This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa File: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (raw, json) Hash identifier: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I= Subject key identifier: 0C:DC:53:E0:A7:D4:9D:23:79:0F:93:DB:D9:35:D1:32:5F:42:41:19 Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979 Certificate serial: 019B797EE51B651D8E212D06C603A32FF794 Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43310 IP address blocks: 91.197.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e5:1b:65:1d:8e:21:2d:06:c6:03:a3:2f:f7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cdc53e0a7d49d23790f93dbd935d1325f424119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ee:4c:40:ee:e9:50:4d:0e:98:86:20:57:33: 8b:78:46:70:d9:2e:6a:16:24:53:55:e4:fe:24:fe: 44:3c:ce:bf:b1:c4:78:6e:f8:a7:aa:c3:fb:6a:c6: 50:da:4b:02:ba:d2:42:73:c8:3d:71:83:c4:0a:b8: 72:0e:df:ba:b8:04:f5:03:a5:c1:b7:ac:d7:c6:9e: fa:e2:a6:d8:1e:88:6a:eb:d2:a9:3c:75:d1:8e:4c: bb:7c:24:7b:11:35:fd:64:19:32:d0:90:a5:a7:e5: f5:eb:36:66:3e:85:46:1c:cb:15:13:c4:11:0c:c7: e0:96:e0:29:43:13:b5:3e:73:81:10:d6:3a:3a:30: f3:29:b0:79:6b:21:77:97:37:c9:fa:e2:0f:a7:fd: ad:c8:36:9b:1c:ff:b6:1b:ed:0a:2b:95:b9:46:cb: bc:4f:e4:7a:dd:3d:47:a7:1d:d1:ba:41:b5:35:e5: dd:2b:ee:a4:f9:51:9d:62:47:b2:98:0a:ab:e0:5e: be:ee:71:56:ed:45:b6:02:a1:68:75:79:70:65:7b: fd:3d:72:e8:cb:df:92:65:ab:e6:da:71:f3:8f:b0: d6:17:b4:58:c9:7e:9b:a9:45:e8:8a:82:7a:48:83: ec:92:9b:59:8c:45:cc:b7:fb:e2:3c:66:4a:a5:e7: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DC:53:E0:A7:D4:9D:23:79:0F:93:DB:D9:35:D1:32:5F:42:41:19 X509v3 Authority Key Identifier: keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.7.0/24 Signature Algorithm: sha256WithRSAEncryption c9:9c:39:27:0a:39:20:34:64:9e:6e:94:db:96:07:c4:eb:0b: 70:4a:09:c1:d7:00:c3:83:5d:b0:ef:0b:73:c9:0b:25:a9:20: 0a:11:3e:76:49:0a:af:7f:78:d4:da:38:e8:99:67:ae:39:86: 64:d1:b4:c9:06:21:06:7a:ad:f6:e8:b7:ca:5c:d8:bf:c4:cf: d9:cc:e4:f4:16:f7:98:fb:96:da:50:eb:da:6d:7d:c3:a4:68: cc:67:4a:a0:a6:fd:aa:4e:e2:39:d8:60:13:49:8b:31:a2:64: c3:a2:c8:a2:a2:7f:95:4e:9f:0c:3a:e4:55:48:4b:c9:b2:02: 1d:a8:69:d5:7b:04:48:49:03:b5:fd:aa:2b:52:e3:23:1d:6b: a3:a6:00:0c:6c:77:8c:37:8b:dc:b8:4c:54:96:75:41:57:4a: 42:28:36:a9:bc:39:c0:e9:80:f7:d6:08:7c:3b:7b:b6:ea:e9: f3:66:9e:a5:32:91:25:94:4f:cb:ef:b4:7e:bc:19:22:43:4f: 34:49:f2:c6:3f:09:d9:4b:19:e3:12:f5:20:6b:34:9e:64:fb: 03:8f:70:17:71:30:7d:11:3b:1e:3d:10:86:23:57:3a:dd:00: bc:40:56:c2:5a:7b:fd:2e:c7:cb:c4:cb:c8:e1:57:98:76:ad: 80:2f:1b:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuUbZR2OIS0GxgOjL/eUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3 MmY5NzkwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2RjNTNlMGE3ZDQ5ZDIzNzkwZjkzZGJkOTM1ZDEzMjVmNDI0MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7u5MQO7pUE0OmIYgVzOLeEZw2S5q FiRTVeT+JP5EPM6/scR4bvinqsP7asZQ2ksCutJCc8g9cYPECrhyDt+6uAT1A6XB t6zXxp764qbYHohq69KpPHXRjky7fCR7ETX9ZBky0JClp+X16zZmPoVGHMsVE8QR DMfgluApQxO1PnOBENY6OjDzKbB5ayF3lzfJ+uIPp/2tyDabHP+2G+0KK5W5Rsu8 T+R63T1Hpx3RukG1NeXdK+6k+VGdYkeymAqr4F6+7nFW7UW2AqFodXlwZXv9PXLo y9+SZavm2nHzj7DWF7RYyX6bqUXoioJ6SIPskptZjEXMt/viPGZKpedPHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzcU+Cn1J0jeQ+T29k10TJfQkEZMB8GA1UdIwQY MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt NTgzOTIwZjVmMDViLzEvRE54VDRLZlVuU041RDVQYjJUWFJNbDlDUVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8UHMA0G CSqGSIb3DQEBCwUAA4IBAQDJnDknCjkgNGSebpTblgfE6wtwSgnB1wDDg12w7wtz yQslqSAKET52SQqvf3jU2jjomWeuOYZk0bTJBiEGeq326LfKXNi/xM/ZzOT0FveY +5baUOvabX3DpGjMZ0qgpv2qTuI52GATSYsxomTDosiion+VTp8MOuRVSEvJsgId qGnVewRISQO1/aorUuMjHWujpgAMbHeMN4vcuExUlnVBV0pCKDapvDnA6YD31gh8 O3u26unzZp6lMpEllE/L77R+vBkiQ080SfLGPwnZSxnjEvUgazSeZPsDj3AXcTB9 ETsePRCGI1c63QC8QFbCWnv9LsfLxMvI4VeYdq2ALxsO -----END CERTIFICATE-----Generated at Fri Jan 30 06:51:51 2026 by rpki-client