This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/dc9xd7P00DdFJQf-A3nQhrQ5AFw.roa File: dc9xd7P00DdFJQf-A3nQhrQ5AFw.roa (raw, json) Hash identifier: L1i0JRO7qbrA6QVK9ZBM3Dv/eB/asOSRW10wtAZmW+Q= Subject key identifier: 75:CF:71:77:B3:F4:D0:37:45:25:07:FE:03:79:D0:86:B4:39:00:5C Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a Certificate serial: 019B79EC83A9EB18BD14FF1CAC6CEF83DF9A Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/dc9xd7P00DdFJQf-A3nQhrQ5AFw.roa Signing time: Thu 01 Jan 2026 14:18:21 +0000 ROA not before: Thu 01 Jan 2026 14:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56676 IP address blocks: 91.237.187.0/24 maxlen: 24 92.62.116.0/24 maxlen: 24 92.62.116.0/25 maxlen: 25 92.62.116.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:83:a9:eb:18:bd:14:ff:1c:ac:6c:ef:83:df:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a Validity Not Before: Jan 1 14:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75cf7177b3f4d037452507fe0379d086b439005c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1a:5d:20:5d:0b:ed:72:b0:a8:ce:30:b3:2b: 4b:02:12:fc:3c:d0:6a:7b:fe:a4:cd:37:dc:b7:0c: b0:07:e2:7c:9b:54:b7:7d:11:3e:39:4e:ec:7b:0c: 37:8b:82:0c:7e:8f:a8:99:72:6a:80:37:b4:63:11: 0f:61:51:cb:0e:33:e0:89:80:cf:52:39:9f:48:37: c3:17:46:5e:03:59:0c:3b:c5:4c:64:1c:eb:43:d6: 37:f3:ec:46:fe:a7:9b:37:73:ee:04:e1:fd:c0:e2: e7:49:93:29:17:ed:7a:68:95:7a:a8:c2:ed:a7:9f: a1:46:45:57:25:be:b9:c2:78:83:90:53:b5:75:5d: 6e:17:d2:e0:4c:ed:12:ea:47:17:a0:7b:f3:19:dc: 4e:eb:2b:7a:41:4f:30:e6:a6:b5:38:64:3c:42:df: 3a:a5:78:b6:e2:54:ad:28:8a:30:0f:b5:ce:25:ff: 36:b2:26:ee:79:f4:16:1a:8c:4f:77:ba:1a:00:c1: 08:4e:f2:ef:fc:ad:89:98:e8:10:82:05:e9:58:e9: eb:f2:b9:0e:8d:e2:4a:9c:75:b2:50:40:b9:63:b2: 5b:77:c6:2c:de:5f:4c:00:41:69:f3:0a:74:1c:ba: ae:2c:50:dc:cf:e2:3c:cd:e6:6e:62:e4:5f:80:10: 00:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CF:71:77:B3:F4:D0:37:45:25:07:FE:03:79:D0:86:B4:39:00:5C X509v3 Authority Key Identifier: keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/dc9xd7P00DdFJQf-A3nQhrQ5AFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.187.0/24 92.62.116.0/24 Signature Algorithm: sha256WithRSAEncryption 05:00:4d:65:9a:7e:a0:70:36:26:1f:ec:ea:d9:3c:04:e4:a2: c5:55:ad:8d:c4:20:5f:fc:91:fd:83:07:3a:3f:9a:5d:1a:8f: 75:7f:6e:c4:e4:81:9f:ba:da:b3:cd:05:2d:9a:b2:d6:b3:25: 0d:bf:8f:06:95:15:f5:03:e5:56:16:74:df:9b:7c:33:b7:56: c4:4b:3f:f2:b6:ac:7b:56:35:18:f0:e1:13:6f:01:e3:ef:f6: 8d:58:61:d8:51:d3:c5:9b:ab:cc:91:84:f4:1d:97:7d:81:50: 30:06:98:30:45:e6:84:76:ee:0f:28:8c:df:b0:ff:dd:ce:93: fa:7e:74:a4:c8:ec:5a:c1:f0:9c:da:80:1b:ed:9d:6a:a8:86: 19:01:49:64:b3:c7:a2:d4:4c:29:b4:29:21:3f:35:da:cf:91: 3f:4f:8a:5a:be:6e:56:52:0b:50:a4:b2:33:27:87:e6:bf:ec: 32:fa:7f:71:08:b5:0a:6c:b0:3f:3f:bc:16:ce:c1:38:8c:51: 4c:4d:17:b8:a2:04:44:ba:a8:d2:63:77:b4:ed:c6:41:36:52: f7:92:10:64:f3:02:0a:ae:b4:2e:fc:ad:45:3f:b9:02:c2:d1: 55:a0:4b:6c:eb:8c:3b:28:24:4b:15:f2:25:96:84:26:21:34: 74:7e:7d:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57IOp6xi9FP8crGzvg9+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz NzA3MWEwHhcNMjYwMTAxMTQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWNmNzE3N2IzZjRkMDM3NDUyNTA3ZmUwMzc5ZDA4NmI0MzkwMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xpdIF0L7XKwqM4wsytLAhL8PNBq e/6kzTfctwywB+J8m1S3fRE+OU7seww3i4IMfo+omXJqgDe0YxEPYVHLDjPgiYDP UjmfSDfDF0ZeA1kMO8VMZBzrQ9Y38+xG/qebN3PuBOH9wOLnSZMpF+16aJV6qMLt p5+hRkVXJb65wniDkFO1dV1uF9LgTO0S6kcXoHvzGdxO6yt6QU8w5qa1OGQ8Qt86 pXi24lStKIowD7XOJf82sibuefQWGoxPd7oaAMEITvLv/K2JmOgQggXpWOnr8rkO jeJKnHWyUEC5Y7Jbd8Ys3l9MAEFp8wp0HLquLFDcz+I8zeZuYuRfgBAAzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHXPcXez9NA3RSUH/gN50Ia0OQBcMB8GA1UdIwQY MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt NGMwOGZmZTEwMDc2LzEvZGM5eGQ3UDAwRGRGSlFmLUEzblFoclE1QUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2 LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+27AwQA XD50MA0GCSqGSIb3DQEBCwUAA4IBAQAFAE1lmn6gcDYmH+zq2TwE5KLFVa2NxCBf /JH9gwc6P5pdGo91f27E5IGfutqzzQUtmrLWsyUNv48GlRX1A+VWFnTfm3wzt1bE Sz/ytqx7VjUY8OETbwHj7/aNWGHYUdPFm6vMkYT0HZd9gVAwBpgwReaEdu4PKIzf sP/dzpP6fnSkyOxawfCc2oAb7Z1qqIYZAUlks8ei1EwptCkhPzXaz5E/T4pavm5W UgtQpLIzJ4fmv+wy+n9xCLUKbLA/P7wWzsE4jFFMTRe4ogREuqjSY3e07cZBNlL3 khBk8wIKrrQu/K1FP7kCwtFVoEts64w7KCRLFfIlloQmITR0fn19 -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:29 2026 by rpki-client