This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dpxEinRdBv7pBsTvTmmA7q6ijYY.roa File: dpxEinRdBv7pBsTvTmmA7q6ijYY.roa (raw, json) Hash identifier: WofSwLLMLG2R+QuEn/nLcdpXj+QzXi1Ndksp1TdGTdE= Subject key identifier: 76:9C:44:8A:74:5D:06:FE:E9:06:C4:EF:4E:69:80:EE:AE:A2:8D:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F81147577EDAACA8EAAAAE4459673C4 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dpxEinRdBv7pBsTvTmmA7q6ijYY.roa Signing time: Fri 02 Jan 2026 16:18:44 +0000 ROA not before: Fri 02 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 45.139.68.0/23 maxlen: 24 45.150.80.0/23 maxlen: 24 95.214.38.0/24 maxlen: 24 95.214.39.0/24 maxlen: 24 193.36.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:14:75:77:ed:aa:ca:8e:aa:aa:e4:45:96:73:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=769c448a745d06fee906c4ef4e6980eeaea28d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f6:b8:43:3e:85:5b:55:4a:a1:ef:ad:52:96: 37:f7:90:d8:a5:ea:12:c4:3a:4b:22:30:f7:fb:af: ed:40:ff:9b:f5:6d:90:46:9b:2d:87:7d:eb:2b:02: 33:b3:66:17:cd:eb:17:84:0b:ea:d1:17:de:f0:39: 3f:1d:1d:c9:5f:a1:69:02:a1:7e:5e:79:ff:a1:23: 59:6f:b0:5b:4b:00:16:1c:bd:87:14:a1:26:02:59: c1:4f:b0:08:6b:63:70:e5:da:dc:99:c3:23:7c:33: c8:c4:fb:37:6f:c9:7a:10:34:56:a5:5c:f4:a7:9d: 0b:5b:e7:f4:5b:c1:1d:d3:3c:4c:8a:01:fe:66:36: 8a:b1:a0:31:a6:7f:2d:53:24:03:ad:f5:d1:4f:83: 79:45:72:90:8f:00:70:3f:e7:a6:35:3b:5d:09:69: 6e:96:d0:e4:f7:79:3e:69:f9:fa:6a:82:33:4b:2b: 70:55:f9:48:a6:25:e3:42:b4:a4:75:65:a7:63:ed: 24:20:7a:6f:6e:fc:aa:5c:8f:17:63:17:da:25:73: 65:4d:94:d0:8f:4f:62:ec:6f:9f:b4:93:91:e5:c4: 2f:14:d4:66:2a:af:ec:46:21:5a:34:7f:44:41:af: 42:6f:f0:e4:2d:96:09:17:0c:52:d9:18:20:c1:96: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9C:44:8A:74:5D:06:FE:E9:06:C4:EF:4E:69:80:EE:AE:A2:8D:86 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dpxEinRdBv7pBsTvTmmA7q6ijYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.68.0/23 45.150.80.0/23 95.214.38.0/23 193.36.163.0/24 Signature Algorithm: sha256WithRSAEncryption 02:07:73:9d:e7:19:0c:f4:17:f2:59:6e:17:04:4d:da:30:ca: 3d:b4:5f:d2:8b:86:fd:6a:f4:aa:bf:8c:e2:90:1a:b9:ef:e7: 91:44:02:b2:de:76:ae:8a:81:b8:81:78:f9:f8:3b:0a:aa:b5: 6a:6b:d6:aa:e6:7d:06:63:41:ef:d8:2c:7b:50:a8:98:5f:7d: 5e:28:43:71:ad:5e:df:3d:e5:16:2b:1c:90:e4:5d:b9:8d:6a: 78:ba:05:c6:7c:75:22:bc:3e:dd:e8:67:f2:01:66:d2:3e:34: 18:6e:76:79:cd:6b:bb:0c:8e:0f:84:4e:3a:37:54:9d:60:dd: 80:1b:7a:98:91:0c:fe:83:61:40:70:28:9f:fe:69:40:e4:e4: 7f:bf:31:52:e8:84:20:77:b9:86:c8:31:1f:05:58:38:3a:0d: 28:5c:0b:6e:77:4e:fe:d0:f7:75:01:1c:b9:33:87:13:ad:c4: c7:fa:9c:3c:3f:b5:be:49:ff:64:66:f0:69:cc:2d:d3:0d:f1: ec:db:e4:61:a8:f1:02:5d:20:57:f6:83:1f:de:31:45:51:43: 90:cf:96:ce:b1:9c:8e:87:eb:ee:16:e4:5f:74:50:ee:53:2a: 33:c8:57:79:76:07:c1:52:8b:80:ec:be:c4:51:7e:72:c3:06: 31:80:05:d9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/gRR1d+2qyo6qquRFlnPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjljNDQ4YTc0NWQwNmZlZTkwNmM0ZWY0ZTY5ODBlZWFlYTI4ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6va4Qz6FW1VKoe+tUpY395DYpeoS xDpLIjD3+6/tQP+b9W2QRpsth33rKwIzs2YXzesXhAvq0Rfe8Dk/HR3JX6FpAqF+ Xnn/oSNZb7BbSwAWHL2HFKEmAlnBT7AIa2Nw5drcmcMjfDPIxPs3b8l6EDRWpVz0 p50LW+f0W8Ed0zxMigH+ZjaKsaAxpn8tUyQDrfXRT4N5RXKQjwBwP+emNTtdCWlu ltDk93k+afn6aoIzSytwVflIpiXjQrSkdWWnY+0kIHpvbvyqXI8XYxfaJXNlTZTQ j09i7G+ftJOR5cQvFNRmKq/sRiFaNH9EQa9Cb/DkLZYJFwxS2RggwZbFjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHacRIp0XQb+6QbE705pgO6uoo2GMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvZHB4RWluUmRCdjdwQnNUdlRtbUE3cTZpallZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYtEAwQB LZZQAwQBX9YmAwQAwSSjMA0GCSqGSIb3DQEBCwUAA4IBAQACB3Od5xkM9BfyWW4X BE3aMMo9tF/Si4b9avSqv4zikBq57+eRRAKy3nauioG4gXj5+DsKqrVqa9aq5n0G Y0Hv2Cx7UKiYX31eKENxrV7fPeUWKxyQ5F25jWp4ugXGfHUivD7d6GfyAWbSPjQY bnZ5zWu7DI4PhE46N1SdYN2AG3qYkQz+g2FAcCif/mlA5OR/vzFS6IQgd7mGyDEf BVg4Og0oXAtud07+0Pd1ARy5M4cTrcTH+pw8P7W+Sf9kZvBpzC3TDfHs2+RhqPEC XSBX9oMf3jFFUUOQz5bOsZyOh+vuFuRfdFDuUyozyFd5dgfBUouA7L7EUX5ywwYx gAXZ -----END CERTIFICATE-----Generated at Wed Jan 21 05:20:40 2026 by rpki-client