This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/dkZVoeRJR-__79SdUjWpgfrqgX0.roa File: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (raw, json) Hash identifier: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw= Subject key identifier: 76:46:55:A1:E4:49:47:EF:FF:EF:D4:9D:52:35:A9:81:FA:EA:81:7D Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Certificate serial: 019B7AC8F6BCD759A08ED377247AD008ACEC Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/dkZVoeRJR-__79SdUjWpgfrqgX0.roa Signing time: Thu 01 Jan 2026 18:19:09 +0000 ROA not before: Thu 01 Jan 2026 18:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35108 IP address blocks: 194.8.32.0/21 maxlen: 24 194.8.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f6:bc:d7:59:a0:8e:d3:77:24:7a:d0:08:ac:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Validity Not Before: Jan 1 18:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=764655a1e44947efffefd49d5235a981faea817d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:1e:66:41:9d:f0:53:0e:35:14:aa:10:3e: 83:ed:2e:7b:44:c4:33:ab:54:e8:b4:26:46:a4:4c: 8a:1b:a8:c4:a5:52:fb:66:c8:15:c0:01:46:e5:a5: 1d:b7:ca:b5:87:a9:02:a6:87:f2:6b:47:e5:62:66: 39:38:d9:69:57:42:4d:0b:a3:d0:b7:52:b8:04:4b: bc:d6:e5:6c:06:00:98:80:89:06:fe:13:90:a1:6a: 6c:18:f6:ae:57:17:eb:8a:37:f4:c1:d9:72:08:de: 43:79:a1:20:3a:50:53:b8:ea:7f:90:6e:17:83:49: 13:c6:c2:26:1f:4f:36:71:77:32:1f:e4:94:99:a3: dc:45:96:16:7d:2b:dd:b2:a5:2e:6b:94:65:c3:02: ab:8f:fe:d4:18:f2:fa:bd:77:b2:05:8a:46:16:34: 3f:e9:a5:00:1d:a4:6d:73:b8:7b:1b:7b:88:63:18: b2:dd:87:ff:4e:52:07:dd:c6:dd:f6:0b:6f:b8:7c: 78:4f:98:0a:a4:d2:75:b2:34:91:88:31:89:0e:d5: 33:95:b6:7e:f1:64:36:be:18:49:7f:b2:b2:56:6b: 7e:92:99:63:b5:ff:48:2f:ed:50:98:8b:cb:45:be: 46:7a:fe:cb:03:7e:5c:fb:d7:3b:1f:89:3f:2a:63: 4d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:46:55:A1:E4:49:47:EF:FF:EF:D4:9D:52:35:A9:81:FA:EA:81:7D X509v3 Authority Key Identifier: keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/dkZVoeRJR-__79SdUjWpgfrqgX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.32.0-194.8.43.255 Signature Algorithm: sha256WithRSAEncryption 63:83:22:a5:cc:e7:58:86:14:ee:fd:70:b0:e3:1e:9d:9d:fb: 42:d3:55:4b:c3:5d:e2:e8:3b:65:8c:da:42:7c:ad:85:5f:ce: 7c:95:e5:2c:f9:c2:37:f0:b7:ca:3a:df:50:5d:fc:69:43:ee: 57:b9:e0:cb:90:1e:b8:bf:93:fc:bd:f6:ba:8b:69:24:77:d3: 1b:ab:71:2d:10:90:85:e4:dd:6e:10:9a:55:28:77:3e:67:9b: c0:b5:e6:40:f2:0b:24:0c:1a:90:dc:bd:13:bb:1d:1c:ab:56: 5d:2e:2d:3f:00:e5:f0:71:96:fc:c3:1a:ec:56:21:48:72:8f: 85:c5:88:90:0e:7a:56:62:d0:6e:2c:cc:50:71:9a:e4:6a:19: fc:f5:90:f9:2c:87:87:23:1c:54:d9:5e:79:1d:f8:d5:89:ad: 00:70:cc:a6:29:3d:5b:48:fe:cf:d8:ae:69:c4:a6:22:c8:13: 92:e9:1f:e0:d6:61:8f:22:49:81:63:29:ad:8c:fe:65:65:9a: fd:75:24:4b:47:ab:11:15:46:53:26:60:73:f6:f8:ec:ad:15: ba:41:2b:ae:4c:65:02:0e:71:ab:2b:84:7c:d6:9c:8b:5b:33: 82:b8:95:5d:f0:f1:24:10:37:9e:b7:06:e7:38:c2:c3:5c:0a: 7a:38:9e:9d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6yPa811mgjtN3JHrQCKzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDAzN2Q0ZWUzZTVkMjcwNjVhZDgwMzU2NTgyYTJmZGMy YjQ4OGQwHhcNMjYwMTAxMTgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjQ2NTVhMWU0NDk0N2VmZmZlZmQ0OWQ1MjM1YTk4MWZhZWE4MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEeZkGd8FMONRSqED6D7S57RMQz q1TotCZGpEyKG6jEpVL7ZsgVwAFG5aUdt8q1h6kCpofya0flYmY5ONlpV0JNC6PQ t1K4BEu81uVsBgCYgIkG/hOQoWpsGPauVxfrijf0wdlyCN5DeaEgOlBTuOp/kG4X g0kTxsImH082cXcyH+SUmaPcRZYWfSvdsqUua5RlwwKrj/7UGPL6vXeyBYpGFjQ/ 6aUAHaRtc7h7G3uIYxiy3Yf/TlIH3cbd9gtvuHx4T5gKpNJ1sjSRiDGJDtUzlbZ+ 8WQ2vhhJf7KyVmt+kpljtf9IL+1QmIvLRb5Gev7LA35c+9c7H4k/KmNN6wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHZGVaHkSUfv/+/UnVI1qYH66oF9MB8GA1UdIwQY MBaAFE7QN9TuPl0nBlrYA1ZYKi/cK0iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQt MzUwZTY4MWI5OWQxLzEvZGtaVm9lUkpSLV9fNzlTZFVqV3BnZnJxZ1gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQtMzUwZTY4MWI5OWQx LzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXCCCAD BALCCCgwDQYJKoZIhvcNAQELBQADggEBAGODIqXM51iGFO79cLDjHp2d+0LTVUvD XeLoO2WM2kJ8rYVfznyV5Sz5wjfwt8o631Bd/GlD7le54MuQHri/k/y99rqLaSR3 0xurcS0QkIXk3W4QmlUodz5nm8C15kDyCyQMGpDcvRO7HRyrVl0uLT8A5fBxlvzD GuxWIUhyj4XFiJAOelZi0G4szFBxmuRqGfz1kPksh4cjHFTZXnkd+NWJrQBwzKYp PVtI/s/YrmnEpiLIE5LpH+DWYY8iSYFjKa2M/mVlmv11JEtHqxEVRlMmYHP2+Oyt FbpBK65MZQIOcasrhHzWnItbM4K4lV3w8SQQN563Buc4wsNcCno4np0= -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:47 2026 by rpki-client