This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/dYVn5RtizjVWkp5TudS-AMiFrc8.roa File: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (raw, json) Hash identifier: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA= Subject key identifier: 75:85:67:E5:1B:62:CE:35:56:92:9E:53:B9:D4:BE:00:C8:85:AD:CF Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6F9BA9106D0DBB02964FFA3003154 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/dYVn5RtizjVWkp5TudS-AMiFrc8.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35308 IP address blocks: 193.151.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f9:ba:91:06:d0:db:b0:29:64:ff:a3:00:31:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=758567e51b62ce3556929e53b9d4be00c885adcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ff:09:5b:e0:a2:a8:14:50:66:6a:44:b1:0a: 35:84:66:e4:37:f2:c9:50:03:6a:66:4f:cc:8e:e3: 69:28:3a:30:61:6a:93:5c:3a:c5:0f:1a:00:69:d4: e5:cb:43:dd:d3:e0:c8:ab:7c:8e:36:e3:ad:b1:71: 10:3d:58:1a:7f:ed:c8:a4:63:21:c9:03:b3:83:1b: 01:56:22:a5:e4:75:40:ce:a4:bc:48:b1:45:7d:f8: a4:35:ce:c6:a6:8c:dc:80:2d:57:ac:d5:aa:3f:84: 2d:48:04:56:1f:e6:43:6c:a3:65:6e:91:f3:e8:f1: 11:0b:23:23:67:e4:84:fb:c5:e1:30:5d:62:b4:b2: 3a:67:f3:3e:50:67:74:fe:07:0f:f4:2b:68:58:f1: bd:ed:22:b9:52:f9:73:2b:28:d9:ed:91:b2:d5:26: 4b:10:1d:e5:57:c4:61:ff:79:01:49:7e:5c:a6:17: 7d:91:79:86:f4:52:dc:9b:9b:b1:75:62:6c:20:55: 2e:04:84:b3:54:cd:5a:fe:f9:23:25:7b:ca:5b:d7: f1:63:b0:58:21:2a:81:4a:24:b2:70:5e:b2:62:95: e9:46:1e:09:b9:b0:42:53:99:d7:d2:19:a4:5d:66: 9c:2f:7f:77:9d:54:e4:5a:60:d1:31:22:6c:0a:99: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:85:67:E5:1B:62:CE:35:56:92:9E:53:B9:D4:BE:00:C8:85:AD:CF X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/dYVn5RtizjVWkp5TudS-AMiFrc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.167.0/24 Signature Algorithm: sha256WithRSAEncryption 71:03:1a:fc:f5:99:05:97:3b:b0:84:4e:56:a0:2d:d4:8e:7f: 69:bd:97:d0:09:2c:40:ea:22:ee:a0:2f:82:74:9b:1a:a7:be: a5:45:9a:54:db:cd:75:03:66:33:cf:2a:ae:da:3d:04:7a:5c: 93:4f:5b:e9:c2:d9:45:0f:b2:a0:9a:ea:4a:95:62:e6:4d:8f: 29:59:6b:59:c6:ea:1e:8c:9a:9c:7f:c3:89:16:37:b9:b9:b3: 5b:e7:34:81:71:52:8e:4d:bb:07:52:de:bd:26:c5:ed:15:b2: dd:c1:a9:d4:5a:6b:37:e2:11:67:3c:96:be:36:7f:d1:28:13: 13:ec:02:60:fd:dc:84:92:19:c7:a4:aa:5c:6c:e4:10:a0:c7: 02:2f:d6:b0:9d:9e:28:ca:61:13:be:88:6e:97:3f:3f:a3:99: 89:ea:1d:f0:b7:03:20:1f:a8:25:39:8d:39:73:56:72:1c:a3: 5d:d7:57:19:17:27:f0:3d:c3:18:b8:b8:ab:52:b8:f4:ca:8d: 98:65:f2:92:cb:5f:0b:1a:b7:05:f9:60:1c:6d:48:57:91:63: c7:ae:34:3c:69:56:fe:a6:cf:e1:ed:79:57:90:cd:6e:7c:6c: 83:bc:3c:0f:56:1e:09:f8:0d:37:a8:21:6b:40:c6:7c:df:8b: 66:31:64:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvm6kQbQ27ApZP+jADFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTg1NjdlNTFiNjJjZTM1NTY5MjllNTNiOWQ0YmUwMGM4ODVhZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v8JW+CiqBRQZmpEsQo1hGbkN/LJ UANqZk/MjuNpKDowYWqTXDrFDxoAadTly0Pd0+DIq3yONuOtsXEQPVgaf+3IpGMh yQOzgxsBViKl5HVAzqS8SLFFffikNc7GpozcgC1XrNWqP4QtSARWH+ZDbKNlbpHz 6PERCyMjZ+SE+8XhMF1itLI6Z/M+UGd0/gcP9CtoWPG97SK5UvlzKyjZ7ZGy1SZL EB3lV8Rh/3kBSX5cphd9kXmG9FLcm5uxdWJsIFUuBISzVM1a/vkjJXvKW9fxY7BY ISqBSiSycF6yYpXpRh4JubBCU5nX0hmkXWacL393nVTkWmDRMSJsCpl35wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWFZ+UbYs41VpKeU7nUvgDIha3PMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvZFlWbjVSdGl6alZXa3A1VHVkUy1BTWlGcmM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZenMA0G CSqGSIb3DQEBCwUAA4IBAQBxAxr89ZkFlzuwhE5WoC3Ujn9pvZfQCSxA6iLuoC+C dJsap76lRZpU2811A2Yzzyqu2j0EelyTT1vpwtlFD7KgmupKlWLmTY8pWWtZxuoe jJqcf8OJFje5ubNb5zSBcVKOTbsHUt69JsXtFbLdwanUWms34hFnPJa+Nn/RKBMT 7AJg/dyEkhnHpKpcbOQQoMcCL9awnZ4oymETvohulz8/o5mJ6h3wtwMgH6glOY05 c1ZyHKNd11cZFyfwPcMYuLirUrj0yo2YZfKSy18LGrcF+WAcbUhXkWPHrjQ8aVb+ ps/h7XlXkM1ufGyDvDwPVh4J+A03qCFrQMZ834tmMWTK -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:13 2026 by rpki-client