This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa File: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (raw, json) Hash identifier: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I= Subject key identifier: 0E:07:FB:71:F4:55:1B:95:18:5A:EE:0D:99:54:14:B1:51:CF:24:F8 Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7 Certificate serial: 019B78A2B2B45A7B52BBB72EDD9A0E12DD01 Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 185.7.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b2:b4:5a:7b:52:bb:b7:2e:dd:9a:0e:12:dd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7 Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e07fb71f4551b95185aee0d995414b151cf24f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:08:1a:a9:b0:57:94:f5:20:25:1f:08:e0:b7: 7a:c4:09:55:e7:2e:21:d5:24:2b:98:13:83:b1:f0: 48:69:b3:22:3a:80:c2:8b:f7:9d:5a:bf:72:c0:b8: 4c:68:cd:1a:a4:be:4f:e0:e3:4e:43:a3:6c:87:48: 29:17:fd:49:aa:62:ba:dd:94:4b:cd:59:71:31:64: 15:08:07:5c:41:9b:89:9c:d7:54:a2:e1:a7:ed:37: 8c:af:5e:d1:ed:1a:5f:86:a0:2e:37:ef:7e:e8:04: f0:35:a5:fb:b2:f1:42:3e:15:4f:11:d9:4a:fb:de: 54:ba:db:76:0f:39:2d:27:ef:76:64:24:86:10:33: ca:d3:52:4d:00:4b:bc:53:e8:cb:28:e2:c3:45:75: bd:60:84:21:19:a4:a0:c9:6e:b0:38:d6:e7:02:e4: 8e:b3:23:69:cf:20:33:df:b4:62:0c:5c:25:ff:0f: 8c:f6:33:e3:12:b3:21:68:84:c1:0c:d5:f6:b8:fa: 27:4d:c4:ba:60:cc:59:f6:67:7e:ff:62:e3:b4:fb: ff:fb:26:53:81:b5:65:63:88:90:74:51:1f:a0:67: f0:b9:32:e8:af:d6:10:1a:b9:eb:de:8b:ba:06:de: 56:53:e8:18:33:00:1e:d5:9d:cf:10:85:c6:3e:bf: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:07:FB:71:F4:55:1B:95:18:5A:EE:0D:99:54:14:B1:51:CF:24:F8 X509v3 Authority Key Identifier: keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.81.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:1e:f5:26:87:ac:48:03:7c:4b:dc:c4:9c:5b:ce:f4:c0:c3: e2:90:94:d3:6e:d5:bb:17:cb:ff:91:b0:ef:a9:d9:0d:ec:cc: 6b:f5:da:be:55:1e:96:4b:db:04:2c:43:ec:2e:f6:7c:db:8d: 35:2c:0d:8f:be:df:49:0e:7b:db:53:85:cc:37:72:be:28:f4: 59:31:c4:ab:41:cf:1b:48:57:5f:69:60:03:34:1c:71:86:13: 84:dc:25:8d:65:33:21:3d:d2:1b:69:ec:8f:80:69:73:42:6a: e2:6e:8f:a5:99:75:8f:16:23:5a:a3:04:64:0b:e7:da:a1:39: c4:54:a0:84:3b:2a:79:11:87:09:1e:b8:e6:c0:63:fc:7a:bf: 6e:5b:9f:53:e9:28:3a:36:59:0d:fe:df:ad:2b:36:3d:6a:8b: 3f:4b:70:1c:b9:2f:40:75:4f:aa:5c:54:b5:c5:06:5b:f5:5d: 99:b8:6c:9a:3d:4d:d5:9a:72:2d:ec:f2:34:11:55:0f:33:46: 7e:cb:d9:27:8b:6a:99:12:f2:5c:7f:fd:d0:a8:f5:e5:75:62: c7:26:55:75:04:a5:68:47:08:ee:cc:71:09:3d:d3:37:14:13: 4b:d7:18:0c:6f:36:21:5c:1d:ab:a9:16:d5:a7:13:13:65:2e: 5c:58:fa:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4orK0WntSu7cu3ZoOEt0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5 MmFlYjcwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTA3ZmI3MWY0NTUxYjk1MTg1YWVlMGQ5OTU0MTRiMTUxY2YyNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ggaqbBXlPUgJR8I4Ld6xAlV5y4h 1SQrmBODsfBIabMiOoDCi/edWr9ywLhMaM0apL5P4ONOQ6Nsh0gpF/1JqmK63ZRL zVlxMWQVCAdcQZuJnNdUouGn7TeMr17R7RpfhqAuN+9+6ATwNaX7svFCPhVPEdlK +95Uutt2DzktJ+92ZCSGEDPK01JNAEu8U+jLKOLDRXW9YIQhGaSgyW6wONbnAuSO syNpzyAz37RiDFwl/w+M9jPjErMhaITBDNX2uPonTcS6YMxZ9md+/2LjtPv/+yZT gbVlY4iQdFEfoGfwuTLor9YQGrnr3ou6Bt5WU+gYMwAe1Z3PEIXGPr+ZDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4H+3H0VRuVGFruDZlUFLFRzyT4MB8GA1UdIwQY MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt NDU2NWYwNGY4ZDg1LzEvRGdmN2NmUlZHNVVZV3U0Tm1WUVVzVkhQSlBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1 LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQdRMA0G CSqGSIb3DQEBCwUAA4IBAQBMHvUmh6xIA3xL3MScW870wMPikJTTbtW7F8v/kbDv qdkN7Mxr9dq+VR6WS9sELEPsLvZ82401LA2Pvt9JDnvbU4XMN3K+KPRZMcSrQc8b SFdfaWADNBxxhhOE3CWNZTMhPdIbaeyPgGlzQmribo+lmXWPFiNaowRkC+faoTnE VKCEOyp5EYcJHrjmwGP8er9uW59T6Sg6NlkN/t+tKzY9aos/S3AcuS9AdU+qXFS1 xQZb9V2ZuGyaPU3VmnIt7PI0EVUPM0Z+y9kni2qZEvJcf/3QqPXldWLHJlV1BKVo RwjuzHEJPdM3FBNL1xgMbzYhXB2rqRbVpxMTZS5cWPp8 -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:54 2026 by rpki-client