This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/diX6GVWjjxp4Oq6XrZsBh5j9i0M.roa File: diX6GVWjjxp4Oq6XrZsBh5j9i0M.roa (raw, json) Hash identifier: xBkybsQcEpoTXkJLBjkUd7QB1bLl7/Ehg38seV+oQ+w= Subject key identifier: 76:25:FA:19:55:A3:8F:1A:78:3A:AE:97:AD:9B:01:87:98:FD:8B:43 Certificate issuer: /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7 Certificate serial: 019B7E37BF206DC998B3A7A277925FF9B8A3 Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/diX6GVWjjxp4Oq6XrZsBh5j9i0M.roa Signing time: Fri 02 Jan 2026 10:19:01 +0000 ROA not before: Fri 02 Jan 2026 10:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203644 IP address blocks: 91.207.32.0/23 maxlen: 23 91.207.32.0/24 maxlen: 24 91.207.33.0/24 maxlen: 24 91.212.224.0/24 maxlen: 24 185.128.100.0/22 maxlen: 22 185.128.100.0/23 maxlen: 23 185.128.102.0/23 maxlen: 23 193.19.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bf:20:6d:c9:98:b3:a7:a2:77:92:5f:f9:b8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7 Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7625fa1955a38f1a783aae97ad9b018798fd8b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:01:24:30:5f:b1:a9:a9:3a:7c:e1:c9:98: 3e:ff:c8:43:be:7a:57:b5:8e:b4:78:d7:ef:12:2d: a5:5b:55:48:61:c6:54:db:28:be:78:76:b9:e5:38: 55:f3:0c:8c:c3:fa:77:40:8e:4d:f2:27:44:c7:26: aa:c7:39:65:76:74:51:e6:69:37:02:ad:1a:25:05: 1e:40:b5:aa:65:58:72:14:dc:ff:7c:05:5c:b6:24: 57:c2:f3:2a:39:4d:ac:9e:e5:34:61:18:a2:da:d8: d5:2d:c2:54:70:70:51:c9:7b:b2:56:43:e3:94:8c: e9:e6:c6:db:4b:24:13:89:36:01:14:ef:8a:ad:9b: 09:5e:82:6b:e6:db:50:25:da:af:75:09:43:8b:f3: af:42:53:f9:ce:74:1e:d0:4b:19:39:25:33:ce:af: 5d:03:3d:9d:bc:81:2e:ca:45:fb:41:64:51:a5:8d: 49:25:da:13:5f:9c:4e:7f:86:b8:58:d0:4d:7f:fa: 45:d0:71:67:f2:47:5a:00:e0:d8:03:32:d0:eb:d8: 9e:5a:49:7f:0c:46:04:86:2b:07:59:92:46:4b:c5: 88:69:f1:30:22:00:8c:59:5f:6e:42:25:89:f3:0c: a5:7c:3b:a1:0a:13:1f:64:57:d1:77:2e:35:7b:b2: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:25:FA:19:55:A3:8F:1A:78:3A:AE:97:AD:9B:01:87:98:FD:8B:43 X509v3 Authority Key Identifier: keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/diX6GVWjjxp4Oq6XrZsBh5j9i0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.32.0/23 91.212.224.0/24 185.128.100.0/22 193.19.78.0/23 Signature Algorithm: sha256WithRSAEncryption a0:24:1d:28:a7:40:3a:e8:11:b5:d3:af:85:15:a9:5a:46:9a: 7f:7d:c8:c3:2c:e9:8d:e8:86:09:6b:e7:35:dd:65:a7:d1:96: d2:55:f0:78:d7:e9:89:5e:10:9b:4b:81:e0:37:78:55:a4:c1: 05:58:f8:fa:6f:b0:ee:eb:d1:d7:e7:35:14:9f:b6:ea:a8:63: 90:bf:b6:74:2d:7a:43:2c:74:74:56:c1:fd:68:5f:b3:7d:fd: b0:d5:c7:bc:38:93:b4:3b:56:a6:37:49:1a:f0:cf:41:eb:06: 90:75:b6:bd:9b:57:04:b6:e6:f7:40:e9:69:3f:e2:39:9a:c6: e4:19:84:91:b0:86:c0:15:8e:84:e1:87:8a:ad:6a:bd:89:e8: 7a:81:6e:8c:a5:a7:09:1e:37:dd:90:d0:77:0a:4d:19:98:4b: 30:e4:a7:e3:42:6c:e8:d8:f4:8c:d5:08:c1:57:be:4c:ce:6f: 92:84:c0:b2:af:50:f5:84:89:ef:e2:95:d5:5f:b5:dd:ab:85: 9a:a9:98:33:1d:02:b0:ca:0e:33:6e:4f:3b:7e:2a:77:dd:62: 6f:9a:52:72:15:54:24:11:04:f5:34:93:a9:7d:98:64:17:56: 48:7d:18:d9:df:a0:fb:1b:09:35:68:eb:90:6f:3e:a2:b9:c9: 03:5a:88:62 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+N78gbcmYs6eid5Jf+bijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDQ5Y2E0MmUxZDgyY2UyN2I1NGJiZmQwMTc3ODFkNTQ1 YTc5YjcwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjI1ZmExOTU1YTM4ZjFhNzgzYWFlOTdhZDliMDE4Nzk4ZmQ4YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgwBJDBfsampOnzhyZg+/8hDvnpX tY60eNfvEi2lW1VIYcZU2yi+eHa55ThV8wyMw/p3QI5N8idExyaqxzlldnRR5mk3 Aq0aJQUeQLWqZVhyFNz/fAVctiRXwvMqOU2snuU0YRii2tjVLcJUcHBRyXuyVkPj lIzp5sbbSyQTiTYBFO+KrZsJXoJr5ttQJdqvdQlDi/OvQlP5znQe0EsZOSUzzq9d Az2dvIEuykX7QWRRpY1JJdoTX5xOf4a4WNBNf/pF0HFn8kdaAODYAzLQ69ieWkl/ DEYEhisHWZJGS8WIafEwIgCMWV9uQiWJ8wylfDuhChMfZFfRdy41e7KfpQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHYl+hlVo48aeDqul62bAYeY/YtDMB8GA1UdIwQY MBaAFL0EnKQuHYLOJ7VLv9AXeB1UWnm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUt MWFhMDM0YTJhZjljLzEvZGlYNkdWV2pqeHA0T3E2WHJac0JoNWo5aTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUtMWFhMDM0YTJhZjlj LzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW88gAwQA W9TgAwQCuYBkAwQBwRNOMA0GCSqGSIb3DQEBCwUAA4IBAQCgJB0op0A66BG106+F FalaRpp/fcjDLOmN6IYJa+c13WWn0ZbSVfB41+mJXhCbS4HgN3hVpMEFWPj6b7Du 69HX5zUUn7bqqGOQv7Z0LXpDLHR0VsH9aF+zff2w1ce8OJO0O1amN0ka8M9B6waQ dba9m1cEtub3QOlpP+I5msbkGYSRsIbAFY6E4YeKrWq9ieh6gW6MpacJHjfdkNB3 Ck0ZmEsw5KfjQmzo2PSM1QjBV75Mzm+ShMCyr1D1hInv4pXVX7Xdq4WaqZgzHQKw yg4zbk87fip33WJvmlJyFVQkEQT1NJOpfZhkF1ZIfRjZ36D7Gwk1aOuQbz6iuckD Wohi -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:37 2026 by rpki-client