This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa File: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (raw, json) Hash identifier: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI= Subject key identifier: 0E:D8:F5:9B:87:0A:7B:71:AA:5F:A6:E9:C1:8B:55:62:75:03:A6:24 Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Certificate serial: 019B7AC7CEA6D87F843C49A93A87A45A3EFA Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199087 IP address blocks: 89.190.0.0/19 maxlen: 19 185.151.76.0/22 maxlen: 22 2a03:7c00::/29 maxlen: 32 2a03:7c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ce:a6:d8:7f:84:3c:49:a9:3a:87:a4:5a:3e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ed8f59b870a7b71aa5fa6e9c18b55627503a624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:66:b1:68:45:3a:06:c5:f6:c5:c9:90:38: 2f:3f:03:a8:00:17:48:c2:c6:81:04:f5:6c:d3:20: 2e:f7:cc:a7:54:0c:39:3d:0f:da:8f:2d:d0:f8:8a: c0:df:a2:62:81:5c:15:ba:ce:25:c5:9e:9a:5e:d6: ed:08:ce:6a:4c:3e:e1:b4:bd:49:83:d1:a1:e2:dd: 2b:ce:9f:b6:e0:dd:3d:48:16:a1:d5:23:54:9c:81: 30:8b:38:82:a1:dd:2f:22:c5:28:87:45:b3:19:98: 47:b6:b8:4a:91:2b:9d:93:73:f5:6a:af:17:bb:8e: 8c:97:5e:23:c7:87:35:90:08:bb:60:1f:88:b8:a5: f8:7e:70:42:92:a1:77:fe:42:33:a7:9f:54:9f:d0: f1:f9:5e:16:83:72:ff:44:16:93:10:41:4f:a8:72: 70:2f:f4:43:fa:52:29:1e:04:d3:10:9d:80:ff:ca: fb:5a:15:33:88:07:fe:02:58:0d:20:0f:ab:dc:58: 05:b5:5f:5d:ef:1c:82:fc:06:ba:5d:8d:e4:46:cf: d5:30:72:7b:f2:db:3b:d4:d9:b4:41:9b:d6:bb:82: 4a:79:99:c5:cb:e9:0a:2f:ad:ec:1c:e7:28:55:73: 3d:eb:1e:1d:78:95:97:db:1c:1c:44:ab:38:7e:e5: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D8:F5:9B:87:0A:7B:71:AA:5F:A6:E9:C1:8B:55:62:75:03:A6:24 X509v3 Authority Key Identifier: keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.190.0.0/19 185.151.76.0/22 IPv6: 2a03:7c00::/29 Signature Algorithm: sha256WithRSAEncryption ab:67:76:88:3b:68:c8:a6:50:ee:5d:bd:74:b1:69:46:89:eb: 38:39:e0:58:ee:45:c3:9c:6c:20:cc:0d:00:f0:e8:63:88:fa: 3f:82:2f:25:4e:9f:b5:fa:20:48:f2:50:09:0e:31:db:dc:d7: 4c:66:e9:2f:c7:60:48:36:c4:aa:4f:28:4a:b6:ed:ce:9a:d7: cf:c0:64:0e:80:28:a4:7a:1d:6c:2b:6b:24:4f:da:2c:07:b9: 0c:5c:7d:ad:c1:ef:ec:fc:12:de:7f:2b:4a:8e:f6:38:24:7d: 95:f8:a4:ff:52:4c:a7:66:06:59:5c:43:b1:af:7a:9a:45:e6: 0e:d2:20:74:56:59:95:be:41:ff:95:1e:1e:32:a7:f4:77:64: 0f:db:06:98:ec:cf:7e:29:72:3d:be:2c:ac:eb:bf:e5:f2:95: ee:6b:4f:4a:be:72:4a:82:24:43:c0:a8:fb:f8:54:a4:8e:38: af:35:19:01:fb:5c:4b:72:54:1a:05:11:f9:88:e2:77:63:34: 5a:c2:18:d0:3c:4d:19:9e:a2:35:6b:6a:0b:02:a7:be:ea:7a: 67:78:e4:bd:a9:e4:07:f0:a3:60:88:8c:c6:af:50:c6:f6:d8: c2:98:f4:0e:00:a6:8e:9e:4b:ef:2f:e4:f7:d8:6e:4f:91:7e: b0:f9:79:1b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x86m2H+EPEmpOoekWj76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw Y2QzZTcwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWQ4ZjU5Yjg3MGE3YjcxYWE1ZmE2ZTljMThiNTU2Mjc1MDNhNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4NmsWhFOgbF9sXJkDgvPwOoABdI wsaBBPVs0yAu98ynVAw5PQ/ajy3Q+IrA36JigVwVus4lxZ6aXtbtCM5qTD7htL1J g9Gh4t0rzp+24N09SBah1SNUnIEwiziCod0vIsUoh0WzGZhHtrhKkSudk3P1aq8X u46Ml14jx4c1kAi7YB+IuKX4fnBCkqF3/kIzp59Un9Dx+V4Wg3L/RBaTEEFPqHJw L/RD+lIpHgTTEJ2A/8r7WhUziAf+AlgNIA+r3FgFtV9d7xyC/Aa6XY3kRs/VMHJ7 8ts71Nm0QZvWu4JKeZnFy+kKL63sHOcoVXM96x4deJWX2xwcRKs4fuVB4wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFA7Y9ZuHCntxql+m6cGLVWJ1A6YkMB8GA1UdIwQY MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt YzQzYWIyYTEyZDU1LzEvRHRqMW00Y0tlM0dxWDZicHdZdFZZblVEcGlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1 LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFWb4AAwQC uZdMMA0EAgACMAcDBQMqA3wAMA0GCSqGSIb3DQEBCwUAA4IBAQCrZ3aIO2jIplDu Xb10sWlGies4OeBY7kXDnGwgzA0A8OhjiPo/gi8lTp+1+iBI8lAJDjHb3NdMZukv x2BINsSqTyhKtu3OmtfPwGQOgCikeh1sK2skT9osB7kMXH2twe/s/BLefytKjvY4 JH2V+KT/UkynZgZZXEOxr3qaReYO0iB0VlmVvkH/lR4eMqf0d2QP2waY7M9+KXI9 viys67/l8pXua09KvnJKgiRDwKj7+FSkjjivNRkB+1xLclQaBRH5iOJ3YzRawhjQ PE0ZnqI1a2oLAqe+6npneOS9qeQH8KNgiIzGr1DG9tjCmPQOAKaOnkvvL+T32G5P kX6w+Xkb -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:36 2026 by rpki-client