This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Dz-QfD9C-tgYZF8wEi6pv8-xE5k.roa File: Dz-QfD9C-tgYZF8wEi6pv8-xE5k.roa (raw, json) Hash identifier: BmhYmphbDyjKtKW2Lffb0KX2rP+E2lhX6e9V9e5bRCk= Subject key identifier: 0F:3F:90:7C:3F:42:FA:D8:18:64:5F:30:12:2E:A9:BF:CF:B1:13:99 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019B7EA58FCB2CFC74097AC0D24600054382 Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Dz-QfD9C-tgYZF8wEi6pv8-xE5k.roa Signing time: Fri 02 Jan 2026 12:18:58 +0000 ROA not before: Fri 02 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34661 IP address blocks: 178.214.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8f:cb:2c:fc:74:09:7a:c0:d2:46:00:05:43:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: Jan 2 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f3f907c3f42fad818645f30122ea9bfcfb11399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:60:ce:ca:1b:f6:49:1d:0d:8b:f1:7b:47: b1:97:bd:f7:46:21:fd:3c:25:43:73:e4:45:fb:9c: a9:c3:f2:30:3e:ab:f3:87:32:77:a8:a9:4f:cd:56: 84:42:82:a0:49:8d:b1:fd:85:f2:33:a2:38:0d:64: d2:f0:93:04:8b:3c:c1:9a:a1:d0:e4:67:7f:39:e7: f5:c3:13:81:88:ab:f2:5e:a6:73:16:81:dd:90:5b: ad:f7:0f:4e:fe:be:b6:b7:0f:a6:5e:9b:e9:0f:62: d0:86:ec:2d:8c:96:55:c8:f8:89:f9:fa:55:ad:91: f3:78:99:dc:cf:03:7d:9c:f8:d0:dc:ab:5c:43:59: d4:4b:75:38:54:20:52:e9:34:15:0c:74:9e:3c:05: aa:63:96:ea:40:40:4b:0c:3e:70:f1:23:e7:8f:db: 64:92:1a:f8:2a:30:b7:2e:27:0f:fc:c7:7a:46:02: ac:74:82:a0:d0:02:63:69:f0:24:88:4f:0f:d6:a5: c4:f8:4d:97:a3:d7:9b:02:01:15:48:44:59:64:01: 7d:18:db:57:46:bc:c7:4c:17:d8:7f:7b:33:8b:8e: 9b:68:a3:63:2e:9a:b3:12:e3:14:06:cf:2f:f4:c2: b8:a5:b5:af:9d:40:1f:57:c2:32:6d:7d:40:ac:0f: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3F:90:7C:3F:42:FA:D8:18:64:5F:30:12:2E:A9:BF:CF:B1:13:99 X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Dz-QfD9C-tgYZF8wEi6pv8-xE5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.214.208.0/20 Signature Algorithm: sha256WithRSAEncryption 54:ab:83:ed:cd:ce:4a:73:6b:68:8c:b2:ea:7c:d7:57:e0:8e: df:30:ba:9a:7d:64:97:56:44:78:f0:52:98:73:ef:63:7d:52: 6f:90:e7:3e:25:20:2d:69:cd:f7:d6:87:54:b2:2e:94:3a:56: 43:f0:7b:dd:f0:71:ff:2c:51:d9:bf:85:14:38:47:ce:f0:05: 90:13:a3:8b:86:10:ef:8b:07:95:57:62:63:7f:3d:29:8d:73: 3a:08:26:e9:eb:0d:f9:5c:85:17:e8:54:f9:b3:ac:78:65:49: 1c:43:7d:69:fe:7f:5f:ca:9d:6f:ab:14:49:d9:b3:b5:7d:10: 1d:59:de:ef:00:82:7a:5b:d9:72:3a:68:57:24:d1:c4:1b:ea: 47:3a:c5:be:de:8c:15:7d:da:0c:7d:79:04:cd:ae:55:cf:93: 6c:a4:89:97:31:ea:59:f8:17:8d:0e:fb:3d:e3:fb:92:7b:86: cc:82:0d:82:bb:e5:9b:6f:5f:8b:0e:4d:e4:79:c4:29:6d:cb: 2c:4e:c6:12:5a:1a:59:9a:4d:99:be:4f:32:78:7d:de:ae:b4: c5:c3:fa:07:85:ff:25:e8:62:3c:fc:80:49:c9:5d:c6:ae:21: 90:90:4c:cd:6d:c3:05:c4:d3:e6:9e:e3:e7:fa:ab:d8:72:a5: 43:57:1a:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pY/LLPx0CXrA0kYABUOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwMTAyMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjNmOTA3YzNmNDJmYWQ4MTg2NDVmMzAxMjJlYTliZmNmYjExMzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrVgzsob9kkdDYvxe0exl733RiH9 PCVDc+RF+5ypw/IwPqvzhzJ3qKlPzVaEQoKgSY2x/YXyM6I4DWTS8JMEizzBmqHQ 5Gd/Oef1wxOBiKvyXqZzFoHdkFut9w9O/r62tw+mXpvpD2LQhuwtjJZVyPiJ+fpV rZHzeJnczwN9nPjQ3KtcQ1nUS3U4VCBS6TQVDHSePAWqY5bqQEBLDD5w8SPnj9tk khr4KjC3LicP/Md6RgKsdIKg0AJjafAkiE8P1qXE+E2Xo9ebAgEVSERZZAF9GNtX RrzHTBfYf3szi46baKNjLpqzEuMUBs8v9MK4pbWvnUAfV8IybX1ArA/xWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8/kHw/QvrYGGRfMBIuqb/PsROZMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvRHotUWZEOUMtdGdZWkY4d0VpNnB2OC14RTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEstbQMA0G CSqGSIb3DQEBCwUAA4IBAQBUq4Ptzc5Kc2tojLLqfNdX4I7fMLqafWSXVkR48FKY c+9jfVJvkOc+JSAtac331odUsi6UOlZD8Hvd8HH/LFHZv4UUOEfO8AWQE6OLhhDv iweVV2Jjfz0pjXM6CCbp6w35XIUX6FT5s6x4ZUkcQ31p/n9fyp1vqxRJ2bO1fRAd Wd7vAIJ6W9lyOmhXJNHEG+pHOsW+3owVfdoMfXkEza5Vz5NspImXMepZ+BeNDvs9 4/uSe4bMgg2Cu+Wbb1+LDk3kecQpbcssTsYSWhpZmk2Zvk8yeH3errTFw/oHhf8l 6GI8/IBJyV3GriGQkEzNbcMFxNPmnuPn+qvYcqVDVxqb -----END CERTIFICATE-----Generated at Mon Jan 26 18:17:09 2026 by rpki-client