:8e:90:d1:36:23:92:4e:ed:e0:e9:db:43: 23:a4:43:79:a1:b6:cd:8e:cb:4c:8d:98:fe:70:0f:93:af:07: e0:19:f0:3a:dd:80:47:62:b6:5f:c7:cf:7c:f1:7d:4d:1c:d5: ba:d5:ac:93:47:45:45:80:93:4d:7c:c8:05:21:31:5a:8c:1a: 17:99:e2:ba:56:ed:97:d5:3f:7a:fe:d9:cd:57:ea:f7:5f:25: db:04:90:b7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N+UlLvmt3rStpoiRfeMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjJjYzQ1ZmY4OTI2MjQwYzE1NDY1MDE4YWY2MzQwMmM0NmFlOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01yGVVzSfkEuApj8dPN1fMzA6bt5 QtQ4c2UyPfRZVqnk/shymv87++Rw0a0Sb9FE46QuzUtF+ER7aDSfGvnqw9IllDdh bRa9RBDthIobY50iUJgKanK9TbJCbDDO2P+sTtyo7WxZVtQy1CuVWgzWWGUZzfod s1jS/soMjLZglW6Btj3Fk8RssFn3ui8GDGJBAjtIXgyIhneyzYGRW5yh04gScfR+ SV1sZ1tRB+LGlIHQaVqz9e1cdwiA7QeeD5f6KVJ2OJiiTrepEVXlA6hIlNzs/ucd 7Nki6brPZ6WB2Uvl6X3umfdi7EZ2/37xbkRSiuFL4MdZ/1bAT8IPbwzMKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHYsxF/4kmJAwVRlAYr2NALEauj1MB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvZGl6RVhfaVNZa0RCVkdVQml2WTBBc1JxNlBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHxZKAwQB HxZOMA0GCSqGSIb3DQEBCwUAA4IBAQBdrQKuSQtnUkO8K+MX6xSSM6tceAbPAQT4 9z9Ki6daGl2hu2kDb3Fb+uDJ/EeJHz3tzJFEbrqGhHx12YF8NNp/iRG4GYJbY1GQ YaPTzbNmhMfCXIS8xxyGLm8eGAq3ZO4JsMGpS1fa0wU4cAixY8G+rtTCLO+1Pi87 qmfmsrRfNH+eSIF9855BTh4e4AQVakzvBLO4StZhpi9BJv/HVQdayON2E+4AgMKO kNE2I5JO7eDp20MjpEN5obbNjstMjZj+cA+TrwfgGfA63YBHYrZfx8988X1NHNW6 1ayTR0VFgJNNfMgFITFajBoXmeK6Vu2X1T96/tnNV+r3XyXbBJC3 -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:44 2026 by rpki-client