This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/DHHudebUM3yKARxlaZ2YpDdj_10.roa File: DHHudebUM3yKARxlaZ2YpDdj_10.roa (raw, json) Hash identifier: 4IZZF7kG21QLytTXVu8J+ZgosQ4Y4zImjPdBHl+JNss= Subject key identifier: 0C:71:EE:75:E6:D4:33:7C:8A:01:1C:65:69:9D:98:A4:37:63:FF:5D Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079 Certificate serial: 019B7F809DA55710800BE2F2A526D660B1C3 Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/DHHudebUM3yKARxlaZ2YpDdj_10.roa Signing time: Fri 02 Jan 2026 16:18:13 +0000 ROA not before: Fri 02 Jan 2026 16:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 128.127.76.0/24 maxlen: 24 128.127.78.0/24 maxlen: 24 128.127.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:9d:a5:57:10:80:0b:e2:f2:a5:26:d6:60:b1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079 Validity Not Before: Jan 2 16:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c71ee75e6d4337c8a011c65699d98a43763ff5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:ce:51:c5:22:d3:a9:10:a0:9f:43:44:b4: 24:5e:ce:cf:b7:0a:7f:53:8b:92:16:2c:50:fa:a8: 31:45:f0:24:a4:84:ab:a8:d2:79:f4:d3:1b:16:9d: 1a:77:a2:31:de:bb:00:f1:67:78:70:f8:11:2b:67: 15:73:80:de:12:4d:40:de:6d:c4:fb:37:c1:3f:35: cf:f3:de:f2:c2:31:af:96:8f:df:78:c4:fc:9f:21: 68:51:91:96:c3:ce:7a:5a:92:8c:b1:1f:f4:21:e6: 11:5f:2d:fb:3c:40:8e:4a:44:4c:56:17:f1:27:86: a2:50:c2:92:ae:27:af:79:06:2c:71:e5:5c:e5:8f: ad:d4:82:3d:0e:13:5a:a5:e6:24:bc:bc:ac:56:c6: 36:b9:cf:08:99:17:68:8f:42:56:f9:b7:04:55:6c: 93:a6:23:41:17:f4:c8:9e:d9:e6:10:be:dc:78:92: ec:ad:fb:a6:4f:45:b8:10:bc:2d:aa:70:2c:9f:de: e8:b7:f3:58:84:69:67:76:f4:09:67:26:a3:db:f3: 51:9a:fd:e3:de:56:97:15:0b:03:a6:df:8c:69:8e: 7c:e1:7f:50:64:70:25:f3:cf:bd:3d:f5:2c:10:f1: 2e:2b:6e:f2:8b:a7:df:f0:e1:f1:d6:75:a9:70:3d: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:71:EE:75:E6:D4:33:7C:8A:01:1C:65:69:9D:98:A4:37:63:FF:5D X509v3 Authority Key Identifier: keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/DHHudebUM3yKARxlaZ2YpDdj_10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.76.0/24 128.127.78.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:bf:7a:07:cd:4a:bb:08:b1:60:06:3b:3a:d8:bd:cd:c4:e5: ac:46:17:04:ec:40:d9:41:d6:d4:8b:a0:be:f2:fc:fd:b7:4f: 9f:cf:82:9f:62:52:b2:25:47:65:60:93:79:10:8d:af:f5:d3: 19:92:88:bd:94:8c:dd:9c:b2:4f:87:91:15:67:92:51:4e:c8: 15:23:42:dd:30:b1:87:4d:7b:4b:8c:5a:f6:a2:7a:cf:3b:9e: 58:11:38:ee:d5:74:a4:ca:50:cf:25:87:84:8a:b5:c3:cc:7b: 5e:13:89:03:9f:41:34:de:d0:55:ed:95:1e:24:ff:6d:06:6c: 1b:da:ac:27:17:26:1b:89:47:19:ad:fe:ad:ed:5b:47:fe:8a: 96:54:13:3a:d3:94:dc:aa:62:d3:bd:9d:c6:57:e3:d1:c6:96: 6a:52:11:10:00:64:4e:14:30:1e:7a:32:87:7b:56:44:42:a0: 6d:0f:7c:2a:3a:0d:c9:9b:f1:ae:11:9f:fb:82:f2:6b:7c:d6: d2:9e:b4:bf:11:4f:64:c2:6f:e5:6f:a7:30:05:76:1f:63:e1: 5f:3b:a7:53:36:f8:07:fa:7d:e5:92:fd:54:08:4e:16:a0:f9: 79:6b:d3:2c:e8:7b:0d:5d:45:cf:73:76:f1:26:07:0b:20:01: 62:af:99:0f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gJ2lVxCAC+LypSbWYLHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzQxMzJjMTJmODY5OTVmZTI4OTNlNGRlYTcyNjM4ZDI2 MDEwNzkwHhcNMjYwMTAyMTYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzcxZWU3NWU2ZDQzMzdjOGEwMTFjNjU2OTlkOThhNDM3NjNmZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz23OUcUi06kQoJ9DRLQkXs7Ptwp/ U4uSFixQ+qgxRfAkpISrqNJ59NMbFp0ad6Ix3rsA8Wd4cPgRK2cVc4DeEk1A3m3E +zfBPzXP897ywjGvlo/feMT8nyFoUZGWw856WpKMsR/0IeYRXy37PECOSkRMVhfx J4aiUMKSrieveQYsceVc5Y+t1II9DhNapeYkvLysVsY2uc8ImRdoj0JW+bcEVWyT piNBF/TIntnmEL7ceJLsrfumT0W4ELwtqnAsn97ot/NYhGlndvQJZyaj2/NRmv3j 3laXFQsDpt+MaY584X9QZHAl88+9PfUsEPEuK27yi6ff8OHx1nWpcD2wwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAxx7nXm1DN8igEcZWmdmKQ3Y/9dMB8GA1UdIwQY MBaAFMh0EywS+GmV/iiT5N6nJjjSYBB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUt NGMwOGI0YWEyMGZlLzEvREhIdWRlYlVNM3lLQVJ4bGFaMllwRGRqXzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUtNGMwOGI0YWEyMGZl LzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgH9MAwQB gH9OMA0GCSqGSIb3DQEBCwUAA4IBAQAuv3oHzUq7CLFgBjs62L3NxOWsRhcE7EDZ QdbUi6C+8vz9t0+fz4KfYlKyJUdlYJN5EI2v9dMZkoi9lIzdnLJPh5EVZ5JRTsgV I0LdMLGHTXtLjFr2onrPO55YETju1XSkylDPJYeEirXDzHteE4kDn0E03tBV7ZUe JP9tBmwb2qwnFyYbiUcZrf6t7VtH/oqWVBM605TcqmLTvZ3GV+PRxpZqUhEQAGRO FDAeejKHe1ZEQqBtD3wqOg3Jm/GuEZ/7gvJrfNbSnrS/EU9kwm/lb6cwBXYfY+Ff O6dTNvgH+n3lkv1UCE4WoPl5a9Ms6HsNXUXPc3bxJgcLIAFir5kP -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:00 2026 by rpki-client