This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Dkj7gZ-GenLhW9gX9N5eUQfmdHw.roa File: Dkj7gZ-GenLhW9gX9N5eUQfmdHw.roa (raw, json) Hash identifier: ObkM9flh4ZtsBjYCRBoupVY8qqkeL9rupuic83DNoIQ= Subject key identifier: 0E:48:FB:81:9F:86:7A:72:E1:5B:D8:17:F4:DE:5E:51:07:E6:74:7C Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C74486FEBD45E58A99C05E3BAEC613 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Dkj7gZ-GenLhW9gX9N5eUQfmdHw.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20115 IP address blocks: 66.9.96.0/20 maxlen: 24 66.117.8.0/22 maxlen: 24 77.223.192.0/21 maxlen: 24 77.223.200.0/23 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 88.135.100.0/22 maxlen: 24 88.135.104.0/21 maxlen: 24 93.119.184.0/21 maxlen: 24 94.26.110.0/23 maxlen: 24 94.101.103.0/24 maxlen: 24 95.178.8.0/21 maxlen: 24 116.50.16.0/21 maxlen: 24 121.127.56.0/21 maxlen: 24 176.222.48.0/22 maxlen: 24 195.133.202.0/23 maxlen: 24 198.145.112.0/22 maxlen: 24 205.134.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:44:86:fe:bd:45:e5:8a:99:c0:5e:3b:ae:c6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e48fb819f867a72e15bd817f4de5e5107e6747c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:93:3b:11:34:20:26:61:2e:7a:cb:a3:78: 99:11:c3:0b:73:8f:e7:a1:95:f9:45:41:97:2e:65: 03:bb:a9:ce:14:48:61:ba:2b:f9:0b:a3:45:54:05: 4f:7c:7e:ce:44:51:f1:84:7c:ed:74:a5:95:73:02: 22:e6:d2:23:b7:55:3e:25:d2:0c:99:6e:74:2d:e7: 2b:6d:59:f4:72:61:e0:8c:81:08:0a:f5:63:06:40: 3c:65:be:ae:10:55:38:82:5b:72:f2:23:61:d7:f4: 7c:ef:78:32:9e:2c:ab:18:9c:fd:79:76:bd:3c:ef: 7e:d3:84:73:8b:65:54:37:27:72:dc:a0:8b:d4:4f: dd:b1:9e:17:07:e0:a7:55:99:fb:5d:84:e9:2f:25: 41:69:0e:82:b6:4a:39:2a:b6:52:33:21:4d:a2:9f: 6d:ab:68:1d:ac:42:b0:e3:e6:e2:2e:b4:a3:6d:f5: e6:6e:da:6d:d8:85:3a:aa:8e:c1:38:2b:74:71:85: 0f:f0:d3:15:3d:01:1b:43:b0:34:f0:91:56:8a:f4: 9a:87:12:4c:c5:50:2c:5d:64:49:e7:59:23:f7:fa: 07:ef:23:b1:c4:7e:b2:4d:7f:c9:12:2a:ed:15:f9: d6:a7:01:b2:af:55:6e:d1:63:4a:2d:62:78:09:89: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:48:FB:81:9F:86:7A:72:E1:5B:D8:17:F4:DE:5E:51:07:E6:74:7C X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Dkj7gZ-GenLhW9gX9N5eUQfmdHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.9.96.0/20 66.117.8.0/22 77.223.192.0-77.223.201.255 79.139.64.0/23 83.142.200.0/21 88.135.100.0-88.135.111.255 93.119.184.0/21 