This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/dg_wP3exQr99siZMe2HJIj5cuEE.roa File: dg_wP3exQr99siZMe2HJIj5cuEE.roa (raw, json) Hash identifier: 6QFunw3gR5dCtdoUx0ipbh76Y60LWX9z3LOMdv6vVro= Subject key identifier: 76:0F:F0:3F:77:B1:42:BF:7D:B2:26:4C:7B:61:C9:22:3E:5C:B8:41 Certificate issuer: /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59 Certificate serial: 019B791140133328535A3BEA87A42A439A48 Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/dg_wP3exQr99siZMe2HJIj5cuEE.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197134 IP address blocks: 91.217.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:40:13:33:28:53:5a:3b:ea:87:a4:2a:43:9a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=760ff03f77b142bf7db2264c7b61c9223e5cb841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:91:44:0e:56:ce:85:d4:75:ee:dd:d6:fb: 9b:66:61:85:24:02:28:0d:57:bf:a2:8f:7c:22:c3: 22:c1:c0:a5:27:23:3f:b4:df:3a:53:43:ef:0d:8d: eb:3b:4b:fd:71:c4:e2:27:66:39:98:5a:75:fb:72: 87:64:56:44:31:36:11:91:d1:62:f5:bf:7a:1f:49: 49:03:0b:b2:ea:e9:0a:c4:d8:a3:b3:f5:95:b2:9c: fa:bb:54:64:07:e4:6f:8f:49:8f:90:3e:ca:7a:76: f3:6c:81:67:de:ee:b2:47:b0:33:83:2b:86:c8:33: 77:2f:9c:0a:d3:4c:29:e5:5f:c1:3c:4c:9b:64:54: 7d:93:f1:12:99:e0:1b:eb:17:aa:06:43:45:91:c6: 6e:3c:bc:af:bc:9c:a4:51:32:e0:9b:93:ce:94:92: 0b:a5:7e:a8:6d:73:f2:51:ed:b6:b5:d3:61:a0:09: e6:c2:2a:d0:2b:a6:ff:b4:ab:41:f2:b0:7f:83:6f: 8c:b9:67:12:2d:d5:bc:52:ae:82:ee:98:c9:e9:27: 88:12:5e:38:0c:c6:27:62:62:d2:5b:cb:34:1e:6f: da:09:24:7e:e2:12:28:94:50:24:36:d7:64:3f:c7: 51:3b:da:09:c4:00:2c:82:37:96:79:09:1c:aa:99: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:F0:3F:77:B1:42:BF:7D:B2:26:4C:7B:61:C9:22:3E:5C:B8:41 X509v3 Authority Key Identifier: keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/dg_wP3exQr99siZMe2HJIj5cuEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.28.0/24 Signature Algorithm: sha256WithRSAEncryption 61:19:4e:6c:a2:e4:ce:8e:58:94:0c:4a:68:2d:6b:dd:d5:db: b1:10:7a:5d:8d:de:ab:01:e7:5b:f9:25:17:d7:23:86:57:6c: 09:1c:fb:98:c4:2e:1b:8c:7e:c4:c6:bf:b4:9c:70:34:6d:86: e3:18:e3:75:3e:1c:94:83:26:43:30:fa:07:06:7c:6e:cb:4c: 80:27:b6:08:77:ae:e8:b4:6b:0c:7d:5f:57:11:19:d6:59:24: 46:1f:ba:4e:6c:26:30:49:c7:48:52:86:16:08:95:63:3a:75: c4:55:d9:08:e1:b7:5a:50:5b:42:ca:f3:3c:fc:87:fd:da:fe: da:b0:19:98:fb:d0:58:5e:80:39:55:16:99:b3:8e:46:01:7d: c9:ce:4f:45:d6:c1:f0:2a:32:02:71:7d:2c:5a:9c:4d:de:0a: 8c:11:86:7d:17:f1:ee:04:c7:05:ac:71:e7:b2:6f:6a:bc:e5: fd:14:9e:a6:6f:2d:68:23:f3:8c:e3:7a:9e:14:d2:4f:c9:f7: 1a:e9:9f:b1:0d:c9:af:29:7b:2d:43:c7:b4:90:4e:99:08:03: 58:c8:01:88:49:a6:2b:e5:25:03:a1:4f:b5:e5:e5:de:e1:84: 9a:07:eb:9c:81:aa:f8:b1:bb:df:28:3d:f2:b3:e9:23:92:4f: 24:b5:d0:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUATMyhTWjvqh6QqQ5pIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODNlZmM1MmRkNWQyZDRmN2UwYzQ1ZDIyYzljMjlmMWRj ZThlNTkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjBmZjAzZjc3YjE0MmJmN2RiMjI2NGM3YjYxYzkyMjNlNWNiODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUuRRA5WzoXUde7d1vubZmGFJAIo DVe/oo98IsMiwcClJyM/tN86U0PvDY3rO0v9ccTiJ2Y5mFp1+3KHZFZEMTYRkdFi 9b96H0lJAwuy6ukKxNijs/WVspz6u1RkB+Rvj0mPkD7KenbzbIFn3u6yR7AzgyuG yDN3L5wK00wp5V/BPEybZFR9k/ESmeAb6xeqBkNFkcZuPLyvvJykUTLgm5POlJIL pX6obXPyUe22tdNhoAnmwirQK6b/tKtB8rB/g2+MuWcSLdW8Uq6C7pjJ6SeIEl44 DMYnYmLSW8s0Hm/aCSR+4hIolFAkNtdkP8dRO9oJxAAsgjeWeQkcqpmCYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYP8D93sUK/fbImTHthySI+XLhBMB8GA1UdIwQY MBaAFDGD78Ut1dLU9+DEXSLJwp8dzo5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YmFjNzEtOTk0ZS00ZDQ3LWJjZmUt ZjhmM2YwNDAxY2MzLzEvZGdfd1AzZXhRcjk5c2laTWUySEpJajVjdUVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83YmFjNzEtOTk0ZS00ZDQ3LWJjZmUtZjhmM2YwNDAxY2Mz LzEvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9kcMA0G CSqGSIb3DQEBCwUAA4IBAQBhGU5souTOjliUDEpoLWvd1duxEHpdjd6rAedb+SUX 1yOGV2wJHPuYxC4bjH7Exr+0nHA0bYbjGON1PhyUgyZDMPoHBnxuy0yAJ7YId67o tGsMfV9XERnWWSRGH7pObCYwScdIUoYWCJVjOnXEVdkI4bdaUFtCyvM8/If92v7a sBmY+9BYXoA5VRaZs45GAX3Jzk9F1sHwKjICcX0sWpxN3gqMEYZ9F/HuBMcFrHHn sm9qvOX9FJ6mby1oI/OM43qeFNJPyfca6Z+xDcmvKXstQ8e0kE6ZCANYyAGISaYr 5SUDoU+15eXe4YSaB+ucgar4sbvfKD3ys+kjkk8ktdC7 -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:50 2026 by rpki-client