This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/DqhpFnPCBC-nXiqoo22t2JOTosc.roa File: DqhpFnPCBC-nXiqoo22t2JOTosc.roa (raw, json) Hash identifier: ajs/QjIOGij7SJQTsZozQDpENdvgepWfCERRvK8a2WE= Subject key identifier: 0E:A8:69:16:73:C2:04:2F:A7:5E:2A:A8:A3:6D:AD:D8:93:93:A2:C7 Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Certificate serial: 019B7A5AF6BD78103A19B212CB0FBC7DA5F8 Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/DqhpFnPCBC-nXiqoo22t2JOTosc.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58145 IP address blocks: 45.157.8.0/22 maxlen: 22 2a0f:3780::/29 maxlen: 29 2a0f:3780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f6:bd:78:10:3a:19:b2:12:cb:0f:bc:7d:a5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ea8691673c2042fa75e2aa8a36dadd89393a2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:28:8d:26:31:51:35:f1:95:72:7c:73:00: 7d:49:d9:36:53:4e:d4:f1:4c:37:9f:3c:36:a7:25: 90:dd:1c:a9:8d:8d:fc:df:30:c3:a5:17:fd:c8:73: a3:2b:f6:97:44:82:00:96:96:66:8e:02:78:ec:25: 4f:3c:fa:dd:ff:53:d7:a5:a3:76:7b:94:df:79:79: 30:6b:c0:ac:06:5b:ba:01:18:94:84:81:4e:fd:eb: 75:6e:f8:fc:63:ec:af:aa:c3:98:79:1d:1e:bf:1e: 3f:32:fe:a7:b7:c8:2d:65:64:3f:23:4e:f2:c0:2e: d3:43:a2:4d:f5:f8:25:08:4f:f8:ee:c4:96:a0:f9: e7:19:02:f1:e5:99:bc:46:40:6f:9a:ca:24:14:05: d6:41:6b:c1:69:ad:11:9a:8c:3c:5d:e1:fc:df:01: 08:2f:54:2f:f6:f3:d6:06:b7:b9:07:24:ba:78:f5: bf:d1:fe:fa:9b:96:c1:15:5f:6e:69:1a:d6:77:8d: e4:3f:56:15:56:3e:07:9e:96:9f:22:80:50:e7:64: d6:0b:64:cb:84:1e:c7:3a:7f:96:53:1b:15:e2:d3: f2:a9:93:6c:eb:4c:7a:48:55:a0:55:de:bb:12:10: 58:a2:c1:de:3b:da:e8:47:d6:96:a3:21:1e:91:f0: 43:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:69:16:73:C2:04:2F:A7:5E:2A:A8:A3:6D:AD:D8:93:93:A2:C7 X509v3 Authority Key Identifier: keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/DqhpFnPCBC-nXiqoo22t2JOTosc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.8.0/22 IPv6: 2a0f:3780::/29 Signature Algorithm: sha256WithRSAEncryption 50:e2:82:9c:62:87:b1:ad:08:51:a0:ab:da:53:bb:95:35:7c: 78:94:e3:a1:65:db:fe:71:c7:4c:ef:67:1f:e0:11:5c:a5:ee: 70:63:be:98:f5:92:e1:6c:9b:a0:0a:8e:e8:71:81:e9:e7:2f: 6c:99:86:fd:a2:fb:fb:c4:b0:7d:d9:69:bc:49:d7:a7:f3:cd: e1:fb:b3:d5:f7:46:76:37:14:80:73:db:50:f0:7e:9b:a6:9d: e3:a0:da:b9:3a:be:86:e4:91:d4:c3:78:a4:97:e8:ec:a3:77: ed:c3:ae:55:49:8c:a0:af:32:a9:6d:20:83:3f:f3:32:fd:46: d5:c4:30:44:7c:6a:cc:b2:fc:ed:8f:b8:99:4c:68:f5:d7:4c: 3b:0f:40:fb:9c:fa:43:74:8e:fe:7a:09:bf:d3:ca:7e:46:87: f7:03:9d:1a:e0:9f:3a:ea:fd:ea:87:08:82:3d:21:2e:21:ca: 3a:7c:04:9c:55:7e:df:1c:4d:fa:9e:1b:4f:6c:a1:a6:2e:b6: 79:d2:1e:42:5c:92:d1:b1:bf:f1:2b:ce:e8:53:2a:5f:74:3f: 84:23:ac:d5:bc:7f:09:c9:b7:8c:f7:ab:cd:63:65:cc:19:fb: 96:68:b7:b4:f7:50:64:7f:f2:64:0a:b1:2e:6c:24:b8:be:3b: 41:e0:72:a0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wva9eBA6GbISyw+8faX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzNkODljMDZhOGExY2M5ZGJjMzYyMjAxZjdlYzU1OWQ3 ZmRkNDgwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWE4NjkxNjczYzIwNDJmYTc1ZTJhYThhMzZkYWRkODkzOTNhMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvToojSYxUTXxlXJ8cwB9Sdk2U07U 8Uw3nzw2pyWQ3RypjY383zDDpRf9yHOjK/aXRIIAlpZmjgJ47CVPPPrd/1PXpaN2 e5TfeXkwa8CsBlu6ARiUhIFO/et1bvj8Y+yvqsOYeR0evx4/Mv6nt8gtZWQ/I07y wC7TQ6JN9fglCE/47sSWoPnnGQLx5Zm8RkBvmsokFAXWQWvBaa0Rmow8XeH83wEI L1Qv9vPWBre5ByS6ePW/0f76m5bBFV9uaRrWd43kP1YVVj4HnpafIoBQ52TWC2TL hB7HOn+WUxsV4tPyqZNs60x6SFWgVd67EhBYosHeO9roR9aWoyEekfBDzQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA6oaRZzwgQvp14qqKNtrdiTk6LHMB8GA1UdIwQY MBaAFIEz2JwGqKHMnbw2IgH37FWdf91IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEt YzVmZWJlNDg3YzQwLzEvRHFocEZuUENCQy1uWGlxb28yMnQySk9Ub3NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEtYzVmZWJlNDg3YzQw LzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ0IMA0E AgACMAcDBQMqDzeAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ4oKcYoexrQhRoKvaU7uV NXx4lOOhZdv+ccdM72cf4BFcpe5wY76Y9ZLhbJugCo7ocYHp5y9smYb9ovv7xLB9 2Wm8Sden883h+7PV90Z2NxSAc9tQ8H6bpp3joNq5Or6G5JHUw3ikl+jso3ftw65V SYygrzKpbSCDP/My/UbVxDBEfGrMsvztj7iZTGj110w7D0D7nPpDdI7+egm/08p+ Rof3A50a4J866v3qhwiCPSEuIco6fAScVX7fHE36nhtPbKGmLrZ50h5CXJLRsb/x K87oUypfdD+EI6zVvH8JybeM96vNY2XMGfuWaLe091Bkf/JkCrEubCS4vjtB4HKg -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:41 2026 by rpki-client