This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/dp2gXrpfvOMg65Z1sl0IeonKbxM.roa File: dp2gXrpfvOMg65Z1sl0IeonKbxM.roa (raw, json) Hash identifier: 8Vzr1PEVztWf+5QEVA47vH/IaL1dnxwbEHxKX7SEwVU= Subject key identifier: 76:9D:A0:5E:BA:5F:BC:E3:20:EB:96:75:B2:5D:08:7A:89:CA:6F:13 Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de Certificate serial: 019B7BA447BE909F18A24E9D1C18BD27DC75 Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/dp2gXrpfvOMg65Z1sl0IeonKbxM.roa Signing time: Thu 01 Jan 2026 22:18:42 +0000 ROA not before: Thu 01 Jan 2026 22:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201964 IP address blocks: 31.187.84.0/22 maxlen: 22 31.187.87.0/24 maxlen: 24 185.55.84.0/22 maxlen: 22 2a02:4820::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:47:be:90:9f:18:a2:4e:9d:1c:18:bd:27:dc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9706aa905465586424f387fdbd83648b72d946de Validity Not Before: Jan 1 22:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=769da05eba5fbce320eb9675b25d087a89ca6f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:53:74:bc:7e:cd:d0:e7:52:dc:49:01:28:43: 49:a6:ae:71:3d:59:f5:31:8f:f3:00:49:87:89:f8: dd:f3:d5:34:98:12:f3:7f:6d:1c:cb:a1:e9:35:09: 4b:cd:e7:9d:06:54:88:0c:dd:be:59:4b:09:b1:74: 1a:63:9a:de:29:d0:3c:5a:31:60:9d:60:12:4f:97: d4:8b:74:c1:50:18:31:a2:08:a4:02:63:de:cf:1a: 53:95:9d:1c:ad:c0:b0:53:16:1d:c0:85:1f:d5:1e: 79:b2:b7:6f:c5:35:30:58:d4:69:10:a0:3f:ec:d1: 5e:25:1d:45:86:0e:4a:e6:d0:ec:b5:60:5a:78:89: 1b:da:89:c9:51:9b:db:b0:7a:48:cf:c9:5a:a5:8b: ef:74:8d:f9:31:e2:07:51:62:69:e3:d8:9d:2b:36: 6e:87:66:97:08:53:89:27:01:1e:0c:1b:8d:d8:c1: 11:45:6a:85:8c:33:29:47:07:55:a5:dc:fc:f1:78: 95:fb:f1:b2:5e:4a:b3:53:a5:52:74:17:4f:67:c1: 83:7c:88:70:e1:94:e1:41:37:d8:67:0f:8d:14:5c: db:c6:9f:aa:ed:a4:29:c6:3d:43:68:8a:b7:ee:d3: fb:20:98:ea:a5:77:5c:d9:28:3a:5b:d3:63:6d:f6: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9D:A0:5E:BA:5F:BC:E3:20:EB:96:75:B2:5D:08:7A:89:CA:6F:13 X509v3 Authority Key Identifier: keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/dp2gXrpfvOMg65Z1sl0IeonKbxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.84.0/22 185.55.84.0/22 IPv6: 2a02:4820::/32 Signature Algorithm: sha256WithRSAEncryption 0d:88:8c:71:32:eb:86:32:25:ee:7a:2a:d1:e7:e4:62:03:ab: 0b:a5:d3:89:af:07:90:26:b5:61:22:95:db:94:97:2f:8f:fb: e1:7f:b3:95:95:ab:87:71:2b:39:a5:ca:f3:62:41:f6:cb:f9: 7f:1d:fc:49:26:d5:c9:ed:a4:07:17:81:87:92:13:7a:0f:13: 2b:3b:f2:07:7f:68:32:14:09:6c:63:8b:87:99:5a:9c:f4:ba: c0:28:8b:a5:92:78:9d:70:ab:1b:69:78:12:3a:ab:ca:a1:36: 0a:45:93:cb:ca:95:a6:b2:eb:0c:ce:b0:f9:07:9e:74:c2:f7: a6:65:e4:4c:12:8b:9a:38:83:5a:59:cf:4f:70:16:3d:48:7b: 1d:2f:d8:8d:c4:59:58:0b:d5:e1:5e:bb:28:77:99:b2:05:22: 34:29:81:ce:3d:fe:d1:f2:39:80:de:7b:11:04:39:65:c3:b5: 00:2f:72:a6:e7:bc:e5:50:2d:5f:f1:bf:6e:9b:d5:a9:24:5e: 40:60:65:14:29:a8:bf:eb:57:5c:e6:58:04:99:d9:32:7b:52: fe:9b:cb:fa:97:d3:58:6e:e6:a1:01:d7:32:77:d2:80:01:f9: a5:f4:8f:2a:4f:a2:b2:68:5a:98:26:18:fb:f0:38:28:8f:e5: 5e:f0:17:d8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pEe+kJ8Yok6dHBi9J9x1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDZhYTkwNTQ2NTU4NjQyNGYzODdmZGJkODM2NDhiNzJk OTQ2ZGUwHhcNMjYwMTAxMjIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjlkYTA1ZWJhNWZiY2UzMjBlYjk2NzViMjVkMDg3YTg5Y2E2ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FN0vH7N0OdS3EkBKENJpq5xPVn1 MY/zAEmHifjd89U0mBLzf20cy6HpNQlLzeedBlSIDN2+WUsJsXQaY5reKdA8WjFg nWAST5fUi3TBUBgxogikAmPezxpTlZ0crcCwUxYdwIUf1R55srdvxTUwWNRpEKA/ 7NFeJR1Fhg5K5tDstWBaeIkb2onJUZvbsHpIz8lapYvvdI35MeIHUWJp49idKzZu h2aXCFOJJwEeDBuN2MERRWqFjDMpRwdVpdz88XiV+/GyXkqzU6VSdBdPZ8GDfIhw 4ZThQTfYZw+NFFzbxp+q7aQpxj1DaIq37tP7IJjqpXdc2Sg6W9NjbfYxrwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHadoF66X7zjIOuWdbJdCHqJym8TMB8GA1UdIwQY MBaAFJcGqpBUZVhkJPOH/b2DZIty2UbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDkt NWM1MzViNzQ2MzUzLzEvZHAyZ1hycGZ2T01nNjVaMXNsMEllb25LYnhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDktNWM1MzViNzQ2MzUz LzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCH7tUAwQC uTdUMA0EAgACMAcDBQAqAkggMA0GCSqGSIb3DQEBCwUAA4IBAQANiIxxMuuGMiXu eirR5+RiA6sLpdOJrweQJrVhIpXblJcvj/vhf7OVlauHcSs5pcrzYkH2y/l/HfxJ JtXJ7aQHF4GHkhN6DxMrO/IHf2gyFAlsY4uHmVqc9LrAKIulknidcKsbaXgSOqvK oTYKRZPLypWmsusMzrD5B550wvemZeRMEouaOINaWc9PcBY9SHsdL9iNxFlYC9Xh Xrsod5myBSI0KYHOPf7R8jmA3nsRBDllw7UAL3Km57zlUC1f8b9um9WpJF5AYGUU Kai/61dc5lgEmdkye1L+m8v6l9NYbuahAdcyd9KAAfml9I8qT6KyaFqYJhj78Dgo j+Ve8BfY -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:12 2026 by rpki-client