This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa File: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (raw, json) Hash identifier: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA= Subject key identifier: 76:C7:6A:04:80:27:AC:22:60:E6:05:98:68:C6:C2:33:7A:80:31:6B Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Certificate serial: 019B7910D8932168FAC0AC508A120B5703DF Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13135 IP address blocks: 192.76.124.0/24 maxlen: 24 194.55.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d8:93:21:68:fa:c0:ac:50:8a:12:0b:57:03:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76c76a048027ac2260e6059868c6c2337a80316b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:3b:4e:e6:b0:32:9a:aa:92:20:78:cb:65: a6:78:9a:de:33:fd:ac:05:5d:72:e5:d1:8e:b9:11: 53:ce:24:f5:3b:ae:0c:a7:73:42:39:c0:45:df:f7: 3b:d9:e4:5d:4b:8b:93:a2:c9:f6:68:47:b3:fc:13: 44:1d:c8:00:ca:1b:68:45:ea:06:1d:e7:dc:2a:e1: a5:4d:eb:d3:f3:bf:76:4f:96:c7:70:f9:50:4e:7d: 3b:1e:97:87:30:27:88:bd:3c:ca:e5:cb:3c:e3:8d: 9c:56:40:7f:7e:32:42:d2:45:a8:4a:e4:7e:a9:9c: 82:b7:78:c2:a2:4d:cf:f4:db:b7:bb:84:18:21:15: 49:c3:1b:5a:d8:39:ce:d2:83:ce:9c:fa:ed:a7:1b: 73:30:f3:8f:81:24:fe:fb:5b:0b:c4:83:b0:e5:2b: fc:7f:44:19:28:31:a4:be:e7:bd:00:43:42:ed:77: ea:11:d0:88:11:78:44:17:4b:a6:b1:8c:58:ff:41: a2:a4:52:af:38:ca:46:94:3d:cc:0b:c1:58:d7:45: 27:ec:64:ae:a8:b5:4c:c6:0c:4a:80:65:0b:9f:84: 95:6c:4b:f9:75:20:e5:fc:f3:ee:9a:b4:24:3b:0f: 62:62:f2:d2:8c:19:47:b4:a9:f7:2c:f2:08:6d:13: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C7:6A:04:80:27:AC:22:60:E6:05:98:68:C6:C2:33:7A:80:31:6B X509v3 Authority Key Identifier: keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.76.124.0/24 194.55.156.0/24 Signature Algorithm: sha256WithRSAEncryption 84:ef:07:1d:1f:21:5b:6a:24:5d:e1:a8:26:40:0c:12:59:75: c7:8e:6a:17:c9:95:e6:80:56:55:44:c5:8c:69:29:11:e8:dc: d6:7f:e3:9e:00:83:ac:15:35:fc:d6:89:a1:80:cd:0b:5c:f1: 8f:f6:9d:c7:d0:93:c1:71:40:08:72:7f:97:aa:5d:32:e0:e6: f0:7a:da:c1:ed:63:61:fe:f3:92:17:fa:60:9a:6e:79:a4:e8: ed:07:39:63:03:03:e6:2b:ce:3d:72:8b:8b:b0:37:99:01:14: 18:3a:57:b4:56:4a:ff:cf:33:07:20:b9:ff:80:e7:2a:14:01: a8:e0:a2:c6:39:e1:c4:19:22:0c:1d:bd:c8:16:55:ea:6e:79: 93:5c:90:14:ff:8d:c5:ac:17:64:85:20:60:39:0e:ca:e1:2f: 01:d6:22:0c:12:fd:71:5d:9a:b9:36:4f:4d:05:8a:9a:5a:4c: c8:d5:b4:fb:e5:ea:33:90:4b:08:d0:c8:e2:22:ff:e6:a5:e6: 8d:41:a2:17:a2:de:ee:e4:9c:61:48:db:e9:18:0d:b2:76:32: de:62:ad:79:13:0f:ce:b3:45:d4:69:dd:27:27:7e:8a:fc:60: 0b:9e:a6:7d:b9:48:b3:41:f6:61:92:61:3c:e8:a0:95:6e:50: 9a:5a:3d:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ENiTIWj6wKxQihILVwPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjhkYTU2NzQ5MmRjYmY1OWY5OGE2YmYxZDE5NzRhYjQy YmM3ZDAwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmM3NmEwNDgwMjdhYzIyNjBlNjA1OTg2OGM2YzIzMzdhODAzMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qo7TuawMpqqkiB4y2WmeJreM/2s BV1y5dGOuRFTziT1O64Mp3NCOcBF3/c72eRdS4uTosn2aEez/BNEHcgAyhtoReoG HefcKuGlTevT8792T5bHcPlQTn07HpeHMCeIvTzK5cs8442cVkB/fjJC0kWoSuR+ qZyCt3jCok3P9Nu3u4QYIRVJwxta2DnO0oPOnPrtpxtzMPOPgST++1sLxIOw5Sv8 f0QZKDGkvue9AENC7XfqEdCIEXhEF0umsYxY/0GipFKvOMpGlD3MC8FY10Un7GSu qLVMxgxKgGULn4SVbEv5dSDl/PPumrQkOw9iYvLSjBlHtKn3LPIIbRNX2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHbHagSAJ6wiYOYFmGjGwjN6gDFrMB8GA1UdIwQY MBaAFLi42lZ0kty/WfmKa/HRl0q0K8fQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUt Njg3MDY4NDU2NmUyLzEvZHNkcUJJQW5yQ0pnNWdXWWFNYkNNM3FBTVdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUtNjg3MDY4NDU2NmUy LzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwEx8AwQA wjecMA0GCSqGSIb3DQEBCwUAA4IBAQCE7wcdHyFbaiRd4agmQAwSWXXHjmoXyZXm gFZVRMWMaSkR6NzWf+OeAIOsFTX81omhgM0LXPGP9p3H0JPBcUAIcn+Xql0y4Obw etrB7WNh/vOSF/pgmm55pOjtBzljAwPmK849couLsDeZARQYOle0Vkr/zzMHILn/ gOcqFAGo4KLGOeHEGSIMHb3IFlXqbnmTXJAU/43FrBdkhSBgOQ7K4S8B1iIMEv1x XZq5Nk9NBYqaWkzI1bT75eozkEsI0MjiIv/mpeaNQaIXot7u5JxhSNvpGA2ydjLe Yq15Ew/Os0XUad0nJ36K/GALnqZ9uUizQfZhkmE86KCVblCaWj0j -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:00 2026 by rpki-client