This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/dhOZf_4fAgQZi4_moQSI8o9EFj0.roa File: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (raw, json) Hash identifier: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE= Subject key identifier: 76:13:99:7F:FE:1F:02:04:19:8B:8F:E6:A1:04:88:F2:8F:44:16:3D Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Certificate serial: 019B7EA4F54E92BE78326D5DF5F648F88112 Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/dhOZf_4fAgQZi4_moQSI8o9EFj0.roa Signing time: Fri 02 Jan 2026 12:18:18 +0000 ROA not before: Fri 02 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19551 IP address blocks: 91.231.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f5:4e:92:be:78:32:6d:5d:f5:f6:48:f8:81:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Validity Not Before: Jan 2 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7613997ffe1f0204198b8fe6a10488f28f44163d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:f3:c3:f1:7f:8d:b7:f7:6a:83:6e:f3:f6: b9:5c:cd:ed:ef:45:45:12:27:4a:bc:f3:9c:6b:d9: 5c:9d:5e:d8:62:0b:eb:72:1d:a6:e2:4d:01:e2:87: ab:de:01:85:d5:57:f3:a0:84:dc:6b:74:99:99:11: ac:01:f3:67:65:82:fe:7b:29:65:90:89:74:d3:b1: 75:e9:67:f4:de:64:6f:4e:4a:2c:aa:c8:ca:30:c5: 59:ae:bd:2d:12:e8:c1:16:21:bc:56:14:5a:b7:86: 07:20:8c:34:88:6e:36:70:74:ab:1f:ae:26:bb:c9: 44:44:e8:54:8b:57:0a:13:82:bc:2e:e7:2b:8a:79: 1b:ff:a9:2a:af:01:18:4c:51:50:5f:d1:bb:4a:ea: 9a:31:bf:b2:3b:06:28:80:fe:e0:79:fc:07:af:e3: 59:8f:51:15:b8:3b:6d:e1:b1:dd:d4:69:2b:f4:7e: be:87:ec:78:6e:68:de:bb:47:28:93:39:9c:80:67: 1b:14:ed:5e:4d:80:17:5a:5c:dd:f2:1c:43:d0:db: c0:40:20:ad:bf:28:30:dd:33:cd:cf:b9:c7:39:6e: 3e:00:08:68:65:13:f1:4b:a6:dd:a3:2a:82:be:0e: 6a:06:eb:6a:1e:1f:ac:03:eb:96:7e:d4:06:f3:ad: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:13:99:7F:FE:1F:02:04:19:8B:8F:E6:A1:04:88:F2:8F:44:16:3D X509v3 Authority Key Identifier: keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/dhOZf_4fAgQZi4_moQSI8o9EFj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.192.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:29:af:b8:1d:e5:bf:4e:55:a8:2f:f1:84:de:0e:a0:11:13: a7:2e:24:38:1b:fa:3f:4e:b5:f9:05:6c:45:84:4f:e2:04:c9: b7:ed:2a:08:c9:60:47:82:f9:e9:97:ce:2e:17:13:ac:df:14: 8b:22:1f:e4:24:da:ea:b2:76:ad:c9:86:17:92:37:2e:66:34: ca:0b:34:9c:40:38:b3:8e:49:d8:6a:4f:67:3f:31:10:a3:7d: 92:94:72:16:8e:09:5f:97:88:47:c2:3b:02:b6:c2:d1:61:cc: e0:4f:80:0e:b6:f8:5b:23:b2:51:09:d8:24:26:5b:a8:cb:86: 2e:65:64:1a:22:b0:0f:c3:6f:29:fd:34:84:37:2b:e1:ae:7a: f3:67:f1:73:cc:90:71:21:3b:c6:0b:31:1e:78:98:89:bb:b6: ea:79:fd:0b:93:bf:b5:79:c1:fa:11:c8:46:02:32:54:a6:43: cc:98:40:4b:c3:b3:51:85:74:45:e9:7a:dc:1a:1f:a5:77:e0: 5a:25:36:59:6c:43:ec:31:27:86:ce:e4:92:be:3b:67:5c:1a: 43:de:9c:3b:8b:93:b8:7c:0a:37:85:37:f2:ff:ce:6d:c1:53: e4:cf:54:96:0d:e0:1a:b8:35:79:54:4d:aa:57:f6:42:fb:4f: e5:2a:db:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pPVOkr54Mm1d9fZI+IESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi MDJhMzcwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjEzOTk3ZmZlMWYwMjA0MTk4YjhmZTZhMTA0ODhmMjhmNDQxNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruHzw/F/jbf3aoNu8/a5XM3t70VF EidKvPOca9lcnV7YYgvrch2m4k0B4oer3gGF1VfzoITca3SZmRGsAfNnZYL+eyll kIl007F16Wf03mRvTkosqsjKMMVZrr0tEujBFiG8VhRat4YHIIw0iG42cHSrH64m u8lEROhUi1cKE4K8Lucrinkb/6kqrwEYTFFQX9G7SuqaMb+yOwYogP7gefwHr+NZ j1EVuDtt4bHd1Gkr9H6+h+x4bmjeu0cokzmcgGcbFO1eTYAXWlzd8hxD0NvAQCCt vygw3TPNz7nHOW4+AAhoZRPxS6bdoyqCvg5qButqHh+sA+uWftQG861EkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYTmX/+HwIEGYuP5qEEiPKPRBY9MB8GA1UdIwQY MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt YjVmMGQyMTA1M2Y4LzEvZGhPWmZfNGZBZ1FaaTRfbW9RU0k4bzlFRmowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4 LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+fAMA0G CSqGSIb3DQEBCwUAA4IBAQAtKa+4HeW/TlWoL/GE3g6gEROnLiQ4G/o/TrX5BWxF hE/iBMm37SoIyWBHgvnpl84uFxOs3xSLIh/kJNrqsnatyYYXkjcuZjTKCzScQDiz jknYak9nPzEQo32SlHIWjglfl4hHwjsCtsLRYczgT4AOtvhbI7JRCdgkJluoy4Yu ZWQaIrAPw28p/TSENyvhrnrzZ/FzzJBxITvGCzEeeJiJu7bqef0Lk7+1ecH6EchG AjJUpkPMmEBLw7NRhXRF6XrcGh+ld+BaJTZZbEPsMSeGzuSSvjtnXBpD3pw7i5O4 fAo3hTfy/85twVPkz1SWDeAauDV5VE2qV/ZC+0/lKtsY -----END CERTIFICATE-----Generated at Tue Jan 20 07:48:40 2026 by rpki-client