This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/dtqeW6Rynd2uiXS65wqI97i2PSI.roa File: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (raw, json) Hash identifier: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI= Subject key identifier: 76:DA:9E:5B:A4:72:9D:DD:AE:89:74:BA:E7:0A:88:F7:B8:B6:3D:22 Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea Certificate serial: 019B7C12B02E1272AB4A4C794B40499B7AC1 Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/dtqeW6Rynd2uiXS65wqI97i2PSI.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1133 IP address blocks: 130.89.0.0/16 maxlen: 24 2001:67c:2564::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b0:2e:12:72:ab:4a:4c:79:4b:40:49:9b:7a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76da9e5ba4729dddae8974bae70a88f7b8b63d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:2f:e6:48:ab:b1:b0:fe:8d:96:b0:7f:77: 6e:df:9c:35:1c:80:11:ae:66:f6:97:28:ff:90:ad: 6b:e3:28:6c:b3:3e:1d:be:2a:63:10:b1:5b:8a:78: 02:dd:3a:2b:40:84:9e:fa:2c:55:41:e5:11:a4:c5: 79:85:70:5e:30:8e:45:b8:d9:5c:65:63:b8:c3:29: c4:6d:71:d0:35:51:73:0c:ae:ed:68:c7:82:2f:7b: c1:f9:4b:3e:61:e1:46:6d:7b:92:72:48:cc:82:22: f3:74:7c:01:74:b0:2e:14:eb:6b:b3:53:ab:95:b0: 9f:ca:cc:76:d6:bf:c3:cc:e3:38:73:72:c2:98:0e: 39:3e:d1:9b:43:05:71:8e:3b:fa:77:4a:f2:b6:d0: 95:86:bc:0c:8d:c8:e3:54:9d:02:57:31:d4:d6:7a: f4:2d:ca:07:d9:1c:b5:8b:17:27:df:00:d5:16:3d: a5:9e:6f:02:02:c6:02:94:8e:d4:8e:db:f2:1e:be: 85:2a:67:bb:f1:9e:a3:80:81:08:c3:21:19:36:74: 58:73:36:1e:ef:b5:0e:ee:d1:76:90:6c:2e:bf:ba: 17:c3:74:c4:fc:2b:e0:e8:6d:45:ce:90:83:d6:44: fe:3c:3e:06:8a:35:8a:aa:b8:91:37:21:76:cb:14: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DA:9E:5B:A4:72:9D:DD:AE:89:74:BA:E7:0A:88:F7:B8:B6:3D:22 X509v3 Authority Key Identifier: keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/dtqeW6Rynd2uiXS65wqI97i2PSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.89.0.0/16 IPv6: 2001:67c:2564::/48 Signature Algorithm: sha256WithRSAEncryption 70:db:54:17:3c:23:f8:80:87:18:c4:d5:af:6c:73:0c:61:ef: 4c:e1:6d:a4:af:f3:ed:c6:59:9f:ac:90:c5:00:39:86:e8:6e: 0e:46:b2:74:8c:18:80:c7:19:b6:81:01:26:67:0f:bc:db:ef: bd:d8:5a:17:3a:06:fb:4b:cf:8d:ac:47:70:09:d1:30:ce:64: 75:7e:be:17:d7:9a:17:df:e9:2a:3f:a9:e9:cc:b8:b2:4b:8f: 0d:79:03:22:36:2a:c0:21:45:75:f8:7c:ec:5d:b8:79:22:ad: c3:9d:83:42:83:de:cc:2b:e3:92:76:2a:88:1f:2f:72:c4:51: f1:1a:b6:01:20:2b:a2:c8:ca:b6:0f:cb:1c:e9:d1:09:12:c6: c6:d6:d4:8c:5c:3d:a6:b9:42:a8:c9:39:dd:40:58:68:2c:fa: c8:bc:4a:c0:92:ed:74:a8:1d:c8:51:8b:9f:c8:b4:3b:be:46: cd:26:12:74:56:d6:86:e0:02:9a:d1:97:a0:5f:25:c5:b4:c1: d2:32:10:1c:38:5b:f1:79:97:88:24:e7:2a:27:2e:99:99:e6: ad:94:dd:9d:3b:c6:f4:02:91:e8:90:de:b7:44:94:c8:12:ca: 44:9d:dc:b8:ab:05:57:5a:9b:8a:10:d8:0a:ae:9d:90:cf:6c: 0d:6a:aa:90 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8ErAuEnKrSkx5S0BJm3rBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4 ODQ5ZWEwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmRhOWU1YmE0NzI5ZGRkYWU4OTc0YmFlNzBhODhmN2I4YjYzZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw74v5kirsbD+jZawf3du35w1HIAR rmb2lyj/kK1r4yhssz4dvipjELFbingC3TorQISe+ixVQeURpMV5hXBeMI5FuNlc ZWO4wynEbXHQNVFzDK7taMeCL3vB+Us+YeFGbXuSckjMgiLzdHwBdLAuFOtrs1Or lbCfysx21r/DzOM4c3LCmA45PtGbQwVxjjv6d0ryttCVhrwMjcjjVJ0CVzHU1nr0 LcoH2Ry1ixcn3wDVFj2lnm8CAsYClI7UjtvyHr6FKme78Z6jgIEIwyEZNnRYczYe 77UO7tF2kGwuv7oXw3TE/Cvg6G1FzpCD1kT+PD4GijWKqriRNyF2yxRRtwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFHbanlukcp3drol0uucKiPe4tj0iMB8GA1UdIwQY MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt Njk3MTFmZTgzZDIzLzEvZHRxZVc2UnluZDJ1aVhTNjV3cUk5N2kyUFNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAglkwDwQC AAIwCQMHACABBnwlZDANBgkqhkiG9w0BAQsFAAOCAQEAcNtUFzwj+ICHGMTVr2xz DGHvTOFtpK/z7cZZn6yQxQA5huhuDkaydIwYgMcZtoEBJmcPvNvvvdhaFzoG+0vP jaxHcAnRMM5kdX6+F9eaF9/pKj+p6cy4skuPDXkDIjYqwCFFdfh87F24eSKtw52D QoPezCvjknYqiB8vcsRR8Rq2ASArosjKtg/LHOnRCRLGxtbUjFw9prlCqMk53UBY aCz6yLxKwJLtdKgdyFGLn8i0O75GzSYSdFbWhuACmtGXoF8lxbTB0jIQHDhb8XmX iCTnKicumZnmrZTdnTvG9AKR6JDet0SUyBLKRJ3cuKsFV1qbihDYCq6dkM9sDWqq kA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:22 2026 by rpki-client