This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/dMqC-n6aTOCbSL8Ykp9feAUQoHU.roa File: dMqC-n6aTOCbSL8Ykp9feAUQoHU.roa (raw, json) Hash identifier: zTuoRHdXLep95ed7e0hmPYJZjgqTN3feHiOb9GoDWDQ= Subject key identifier: 74:CA:82:FA:7E:9A:4C:E0:9B:48:BF:18:92:9F:5F:78:05:10:A0:75 Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605 Certificate serial: 019B7FF18713068182D35965615E5B4F4581 Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/dMqC-n6aTOCbSL8Ykp9feAUQoHU.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206815 IP address blocks: 83.229.24.0/24 maxlen: 24 2a13:b280::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:87:13:06:81:82:d3:59:65:61:5e:5b:4f:45:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74ca82fa7e9a4ce09b48bf18929f5f780510a075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:71:96:01:a4:14:e9:20:e3:d3:86:06:41: cc:ae:66:fd:aa:18:af:f9:76:82:ee:70:be:a2:42: 9f:53:25:aa:9e:cd:06:46:c1:73:0e:7c:cf:8a:e9: 39:03:ae:81:85:dd:c0:bc:1a:29:0d:99:7d:f7:e5: 2b:3f:8d:21:90:21:92:77:4f:88:42:5a:13:bc:b3: c8:be:3c:57:ce:04:a1:1b:63:05:13:c2:6f:63:de: 8d:e6:ce:68:74:ee:9f:37:72:46:94:03:2d:03:57: 82:2b:86:23:de:5f:9a:6a:12:8e:53:69:82:8d:86: 49:a3:d9:d1:18:03:d4:b8:5c:1f:cd:e7:04:2b:b4: 79:0e:d9:c3:a6:f7:12:7d:f6:72:e3:6e:d1:92:96: f8:ec:66:aa:60:fa:cb:98:9e:55:ce:d0:dc:db:4c: be:61:75:81:b7:8b:43:be:23:e1:5f:58:cb:a0:60: 41:09:cb:69:7c:88:37:26:33:e7:b9:bc:4a:0e:5c: 7a:80:2a:bf:5f:95:84:5a:19:5c:bf:ad:56:1a:2e: 79:8d:35:f8:51:45:52:bd:ec:06:ba:29:fb:e0:69: 63:18:70:a8:bb:a5:83:a2:0c:c0:73:53:8b:b9:de: 56:6f:2e:56:08:69:f3:40:b1:36:83:fa:53:bd:d2: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CA:82:FA:7E:9A:4C:E0:9B:48:BF:18:92:9F:5F:78:05:10:A0:75 X509v3 Authority Key Identifier: keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/dMqC-n6aTOCbSL8Ykp9feAUQoHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.229.24.0/24 IPv6: 2a13:b280::/29 Signature Algorithm: sha256WithRSAEncryption 02:15:ad:59:fe:8f:a3:d8:8f:ad:67:af:24:fb:cc:8a:ab:b0: 94:c2:55:9c:03:16:de:df:17:62:74:54:c7:db:62:cf:87:07: 6b:47:3a:25:d8:fe:ba:67:69:4a:82:60:ab:fc:b7:eb:3c:ac: d8:6c:5a:c2:eb:53:09:10:34:d3:b9:ec:b7:fd:1a:6a:84:92: c9:fa:3c:e1:bb:6f:99:f8:04:a0:a9:e1:e8:e4:6e:65:1f:78: 05:c2:ab:67:fb:fe:5c:0c:e3:90:31:23:f1:4b:b2:5c:88:6f: 4a:d8:9c:69:33:b4:e0:f4:24:26:81:14:47:82:d0:c8:6f:3e: 4c:93:da:98:31:8e:72:bf:00:73:44:93:53:64:e7:9f:43:aa: 78:a7:a6:2e:51:aa:5b:93:d0:55:46:6f:34:9f:f0:e6:1d:ae: 1d:1a:cf:82:5a:97:ac:ed:19:ac:4e:e4:8e:a9:1e:2e:87:1c: bb:c0:ba:f9:57:c2:29:8c:4d:e9:0d:18:6b:b7:10:17:2f:6d: 27:39:4c:cf:a7:8a:73:00:e8:21:80:07:b4:a9:c1:6c:a1:fb: 37:51:a8:d6:5d:62:e6:cd:41:ff:86:5c:32:47:5a:7c:ee:80: 30:ac:26:ab:30:44:98:bc:41:14:df:4b:03:c0:02:af:89:1e: 14:df:94:03 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8YcTBoGC01llYV5bT0WBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNTE1ZmJiMzFiMzBjYTIyZDJmOTQ3YzUxOWFjNDcxZjAy YmI2MDUwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGNhODJmYTdlOWE0Y2UwOWI0OGJmMTg5MjlmNWY3ODA1MTBhMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWJxlgGkFOkg49OGBkHMrmb9qhiv +XaC7nC+okKfUyWqns0GRsFzDnzPiuk5A66Bhd3AvBopDZl99+UrP40hkCGSd0+I QloTvLPIvjxXzgShG2MFE8JvY96N5s5odO6fN3JGlAMtA1eCK4Yj3l+aahKOU2mC jYZJo9nRGAPUuFwfzecEK7R5DtnDpvcSffZy427Rkpb47GaqYPrLmJ5VztDc20y+ YXWBt4tDviPhX1jLoGBBCctpfIg3JjPnubxKDlx6gCq/X5WEWhlcv61WGi55jTX4 UUVSvewGuin74GljGHCou6WDogzAc1OLud5Wby5WCGnzQLE2g/pTvdKB9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHTKgvp+mkzgm0i/GJKfX3gFEKB1MB8GA1UdIwQY MBaAFItRX7sxswyiLS+UfFGaxHHwK7YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTFGZnV6R3pES0l0TDVSOFVackVjZkFydGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZGZhMGYtMThhNC00MmY2LWI5ZDUt MDZhNDY1NWM2MzYyLzEvZE1xQy1uNmFUT0NiU0w4WWtwOWZlQVVRb0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZGZhMGYtMThhNC00MmY2LWI5ZDUtMDZhNDY1NWM2MzYy LzEvaTFGZnV6R3pES0l0TDVSOFVackVjZkFydGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAU+UYMA0E AgACMAcDBQMqE7KAMA0GCSqGSIb3DQEBCwUAA4IBAQACFa1Z/o+j2I+tZ68k+8yK q7CUwlWcAxbe3xdidFTH22LPhwdrRzol2P66Z2lKgmCr/LfrPKzYbFrC61MJEDTT uey3/RpqhJLJ+jzhu2+Z+ASgqeHo5G5lH3gFwqtn+/5cDOOQMSPxS7JciG9K2Jxp M7Tg9CQmgRRHgtDIbz5Mk9qYMY5yvwBzRJNTZOefQ6p4p6YuUapbk9BVRm80n/Dm Ha4dGs+CWpes7RmsTuSOqR4uhxy7wLr5V8IpjE3pDRhrtxAXL20nOUzPp4pzAOgh gAe0qcFsofs3UajWXWLmzUH/hlwyR1p87oAwrCarMESYvEEU30sDwAKviR4U35QD -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:21 2026 by rpki-client