This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dYoF3WCX5e8xkQ75qi9A1X9Mk5k.roa File: dYoF3WCX5e8xkQ75qi9A1X9Mk5k.roa (raw, json) Hash identifier: R7Y096NYWU1/rjB9QjTfqLZJf6JxhKvKWKFuhaRLmA0= Subject key identifier: 75:8A:05:DD:60:97:E5:EF:31:91:0E:F9:AA:2F:40:D5:7F:4C:93:99 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019C36BBA4334D4E7A634076360DF4807BA1 Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dYoF3WCX5e8xkQ75qi9A1X9Mk5k.roa Signing time: Sat 07 Feb 2026 06:13:12 +0000 ROA not before: Sat 07 Feb 2026 06:13:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 116.204.164.0/24 maxlen: 24 222.167.224.0/24 maxlen: 24 222.167.227.0/24 maxlen: 24 222.167.231.0/24 maxlen: 24 222.167.232.0/24 maxlen: 24 222.167.239.0/24 maxlen: 24 222.167.253.0/24 maxlen: 24 222.167.254.0/24 maxlen: 24 222.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:36:bb:a4:33:4d:4e:7a:63:40:76:36:0d:f4:80:7b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Feb 7 06:13:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=758a05dd6097e5ef31910ef9aa2f40d57f4c9399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:40:df:9e:02:4d:99:52:0a:69:81:3b:b7: 08:7c:ab:01:50:9a:de:ee:9a:0c:48:0f:12:ed:9b: 5f:33:94:98:48:12:9b:42:2f:e5:87:ef:97:eb:92: 50:a4:85:eb:83:ce:2e:4e:fd:02:02:c2:25:43:27: 5e:0b:9e:d1:50:a9:98:a4:36:67:b2:68:13:57:b8: bf:97:cd:aa:ce:ba:4d:be:00:ee:d2:4c:d5:53:03: c0:62:b8:8e:4d:67:15:c2:bc:64:8f:23:9f:7c:67: a4:0a:0d:75:ce:d9:ec:bb:e1:84:77:7b:68:1b:35: 1d:ca:27:db:65:eb:8a:27:29:af:7a:b6:5d:8d:d1: 8b:cd:57:ae:8f:a0:e6:a5:d2:62:2f:93:9d:71:40: 1d:4e:55:6e:c6:20:8f:e2:a9:d7:7d:34:bb:1b:de: 11:62:63:06:4e:93:8e:39:2c:2d:83:85:68:d4:7b: 27:96:46:57:c0:e3:19:1a:ca:c3:24:19:f8:04:64: db:23:27:83:b7:1a:f2:68:aa:00:b9:0b:95:a9:9c: a8:d8:78:63:8b:f9:e9:72:84:cc:f4:88:96:08:32: 8f:ad:e8:66:e6:70:40:df:14:31:4c:20:37:11:69: f5:56:f6:cd:32:0b:5b:bd:5f:58:e1:8b:e3:1a:a5: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8A:05:DD:60:97:E5:EF:31:91:0E:F9:AA:2F:40:D5:7F:4C:93:99 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dYoF3WCX5e8xkQ75qi9A1X9Mk5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.204.164.0/24 222.167.224.0/24 222.167.227.0/24 222.167.231.0-222.167.232.255 222.167.239.0/24 222.167.253.0-222.167.255.255 Signature Algorithm: sha256WithRSAEncryption 3e:4a:42:6f:fd:7a:07:09:a0:2e:89:e8:6a:ad:f9:f0:72:20: 1d:d8:e4:34:83:2b:46:4b:5e:bd:0f:b1:4f:27:ef:02:be:fd: 92:a2:39:d0:32:1b:0c:54:40:88:f1:d8:ee:8c:16:1e:78:9a: dd:1c:1f:11:eb:37:46:95:a8:ff:fa:8f:80:4d:9e:f3:de:b6: 89:ce:fc:0c:9c:e9:9f:99:31:6f:57:cf:b9:f6:b6:68:58:d6: cd:78:5a:4d:cf:38:09:61:20:ca:81:85:38:bd:3e:bf:9d:bf: 36:32:08:2e:9c:43:88:3c:ab:64:cc:b0:12:b3:8e:ae:36:fd: 2c:31:b6:6b:4f:ee:53:aa:ea:03:bc:bd:12:7a:68:04:29:11: d4:87:44:ee:b6:fa:7f:ae:4c:5f:32:83:00:3d:3c:23:59:d7: ea:06:51:45:69:b5:e3:72:ae:75:93:69:9c:20:13:f1:d7:77: f1:3e:34:8a:bd:12:24:73:ba:7e:45:16:c1:d9:8a:65:0b:dc: 1e:4d:b6:8e:77:08:b6:21:0c:c2:85:22:58:40:ee:e8:3c:39: 07:e1:fe:2c:06:de:25:bb:83:15:5a:bc:3f:2a:12:61:73:66: f5:e3:f6:36:04:02:d4:61:fe:1a:6a:ff:9b:36:25:fd:98:93: 89:e8:93:c3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZw2u6QzTU56Y0B2Ng30gHuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMjA3MDYxMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NThhMDVkZDYwOTdlNWVmMzE5MTBlZjlhYTJmNDBkNTdmNGM5Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo1A354CTZlSCmmBO7cIfKsBUJre 7poMSA8S7ZtfM5SYSBKbQi/lh++X65JQpIXrg84uTv0CAsIlQydeC57RUKmYpDZn smgTV7i/l82qzrpNvgDu0kzVUwPAYriOTWcVwrxkjyOffGekCg11ztnsu+GEd3to GzUdyifbZeuKJymverZdjdGLzVeuj6DmpdJiL5OdcUAdTlVuxiCP4qnXfTS7G94R YmMGTpOOOSwtg4Vo1HsnlkZXwOMZGsrDJBn4BGTbIyeDtxryaKoAuQuVqZyo2Hhj i/npcoTM9IiWCDKPrehm5nBA3xQxTCA3EWn1VvbNMgtbvV9Y4YvjGqUSXQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFHWKBd1gl+XvMZEO+aovQNV/TJOZMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvZFlvRjNXQ1g1ZTh4a1E3NXFpOUExWDlNazVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAATAzAwQAdMykAwQA 3qfgAwQA3qfjMAwDBADep+cDBADep+gDBADep+8wCwMEAN6n/QMDA96gMA0GCSqG SIb3DQEBCwUAA4IBAQA+SkJv/XoHCaAuiehqrfnwciAd2OQ0gytGS169D7FPJ+8C vv2SojnQMhsMVECI8djujBYeeJrdHB8R6zdGlaj/+o+ATZ7z3raJzvwMnOmfmTFv V8+59rZoWNbNeFpNzzgJYSDKgYU4vT6/nb82MggunEOIPKtkzLASs46uNv0sMbZr T+5TquoDvL0SemgEKRHUh0Tutvp/rkxfMoMAPTwjWdfqBlFFabXjcq51k2mcIBPx 13fxPjSKvRIkc7p+RRbB2YplC9weTbaOdwi2IQzChSJYQO7oPDkH4f4sBt4lu4MV Wrw/KhJhc2b14/Y2BALUYf4aav+bNiX9mJOJ6JPD -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:24 2026 by rpki-client