This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/rDVkAfZJ4mm-tvRM1GXXX_udw34.roa File: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (raw, json) Hash identifier: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs= Subject key identifier: AC:35:64:01:F6:49:E2:69:BE:B6:F4:4C:D4:65:D7:5F:FB:9D:C3:7E Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a Certificate serial: 019B7EA63F2E3B68EBCB8471238C6C2624CC Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/rDVkAfZJ4mm-tvRM1GXXX_udw34.roa Signing time: Fri 02 Jan 2026 12:19:42 +0000 ROA not before: Fri 02 Jan 2026 12:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8851 IP address blocks: 159.15.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3f:2e:3b:68:eb:cb:84:71:23:8c:6c:26:24:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a Validity Not Before: Jan 2 12:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac356401f649e269beb6f44cd465d75ffb9dc37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:6f:ee:91:4f:8b:c4:92:3f:af:87:e3:ef: d3:73:59:36:c7:dc:68:2d:9a:0a:89:06:81:97:de: 40:37:9f:b3:6b:56:4a:8e:c8:86:cc:b5:21:f3:c3: 73:34:e4:c8:3e:a5:43:1c:10:72:76:fc:11:9a:15: 4c:79:5a:fb:90:ae:f9:ee:df:26:71:c2:ae:cd:c1: 34:7d:ae:04:cf:8a:b8:9a:10:55:da:b2:de:1a:00: 78:ad:fa:f2:94:0d:f3:27:87:2f:73:c0:ea:e5:a1: 6d:01:54:c5:91:77:ba:7e:22:dc:82:b5:06:57:fc: dc:7f:cc:ca:a4:4a:34:e0:0a:04:b0:af:52:c9:27: 46:dd:bc:4d:38:50:8f:ba:2e:ea:7d:08:9d:8f:53: 9e:e3:da:0b:96:b3:e6:c3:19:67:9e:ae:a9:59:85: 35:cf:e5:bb:70:1b:d8:c8:84:e9:78:74:b1:70:06: 35:67:75:a4:9a:78:3d:cc:e1:0f:76:e6:78:8f:5a: d8:7d:c0:41:76:c9:e5:66:e2:b9:d5:a8:20:9a:e4: b9:61:a8:a2:af:ac:9b:a4:7b:5a:81:b0:df:65:b6: d8:c8:88:18:ec:bf:bb:e8:8a:fd:d2:bc:11:52:54: c6:05:81:10:04:12:d9:97:a7:22:90:32:cd:f4:a5: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:35:64:01:F6:49:E2:69:BE:B6:F4:4C:D4:65:D7:5F:FB:9D:C3:7E X509v3 Authority Key Identifier: keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/rDVkAfZJ4mm-tvRM1GXXX_udw34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.15.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:6d:b1:7d:63:db:be:71:df:8a:51:d4:07:fb:f2:a0:81:39: 6b:3e:8d:ef:2b:11:57:21:8f:f3:de:e6:b1:84:e8:94:ec:60: 64:8d:58:13:09:8d:d2:43:3b:e4:f2:3f:7d:7d:03:4d:a9:d3: 51:0d:04:35:64:27:64:f3:9e:a3:cf:30:66:59:e7:62:b0:8e: a3:96:52:bb:54:f1:0b:bc:35:ba:e3:3d:b5:67:4f:46:e3:8a: 93:60:56:96:15:a2:ce:83:49:6f:13:1e:93:ba:c5:5e:81:a7: e6:50:0b:51:66:39:5a:d7:b4:45:71:bd:88:f4:f5:62:f1:87: c8:4c:6f:21:1b:41:c2:03:73:dc:c3:8d:8f:d1:c2:1b:77:37: ca:d5:9b:64:2a:5d:98:47:9b:d0:ee:2f:86:0b:4a:3e:00:e6: 65:5b:90:28:0e:d2:6e:57:40:1d:77:ea:fd:53:b7:68:06:94: ef:d9:c0:23:04:4b:df:11:36:48:1a:15:f3:6d:df:51:47:51: e0:b6:2f:06:cd:4b:66:a2:38:af:98:13:5d:e9:08:51:aa:a8: ac:af:11:70:04:05:9d:d6:a3:ad:b8:0d:31:00:1f:6d:6f:f0: a8:c7:7e:86:e8:76:7f:30:3b:42:47:02:42:1e:67:ac:dd:99: c2:aa:6d:32 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+pj8uO2jry4RxI4xsJiTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx OWUyOWEwHhcNMjYwMTAyMTIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzM1NjQwMWY2NDllMjY5YmViNmY0NGNkNDY1ZDc1ZmZiOWRjMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPFv7pFPi8SSP6+H4+/Tc1k2x9xo LZoKiQaBl95AN5+za1ZKjsiGzLUh88NzNOTIPqVDHBBydvwRmhVMeVr7kK757t8m ccKuzcE0fa4Ez4q4mhBV2rLeGgB4rfrylA3zJ4cvc8Dq5aFtAVTFkXe6fiLcgrUG V/zcf8zKpEo04AoEsK9SySdG3bxNOFCPui7qfQidj1Oe49oLlrPmwxlnnq6pWYU1 z+W7cBvYyITpeHSxcAY1Z3Wkmng9zOEPduZ4j1rYfcBBdsnlZuK51aggmuS5Yaii r6ybpHtagbDfZbbYyIgY7L+76Ir90rwRUlTGBYEQBBLZl6cikDLN9KWd+wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFKw1ZAH2SeJpvrb0TNRl11/7ncN+MB8GA1UdIwQY MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt MGNjNTE2OGVhMTVhLzEvckRWa0FmWko0bW0tdHZSTTFHWFhYX3VkdzM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnw8wDQYJ KoZIhvcNAQELBQADggEBACdtsX1j275x34pR1Af78qCBOWs+je8rEVchj/Pe5rGE 6JTsYGSNWBMJjdJDO+TyP319A02p01ENBDVkJ2TznqPPMGZZ52KwjqOWUrtU8Qu8 NbrjPbVnT0bjipNgVpYVos6DSW8THpO6xV6Bp+ZQC1FmOVrXtEVxvYj09WLxh8hM byEbQcIDc9zDjY/Rwht3N8rVm2QqXZhHm9DuL4YLSj4A5mVbkCgO0m5XQB136v1T t2gGlO/ZwCMES98RNkgaFfNt31FHUeC2LwbNS2aiOK+YE13pCFGqqKyvEXAEBZ3W o624DTEAH21v8KjHfobodn8wO0JHAkIeZ6zdmcKqbTI= -----END CERTIFICATE-----Generated at Fri Jan 23 13:38:59 2026 by rpki-client