This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/DuQCI0LzJ_jv1-vJ6IDr9-AqYNg.roa File: DuQCI0LzJ_jv1-vJ6IDr9-AqYNg.roa (raw, json) Hash identifier: v/EHF8za/yF5QkLDnsNNBRhuf4fJfY8/YwjXrsygUS8= Subject key identifier: 0E:E4:02:23:42:F3:27:F8:EF:D7:EB:C9:E8:80:EB:F7:E0:2A:60:D8 Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a Certificate serial: 019B7F80F0A04D3EA873EBD148B8C88771BC Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/DuQCI0LzJ_jv1-vJ6IDr9-AqYNg.roa Signing time: Fri 02 Jan 2026 16:18:35 +0000 ROA not before: Fri 02 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211345 IP address blocks: 193.36.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:f0:a0:4d:3e:a8:73:eb:d1:48:b8:c8:87:71:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a Validity Not Before: Jan 2 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ee4022342f327f8efd7ebc9e880ebf7e02a60d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:c1:3b:58:45:7b:29:93:c9:ec:e1:66:5e: db:39:a1:bd:f1:55:d1:a1:9b:25:e7:e1:3f:4a:95: f1:28:1d:aa:c0:bb:88:28:e4:60:c9:8b:76:7d:ba: 4d:7b:1c:e4:d0:c9:0f:eb:97:a9:19:57:36:b4:8f: f4:02:f8:6e:06:55:18:1e:ee:28:cb:4a:3d:2a:e0: c4:bf:26:2e:3d:84:17:ee:3a:22:2f:5f:ca:bd:96: c6:12:e5:ae:98:0f:76:49:0c:23:16:ad:bd:95:51: 5e:9b:14:99:e7:e4:02:5f:8c:61:d8:c5:51:46:4a: bb:3b:f0:42:8b:88:ff:78:77:a4:a5:75:60:91:77: ce:1b:94:95:fa:0e:83:26:9a:bc:b1:b5:08:0e:e6: bd:d3:dc:81:4e:8b:ab:02:ab:29:42:d2:ef:ca:14: 9f:66:c6:81:61:ea:be:c8:db:de:fe:86:bc:0e:13: d4:36:d7:0e:0e:3a:22:7e:e4:6e:26:c4:d6:6a:5d: 01:5c:db:9c:a4:34:2a:d4:ef:64:c3:02:c7:80:f3: 0a:05:5d:8f:c6:99:97:2e:56:7e:a6:2d:32:ff:17: ee:6b:69:3e:1c:ad:7e:4e:e9:22:db:0d:40:aa:09: 55:61:bd:38:3e:f8:e3:f6:18:b6:2e:03:d0:c2:c5: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E4:02:23:42:F3:27:F8:EF:D7:EB:C9:E8:80:EB:F7:E0:2A:60:D8 X509v3 Authority Key Identifier: keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/DuQCI0LzJ_jv1-vJ6IDr9-AqYNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.88.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:f0:a6:6d:ce:42:80:49:a5:96:a6:06:21:f8:16:f7:a1:ea: e7:10:1e:81:78:9b:dd:83:a6:f1:5c:3d:77:5a:9f:05:2e:ef: 65:78:54:e6:36:47:d8:99:1c:65:b9:a9:61:79:35:9f:41:85: 32:4d:6f:4b:00:2b:5f:d2:ed:32:c1:86:dd:ee:ab:86:7a:23: 03:b7:01:b6:5e:d4:71:dc:5f:5e:2c:37:e2:80:58:61:ca:b8: e0:28:c8:de:09:ff:bf:fd:35:c9:44:a8:9d:7e:dc:e7:e0:f0: 2f:0f:75:64:bc:1d:4f:44:23:b6:e8:7d:47:6e:c9:df:20:77: 87:b7:7b:62:82:31:2c:dd:1d:2b:30:08:3d:33:82:19:be:b6: 9c:79:e9:b3:5f:5a:45:20:78:be:f4:89:51:88:75:35:6e:1b: c0:1e:18:03:eb:00:0c:50:68:7c:f9:32:b3:0d:26:05:16:bd: db:ee:2b:c3:4f:44:28:54:e7:db:29:cc:70:d4:1a:be:fb:91: 3b:60:07:90:39:07:d2:10:5f:42:2b:07:d9:57:03:bf:11:62: ae:02:66:ac:0f:8a:3b:d7:9f:71:ec:c2:bf:09:5a:cf:db:4f: ea:6b:82:8b:72:cf:f4:4a:b5:14:c5:0b:54:43:12:79:52:e3: 9c:1f:31:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gPCgTT6oc+vRSLjIh3G8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZDkzYmUxMTRmODJkMDI1ODkxNmE5NzhjYWNiZmIxNWJi NTg0MGEwHhcNMjYwMTAyMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWU0MDIyMzQyZjMyN2Y4ZWZkN2ViYzllODgwZWJmN2UwMmE2MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvjBO1hFeymTyezhZl7bOaG98VXR oZsl5+E/SpXxKB2qwLuIKORgyYt2fbpNexzk0MkP65epGVc2tI/0AvhuBlUYHu4o y0o9KuDEvyYuPYQX7joiL1/KvZbGEuWumA92SQwjFq29lVFemxSZ5+QCX4xh2MVR Rkq7O/BCi4j/eHekpXVgkXfOG5SV+g6DJpq8sbUIDua909yBTourAqspQtLvyhSf ZsaBYeq+yNve/oa8DhPUNtcODjoifuRuJsTWal0BXNucpDQq1O9kwwLHgPMKBV2P xpmXLlZ+pi0y/xfua2k+HK1+Tuki2w1AqglVYb04Pvjj9hi2LgPQwsXlRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7kAiNC8yf479fryeiA6/fgKmDYMB8GA1UdIwQY MBaAFNbZO+EU+C0CWJFql4ysv7FbtYQKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXRrNzRSVDRMUUpZa1dxWGpLeV9zVnUxaEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NDdjZjUtMjI1My00MjkwLWI3NDUt YTE0NzQ0ZDE4YTU0LzEvRHVRQ0kwTHpKX2p2MS12SjZJRHI5LUFxWU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC84NDdjZjUtMjI1My00MjkwLWI3NDUtYTE0NzQ0ZDE4YTU0 LzEvMXRrNzRSVDRMUUpZa1dxWGpLeV9zVnUxaEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSRYMA0G CSqGSIb3DQEBCwUAA4IBAQCN8KZtzkKASaWWpgYh+Bb3oernEB6BeJvdg6bxXD13 Wp8FLu9leFTmNkfYmRxlualheTWfQYUyTW9LACtf0u0ywYbd7quGeiMDtwG2XtRx 3F9eLDfigFhhyrjgKMjeCf+//TXJRKidftzn4PAvD3VkvB1PRCO26H1HbsnfIHeH t3tigjEs3R0rMAg9M4IZvraceemzX1pFIHi+9IlRiHU1bhvAHhgD6wAMUGh8+TKz DSYFFr3b7ivDT0QoVOfbKcxw1Bq++5E7YAeQOQfSEF9CKwfZVwO/EWKuAmasD4o7 159x7MK/CVrP20/qa4KLcs/0SrUUxQtUQxJ5UuOcHzFP -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:43 2026 by rpki-client