94.26.110.0/23 94.101.103.0/24 95.178.8.0/21 116.50.16.0/21 121.127.56.0/21 176.222.48.0/22 195.133.202.0/23 198.145.112.0/22 205.134.244.0/22 Signature Algorithm: sha256WithRSAEncryption 34:5b:69:b3:72:c4:69:77:28:ea:9f:d9:8b:ee:e1:79:2b:83: c7:28:f0:13:a1:34:d1:cb:c1:3a:96:11:8e:35:cf:4f:af:76: 95:05:58:a2:00:5f:be:d0:2a:ca:9b:27:61:db:75:32:e4:fd: 50:c6:b2:0e:aa:53:36:40:8a:36:02:20:a1:e8:59:10:42:72: 15:19:24:ee:2b:55:87:d2:06:a1:9a:c2:5e:96:7a:28:00:cf: 5f:42:d9:8c:06:74:49:1e:2b:a1:2e:54:ad:7b:77:7b:5d:07: 15:5e:ac:62:c3:1e:43:77:ec:22:2d:0d:d2:de:f1:03:f0:9a: 9b:65:c0:a3:38:b6:7e:d0:03:69:b4:3a:a6:9a:06:0e:8a:12: fa:67:9a:20:c5:ea:ee:24:fb:fa:f9:dc:ca:4e:ac:c2:b9:da: ef:d3:1f:f6:a4:e9:d2:5c:ea:26:71:cd:85:f8:72:26:ae:85: 61:78:f2:88:dc:d6:63:03:6e:f5:02:d2:3e:d3:53:66:c7:7d: 08:40:a2:1e:48:55:8c:b8:ec:b5:d2:20:06:88:af:cb:fc:2d: 67:c8:69:ad:89:8c:e8:b5:b7:85:3e:bf:82:2e:7d:cf:c2:19: 98:a9:c6:e7:45:25:24:53:8e:23:7f:c8:7c:53:c8:7a:65:d9: 2d:b5:a4:17 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt3x0SG/r1F5YqZwF47rsYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTQ4ZmI4MTlmODY3YTcyZTE1YmQ4MTdmNGRlNWU1MTA3ZTY3NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W6TOxE0ICZhLnrLo3iZEcMLc4/n oZX5RUGXLmUDu6nOFEhhuiv5C6NFVAVPfH7ORFHxhHztdKWVcwIi5tIjt1U+JdIM mW50LecrbVn0cmHgjIEICvVjBkA8Zb6uEFU4glty8iNh1/R873gyniyrGJz9eXa9 PO9+04Rzi2VUNydy3KCL1E/dsZ4XB+CnVZn7XYTpLyVBaQ6Ctko5KrZSMyFNop9t q2gdrEKw4+biLrSjbfXmbtpt2IU6qo7BOCt0cYUP8NMVPQEbQ7A08JFWivSahxJM xVAsXWRJ51kj9/oH7yOxxH6yTX/JEirtFfnWpwGyr1Vu0WNKLWJ4CYkR8wIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFA5I+4Gfhnpy4VvYF/TeXlEH5nR8MB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvRGtqN2daLUdlbkxoVzlnWDlONWVVUWZtZEh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEBEIJYAME AkJ1CDAMAwQGTd/AAwQBTd/IAwQBT4tAAwQDU47IMAwDBAJYh2QDBARYh2ADBANd d7gDBAFeGm4DBABeZWcDBANfsggDBAN0MhADBAN5fzgDBAKw3jADBAHDhcoDBALG kXADBALNhvQwDQYJKoZIhvcNAQELBQADggEBADRbabNyxGl3KOqf2Yvu4Xkrg8co 8BOhNNHLwTqWEY41z0+vdpUFWKIAX77QKsqbJ2HbdTLk/VDGsg6qUzZAijYCIKHo WRBCchUZJO4rVYfSBqGawl6WeigAz19C2YwGdEkeK6EuVK17d3tdBxVerGLDHkN3 7CItDdLe8QPwmptlwKM4tn7QA2m0OqaaBg6KEvpnmiDF6u4k+/r53MpOrMK52u/T H/ak6dJc6iZxzYX4ciauhWF48ojc1mMDbvUC0j7TU2bHfQhAoh5IVYy47LXSIAaI r8v8LWfIaa2JjOi1t4U+v4Iufc/CGZipxudFJSRTjiN/yHxTyHpl2S21pBc= -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:35 2026 by rpki-client