This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/dCUiT81Vaet-9SHbpBx8w7tyJ7c.roa File: dCUiT81Vaet-9SHbpBx8w7tyJ7c.roa (raw, json) Hash identifier: /Xlo9LK8qMOcKnWSF81eE0SjEcTSjPNFikykaWlHLh8= Subject key identifier: 74:25:22:4F:CD:55:69:EB:7E:F5:21:DB:A4:1C:7C:C3:BB:72:27:B7 Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a Certificate serial: 019B7BA50143CFC659C55B41F9A9183DAEB7 Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/dCUiT81Vaet-9SHbpBx8w7tyJ7c.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 185.192.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:01:43:cf:c6:59:c5:5b:41:f9:a9:18:3d:ae:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7425224fcd5569eb7ef521dba41c7cc3bb7227b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:9d:28:6c:56:36:2c:6d:c8:c1:9f:e4:64: cb:b9:cb:70:54:ce:a1:ed:2d:69:e9:28:0d:64:77: 30:f8:0d:ad:dc:68:c4:14:90:5c:69:dc:a6:f2:2e: a1:0c:1b:e2:cf:72:59:ce:99:3e:73:36:26:a2:1c: 2f:c6:d1:ab:2d:c2:52:a5:82:2c:ae:6b:6b:64:8c: ea:9f:51:7a:28:a3:e3:b1:c8:3a:4b:be:c3:45:08: 2f:23:33:41:c9:be:de:ed:1c:3e:85:71:89:50:a0: 07:44:89:67:4a:c3:81:25:de:61:3f:e1:e9:7d:b4: 9d:c0:b8:cc:59:46:1c:73:b6:ef:e1:c6:5f:78:0c: 4a:44:a2:22:df:39:3b:a8:d7:b5:6e:e7:a5:57:42: b2:65:40:04:c5:06:44:ea:1c:3e:54:38:0c:02:06: 49:b7:77:5e:d1:63:e7:91:d1:5a:8d:30:72:14:7d: 62:8a:30:00:2c:03:6c:55:3e:03:93:70:1f:c4:b2: 16:52:b5:a1:be:e4:9a:f8:36:39:22:a0:17:70:8b: 2e:d8:fa:be:13:8b:32:d7:f6:e0:28:01:f2:1b:3d: ba:63:7e:6d:d3:56:f8:88:30:b3:f7:29:8e:15:cd: 4c:0b:b3:0f:77:05:b5:ad:a1:33:e3:c4:43:bc:90: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:25:22:4F:CD:55:69:EB:7E:F5:21:DB:A4:1C:7C:C3:BB:72:27:B7 X509v3 Authority Key Identifier: keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/dCUiT81Vaet-9SHbpBx8w7tyJ7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.124.0/24 Signature Algorithm: sha256WithRSAEncryption 70:55:60:00:69:22:0d:e6:01:e7:b7:12:99:0a:e7:28:fe:e2: 0c:d9:b9:97:2c:81:09:bd:cb:58:5e:f5:21:ed:b3:bf:71:e3: 3c:ad:0a:38:ec:2f:df:43:43:27:ce:b4:44:b8:3f:25:e7:68: 22:31:60:0a:7f:6e:56:f1:4c:b2:33:cb:94:dc:c2:83:20:37: af:65:ae:0e:bb:94:95:a8:bd:c8:c0:a2:3b:74:87:83:ea:b5: 63:29:d9:4d:18:8b:35:bc:b0:e2:a2:f1:3a:ba:ff:df:4c:81: 74:6e:b1:89:13:ad:5b:8e:97:1a:fc:6b:a2:b9:fb:ac:43:72: 3b:ba:57:7b:c3:0f:45:6f:e4:c6:b9:96:8f:12:70:be:2c:a3: e1:c0:f4:00:d0:b0:6e:26:af:10:98:86:b8:dc:b7:a6:c3:bb: 83:9b:72:31:9f:20:aa:83:f4:ef:42:c7:cc:65:ba:b9:8a:41: ca:15:fc:fe:82:f3:d1:f3:ed:7c:75:f2:6e:56:6b:89:5d:17: 01:7c:20:1a:bd:f6:fa:f2:fb:17:ab:32:0a:46:1e:9a:2b:40: 1b:9a:ab:ad:c8:f0:66:55:4e:fd:3a:5a:ea:bc:d9:a1:76:4d: 4d:72:78:6d:e1:05:9b:d5:cc:18:ac:38:b5:75:dd:31:11:47: b9:a2:5a:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQFDz8ZZxVtB+akYPa63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4 YjhmNWEwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDI1MjI0ZmNkNTU2OWViN2VmNTIxZGJhNDFjN2NjM2JiNzIyN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYOdKGxWNixtyMGf5GTLuctwVM6h 7S1p6SgNZHcw+A2t3GjEFJBcadym8i6hDBviz3JZzpk+czYmohwvxtGrLcJSpYIs rmtrZIzqn1F6KKPjscg6S77DRQgvIzNByb7e7Rw+hXGJUKAHRIlnSsOBJd5hP+Hp fbSdwLjMWUYcc7bv4cZfeAxKRKIi3zk7qNe1buelV0KyZUAExQZE6hw+VDgMAgZJ t3de0WPnkdFajTByFH1iijAALANsVT4Dk3AfxLIWUrWhvuSa+DY5IqAXcIsu2Pq+ E4sy1/bgKAHyGz26Y35t01b4iDCz9ymOFc1MC7MPdwW1raEz48RDvJDOJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQlIk/NVWnrfvUh26QcfMO7cie3MB8GA1UdIwQY MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt NGUxZGMxNTA1MjYwLzEvZENVaVQ4MVZhZXQtOVNIYnBCeDh3N3R5SjdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucB8MA0G CSqGSIb3DQEBCwUAA4IBAQBwVWAAaSIN5gHntxKZCuco/uIM2bmXLIEJvctYXvUh 7bO/ceM8rQo47C/fQ0MnzrREuD8l52giMWAKf25W8UyyM8uU3MKDIDevZa4Ou5SV qL3IwKI7dIeD6rVjKdlNGIs1vLDiovE6uv/fTIF0brGJE61bjpca/GuiufusQ3I7 uld7ww9Fb+TGuZaPEnC+LKPhwPQA0LBuJq8QmIa43Lemw7uDm3IxnyCqg/TvQsfM Zbq5ikHKFfz+gvPR8+18dfJuVmuJXRcBfCAavfb68vsXqzIKRh6aK0AbmqutyPBm VU79OlrqvNmhdk1Ncnht4QWb1cwYrDi1dd0xEUe5olqj -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:42 2026 by rpki-client