This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/deK62GymHjI7pPHou_DnpOMbHoY.roa File: deK62GymHjI7pPHou_DnpOMbHoY.roa (raw, json) Hash identifier: Z9L1mrfYyQRlpKO8mVrybo46X8ByziZzKGq7WcbtlNc= Subject key identifier: 75:E2:BA:D8:6C:A6:1E:32:3B:A4:F1:E8:BB:F0:E7:A4:E3:1B:1E:86 Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6 Certificate serial: 019B7AC79A85F9E3F7191EFEBB6C247CB111 Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/deK62GymHjI7pPHou_DnpOMbHoY.roa Signing time: Thu 01 Jan 2026 18:17:40 +0000 ROA not before: Thu 01 Jan 2026 18:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60516 IP address blocks: 185.30.4.0/22 maxlen: 22 185.30.4.0/23 maxlen: 23 185.30.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9a:85:f9:e3:f7:19:1e:fe:bb:6c:24:7c:b1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6 Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75e2bad86ca61e323ba4f1e8bbf0e7a4e31b1e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:d0:39:c2:93:b2:0c:9a:11:7e:60:73:7a: fb:15:66:d9:d0:ff:bc:3e:1c:b5:a0:ca:d9:c6:ba: 99:bd:8b:84:72:d0:e5:cf:0c:3b:38:06:fa:27:a5: 86:3e:72:44:02:99:5c:f1:1c:b4:43:aa:cf:cf:e3: e7:5f:d5:d7:47:a3:d7:84:93:e6:9f:80:78:cf:66: 76:5a:e3:55:38:23:95:dd:38:6f:75:88:e3:44:4b: 0d:b8:c7:0c:d9:22:95:37:96:b0:55:31:17:47:2b: 1a:9a:3c:ba:03:90:c9:78:ca:ba:25:5e:13:4d:33: 68:49:82:44:9f:be:0e:9c:68:7c:80:08:46:00:1c: de:20:01:d9:0c:50:82:3b:03:33:88:f1:37:21:e7: f0:72:ec:8c:b0:60:31:7f:9b:73:54:15:5e:d0:3f: 24:2f:b6:3b:e8:cc:92:b0:59:c6:2f:10:68:bd:48: 38:d2:77:4c:20:89:12:17:a2:fe:8c:07:ce:07:4e: 9e:3f:0d:1e:46:79:d7:19:a5:fb:12:3e:ef:1b:61: 84:64:90:30:de:1e:28:23:2d:3f:d0:7f:16:ea:f4: ff:29:0e:d2:9c:a9:9a:35:eb:de:5d:a8:0d:f7:a8: 14:f0:07:38:18:7b:f6:8b:be:89:72:b4:30:6c:8a: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E2:BA:D8:6C:A6:1E:32:3B:A4:F1:E8:BB:F0:E7:A4:E3:1B:1E:86 X509v3 Authority Key Identifier: keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/deK62GymHjI7pPHou_DnpOMbHoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.4.0/22 Signature Algorithm: sha256WithRSAEncryption 01:1a:02:6d:ea:ec:3c:8c:59:ea:9a:85:7a:c4:67:5c:f7:e6: 4c:b3:75:33:71:65:0c:f9:e6:f2:51:75:65:31:00:7b:6e:3b: 81:a6:11:83:0a:e0:75:d1:48:b3:e5:db:65:22:83:c1:a4:0d: 99:86:50:c5:d9:59:e5:d5:74:c2:08:0b:ca:9d:e5:b5:0c:62: 1c:92:fc:bb:44:3c:07:3a:57:f8:c5:a6:5f:d6:83:4e:df:e7: 3a:d3:89:df:21:48:ea:ae:b1:1e:67:d1:af:f0:01:f5:0a:3b: c8:da:7f:10:f5:f6:db:db:99:51:8d:15:33:0e:c3:3b:b4:29: 94:76:fe:b1:f4:da:3b:c8:2e:c0:85:35:cc:8b:64:69:91:5a: bc:2d:d5:8f:c9:1f:ca:c8:9b:01:3e:f5:73:48:0e:e2:ae:6d: 2c:5c:f6:4d:66:e5:39:d9:71:20:c4:a2:e7:03:b4:fb:4c:9b: 88:76:a0:8d:23:9d:50:cb:97:9d:a5:8d:3e:1f:99:d7:18:09: 1a:d8:93:cc:b2:8e:70:2d:3e:bc:31:db:f2:0a:0a:83:e4:d9: a6:dd:3f:5b:b1:19:ac:72:b1:fc:de:74:13:83:f0:a3:42:41: 6c:13:02:0c:da:7d:0f:28:3a:37:c7:31:ff:ec:d7:1b:30:9e: 6f:49:32:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5qF+eP3GR7+u2wkfLERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGQzODkyNzg0ODVlZGQ1MGQzMmNmNWNhODRjZTI3Mjhj MDhjYzYwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWUyYmFkODZjYTYxZTMyM2JhNGYxZThiYmYwZTdhNGUzMWIxZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE/QOcKTsgyaEX5gc3r7FWbZ0P+8 Phy1oMrZxrqZvYuEctDlzww7OAb6J6WGPnJEAplc8Ry0Q6rPz+PnX9XXR6PXhJPm n4B4z2Z2WuNVOCOV3ThvdYjjREsNuMcM2SKVN5awVTEXRysamjy6A5DJeMq6JV4T TTNoSYJEn74OnGh8gAhGABzeIAHZDFCCOwMziPE3IefwcuyMsGAxf5tzVBVe0D8k L7Y76MySsFnGLxBovUg40ndMIIkSF6L+jAfOB06ePw0eRnnXGaX7Ej7vG2GEZJAw 3h4oIy0/0H8W6vT/KQ7SnKmaNeveXagN96gU8Ac4GHv2i76JcrQwbIoIxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXiuthsph4yO6Tx6Lvw56TjGx6GMB8GA1UdIwQY MBaAFFqNOJJ4SF7dUNMs9cqEzicowIzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAt NTJiY2NiMDZhZjNjLzEvZGVLNjJHeW1Iakk3cFBIb3VfRG5wT01iSG9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAtNTJiY2NiMDZhZjNj LzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR4EMA0G CSqGSIb3DQEBCwUAA4IBAQABGgJt6uw8jFnqmoV6xGdc9+ZMs3UzcWUM+ebyUXVl MQB7bjuBphGDCuB10Uiz5dtlIoPBpA2ZhlDF2Vnl1XTCCAvKneW1DGIckvy7RDwH Olf4xaZf1oNO3+c604nfIUjqrrEeZ9Gv8AH1CjvI2n8Q9fbb25lRjRUzDsM7tCmU dv6x9No7yC7AhTXMi2RpkVq8LdWPyR/KyJsBPvVzSA7irm0sXPZNZuU52XEgxKLn A7T7TJuIdqCNI51Qy5edpY0+H5nXGAka2JPMso5wLT68MdvyCgqD5Nmm3T9bsRms crH83nQTg/CjQkFsEwIM2n0PKDo3xzH/7NcbMJ5vSTL6 -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:41 2026 by rpki-client