This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/DccQAZUV3qZdgqhQbHnkJWn4glU.roa File: DccQAZUV3qZdgqhQbHnkJWn4glU.roa (raw, json) Hash identifier: gCexvZF+3EFm1YK+f7oWwdQALyv1CumdqY+4Q5Ew2yI= Subject key identifier: 0D:C7:10:01:95:15:DE:A6:5D:82:A8:50:6C:79:E4:25:69:F8:82:55 Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957 Certificate serial: 019B7F8506100B06D794D6DC19FF685FC04D Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/DccQAZUV3qZdgqhQbHnkJWn4glU.roa Signing time: Fri 02 Jan 2026 16:23:02 +0000 ROA not before: Fri 02 Jan 2026 16:23:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 192.82.241.0/24 maxlen: 24 193.24.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:06:10:0b:06:d7:94:d6:dc:19:ff:68:5f:c0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957 Validity Not Before: Jan 2 16:23:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dc710019515dea65d82a8506c79e42569f88255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:94:7d:90:57:3a:9a:0e:e4:0b:5f:5c:a8: c7:15:69:4a:88:39:64:03:07:d5:f7:d5:8e:e9:01: ad:18:00:d8:8f:b1:cf:80:37:d8:fa:99:e6:a2:37: ae:2b:51:d1:17:5e:06:ce:71:2a:97:25:fc:7b:2e: 81:8c:01:bc:d5:2b:f9:48:69:6f:5c:aa:f5:47:91: b0:e4:f5:46:52:94:ae:95:f4:30:06:23:99:43:a0: a9:ad:4f:53:04:dc:31:74:d7:2d:38:1b:d9:83:83: 96:7b:5e:22:23:c2:aa:cd:79:f6:ef:de:aa:76:8f: 40:17:21:3d:13:aa:71:5a:8d:f4:fe:ee:29:ee:4e: a6:b1:78:24:bc:cf:e5:d3:da:44:cd:b5:3d:c0:5a: 5b:9c:c0:87:c9:e8:77:0d:6c:39:60:96:b4:0e:0b: 64:c2:5c:5e:80:1f:bc:64:45:f2:7e:bd:96:49:b4: 8c:93:6d:f0:0e:cf:d7:55:a5:b2:ed:a6:da:18:0d: e4:25:35:00:2b:5d:21:59:78:65:b0:ca:3d:20:d9: a0:30:d4:7d:98:6f:54:c7:f7:de:54:45:d7:5d:68: 18:68:8f:bf:e0:9c:82:da:2b:97:85:e2:9a:55:61: 3a:83:4a:a9:23:a4:50:d3:70:2a:9f:21:0c:00:99: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C7:10:01:95:15:DE:A6:5D:82:A8:50:6C:79:E4:25:69:F8:82:55 X509v3 Authority Key Identifier: keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/DccQAZUV3qZdgqhQbHnkJWn4glU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.82.241.0/24 193.24.80.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:9d:d3:e9:8b:6e:16:5c:e1:ad:47:a4:5d:49:c6:cf:92:ac: 41:a4:5d:74:8d:9c:45:7e:6c:ad:3e:a9:cc:c3:22:80:07:37: fe:3f:c5:47:28:98:56:27:25:5c:5e:3a:83:a2:92:d1:e4:16: 12:13:60:c1:67:c7:cf:bc:e6:49:28:74:4a:85:da:b6:e2:1f: d7:bb:8a:cf:7f:10:e1:95:a0:1b:bc:db:2b:f2:58:ee:59:b1: eb:93:33:6a:96:ef:34:c0:6e:4a:53:4c:9f:91:63:d4:5d:27: 4a:9c:89:0f:f1:b6:ed:b3:a4:7c:19:13:84:eb:1b:b6:bb:4c: b5:fa:1d:7e:74:a8:fd:9f:0d:d7:77:cd:2b:d7:5a:95:c6:8e: 0c:17:aa:7b:66:6a:52:8a:20:bf:1e:be:f2:ae:5d:68:14:fd: e8:6e:a8:73:04:38:7d:2a:6a:b3:ad:68:a7:f5:74:ec:23:d0: 21:5c:a5:e0:24:d7:ce:b1:2d:f6:7f:ec:c1:9d:4d:fa:9f:58: e7:ef:ab:e0:77:12:c8:14:36:0a:86:3a:4f:d8:e8:7a:ef:23: c6:dc:2c:8b:fe:56:b3:b0:32:35:26:41:b5:ea:40:c4:85:15: 16:83:9b:e2:b7:ec:ac:76:93:16:32:09:74:24:1b:84:f0:98: 5b:e6:ef:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hQYQCwbXlNbcGf9oX8BNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OTZjMWUxNGM4NmU2ZWY1YjE2NzI0ZjcxMTc2NzZlYzcy MTQ5NTcwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGM3MTAwMTk1MTVkZWE2NWQ4MmE4NTA2Yzc5ZTQyNTY5Zjg4MjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdKUfZBXOpoO5AtfXKjHFWlKiDlk AwfV99WO6QGtGADYj7HPgDfY+pnmojeuK1HRF14GznEqlyX8ey6BjAG81Sv5SGlv XKr1R5Gw5PVGUpSulfQwBiOZQ6CprU9TBNwxdNctOBvZg4OWe14iI8KqzXn2796q do9AFyE9E6pxWo30/u4p7k6msXgkvM/l09pEzbU9wFpbnMCHyeh3DWw5YJa0Dgtk wlxegB+8ZEXyfr2WSbSMk23wDs/XVaWy7abaGA3kJTUAK10hWXhlsMo9INmgMNR9 mG9Ux/feVEXXXWgYaI+/4JyC2iuXheKaVWE6g0qpI6RQ03AqnyEMAJnt3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA3HEAGVFd6mXYKoUGx55CVp+IJVMB8GA1UdIwQY MBaAFKiWweFMhubvWxZyT3EXZ27HIUlXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQt MTRhMDgyNWI1MjkxLzEvRGNjUUFaVVYzcVpkZ3FoUWJIbmtKV240Z2xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQtMTRhMDgyNWI1Mjkx LzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFLxAwQD wRhQMA0GCSqGSIb3DQEBCwUAA4IBAQBandPpi24WXOGtR6RdScbPkqxBpF10jZxF fmytPqnMwyKABzf+P8VHKJhWJyVcXjqDopLR5BYSE2DBZ8fPvOZJKHRKhdq24h/X u4rPfxDhlaAbvNsr8ljuWbHrkzNqlu80wG5KU0yfkWPUXSdKnIkP8bbts6R8GROE 6xu2u0y1+h1+dKj9nw3Xd80r11qVxo4MF6p7ZmpSiiC/Hr7yrl1oFP3obqhzBDh9 KmqzrWin9XTsI9AhXKXgJNfOsS32f+zBnU36n1jn76vgdxLIFDYKhjpP2Oh67yPG 3CyL/lazsDI1JkG16kDEhRUWg5vit+ysdpMWMgl0JBuE8Jhb5u91 -----END CERTIFICATE-----Generated at Tue Jan 27 11:28:47 2026 by rpki-client