This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/duJlSdUfuEBVAcmWXk5MpTvh7ig.roa File: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (raw, json) Hash identifier: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY= Subject key identifier: 76:E2:65:49:D5:1F:B8:40:55:01:C9:96:5E:4E:4C:A5:3B:E1:EE:28 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B7834F7A59738D64A649BE3857DAC4327 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/duJlSdUfuEBVAcmWXk5MpTvh7ig.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206883 IP address blocks: 188.212.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f7:a5:97:38:d6:4a:64:9b:e3:85:7d:ac:43:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76e26549d51fb8405501c9965e4e4ca53be1ee28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:ab:db:97:c8:ea:0f:5f:ad:18:76:35:e8: 7b:d7:91:e2:18:a9:9e:78:81:76:15:99:8f:c3:ab: ac:82:76:9e:cd:66:e7:25:d9:49:e4:3c:c7:f6:48: 75:13:8e:6b:13:93:99:85:f3:ce:20:44:42:22:a0: 96:59:55:17:5f:69:1a:95:9d:3d:c7:65:06:ce:b4: 58:63:de:c8:5a:5f:3e:62:f8:91:61:e6:1a:55:bf: d2:31:e9:d0:8f:7d:e7:bc:5a:9b:6a:2c:57:d5:fd: 2f:43:08:e8:33:77:d7:56:2a:93:58:7c:ec:99:b1: b3:ba:e7:4c:b2:d7:e5:95:fb:6f:68:bb:5b:eb:f0: 1d:ff:57:ae:3a:d0:28:a3:95:33:02:9c:57:dd:f7: 38:c0:1e:6c:cb:7e:71:f3:3a:2f:31:16:3f:b2:f4: 3a:38:86:dd:be:68:1a:64:76:8f:3a:85:5b:51:8d: 58:8e:cb:12:c8:fb:23:3b:ab:1c:f4:88:82:cb:b5: ee:fa:c9:b2:6e:98:45:74:9d:de:30:8c:bc:58:ba: bd:df:aa:74:71:56:17:c7:6e:9a:59:37:d5:6f:f0: 04:ab:ef:2b:b5:7d:74:a7:76:c2:b3:81:1f:3c:2c: fb:78:ae:3c:29:de:fd:9d:3c:2b:ef:25:e0:31:ac: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:65:49:D5:1F:B8:40:55:01:C9:96:5E:4E:4C:A5:3B:E1:EE:28 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/duJlSdUfuEBVAcmWXk5MpTvh7ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.212.116.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:d6:f7:d3:6c:54:5b:da:20:c4:71:0a:cc:84:49:7a:ad:e3: 44:e3:60:62:a9:3a:86:84:54:f8:4f:14:44:6f:80:c9:56:c6: d2:bb:a3:d3:f6:6f:b1:66:1b:21:c8:11:0a:41:ac:47:78:06: 7b:f1:f5:65:30:87:f1:e4:d1:0e:78:cb:39:1c:a4:05:94:0f: f7:3a:72:ab:b5:5e:b0:57:b4:f3:48:96:22:a8:ad:ae:bc:f3: 5c:d9:45:0f:3c:a1:b4:52:5c:e2:02:be:83:b8:ca:00:46:e9: 6d:d3:2e:e1:fb:ab:6c:23:b6:8c:21:f9:ef:5b:86:91:3d:6e: 03:d2:1a:45:03:5a:22:bc:01:80:94:d5:15:56:7a:d8:d5:7e: c5:7a:90:18:ca:c0:f4:49:bc:5f:ff:7e:dd:fb:38:da:49:89: e7:75:00:32:29:b6:8a:3c:07:b0:3b:62:55:1c:ea:75:4f:18: a3:17:66:2c:7d:ca:46:7c:75:dc:62:e0:c9:92:87:0f:d0:fb: e3:52:4e:4c:97:2e:e1:21:aa:95:59:78:5e:1a:a8:83:cf:9c: 37:63:2d:2d:2c:b7:76:18:30:f3:e3:c5:f0:69:ea:f2:bd:14: 01:c0:2f:fa:91:de:b1:d5:cd:81:76:4c:fe:22:aa:41:ac:13: 35:f2:2e:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPellzjWSmSb44V9rEMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmUyNjU0OWQ1MWZiODQwNTUwMWM5OTY1ZTRlNGNhNTNiZTFlZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOer25fI6g9frRh2Neh715HiGKme eIF2FZmPw6usgnaezWbnJdlJ5DzH9kh1E45rE5OZhfPOIERCIqCWWVUXX2kalZ09 x2UGzrRYY97IWl8+YviRYeYaVb/SMenQj33nvFqbaixX1f0vQwjoM3fXViqTWHzs mbGzuudMstfllftvaLtb6/Ad/1euOtAoo5UzApxX3fc4wB5sy35x8zovMRY/svQ6 OIbdvmgaZHaPOoVbUY1YjssSyPsjO6sc9IiCy7Xu+smybphFdJ3eMIy8WLq936p0 cVYXx26aWTfVb/AEq+8rtX10p3bCs4EfPCz7eK48Kd79nTwr7yXgMawrdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbiZUnVH7hAVQHJll5OTKU74e4oMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvZHVKbFNkVWZ1RUJWQWNtV1hrNU1wVHZoN2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNR0MA0G CSqGSIb3DQEBCwUAA4IBAQCL1vfTbFRb2iDEcQrMhEl6reNE42BiqTqGhFT4TxRE b4DJVsbSu6PT9m+xZhshyBEKQaxHeAZ78fVlMIfx5NEOeMs5HKQFlA/3OnKrtV6w V7TzSJYiqK2uvPNc2UUPPKG0UlziAr6DuMoARult0y7h+6tsI7aMIfnvW4aRPW4D 0hpFA1oivAGAlNUVVnrY1X7FepAYysD0Sbxf/37d+zjaSYnndQAyKbaKPAewO2JV HOp1TxijF2YsfcpGfHXcYuDJkocP0PvjUk5Mly7hIaqVWXheGqiDz5w3Yy0tLLd2 GDDz48XwaeryvRQBwC/6kd6x1c2Bdkz+IqpBrBM18i4R -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:25 2026 by rpki-client