This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/dDj4-eFRfq_UroSu2HQ22smKlA8.roa File: dDj4-eFRfq_UroSu2HQ22smKlA8.roa (raw, json) Hash identifier: ahRStajN/bb570o/RBHvcfEKEL2KTD1bW5s9wAnONq0= Subject key identifier: 74:38:F8:F9:E1:51:7E:AF:D4:AE:84:AE:D8:74:36:DA:C9:8A:94:0F Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7 Certificate serial: 019B7A5B5D7C4B1A4B172791FA31E02B0D8A Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/dDj4-eFRfq_UroSu2HQ22smKlA8.roa Signing time: Thu 01 Jan 2026 16:19:26 +0000 ROA not before: Thu 01 Jan 2026 16:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38927 IP address blocks: 193.19.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5d:7c:4b:1a:4b:17:27:91:fa:31:e0:2b:0d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7438f8f9e1517eafd4ae84aed87436dac98a940f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:10:8c:1c:26:46:99:cd:e1:95:44:15:02: bf:b3:a7:12:20:1a:5b:a7:87:35:7c:0d:84:92:1d: 8c:4c:e3:75:ea:a1:77:f0:20:09:63:25:6f:cb:aa: 5a:cf:94:ac:6d:e7:96:c4:fc:92:6c:3a:50:7a:5d: 65:df:ba:54:8a:6f:c6:c8:d6:da:30:d9:55:fa:1d: 4e:32:55:75:dd:32:f1:ca:98:bf:2c:95:ae:9c:55: f0:f3:06:e2:e7:44:ad:7e:5b:f1:ba:3c:2c:32:33: fe:38:04:b8:7c:f5:ca:bb:e1:5f:aa:cb:c5:2e:eb: 3b:c7:bb:b4:1d:f5:68:2f:02:bf:fd:88:6b:5a:58: 68:22:61:46:31:e3:3c:82:ba:e2:48:2f:3b:f9:a5: 21:e9:72:14:a7:01:9b:8d:56:30:db:a1:e2:36:ed: ee:4b:17:3c:2c:d5:cb:28:ba:9d:35:57:c6:7d:03: cc:eb:26:d1:6f:b2:7b:99:79:e2:40:98:5e:b3:ba: c4:ed:31:1a:37:6a:40:13:72:36:f8:4e:d6:07:7a: 29:af:e8:09:bf:ed:e2:64:7e:c9:74:15:de:57:7c: 9c:13:0e:ab:a0:6b:46:f0:e2:47:40:50:58:a4:0a: 70:a3:ba:80:69:53:5e:a6:7a:53:9f:40:32:a4:7a: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:38:F8:F9:E1:51:7E:AF:D4:AE:84:AE:D8:74:36:DA:C9:8A:94:0F X509v3 Authority Key Identifier: keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/dDj4-eFRfq_UroSu2HQ22smKlA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.112.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:02:e7:99:eb:99:de:a4:d4:12:f6:bd:16:ac:1c:15:db:d3: 66:f6:29:c4:75:c2:3a:f9:40:9a:94:78:fb:29:95:c7:ee:18: 22:92:ad:80:a2:db:11:a5:2c:09:f3:87:41:8c:a6:13:8f:c5: 1a:b6:57:b7:27:79:25:96:21:d8:5f:13:82:e0:bd:ce:c7:ae: 3b:bb:cf:cb:a1:8f:e7:d4:1f:ff:94:bd:da:ae:1d:b6:ed:73: fc:63:b4:83:19:28:db:c8:60:77:60:b5:46:ea:dc:a5:79:d9: 83:c8:da:78:e9:e4:e8:55:b0:57:f0:29:0d:3d:be:c0:b8:86: 61:76:88:45:38:10:6b:6d:1d:d2:d8:3f:6b:7a:43:ba:90:6f: 57:4a:c5:f6:54:30:f2:62:c8:fa:d7:be:64:8a:37:73:f4:53: f2:93:d9:b2:69:2d:2f:82:d7:fe:b0:a5:e9:c5:4c:01:d0:99: 9c:9c:8e:fd:f2:74:e7:a8:70:1f:74:5c:2d:87:37:69:1f:a2: ac:ee:5f:84:7f:25:cf:f8:09:9f:b5:91:94:3f:92:04:cd:5a: 4a:ed:6c:f7:8d:a0:50:22:22:4e:80:a6:d0:e8:0e:90:87:8d: f3:b9:44:11:38:4e:39:3b:cf:6b:39:4d:7e:1a:22:22:b0:c3: f8:3a:d5:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W118SxpLFyeR+jHgKw2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOTgwNTZiODA2YTdiN2NjMTYzMzM0NWRjNTU4MzZhNDVh MjQ0YzcwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDM4ZjhmOWUxNTE3ZWFmZDRhZTg0YWVkODc0MzZkYWM5OGE5NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspAQjBwmRpnN4ZVEFQK/s6cSIBpb p4c1fA2Ekh2MTON16qF38CAJYyVvy6paz5SsbeeWxPySbDpQel1l37pUim/GyNba MNlV+h1OMlV13TLxypi/LJWunFXw8wbi50StflvxujwsMjP+OAS4fPXKu+FfqsvF Lus7x7u0HfVoLwK//YhrWlhoImFGMeM8grriSC87+aUh6XIUpwGbjVYw26HiNu3u Sxc8LNXLKLqdNVfGfQPM6ybRb7J7mXniQJhes7rE7TEaN2pAE3I2+E7WB3opr+gJ v+3iZH7JdBXeV3ycEw6roGtG8OJHQFBYpApwo7qAaVNepnpTn0AypHpmwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQ4+PnhUX6v1K6Erth0NtrJipQPMB8GA1UdIwQY MBaAFDKYBWuAant8wWMzRdxVg2pFokTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2Yt NDRhOTU3MTMyNjM5LzEvZERqNC1lRlJmcV9Vcm9TdTJIUTIyc21LbEE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2YtNDRhOTU3MTMyNjM5 LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRNwMA0G CSqGSIb3DQEBCwUAA4IBAQAcAueZ65nepNQS9r0WrBwV29Nm9inEdcI6+UCalHj7 KZXH7hgikq2AotsRpSwJ84dBjKYTj8Uatle3J3klliHYXxOC4L3Ox647u8/LoY/n 1B//lL3arh227XP8Y7SDGSjbyGB3YLVG6tyledmDyNp46eToVbBX8CkNPb7AuIZh dohFOBBrbR3S2D9rekO6kG9XSsX2VDDyYsj6175kijdz9FPyk9myaS0vgtf+sKXp xUwB0JmcnI798nTnqHAfdFwthzdpH6Ks7l+EfyXP+AmftZGUP5IEzVpK7Wz3jaBQ IiJOgKbQ6A6Qh43zuUQROE45O89rOU1+GiIisMP4OtV9 -----END CERTIFICATE-----Generated at Wed Jan 21 13:48:06 2026 by rpki-client