This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/dc3eKFfSxHFYzzU_oM182euYwgE.roa File: dc3eKFfSxHFYzzU_oM182euYwgE.roa (raw, json) Hash identifier: Gv+75A1LB5RsqtJnS89RJjrHYzND9EYfxZEGawh5qzU= Subject key identifier: 75:CD:DE:28:57:D2:C4:71:58:CF:35:3F:A0:CD:7C:D9:EB:98:C2:01 Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4 Certificate serial: 019B78A26AD1D515E1D6FAB73B7DDA53ED9E Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/dc3eKFfSxHFYzzU_oM182euYwgE.roa Signing time: Thu 01 Jan 2026 08:17:48 +0000 ROA not before: Thu 01 Jan 2026 08:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60624 IP address blocks: 91.236.84.0/23 maxlen: 23 91.236.86.0/23 maxlen: 23 185.28.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6a:d1:d5:15:e1:d6:fa:b7:3b:7d:da:53:ed:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4 Validity Not Before: Jan 1 08:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75cdde2857d2c47158cf353fa0cd7cd9eb98c201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:62:53:28:b7:3e:d0:39:4c:aa:b7:eb:02: 8d:3d:e8:ec:22:62:c4:c0:7e:46:a9:77:b0:d0:31: eb:6c:ea:c6:d7:e0:7a:9e:1b:a1:d1:44:7f:57:9d: 44:bb:6f:aa:a5:da:21:16:dd:2d:05:35:70:00:da: 04:31:af:25:33:86:19:38:93:da:09:78:7d:07:6b: c0:e2:3b:42:cc:29:47:31:2d:5f:c5:ea:dd:6e:17: dc:52:78:b8:e9:53:04:d8:28:76:a2:f3:13:e3:40: 60:a9:c2:a6:c5:9f:55:59:ee:6e:0e:bf:3c:a4:65: b5:a2:4b:e3:d6:c1:69:75:d1:90:3b:a4:d1:e3:67: 0b:f7:19:53:3e:67:91:9c:0f:5c:d2:02:06:19:c3: 54:37:d4:ce:4f:2f:46:a9:ed:61:9e:1a:c5:54:03: 9b:b6:2c:0b:1f:66:f3:18:7b:c1:60:5e:62:eb:b0: 7b:f9:14:6f:3a:c2:88:73:5c:f5:1c:cf:15:6d:0f: b2:96:8c:64:6f:a1:91:75:39:2a:47:4b:c7:53:d7: 27:14:c9:09:95:30:ea:b7:9d:0f:df:85:b1:74:4a: 9c:27:54:4f:0a:f9:29:5f:6a:fc:3f:c5:eb:31:33: 88:ac:c8:23:d1:20:ad:d9:6b:7d:9e:40:18:43:23: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CD:DE:28:57:D2:C4:71:58:CF:35:3F:A0:CD:7C:D9:EB:98:C2:01 X509v3 Authority Key Identifier: keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/dc3eKFfSxHFYzzU_oM182euYwgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.84.0/22 185.28.248.0/22 Signature Algorithm: sha256WithRSAEncryption c7:ed:88:f6:8b:8c:24:40:4f:78:4d:bf:74:fc:00:44:7f:fd: f1:87:e0:fa:b4:71:7a:eb:b2:48:e5:33:40:7b:11:99:1d:c2: a3:a7:f7:0a:85:01:38:63:47:c0:f5:5c:4a:ee:02:35:c0:06: 80:f4:85:88:2b:7a:dc:c2:5a:86:ee:e9:eb:6c:71:9e:b0:10: ff:a3:f4:a1:c1:69:d1:4a:11:7b:e3:42:a8:3f:f0:c1:93:e3: 59:cd:92:3d:b7:7a:26:e8:0b:15:a0:1b:e6:c1:15:f0:cc:f8: 0c:2f:12:6a:65:67:1b:f6:2d:1f:89:a6:84:d5:30:a2:a6:f0: 48:46:c3:49:11:e6:0d:e2:b6:de:27:d0:0a:3e:04:fc:8a:18: 42:b7:ad:ff:86:05:e8:61:29:f7:e8:0a:47:f7:05:9a:6f:5c: cb:97:1b:44:4e:ca:1a:19:0d:29:8d:aa:2d:d5:3c:28:61:9b: 94:cd:28:00:8c:bd:0a:07:95:27:92:5f:58:93:d1:8d:86:19: 26:2b:af:ed:08:40:9c:ed:aa:94:27:df:c6:ae:8b:4f:d8:c8: 44:7c:d7:3d:7b:f7:53:0f:3d:11:fe:2a:73:ea:c2:96:da:db: a3:d0:fc:c2:a1:92:f6:88:72:62:b5:98:2a:b5:28:59:50:7c: a3:8f:72:f1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4omrR1RXh1vq3O33aU+2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDBhNWNhMmNmMWJkOTEyZjQyY2M4Y2Y2NTFmNmZlODhl NzI2YTQwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWNkZGUyODU3ZDJjNDcxNThjZjM1M2ZhMGNkN2NkOWViOThjMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG1iUyi3PtA5TKq36wKNPejsImLE wH5GqXew0DHrbOrG1+B6nhuh0UR/V51Eu2+qpdohFt0tBTVwANoEMa8lM4YZOJPa CXh9B2vA4jtCzClHMS1fxerdbhfcUni46VME2Ch2ovMT40BgqcKmxZ9VWe5uDr88 pGW1okvj1sFpddGQO6TR42cL9xlTPmeRnA9c0gIGGcNUN9TOTy9Gqe1hnhrFVAOb tiwLH2bzGHvBYF5i67B7+RRvOsKIc1z1HM8VbQ+yloxkb6GRdTkqR0vHU9cnFMkJ lTDqt50P34WxdEqcJ1RPCvkpX2r8P8XrMTOIrMgj0SCt2Wt9nkAYQyOnBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHXN3ihX0sRxWM81P6DNfNnrmMIBMB8GA1UdIwQY MBaAFCTQpcos8b2RL0LMjPZR9v6I5yakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQt ZGIxM2NjM2YxZGI2LzEvZGMzZUtGZlN4SEZZenpVX29NMTgyZXVZd2dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQtZGIxM2NjM2YxZGI2 LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+xUAwQC uRz4MA0GCSqGSIb3DQEBCwUAA4IBAQDH7Yj2i4wkQE94Tb90/ABEf/3xh+D6tHF6 67JI5TNAexGZHcKjp/cKhQE4Y0fA9VxK7gI1wAaA9IWIK3rcwlqG7unrbHGesBD/ o/ShwWnRShF740KoP/DBk+NZzZI9t3om6AsVoBvmwRXwzPgMLxJqZWcb9i0fiaaE 1TCipvBIRsNJEeYN4rbeJ9AKPgT8ihhCt63/hgXoYSn36ApH9wWab1zLlxtETsoa GQ0pjaot1TwoYZuUzSgAjL0KB5Unkl9Yk9GNhhkmK6/tCECc7aqUJ9/GrotP2MhE fNc9e/dTDz0R/ipz6sKW2tuj0PzCoZL2iHJitZgqtShZUHyjj3Lx -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:16 2026 by rpki-client