This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/DNy-Ywo37F1s94DzRvRfvjndiAw.roa File: DNy-Ywo37F1s94DzRvRfvjndiAw.roa (raw, json) Hash identifier: kJUUhnZY4jdclwXVHJF/NcqyyZenLqwhpoq2KYT5Bxk= Subject key identifier: 0C:DC:BE:63:0A:37:EC:5D:6C:F7:80:F3:46:F4:5F:BE:39:DD:88:0C Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861 Certificate serial: 019B7910624BF9361122DC9EA52D872430F9 Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/DNy-Ywo37F1s94DzRvRfvjndiAw.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58206 IP address blocks: 193.46.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:62:4b:f9:36:11:22:dc:9e:a5:2d:87:24:30:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cdcbe630a37ec5d6cf780f346f45fbe39dd880c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:50:5e:96:0c:ac:d5:56:62:4a:72:71:5e:8b: 25:e6:83:6f:d2:66:2d:aa:ae:86:d4:a9:4f:06:86: 22:75:03:86:1a:4e:49:60:f2:4f:9e:98:ec:49:6e: 90:b3:1d:1e:c3:09:3b:40:80:00:01:06:e4:8d:8f: 8f:50:84:17:a0:ee:32:fd:d0:19:33:7a:b5:48:67: f1:5c:9f:88:00:f8:70:1b:66:f9:d1:7e:92:6d:e1: 66:bc:c9:c3:e0:55:64:d1:e3:73:c7:d9:09:cd:2d: c4:c7:5b:14:1f:ce:be:bc:99:f7:e5:8f:db:ca:09: a6:b1:da:29:89:b3:3a:46:cc:9c:e4:14:60:f7:87: b7:22:39:69:d2:b0:5f:c0:94:c5:c2:ad:93:68:32: d3:32:35:4f:14:2a:a6:c4:5f:6d:4f:8d:d7:a6:3d: 67:eb:47:ec:c6:2f:ff:38:d3:81:58:a4:f6:4c:75: 28:f8:eb:3a:2f:6c:9b:f5:08:6e:b1:75:15:c4:97: a8:9e:40:9b:2e:a1:24:2e:71:8b:01:9a:a2:91:5b: e5:60:b2:66:03:a5:c5:79:dc:a0:bb:91:a2:1a:ef: 72:0e:9b:a9:c3:31:3c:2b:22:dd:71:82:c7:b1:fd: 77:29:9d:5f:3f:af:c5:7a:1e:a1:c0:de:77:24:33: c9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DC:BE:63:0A:37:EC:5D:6C:F7:80:F3:46:F4:5F:BE:39:DD:88:0C X509v3 Authority Key Identifier: keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/DNy-Ywo37F1s94DzRvRfvjndiAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.36.0/22 Signature Algorithm: sha256WithRSAEncryption 78:bc:f6:ad:c4:24:65:b6:ba:0c:36:6f:2f:b3:f0:91:c0:25: b6:40:3a:ef:97:1f:24:88:7d:25:46:73:53:b8:45:62:fd:d5: 01:c7:f3:64:c1:c8:b1:6f:d8:ff:71:49:e2:bf:28:95:70:69: 49:ce:fc:b0:bd:b9:85:55:ad:5f:c1:41:dc:2c:e7:e2:03:13: 4d:57:81:c5:39:0b:ef:6b:ad:5a:a3:31:45:ed:aa:4b:22:16: f1:93:6c:94:f9:55:fe:27:c4:3d:d1:d9:4e:fc:ac:b4:ef:27: 8f:c7:ba:a5:10:de:99:33:4c:bf:4c:35:f8:c5:28:8d:88:5d: 4f:46:be:9a:7c:1a:b1:70:d8:3a:74:54:ac:4b:94:9b:bc:64: 3e:0d:4f:7a:58:ab:1c:8c:13:bd:56:16:da:c5:f5:ed:4f:d9: 79:63:13:54:a7:3c:1e:60:42:e2:36:cc:29:2c:a2:24:56:1f: a7:93:7b:c3:56:fe:b4:78:7d:a2:ae:9f:70:ab:ef:78:8d:27: 5a:a8:9f:74:74:63:da:f5:af:11:fa:01:3c:a3:1a:af:8f:19: f7:93:28:57:59:9d:b0:ab:70:c0:3a:66:cc:f7:c9:07:ea:86: 6b:71:d2:07:51:86:42:82:18:47:38:84:f5:56:a1:93:f1:c2: c7:7f:36:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGJL+TYRItyepS2HJDD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjNmODI1OWIzMGVjMDM3MjJmOTQyMDM1YTk0ZTIwOWY4 ODI4NjEwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2RjYmU2MzBhMzdlYzVkNmNmNzgwZjM0NmY0NWZiZTM5ZGQ4ODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFBelgys1VZiSnJxXosl5oNv0mYt qq6G1KlPBoYidQOGGk5JYPJPnpjsSW6Qsx0ewwk7QIAAAQbkjY+PUIQXoO4y/dAZ M3q1SGfxXJ+IAPhwG2b50X6SbeFmvMnD4FVk0eNzx9kJzS3Ex1sUH86+vJn35Y/b ygmmsdopibM6Rsyc5BRg94e3Ijlp0rBfwJTFwq2TaDLTMjVPFCqmxF9tT43Xpj1n 60fsxi//ONOBWKT2THUo+Os6L2yb9QhusXUVxJeonkCbLqEkLnGLAZqikVvlYLJm A6XFedygu5GiGu9yDpupwzE8KyLdcYLHsf13KZ1fP6/Feh6hwN53JDPJUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzcvmMKN+xdbPeA80b0X7453YgMMB8GA1UdIwQY MBaAFAPz+CWbMOwDci+UIDWpTiCfiChhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQt YWIxMzM1NmU1ZmVjLzEvRE55LVl3bzM3RjFzOTREelJ2UmZ2am5kaUF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQtYWIxMzM1NmU1ZmVj LzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwS4kMA0G CSqGSIb3DQEBCwUAA4IBAQB4vPatxCRltroMNm8vs/CRwCW2QDrvlx8kiH0lRnNT uEVi/dUBx/Nkwcixb9j/cUnivyiVcGlJzvywvbmFVa1fwUHcLOfiAxNNV4HFOQvv a61aozFF7apLIhbxk2yU+VX+J8Q90dlO/Ky07yePx7qlEN6ZM0y/TDX4xSiNiF1P Rr6afBqxcNg6dFSsS5SbvGQ+DU96WKscjBO9VhbaxfXtT9l5YxNUpzweYELiNswp LKIkVh+nk3vDVv60eH2irp9wq+94jSdaqJ90dGPa9a8R+gE8oxqvjxn3kyhXWZ2w q3DAOmbM98kH6oZrcdIHUYZCghhHOIT1VqGT8cLHfza7 -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:05 2026 by rpki-client