This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/dTkIbbfoGWiZWY2r_Gv0Qj6ef3o.roa File: dTkIbbfoGWiZWY2r_Gv0Qj6ef3o.roa (raw, json) Hash identifier: PRmyS7FYnGqapGRXhdp+LVcWuV+Zrh/jHa9470RQd+c= Subject key identifier: 75:39:08:6D:B7:E8:19:68:99:59:8D:AB:FC:6B:F4:42:3E:9E:7F:7A Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Certificate serial: 019B7A5B405F3A40635DF06A9F48A6353A2A Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/dTkIbbfoGWiZWY2r_Gv0Qj6ef3o.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25521 IP address blocks: 46.30.160.0/21 maxlen: 24 82.193.96.0/19 maxlen: 24 91.224.24.0/23 maxlen: 24 93.188.32.0/21 maxlen: 24 176.115.96.0/21 maxlen: 24 185.223.112.0/22 maxlen: 24 193.0.216.0/22 maxlen: 24 193.106.136.0/22 maxlen: 24 195.64.148.0/23 maxlen: 24 2a02:2610::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:40:5f:3a:40:63:5d:f0:6a:9f:48:a6:35:3a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7539086db7e8196899598dabfc6bf4423e9e7f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:87:75:10:45:c9:bc:41:e0:b9:d6:bf:8d: c4:70:59:21:ef:98:34:ca:9d:be:cb:e5:1f:a1:7c: cc:cc:76:e6:a0:7e:cd:e0:b0:41:fc:dc:3c:d0:0d: e1:5f:12:fc:f4:35:bf:9c:a5:91:72:63:9d:42:b0: aa:71:13:f7:8c:3c:9a:da:82:67:0d:04:d6:25:83: 99:0c:14:db:70:c3:58:9d:4a:b3:38:ed:bb:6e:d7: 5b:75:58:4c:7b:66:c8:80:cf:9b:c1:ba:c4:1b:b4: 79:5b:10:04:b6:05:07:c8:74:13:a3:4e:51:84:57: 77:31:db:c0:5a:2a:35:60:1f:89:81:7c:91:e0:f3: 8f:07:09:ab:18:e8:80:a9:93:69:02:74:8f:63:c4: 97:02:52:c4:b0:3e:f7:7c:36:59:8b:76:c0:63:13: df:67:fe:c1:0d:9c:04:70:31:b1:19:73:6c:6a:51: 35:cf:bc:c6:11:e3:26:90:89:a4:d0:a5:02:e0:72: 15:e4:da:40:83:65:bc:4e:61:a0:2f:0c:cd:42:e5: f9:2e:06:05:f5:bb:a4:97:46:1d:4e:9a:81:10:49: 15:c9:9f:fc:5c:a7:23:4e:7c:0b:b3:b7:28:43:4f: 93:f6:ab:5e:8a:df:ad:1d:4f:5b:9c:cd:a4:ed:0a: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:39:08:6D:B7:E8:19:68:99:59:8D:AB:FC:6B:F4:42:3E:9E:7F:7A X509v3 Authority Key Identifier: keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/dTkIbbfoGWiZWY2r_Gv0Qj6ef3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.160.0/21 82.193.96.0/19 91.224.24.0/23 93.188.32.0/21 176.115.96.0/21 185.223.112.0/22 193.0.216.0/22 193.106.136.0/22 195.64.148.0/23 IPv6: 2a02:2610::/32 Signature Algorithm: sha256WithRSAEncryption d7:f4:64:98:05:b4:6f:0c:ed:df:cb:a0:e1:1a:cc:50:aa:ff: 91:4c:36:19:d2:d1:91:9e:83:e6:e6:e6:fa:ca:48:85:0c:f7: 1b:9d:26:06:ef:f3:9b:89:94:f9:51:54:58:40:59:a9:74:0c: 8a:8e:d4:67:22:68:77:60:33:aa:56:9e:d0:df:38:d5:ef:2b: 36:f2:51:79:ef:35:76:a4:96:03:74:ad:0c:2f:84:6c:fc:69: b2:a1:2a:3a:18:73:bc:ad:ff:de:95:3a:f4:6d:d4:af:c8:63: 14:32:8c:51:27:9f:44:3f:ce:8f:6a:00:69:76:3b:30:de:e2: d8:d5:61:92:5e:99:13:bc:4c:0d:5d:5d:89:fb:be:c7:15:8e: c7:6c:a6:44:e5:5d:a0:51:bb:4a:d5:95:b2:a4:1a:fb:ef:2b: d1:02:7e:ef:ca:9b:bb:b2:09:d9:f7:3e:28:59:66:87:70:3e: 27:30:72:75:4c:1d:48:9e:98:0d:4c:37:cc:77:c0:e1:56:04: ec:26:4a:c5:b4:32:91:44:36:16:4a:56:f2:54:5d:91:dc:fc: 3c:94:02:d4:35:b4:71:03:28:58:69:40:00:a3:df:b9:e3:95: c0:44:d0:2c:1e:67:38:21:33:dd:ee:83:35:3c:fb:1b:e9:cf: d0:fe:d0:1c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt6W0BfOkBjXfBqn0imNToqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4 OGFhNDkwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTM5MDg2ZGI3ZTgxOTY4OTk1OThkYWJmYzZiZjQ0MjNlOWU3ZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwKHdRBFybxB4LnWv43EcFkh75g0 yp2+y+UfoXzMzHbmoH7N4LBB/Nw80A3hXxL89DW/nKWRcmOdQrCqcRP3jDya2oJn DQTWJYOZDBTbcMNYnUqzOO27btdbdVhMe2bIgM+bwbrEG7R5WxAEtgUHyHQTo05R hFd3MdvAWio1YB+JgXyR4POPBwmrGOiAqZNpAnSPY8SXAlLEsD73fDZZi3bAYxPf Z/7BDZwEcDGxGXNsalE1z7zGEeMmkImk0KUC4HIV5NpAg2W8TmGgLwzNQuX5LgYF 9bukl0YdTpqBEEkVyZ/8XKcjTnwLs7coQ0+T9qteit+tHU9bnM2k7QrUXQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHU5CG236BlomVmNq/xr9EI+nn96MB8GA1UdIwQY MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct MDYwYWMwODkwOTY2LzEvZFRrSWJiZm9HV2laV1kycl9HdjBRajZlZjNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2 LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDLh6gAwQF UsFgAwQBW+AYAwQDXbwgAwQDsHNgAwQCud9wAwQCwQDYAwQCwWqIAwQBw0CUMA0E AgACMAcDBQAqAiYQMA0GCSqGSIb3DQEBCwUAA4IBAQDX9GSYBbRvDO3fy6DhGsxQ qv+RTDYZ0tGRnoPm5ub6ykiFDPcbnSYG7/ObiZT5UVRYQFmpdAyKjtRnImh3YDOq Vp7Q3zjV7ys28lF57zV2pJYDdK0ML4Rs/GmyoSo6GHO8rf/elTr0bdSvyGMUMoxR J59EP86PagBpdjsw3uLY1WGSXpkTvEwNXV2J+77HFY7HbKZE5V2gUbtK1ZWypBr7 7yvRAn7vypu7sgnZ9z4oWWaHcD4nMHJ1TB1InpgNTDfMd8DhVgTsJkrFtDKRRDYW SlbyVF2R3Pw8lALUNbRxAyhYaUAAo9+545XARNAsHmc4ITPd7oM1PPsb6c/Q/tAc -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:15 2026 by rpki-client