This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/D4mNPYe_InC3dADZ__TafnXmCbA.roa File: D4mNPYe_InC3dADZ__TafnXmCbA.roa (raw, json) Hash identifier: 6g1alEqsAaujZY20/+cKTFN3EVqBFkIkRy8k+84+qhk= Subject key identifier: 0F:89:8D:3D:87:BF:22:70:B7:74:00:D9:FF:F4:DA:7E:75:E6:09:B0 Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284 Certificate serial: 019B79ECD92927F672E50CFEB335A2EA036F Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/D4mNPYe_InC3dADZ__TafnXmCbA.roa Signing time: Thu 01 Jan 2026 14:18:43 +0000 ROA not before: Thu 01 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33864 IP address blocks: 84.17.128.0/19 maxlen: 24 185.137.40.0/22 maxlen: 24 2a02:1760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d9:29:27:f6:72:e5:0c:fe:b3:35:a2:ea:03:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f898d3d87bf2270b77400d9fff4da7e75e609b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:50:e3:94:a6:33:d9:e2:a1:99:b1:2d:c0: 27:7c:17:37:91:d1:42:ef:87:5c:56:b4:a7:11:78: c9:93:e1:78:08:7b:96:7a:62:cc:2d:56:af:c5:ed: f1:89:a5:fd:97:7e:c6:e1:03:ba:fd:cb:70:0b:5f: bd:7e:5f:e0:1c:c4:4a:41:79:18:16:01:d5:42:9c: d9:09:50:48:4d:ef:f1:44:00:11:d9:40:6a:a5:1b: 96:af:f4:b9:ec:ff:ea:ee:02:bc:7f:0d:09:3e:24: 55:d9:8e:14:85:02:18:c5:98:a8:05:f8:75:31:2a: 46:54:1d:75:9e:9f:9a:b7:57:03:e6:8b:b5:a7:a8: 5a:2b:bd:d6:66:2c:b1:53:ba:ce:ce:bc:31:8e:b4: c1:1a:72:14:48:d2:c5:4c:ec:d4:e4:91:83:ee:f6: a8:c6:ea:53:96:b3:18:82:da:4c:9c:50:79:be:91: 45:a6:d5:ea:53:7e:6d:1e:58:fd:b9:a6:8c:c3:0f: 20:38:19:f6:b6:75:1a:36:1a:bc:ce:21:70:29:b7: dc:b3:b8:20:74:94:76:5f:f9:e2:eb:4a:2a:65:4b: 9c:e8:53:e7:f0:58:06:e0:42:51:0e:6b:a0:6a:bd: 09:f7:bd:9b:aa:f1:be:d3:6c:80:4c:4c:2c:ea:72: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:89:8D:3D:87:BF:22:70:B7:74:00:D9:FF:F4:DA:7E:75:E6:09:B0 X509v3 Authority Key Identifier: keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/D4mNPYe_InC3dADZ__TafnXmCbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.128.0/19 185.137.40.0/22 IPv6: 2a02:1760::/32 Signature Algorithm: sha256WithRSAEncryption 76:f1:86:f9:b6:0c:b3:a4:e0:14:63:a7:22:37:42:fe:8c:c0: b8:22:02:19:7d:6f:67:44:02:a9:60:c8:38:6e:bb:5f:31:1e: e1:5d:82:34:ef:d2:57:70:2d:2c:67:86:5f:ef:ce:8f:ff:76: e4:ca:9a:fd:c7:a5:f2:15:78:48:51:bb:e6:d2:ce:b6:ba:5a: dc:d6:5f:68:9b:fe:ea:d7:90:51:62:df:29:32:8c:84:56:3a: b3:db:cd:e0:4e:a0:7e:8e:00:de:5a:b4:4c:ed:29:b8:80:31: e4:8d:b9:6f:8f:87:ec:73:e0:55:88:c8:cb:c4:86:a0:5b:1a: 1a:14:da:f0:39:dc:31:52:0f:ef:fd:01:cb:be:c4:3c:a2:42: df:95:17:ee:9f:97:ab:77:75:db:fc:ed:58:81:c8:0c:c5:c1: 33:2a:97:30:c5:1b:cf:ee:69:ee:56:47:e4:24:b0:f3:fb:b9: d8:0d:24:21:36:9f:ae:f6:c4:d5:b8:1c:c4:1f:70:43:fe:96: ed:a1:19:9f:e8:ba:89:b3:bf:00:9d:9e:e4:09:86:dd:3e:03: fa:b4:4a:55:40:57:16:5e:be:10:b4:7e:42:41:a5:70:2b:bf: 87:60:92:cb:1d:a8:c5:d0:a9:7c:f5:90:24:0c:3f:69:d9:aa: db:98:3e:a3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57NkpJ/Zy5Qz+szWi6gNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmE1ZjUyYjAwMmY2Mjg2YzFkNWViMjU3YmI1ZTg1MzM0 MmEyODQwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjg5OGQzZDg3YmYyMjcwYjc3NDAwZDlmZmY0ZGE3ZTc1ZTYwOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoupQ45SmM9nioZmxLcAnfBc3kdFC 74dcVrSnEXjJk+F4CHuWemLMLVavxe3xiaX9l37G4QO6/ctwC1+9fl/gHMRKQXkY FgHVQpzZCVBITe/xRAAR2UBqpRuWr/S57P/q7gK8fw0JPiRV2Y4UhQIYxZioBfh1 MSpGVB11np+at1cD5ou1p6haK73WZiyxU7rOzrwxjrTBGnIUSNLFTOzU5JGD7vao xupTlrMYgtpMnFB5vpFFptXqU35tHlj9uaaMww8gOBn2tnUaNhq8ziFwKbfcs7gg dJR2X/ni60oqZUuc6FPn8FgG4EJRDmugar0J972bqvG+02yATEws6nJHIQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFA+JjT2HvyJwt3QA2f/02n515gmwMB8GA1UdIwQY MBaAFFxqX1KwAvYobB1esle7XoUzQqKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNGVjYjEtYTBmNS00MjYxLWJjZGUt MDk2YzljMDdhZTE4LzEvRDRtTlBZZV9JbkMzZEFEWl9fVGFmblhtQ2JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNGVjYjEtYTBmNS00MjYxLWJjZGUtMDk2YzljMDdhZTE4 LzEvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFVBGAAwQC uYkoMA0EAgACMAcDBQAqAhdgMA0GCSqGSIb3DQEBCwUAA4IBAQB28Yb5tgyzpOAU Y6ciN0L+jMC4IgIZfW9nRAKpYMg4brtfMR7hXYI079JXcC0sZ4Zf786P/3bkypr9 x6XyFXhIUbvm0s62ulrc1l9om/7q15BRYt8pMoyEVjqz283gTqB+jgDeWrRM7Sm4 gDHkjblvj4fsc+BViMjLxIagWxoaFNrwOdwxUg/v/QHLvsQ8okLflRfun5erd3Xb /O1YgcgMxcEzKpcwxRvP7mnuVkfkJLDz+7nYDSQhNp+u9sTVuBzEH3BD/pbtoRmf 6LqJs78AnZ7kCYbdPgP6tEpVQFcWXr4QtH5CQaVwK7+HYJLLHajF0Kl89ZAkDD9p 2arbmD6j -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:31 2026 by rpki-client