This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/DzN_WYe0XcHzOCsuLwI3-t8U6BU.roa File: DzN_WYe0XcHzOCsuLwI3-t8U6BU.roa (raw, json) Hash identifier: IW2dIfGRE8kDdbDSGziwX25n3nT3NtlJvJJCv8rrTuw= Subject key identifier: 0F:33:7F:59:87:B4:5D:C1:F3:38:2B:2E:2F:02:37:FA:DF:14:E8:15 Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Certificate serial: 019B7834F60FEA6D4A0C31A9A5F65A4A5C74 Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/DzN_WYe0XcHzOCsuLwI3-t8U6BU.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31440 IP address blocks: 195.128.224.0/24 maxlen: 24 195.128.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:0f:ea:6d:4a:0c:31:a9:a5:f6:5a:4a:5c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f337f5987b45dc1f3382b2e2f0237fadf14e815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:4f:ac:69:8e:b1:ca:96:12:03:09:d1:25: 03:5e:be:61:94:3a:7e:10:c0:99:bf:94:4e:48:6e: 0b:9a:a8:12:54:82:ce:21:ac:b6:1f:d5:e8:f1:61: ba:f0:f5:85:e2:0c:9c:d7:c8:f9:2a:3d:2f:dc:67: 1e:93:a9:4e:ec:d1:fe:12:2a:ff:8b:0f:be:bb:c7: e5:4c:c4:f0:ba:25:0e:ad:9d:d1:a8:05:08:57:97: ba:5d:dd:ac:cf:eb:69:56:fd:16:e6:d6:b2:4d:04: 0b:52:ad:d7:6c:24:8b:93:a6:39:54:bf:20:bc:8b: c7:8b:cf:35:ae:24:d8:1a:a9:c4:c8:4e:13:aa:88: 1e:e4:af:89:b5:7b:2e:7d:7b:2f:54:f3:11:fd:48: ed:d9:e8:6f:e1:d6:41:77:d2:84:29:72:ad:59:c7: 98:19:c7:76:1e:31:1e:da:fd:bb:39:39:2f:b5:69: ce:db:19:20:ff:01:f2:c2:75:e3:5e:95:5c:cc:60: 51:df:36:23:f3:39:e7:4e:b9:a1:36:94:ef:78:7d: 46:d2:fc:f3:b8:ea:c2:ae:a2:ed:c9:8b:3d:98:f2: 34:19:9f:da:55:98:1d:19:cc:16:69:0d:7b:27:b0: 29:38:94:24:ad:ea:31:00:72:3f:d1:cd:3a:27:e1: 8f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:33:7F:59:87:B4:5D:C1:F3:38:2B:2E:2F:02:37:FA:DF:14:E8:15 X509v3 Authority Key Identifier: keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/DzN_WYe0XcHzOCsuLwI3-t8U6BU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.128.224.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:80:45:15:fc:0a:b9:38:98:4f:ae:01:d2:98:bf:1f:3b:cc: c1:17:d5:3c:4d:fa:d9:3a:6f:14:76:d2:85:de:25:f0:c1:03: 92:b9:0e:cd:7e:ca:db:4f:ba:f4:c1:ae:6d:81:37:cf:55:cc: 7b:8b:b7:81:44:d3:ea:58:48:a3:02:49:7d:2f:5f:6e:de:ed: 31:1b:a2:b1:25:aa:2d:6d:fe:3e:69:59:10:f1:ed:fe:26:bc: 59:ef:ec:0d:40:12:4d:93:69:b4:dd:57:c0:36:48:4c:f3:cb: bb:29:6d:75:54:d0:d4:de:47:53:9f:3c:cd:f3:49:a3:5b:cb: 85:0e:41:40:a2:52:50:5a:82:0a:4d:02:14:26:18:ec:d0:e7: 2c:ee:d3:40:9a:bd:e2:1f:d4:10:19:58:3c:8b:21:5e:3b:8e: 18:e0:9c:98:a5:15:d8:96:43:54:fa:0c:bb:cd:7c:af:68:a8: cb:b0:f9:aa:e7:2f:f1:95:01:00:49:93:8d:75:63:88:87:c7: 6a:88:6c:35:cf:95:af:50:3b:9d:d6:17:03:7e:e2:06:f8:cb: 53:51:6c:95:72:74:ac:b8:c3:7e:e4:b1:1c:03:22:01:bd:bb: 7b:d8:fc:cc:f4:21:e1:be:06:d3:11:c6:10:89:35:2e:05:61: aa:92:85:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPYP6m1KDDGppfZaSlx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWVkM2Q5MDFhYjBlOWQwZjY4M2UwZTcxYzI5NDNmZDZi ZTZkOTQwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjMzN2Y1OTg3YjQ1ZGMxZjMzODJiMmUyZjAyMzdmYWRmMTRlODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RJPrGmOscqWEgMJ0SUDXr5hlDp+ EMCZv5ROSG4LmqgSVILOIay2H9Xo8WG68PWF4gyc18j5Kj0v3Gcek6lO7NH+Eir/ iw++u8flTMTwuiUOrZ3RqAUIV5e6Xd2sz+tpVv0W5tayTQQLUq3XbCSLk6Y5VL8g vIvHi881riTYGqnEyE4Tqoge5K+JtXsufXsvVPMR/Ujt2ehv4dZBd9KEKXKtWceY Gcd2HjEe2v27OTkvtWnO2xkg/wHywnXjXpVczGBR3zYj8znnTrmhNpTveH1G0vzz uOrCrqLtyYs9mPI0GZ/aVZgdGcwWaQ17J7ApOJQkreoxAHI/0c06J+GPtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8zf1mHtF3B8zgrLi8CN/rfFOgVMB8GA1UdIwQY MBaAFBzu09kBqw6dD2g+DnHClD/Wvm2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQt NjAzMjRhNmU0Mjc2LzEvRHpOX1dZZTBYY0h6T0NzdUx3STMtdDhVNkJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQtNjAzMjRhNmU0Mjc2 LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw4DgMA0G CSqGSIb3DQEBCwUAA4IBAQALgEUV/Aq5OJhPrgHSmL8fO8zBF9U8TfrZOm8UdtKF 3iXwwQOSuQ7NfsrbT7r0wa5tgTfPVcx7i7eBRNPqWEijAkl9L19u3u0xG6KxJaot bf4+aVkQ8e3+JrxZ7+wNQBJNk2m03VfANkhM88u7KW11VNDU3kdTnzzN80mjW8uF DkFAolJQWoIKTQIUJhjs0Ocs7tNAmr3iH9QQGVg8iyFeO44Y4JyYpRXYlkNU+gy7 zXyvaKjLsPmq5y/xlQEASZONdWOIh8dqiGw1z5WvUDud1hcDfuIG+MtTUWyVcnSs uMN+5LEcAyIBvbt72PzM9CHhvgbTEcYQiTUuBWGqkoWD -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:24 2026 by rpki-client