This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/DUh21kc3_st9zmx6FjCgEwY4O-g.roa File: DUh21kc3_st9zmx6FjCgEwY4O-g.roa (raw, json) Hash identifier: 6N33Nz1wYaJrweY5UTdtSITSNvvX1UF/vvjIlm8O7gE= Subject key identifier: 0D:48:76:D6:47:37:FE:CB:7D:CE:6C:7A:16:30:A0:13:06:38:3B:E8 Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392 Certificate serial: 019B7C7FA3C4B834368A50A221DFCB6D92E7 Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/DUh21kc3_st9zmx6FjCgEwY4O-g.roa Signing time: Fri 02 Jan 2026 02:18:18 +0000 ROA not before: Fri 02 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49855 IP address blocks: 31.24.144.0/21 maxlen: 21 91.202.40.0/22 maxlen: 22 109.69.64.0/21 maxlen: 21 185.98.240.0/22 maxlen: 22 2a02:16d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a3:c4:b8:34:36:8a:50:a2:21:df:cb:6d:92:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392 Validity Not Before: Jan 2 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d4876d64737fecb7dce6c7a1630a01306383be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:14:76:d6:8e:af:25:1b:17:75:2a:71:23: b5:e7:0b:41:24:6e:13:cc:76:3b:82:b7:8f:15:d7: 88:dd:c3:aa:10:b2:0f:77:f0:4a:9b:d5:d2:41:38: 08:81:08:2c:28:1d:47:09:75:bf:1a:fd:b5:01:4c: 2b:f9:ad:41:b8:c2:ff:c7:82:8a:17:bc:e8:e3:c4: 00:21:4d:83:75:7a:03:64:77:98:ac:ac:f7:ac:a6: 36:35:18:a4:1b:fd:f8:4e:2f:fd:ed:36:c7:7e:d2: f1:bf:c2:7b:c8:4a:4b:bc:56:9d:07:ab:54:53:bc: 15:93:a3:4b:2a:6a:a8:4b:7c:30:a4:5e:13:7b:a7: ed:40:f1:ec:be:e1:b8:fb:bb:ce:35:26:33:22:93: bc:29:04:5f:70:9a:55:56:51:47:3c:16:b0:33:35: fd:67:32:b7:ba:c9:d8:53:1e:f9:ae:bb:51:88:6b: f5:7d:89:fb:51:ab:a4:87:dd:b2:81:1d:7f:06:20: 16:23:6f:1d:08:e7:7f:06:f7:35:28:8e:ff:af:64: d1:9d:52:aa:d2:78:98:9b:4d:41:c7:d0:3c:d8:d9: d8:f7:ee:fb:b1:d4:90:48:85:32:0e:5f:22:c6:6b: f0:90:74:79:1d:4b:3b:24:53:60:94:f0:6c:95:2a: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:48:76:D6:47:37:FE:CB:7D:CE:6C:7A:16:30:A0:13:06:38:3B:E8 X509v3 Authority Key Identifier: keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/DUh21kc3_st9zmx6FjCgEwY4O-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.144.0/21 91.202.40.0/22 109.69.64.0/21 185.98.240.0/22 IPv6: 2a02:16d0::/32 Signature Algorithm: sha256WithRSAEncryption 30:6e:c0:8a:0b:42:bc:f7:f2:ff:19:ef:c0:4f:6f:cd:ef:2b: b6:16:79:af:0f:8a:cf:92:67:eb:e6:66:b8:1d:23:b1:bc:a5: 37:19:da:a2:e7:42:7a:e5:3b:b3:d0:e3:84:9d:d7:d1:53:28: 40:ca:51:d2:25:16:a9:d3:fd:f5:df:c2:35:58:ac:80:38:35: 7b:35:3b:d8:fa:c0:07:8a:1e:87:46:f8:9a:c0:59:41:ff:68: f3:7e:cc:2f:80:dd:88:44:b0:cd:68:cd:a5:13:4b:e6:60:c1: c9:7d:f0:59:05:c2:fb:92:08:3e:90:18:47:a3:8a:b3:9c:45: da:95:72:0f:30:21:5a:04:fc:c0:58:cd:83:66:e1:27:f7:cb: ee:30:9b:3f:f1:63:5c:04:8f:a3:83:a1:c9:25:c0:e3:86:f4: ec:d6:75:8e:43:a2:70:25:ce:11:a3:b8:3a:e3:a4:b9:10:a9: 7d:c1:16:09:89:39:38:f3:a8:3e:c2:44:d1:e0:10:c5:7b:a1: 6f:c3:e3:87:77:38:48:9d:84:13:c1:ff:fa:9d:fa:6b:22:7f: ce:53:58:1b:6e:a4:bb:5e:2d:b1:af:48:47:86:19:49:11:47: fb:f6:c4:72:0f:81:12:26:3e:d1:0d:ba:f5:a3:09:ed:08:28: fd:54:04:ea -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8f6PEuDQ2ilCiId/LbZLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMDc5M2UyNGE2NzIwMWY3ZDUyYjY1NjY4NmY0M2RhZGUz YTEzOTIwHhcNMjYwMTAyMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDQ4NzZkNjQ3MzdmZWNiN2RjZTZjN2ExNjMwYTAxMzA2MzgzYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp8UdtaOryUbF3UqcSO15wtBJG4T zHY7grePFdeI3cOqELIPd/BKm9XSQTgIgQgsKB1HCXW/Gv21AUwr+a1BuML/x4KK F7zo48QAIU2DdXoDZHeYrKz3rKY2NRikG/34Ti/97TbHftLxv8J7yEpLvFadB6tU U7wVk6NLKmqoS3wwpF4Te6ftQPHsvuG4+7vONSYzIpO8KQRfcJpVVlFHPBawMzX9 ZzK3usnYUx75rrtRiGv1fYn7Uaukh92ygR1/BiAWI28dCOd/Bvc1KI7/r2TRnVKq 0niYm01Bx9A82NnY9+77sdSQSIUyDl8ixmvwkHR5HUs7JFNglPBslSq97QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFA1IdtZHN/7Lfc5sehYwoBMGODvoMB8GA1UdIwQY MBaAFBMHk+JKZyAffVK2VmhvQ9reOhOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGIt OGJkZjk4YzBjOGYwLzEvRFVoMjFrYzNfc3Q5em14NkZqQ2dFd1k0Ty1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGItOGJkZjk4YzBjOGYw LzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDHxiQAwQC W8ooAwQDbUVAAwQCuWLwMA0EAgACMAcDBQAqAhbQMA0GCSqGSIb3DQEBCwUAA4IB AQAwbsCKC0K89/L/Ge/AT2/N7yu2FnmvD4rPkmfr5ma4HSOxvKU3Gdqi50J65Tuz 0OOEndfRUyhAylHSJRap0/3138I1WKyAODV7NTvY+sAHih6HRviawFlB/2jzfswv gN2IRLDNaM2lE0vmYMHJffBZBcL7kgg+kBhHo4qznEXalXIPMCFaBPzAWM2DZuEn 98vuMJs/8WNcBI+jg6HJJcDjhvTs1nWOQ6JwJc4Ro7g646S5EKl9wRYJiTk486g+ wkTR4BDFe6Fvw+OHdzhInYQTwf/6nfprIn/OU1gbbqS7Xi2xr0hHhhlJEUf79sRy D4ESJj7RDbr1owntCCj9VATq -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:12 2026 by rpki-client