This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/dOVIpKSVgKfAM0mwdRyyGRBBtIA.roa File: dOVIpKSVgKfAM0mwdRyyGRBBtIA.roa (raw, json) Hash identifier: Jva+VI0/jd4AHbZPN5RTZaQYvoGAW4nlwb0J1+q47t4= Subject key identifier: 74:E5:48:A4:A4:95:80:A7:C0:33:49:B0:75:1C:B2:19:10:41:B4:80 Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8 Certificate serial: 019C0DBF0E007D190162217572E6D546D9C8 Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/dOVIpKSVgKfAM0mwdRyyGRBBtIA.roa Signing time: Fri 30 Jan 2026 07:12:30 +0000 ROA not before: Fri 30 Jan 2026 07:12:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 93.92.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0d:bf:0e:00:7d:19:01:62:21:75:72:e6:d5:46:d9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8 Validity Not Before: Jan 30 07:12:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74e548a4a49580a7c03349b0751cb2191041b480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:0d:98:03:4d:b2:45:73:ab:03:d2:3c:3d: 18:56:8a:8b:d4:69:9d:e5:26:66:1a:3b:65:0a:62: 33:b7:5e:fa:63:97:55:45:20:46:58:f7:07:4a:8e: ea:e9:fa:53:5a:54:62:34:42:46:17:2b:e6:aa:e7: ae:2d:b5:d4:04:95:fe:c0:63:e7:86:09:78:0a:1e: 3d:7d:00:8b:3b:0d:92:3f:4d:79:2e:f5:ea:3d:51: b9:d1:3a:08:62:93:c3:96:ec:08:17:91:f9:29:5d: a1:9a:aa:aa:c4:ee:22:3b:98:a2:76:89:e8:0d:99: ea:bb:cc:b3:cf:82:fb:04:5f:44:29:7e:6e:20:0e: 20:33:85:16:de:bc:4a:6d:e7:94:96:f5:20:16:25: 8d:71:83:2a:48:2b:41:e6:9f:47:34:92:31:60:8f: 2e:88:62:12:bb:f5:0c:cc:54:dd:3d:d6:67:0c:89: d7:b5:ce:7e:47:67:ec:74:60:a4:de:6d:f5:f8:51: cd:f8:8d:ad:3d:7a:80:71:f0:7e:bf:76:2a:c3:ac: c9:6a:84:4d:37:82:ac:19:ea:de:b6:c0:31:46:bf: 50:af:e0:48:ca:31:78:03:8b:18:77:2b:84:01:14: 92:e0:74:e3:da:9f:ff:49:09:f4:25:98:10:43:f2: 98:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:48:A4:A4:95:80:A7:C0:33:49:B0:75:1C:B2:19:10:41:B4:80 X509v3 Authority Key Identifier: keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/dOVIpKSVgKfAM0mwdRyyGRBBtIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.92.19.0/24 Signature Algorithm: sha256WithRSAEncryption 93:6d:d9:d0:17:f4:eb:e8:ca:d1:e5:4c:0f:81:e7:e0:6b:96: 08:3d:f7:34:f4:81:48:ae:68:71:d8:d9:ed:2b:f2:85:81:03: cc:4a:e8:4f:0d:06:0a:91:23:1c:b4:7f:e5:23:21:fa:b7:2d: 93:d7:bd:1c:e5:39:34:00:7d:ef:fc:ba:ae:8a:df:73:de:fc: dc:1a:92:f5:0a:0f:8b:bb:40:08:35:d7:6d:d8:ee:3f:5d:16: 62:8d:44:a1:ea:37:d3:64:08:61:78:51:af:6c:75:1a:b5:f2: b8:f8:a6:3d:de:39:6d:05:76:ef:0e:21:69:99:c8:db:ae:7f: c3:2d:7c:55:bf:24:00:07:4b:de:c9:83:5d:00:64:ee:6e:08: 9e:b9:a7:01:69:f0:6e:14:29:17:de:84:87:e0:40:e1:b1:64: c2:bc:bf:82:d1:70:8d:2d:f8:9b:28:a9:b1:c8:fb:7e:32:da: 91:20:ab:62:9b:c7:78:98:58:0e:1a:bc:e1:52:7f:1c:bd:f8: a9:8c:f6:c4:fa:9b:77:c2:07:53:ec:a9:b9:80:26:dc:f7:b1: 7d:23:03:55:b3:1b:d7:14:2e:b5:cd:0a:3d:64:03:df:ef:3e: 6f:a6:b5:31:c7:be:35:8e:cc:40:d6:9f:c7:18:6f:60:90:52: 5e:8f:3b:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwNvw4AfRkBYiF1cubVRtnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi ZWJmZjgwHhcNMjYwMTMwMDcxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGU1NDhhNGE0OTU4MGE3YzAzMzQ5YjA3NTFjYjIxOTEwNDFiNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jANmANNskVzqwPSPD0YVoqL1Gmd 5SZmGjtlCmIzt176Y5dVRSBGWPcHSo7q6fpTWlRiNEJGFyvmqueuLbXUBJX+wGPn hgl4Ch49fQCLOw2SP015LvXqPVG50ToIYpPDluwIF5H5KV2hmqqqxO4iO5iidono DZnqu8yzz4L7BF9EKX5uIA4gM4UW3rxKbeeUlvUgFiWNcYMqSCtB5p9HNJIxYI8u iGISu/UMzFTdPdZnDInXtc5+R2fsdGCk3m31+FHN+I2tPXqAcfB+v3Yqw6zJaoRN N4KsGeretsAxRr9Qr+BIyjF4A4sYdyuEARSS4HTj2p//SQn0JZgQQ/KYGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHTlSKSklYCnwDNJsHUcshkQQbSAMB8GA1UdIwQY MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt NjNjZWQ4NzYyMDQyLzEvZE9WSXBLU1ZnS2ZBTTBtd2RSeXlHUkJCdElBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVwTMA0G CSqGSIb3DQEBCwUAA4IBAQCTbdnQF/Tr6MrR5UwPgefga5YIPfc09IFIrmhx2Nnt K/KFgQPMSuhPDQYKkSMctH/lIyH6ty2T170c5Tk0AH3v/Lquit9z3vzcGpL1Cg+L u0AINddt2O4/XRZijUSh6jfTZAhheFGvbHUatfK4+KY93jltBXbvDiFpmcjbrn/D LXxVvyQAB0veyYNdAGTubgieuacBafBuFCkX3oSH4EDhsWTCvL+C0XCNLfibKKmx yPt+MtqRIKtim8d4mFgOGrzhUn8cvfipjPbE+pt3wgdT7Km5gCbc97F9IwNVsxvX FC61zQo9ZAPf7z5vprUxx741jsxA1p/HGG9gkFJejzuf -----END CERTIFICATE-----Generated at Fri Jan 30 12:19:57 2026 by rpki-client