This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dLfogzr8X0zgwgQvDlE2XwZPbe0.roa File: dLfogzr8X0zgwgQvDlE2XwZPbe0.roa (raw, json) Hash identifier: tDTZf4eBf+bkssqyGO4ElGt+Fnfkj8Ins0O4ZyBMK+Y= Subject key identifier: 74:B7:E8:83:3A:FC:5F:4C:E0:C2:04:2F:0E:51:36:5F:06:4F:6D:ED Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66 Certificate serial: 019B7A5B805E93CD4DBD071B383F0BAB8587 Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dLfogzr8X0zgwgQvDlE2XwZPbe0.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 95.128.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:80:5e:93:cd:4d:bd:07:1b:38:3f:0b:ab:85:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b7e8833afc5f4ce0c2042f0e51365f064f6ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3e:01:a3:1c:94:9c:bf:e2:95:4b:78:0d:e6: 44:5c:fe:c5:29:9b:f2:2d:3f:78:7c:93:08:cb:65: 51:13:00:7d:f9:39:a6:27:1c:48:3f:29:30:67:99: a5:40:af:70:53:ab:9d:63:07:b3:15:92:aa:25:13: c3:d1:49:37:5f:44:f5:7a:cb:fc:1f:f9:d9:49:9a: 43:c0:da:2a:51:4d:14:8f:0f:bd:ae:09:8a:cc:dd: 8f:c6:dd:69:08:f6:33:c8:62:a3:4c:84:2a:a6:80: 6b:bc:c9:b2:d6:a8:c0:68:38:2e:d7:96:ac:fe:ba: 8c:5f:d1:3a:ce:95:ec:dc:b4:68:6c:53:ce:1f:a1: 3e:b0:ce:b8:31:32:14:e1:34:3a:ec:4b:fd:ee:04: 78:e7:e5:6e:ed:96:d9:c4:93:8e:9a:12:c7:37:60: 46:48:86:6d:95:b3:4d:90:97:d9:6f:f6:22:c0:60: 90:4d:1c:42:49:1a:e5:8a:c2:5a:94:2d:68:01:41: 13:93:f5:24:02:bf:86:9c:43:35:2e:63:50:51:58: 3f:0f:ec:a0:25:43:d9:a2:1f:83:f0:24:76:d4:95: af:1f:f6:37:56:ff:f4:6a:8b:73:1c:ce:4a:59:9e: ed:e8:0b:7e:c4:05:bc:e4:b1:35:cc:76:d5:ff:37: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B7:E8:83:3A:FC:5F:4C:E0:C2:04:2F:0E:51:36:5F:06:4F:6D:ED X509v3 Authority Key Identifier: keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dLfogzr8X0zgwgQvDlE2XwZPbe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.199.0/24 Signature Algorithm: sha256WithRSAEncryption c7:a2:ee:db:98:5d:66:ed:f9:d1:fc:a0:28:c2:d4:81:a8:29: ad:72:0c:e9:fe:65:68:d2:a4:ef:22:df:c8:33:ab:1d:dc:72: 23:dc:18:8a:c6:53:09:fd:ec:ca:64:53:a8:58:22:1c:a7:fc: 1d:14:09:2f:e8:0f:78:c2:da:5e:5e:4c:bb:db:40:86:41:d5: cf:57:21:b2:33:77:d0:a2:a9:f1:93:e1:7b:c9:57:47:71:3b: f6:e6:47:31:52:3f:84:f8:a0:4d:b1:68:11:b5:90:a0:2f:bd: f0:d9:b7:db:b4:b7:17:9f:e7:b1:6a:22:3e:c7:21:8a:9d:e6: 77:45:fe:bb:39:d1:6d:fc:e7:17:fa:8d:4b:2a:01:21:48:8c: 12:0a:64:69:db:c2:49:e3:be:7e:19:46:22:ec:84:da:91:2d: 1c:6c:a4:07:58:d9:4a:b0:34:11:71:63:47:00:0c:33:9b:62: d5:34:a0:e7:e2:a2:c1:3e:e0:80:94:51:91:14:1a:dd:5c:5d: 90:44:44:e8:c2:76:5f:b4:15:ef:4a:83:f8:2d:7a:e5:06:d9: b7:ef:ac:f1:80:ff:38:23:eb:0b:8f:53:05:2a:74:fb:ec:66: 16:33:6b:94:3e:42:de:1a:50:42:3e:7a:7c:dc:ab:89:90:2e: 20:d7:fa:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4Bek81NvQcbOD8Lq4WHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NWU2NDNkMDIxZWM2ZDIxYjQ3NWFlNDYwZGRlZGNmN2U2 YjNmNjYwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGI3ZTg4MzNhZmM1ZjRjZTBjMjA0MmYwZTUxMzY1ZjA2NGY2ZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T4BoxyUnL/ilUt4DeZEXP7FKZvy LT94fJMIy2VREwB9+TmmJxxIPykwZ5mlQK9wU6udYwezFZKqJRPD0Uk3X0T1esv8 H/nZSZpDwNoqUU0Ujw+9rgmKzN2Pxt1pCPYzyGKjTIQqpoBrvMmy1qjAaDgu15as /rqMX9E6zpXs3LRobFPOH6E+sM64MTIU4TQ67Ev97gR45+Vu7ZbZxJOOmhLHN2BG SIZtlbNNkJfZb/YiwGCQTRxCSRrlisJalC1oAUETk/UkAr+GnEM1LmNQUVg/D+yg JUPZoh+D8CR21JWvH/Y3Vv/0aotzHM5KWZ7t6At+xAW85LE1zHbV/zdfEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHS36IM6/F9M4MIELw5RNl8GT23tMB8GA1UdIwQY MBaAFHReZD0CHsbSG0da5GDd7c9+az9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTkt YTk1YWVmOWM5MWQ5LzEvZExmb2d6cjhYMHpnd2dRdkRsRTJYd1pQYmUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTktYTk1YWVmOWM5MWQ5 LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DHMA0G CSqGSIb3DQEBCwUAA4IBAQDHou7bmF1m7fnR/KAowtSBqCmtcgzp/mVo0qTvIt/I M6sd3HIj3BiKxlMJ/ezKZFOoWCIcp/wdFAkv6A94wtpeXky720CGQdXPVyGyM3fQ oqnxk+F7yVdHcTv25kcxUj+E+KBNsWgRtZCgL73w2bfbtLcXn+exaiI+xyGKneZ3 Rf67OdFt/OcX+o1LKgEhSIwSCmRp28JJ475+GUYi7ITakS0cbKQHWNlKsDQRcWNH AAwzm2LVNKDn4qLBPuCAlFGRFBrdXF2QRETownZftBXvSoP4LXrlBtm376zxgP84 I+sLj1MFKnT77GYWM2uUPkLeGlBCPnp83KuJkC4g1/oF -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:42 2026 by rpki-client