This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/DZyx25x41UHPF3i1Veq-pYVddR4.roa File: DZyx25x41UHPF3i1Veq-pYVddR4.roa (raw, json) Hash identifier: 54obthyULOowTluftKwz8zXmO0WsXPGi7FNKcmk8zDQ= Subject key identifier: 0D:9C:B1:DB:9C:78:D5:41:CF:17:78:B5:55:EA:BE:A5:85:5D:75:1E Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019B7E386AE0CAC458B82FF4C76113D3E58C Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/DZyx25x41UHPF3i1Veq-pYVddR4.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 91.188.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6a:e0:ca:c4:58:b8:2f:f4:c7:61:13:d3:e5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d9cb1db9c78d541cf1778b555eabea5855d751e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c0:01:dd:0e:45:10:c0:f3:ef:23:fe:97:1f: f2:1c:6b:f2:f0:52:b6:f3:28:b8:8c:a7:a6:74:00: f1:aa:f7:a7:7a:91:70:54:12:e9:13:e9:d3:51:77: 4d:0d:d9:4e:09:53:01:49:26:58:3b:63:be:99:de: a6:33:72:4f:71:f8:e5:bb:c4:76:57:00:55:f9:d8: d1:27:12:45:1a:8a:f6:6b:67:21:e0:06:68:79:9d: 48:65:21:9e:6c:fa:6c:52:f6:92:6a:f6:64:ca:8c: 0a:ae:bc:12:34:2f:d7:97:7e:81:58:20:e5:2a:ba: 41:67:9c:dd:fb:15:54:14:76:78:78:da:e4:2a:05: 75:05:6b:ef:e1:39:c2:44:ff:14:31:2b:0d:e1:9f: 16:81:6b:22:1c:06:07:5c:a6:49:5f:82:00:ed:04: a7:65:c0:23:dd:fe:f4:87:2e:bf:82:63:a5:4c:90: df:1c:b5:0c:dc:59:52:b8:85:74:f6:dc:01:12:38: 1e:66:12:2c:bc:3d:eb:fa:fd:39:7f:05:6f:0b:29: 3c:09:d7:e2:1d:63:1b:2f:63:1a:bd:11:0d:9c:86: 7f:ee:29:4a:50:72:d1:b4:0e:7c:6e:5e:35:74:9a: 9f:9b:42:24:98:d9:13:6e:b9:f5:62:55:08:c6:7e: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9C:B1:DB:9C:78:D5:41:CF:17:78:B5:55:EA:BE:A5:85:5D:75:1E X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/DZyx25x41UHPF3i1Veq-pYVddR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.252.0/24 Signature Algorithm: sha256WithRSAEncryption 75:d2:81:5c:41:53:28:5f:35:be:22:07:1b:9d:32:8e:d4:ef: 11:cb:ca:6d:18:1f:a7:46:e2:e6:8d:79:6b:2c:9e:79:9d:d5: 8d:8b:a6:b9:53:4b:1a:78:47:1c:8f:82:3a:34:51:0e:fe:c1: 77:c7:c3:06:63:f0:9f:76:22:40:02:1b:26:68:97:22:b4:73: 0e:c9:97:30:ab:cf:a8:c9:89:f4:50:c2:02:49:b2:d4:1a:76: f3:81:59:a4:c9:a8:0f:fa:5f:2e:65:fc:09:6b:90:0e:c3:ba: f1:22:66:8a:4f:3e:94:34:d1:6f:fc:09:ea:2b:72:0a:e7:e0: 03:7d:14:38:64:42:74:f6:ac:da:b4:17:20:59:a3:8c:45:b5: 84:0c:81:11:bc:68:c0:fd:b8:09:23:0b:ab:7d:4f:91:13:24: 26:24:79:18:2f:31:80:be:41:7c:98:24:c1:37:6a:67:2c:d8: d6:9f:b4:67:15:a6:11:cf:86:34:4f:e1:7b:81:76:7d:44:65: 3f:71:b3:f2:e8:f7:ab:36:85:ab:67:22:aa:92:3d:aa:cc:30: ea:b9:ac:9b:bf:c0:c4:b8:57:e5:26:75:00:2e:dc:8e:45:79: 64:45:0a:75:af:91:c3:59:6d:26:3f:74:0f:80:28:90:18:d0: 72:3b:12:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGrgysRYuC/0x2ET0+WMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDljYjFkYjljNzhkNTQxY2YxNzc4YjU1NWVhYmVhNTg1NWQ3NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MAB3Q5FEMDz7yP+lx/yHGvy8FK2 8yi4jKemdADxqvenepFwVBLpE+nTUXdNDdlOCVMBSSZYO2O+md6mM3JPcfjlu8R2 VwBV+djRJxJFGor2a2ch4AZoeZ1IZSGebPpsUvaSavZkyowKrrwSNC/Xl36BWCDl KrpBZ5zd+xVUFHZ4eNrkKgV1BWvv4TnCRP8UMSsN4Z8WgWsiHAYHXKZJX4IA7QSn ZcAj3f70hy6/gmOlTJDfHLUM3FlSuIV09twBEjgeZhIsvD3r+v05fwVvCyk8Cdfi HWMbL2MavRENnIZ/7ilKUHLRtA58bl41dJqfm0IkmNkTbrn1YlUIxn7KHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2csduceNVBzxd4tVXqvqWFXXUeMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvRFp5eDI1eDQxVUhQRjNpMVZlcS1wWVZkZFI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z8MA0G CSqGSIb3DQEBCwUAA4IBAQB10oFcQVMoXzW+IgcbnTKO1O8Ry8ptGB+nRuLmjXlr LJ55ndWNi6a5U0saeEccj4I6NFEO/sF3x8MGY/CfdiJAAhsmaJcitHMOyZcwq8+o yYn0UMICSbLUGnbzgVmkyagP+l8uZfwJa5AOw7rxImaKTz6UNNFv/AnqK3IK5+AD fRQ4ZEJ09qzatBcgWaOMRbWEDIERvGjA/bgJIwurfU+REyQmJHkYLzGAvkF8mCTB N2pnLNjWn7RnFaYRz4Y0T+F7gXZ9RGU/cbPy6PerNoWrZyKqkj2qzDDquaybv8DE uFflJnUALtyORXlkRQp1r5HDWW0mP3QPgCiQGNByOxKn -----END CERTIFICATE-----Generated at Mon Jan 19 10:57:07 2026 by rpki-client