This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/dJuawEWS8NqZGJF9uJKMoItyq7U.roa File: dJuawEWS8NqZGJF9uJKMoItyq7U.roa (raw, json) Hash identifier: IYmTE9NklyCZqQOo3sZkgAOEmHqhiMDY4VmI2iuEFr4= Subject key identifier: 74:9B:9A:C0:45:92:F0:DA:99:18:91:7D:B8:92:8C:A0:8B:72:AB:B5 Certificate issuer: /CN=629e80e88bb766291e5ec80338732511e4d41e04 Certificate serial: 019B7E380F4B4A8D6E6C24A321112CEBE719 Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/dJuawEWS8NqZGJF9uJKMoItyq7U.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53589 IP address blocks: 146.19.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0f:4b:4a:8d:6e:6c:24:a3:21:11:2c:eb:e7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=749b9ac04592f0da9918917db8928ca08b72abb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:60:bc:79:6e:dc:8b:61:ea:6a:fc:bd:69:4b: 43:26:eb:d5:dd:65:17:9c:0f:64:91:fc:75:63:8e: 91:81:0d:5c:b9:97:ed:9e:4b:a1:4e:7c:2f:65:ce: df:64:55:8a:d5:2c:c5:68:ce:7a:a3:a8:64:7d:02: 8b:b2:78:ac:29:a1:0d:db:53:bc:31:38:bc:f9:ab: ca:a6:cc:d7:2d:11:e9:77:91:f1:f0:ba:af:fd:8c: dc:cf:1c:94:87:b7:72:48:93:25:93:55:7f:63:7c: 56:79:ed:58:dc:c8:4e:35:2a:76:cd:dc:98:02:38: 64:64:75:62:1b:20:a4:65:fb:6f:13:47:59:d9:20: 61:3b:01:66:66:f2:ab:fd:43:a3:7c:e6:ba:b1:64: d5:fd:44:dc:a4:33:c5:53:11:6f:8d:9e:45:3b:96: b1:cf:ec:df:38:f0:c4:9f:25:73:13:2f:74:fd:32: 3d:89:6c:c6:2d:de:7e:d4:ac:fd:46:12:be:37:67: 0c:7b:fb:e8:2e:32:8c:42:4a:3d:7c:4c:25:2c:4e: b4:46:4d:fc:6a:5d:5f:20:26:f7:5b:66:66:f3:ed: 53:4d:0f:75:fa:2a:42:c7:f9:66:a8:fe:dc:8c:d0: 3c:70:a1:b6:75:92:2b:09:7d:9d:1c:45:00:fd:9d: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9B:9A:C0:45:92:F0:DA:99:18:91:7D:B8:92:8C:A0:8B:72:AB:B5 X509v3 Authority Key Identifier: keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/dJuawEWS8NqZGJF9uJKMoItyq7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.134.0/24 Signature Algorithm: sha256WithRSAEncryption 47:26:eb:95:e3:84:0c:59:b4:72:c3:64:df:08:97:e7:45:13: 8e:85:80:1a:4f:dc:2a:ae:bc:91:9e:b5:29:ac:50:01:c2:8e: 17:c9:55:40:9b:40:a0:42:fc:18:26:3f:58:95:86:cb:f3:d8: f3:ad:37:cb:c0:5d:a3:5b:e1:eb:2d:11:56:3a:06:2f:37:30: 52:ac:03:ad:35:2b:fa:3b:b1:02:27:b0:1c:4a:fd:af:3d:08: 42:23:55:35:6e:22:10:30:d1:dd:6a:30:e9:b6:3f:4f:36:27: 7b:23:88:bc:eb:6c:01:7e:cb:7d:77:20:e1:14:26:a7:af:02: 5b:fc:f9:4b:26:a3:28:77:73:3b:bb:43:78:b1:81:bf:39:24: 14:23:a8:3c:cf:1c:2a:43:58:35:58:4a:6c:79:7a:41:cd:0c: 31:71:ca:53:40:18:62:de:e5:14:42:22:7f:49:ff:08:60:b5: a8:89:30:c8:02:33:79:ac:05:86:38:a6:bc:5b:ee:9a:f5:d9: 6e:f8:e6:ac:3f:59:36:97:cd:e7:b5:76:e8:ac:a5:56:4f:56: 8b:00:99:6e:ae:95:61:3b:1b:5b:50:81:94:f0:4d:dd:9c:28: 6d:db:76:cf:4e:e6:bc:ee:a4:37:06:24:92:e0:01:61:7f:2b: 2c:26:65:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OA9LSo1ubCSjIREs6+cZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOWU4MGU4OGJiNzY2MjkxZTVlYzgwMzM4NzMyNTExZTRk NDFlMDQwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDliOWFjMDQ1OTJmMGRhOTkxODkxN2RiODkyOGNhMDhiNzJhYmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGC8eW7ci2Hqavy9aUtDJuvV3WUX nA9kkfx1Y46RgQ1cuZftnkuhTnwvZc7fZFWK1SzFaM56o6hkfQKLsnisKaEN21O8 MTi8+avKpszXLRHpd5Hx8Lqv/YzczxyUh7dySJMlk1V/Y3xWee1Y3MhONSp2zdyY AjhkZHViGyCkZftvE0dZ2SBhOwFmZvKr/UOjfOa6sWTV/UTcpDPFUxFvjZ5FO5ax z+zfOPDEnyVzEy90/TI9iWzGLd5+1Kz9RhK+N2cMe/voLjKMQko9fEwlLE60Rk38 al1fICb3W2Zm8+1TTQ91+ipCx/lmqP7cjNA8cKG2dZIrCX2dHEUA/Z2K2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSbmsBFkvDamRiRfbiSjKCLcqu1MB8GA1UdIwQY MBaAFGKegOiLt2YpHl7IAzhzJRHk1B4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXA2QTZJdTNaaWtlWHNnRE9ITWxFZVRVSGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjg0NGEtZjM3My00ZTNjLThmNzYt NWI3YzQzMWFiNjFlLzEvZEp1YXdFV1M4TnFaR0pGOXVKS01vSXR5cTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9mYjg0NGEtZjM3My00ZTNjLThmNzYtNWI3YzQzMWFiNjFl LzEvWXA2QTZJdTNaaWtlWHNnRE9ITWxFZVRVSGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOGMA0G CSqGSIb3DQEBCwUAA4IBAQBHJuuV44QMWbRyw2TfCJfnRROOhYAaT9wqrryRnrUp rFABwo4XyVVAm0CgQvwYJj9YlYbL89jzrTfLwF2jW+HrLRFWOgYvNzBSrAOtNSv6 O7ECJ7AcSv2vPQhCI1U1biIQMNHdajDptj9PNid7I4i862wBfst9dyDhFCanrwJb /PlLJqMod3M7u0N4sYG/OSQUI6g8zxwqQ1g1WEpseXpBzQwxccpTQBhi3uUUQiJ/ Sf8IYLWoiTDIAjN5rAWGOKa8W+6a9dlu+OasP1k2l83ntXborKVWT1aLAJlurpVh OxtbUIGU8E3dnCht23bPTua87qQ3BiSS4AFhfyssJmV/ -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:45 2026 by rpki-client