This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dmYgWyLCXGOeE4eyvnO2ivb74hA.roa File: dmYgWyLCXGOeE4eyvnO2ivb74hA.roa (raw, json) Hash identifier: kt4YePEluoOacOx4bJ7guo47DhSRQjZ74NNWUhbB5i8= Subject key identifier: 76:66:20:5B:22:C2:5C:63:9E:13:87:B2:BE:73:B6:8A:F6:FB:E2:10 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019B77C699821F83119FEB553A26C3EF08D8 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dmYgWyLCXGOeE4eyvnO2ivb74hA.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33651 IP address blocks: 9.142.32.0/19 maxlen: 19 9.142.48.0/20 maxlen: 20 9.142.96.0/19 maxlen: 19 9.142.192.0/19 maxlen: 19 138.226.48.0/21 maxlen: 21 138.226.64.0/20 maxlen: 20 138.226.112.0/21 maxlen: 21 138.226.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:99:82:1f:83:11:9f:eb:55:3a:26:c3:ef:08:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7666205b22c25c639e1387b2be73b68af6fbe210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:65:40:c0:e3:e9:b2:2d:da:31:ad:f6:db:9e: 85:80:28:76:f3:03:02:a2:70:bc:42:09:e9:ae:48: da:ea:ef:7b:2c:63:f1:29:b3:d4:1a:1a:98:4d:6b: c1:ce:f4:c0:e0:8d:11:10:f0:f7:a3:ed:11:18:65: 5a:28:b4:a3:d0:da:77:a1:05:f8:28:c1:76:25:ce: 4f:20:47:9e:90:20:79:a6:67:a1:92:8d:12:d5:f2: 8d:32:05:4d:15:26:f9:75:eb:39:ac:fc:31:dc:80: 0b:06:cf:3c:d4:c2:f2:6c:d9:11:bc:91:05:45:ae: 45:54:16:b4:c9:22:fb:81:50:7c:af:39:ad:58:01: cb:1a:19:16:67:55:ed:7b:2e:48:9b:47:49:c2:c9: 17:7b:f2:50:55:a4:15:53:2b:12:bc:6b:40:91:53: c2:e4:95:63:b3:ed:22:5c:d2:57:d4:c4:3e:14:47: 4b:69:b3:e5:6b:0c:22:2f:73:24:3a:c8:9c:15:7f: 13:3b:1b:9f:f9:e9:26:50:e8:fe:31:c8:11:91:df: 53:96:42:d6:fd:ee:6e:99:91:f3:cb:c0:df:dd:cc: c3:63:af:49:ff:f9:8c:e1:b0:41:6a:9a:d4:c2:a8: 79:ba:c6:20:01:70:a1:47:41:c6:70:3d:5d:4b:6d: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:66:20:5B:22:C2:5C:63:9E:13:87:B2:BE:73:B6:8A:F6:FB:E2:10 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dmYgWyLCXGOeE4eyvnO2ivb74hA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 9.142.32.0/19 9.142.96.0/19 9.142.192.0/19 138.226.48.0/21 138.226.64.0/20 138.226.112.0/21 138.226.192.0/21 Signature Algorithm: sha256WithRSAEncryption 19:a2:8d:f5:5a:b4:e1:6b:c6:47:bb:93:d1:96:8c:03:98:63: 01:a8:0e:3b:74:af:ba:71:0c:e5:ee:98:dc:17:25:0a:e6:b9: aa:56:1c:f9:cc:80:15:8e:1e:43:6e:f7:a0:eb:11:a9:b4:63: 63:ea:fe:18:6c:b8:02:b6:8c:79:0f:4f:c0:68:a4:1d:bd:fb: 3d:c6:52:df:29:7f:04:89:6b:58:59:1b:0e:4e:95:76:c6:40: e6:34:1b:2a:63:ca:76:dd:be:77:9d:94:65:8e:da:ef:e3:4b: 55:f3:e1:da:01:55:a0:ea:78:b8:e6:7d:0e:d9:4a:06:03:2b: dc:6f:21:5b:26:80:00:3c:a0:ff:f2:06:47:b5:78:e2:2e:1e: 0d:b5:c9:7f:be:d0:ad:5f:55:ca:42:e3:ce:a2:4b:17:86:14: b1:ef:88:f8:31:6d:49:67:a0:a9:c5:8e:fb:9b:7f:c4:85:3e: 3f:a7:7b:b2:01:1e:14:f4:a1:ef:00:c9:7d:5d:b2:75:65:d3: 57:1d:e8:16:9c:52:64:08:ad:50:4a:6b:58:0a:bf:83:6c:89: b9:1e:0e:4e:17:5f:61:13:dc:0f:14:de:89:b0:4f:9b:5c:54: 26:14:2a:30:07:d9:36:ab:9b:e1:79:db:ab:8e:9e:93:95:66: 7e:fe:e3:20 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt3xpmCH4MRn+tVOibD7wjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjY2MjA1YjIyYzI1YzYzOWUxMzg3YjJiZTczYjY4YWY2ZmJlMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWVAwOPpsi3aMa32256FgCh28wMC onC8Qgnprkja6u97LGPxKbPUGhqYTWvBzvTA4I0REPD3o+0RGGVaKLSj0Np3oQX4 KMF2Jc5PIEeekCB5pmehko0S1fKNMgVNFSb5des5rPwx3IALBs881MLybNkRvJEF Ra5FVBa0ySL7gVB8rzmtWAHLGhkWZ1Xtey5Im0dJwskXe/JQVaQVUysSvGtAkVPC 5JVjs+0iXNJX1MQ+FEdLabPlawwiL3MkOsicFX8TOxuf+ekmUOj+McgRkd9TlkLW /e5umZHzy8Df3czDY69J//mM4bBBaprUwqh5usYgAXChR0HGcD1dS21i9QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFHZmIFsiwlxjnhOHsr5ztor2++IQMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZG1ZZ1d5TENYR09lRTRleXZuTzJpdmI3NGhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQFCY4gAwQF CY5gAwQFCY7AAwQDiuIwAwQEiuJAAwQDiuJwAwQDiuLAMA0GCSqGSIb3DQEBCwUA A4IBAQAZoo31WrTha8ZHu5PRlowDmGMBqA47dK+6cQzl7pjcFyUK5rmqVhz5zIAV jh5Dbveg6xGptGNj6v4YbLgCtox5D0/AaKQdvfs9xlLfKX8EiWtYWRsOTpV2xkDm NBsqY8p23b53nZRljtrv40tV8+HaAVWg6ni45n0O2UoGAyvcbyFbJoAAPKD/8gZH tXjiLh4Ntcl/vtCtX1XKQuPOoksXhhSx74j4MW1JZ6CpxY77m3/EhT4/p3uyAR4U 9KHvAMl9XbJ1ZdNXHegWnFJkCK1QSmtYCr+DbIm5Hg5OF19hE9wPFN6JsE+bXFQm FCowB9k2q5vhedurjp6TlWZ+/uMg -----END CERTIFICATE-----Generated at Tue Jan 20 15:33:51 2026 by rpki-client