This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/hoPfu4vQl1LbfxuREgOD1eCCNGs.roa File: hoPfu4vQl1LbfxuREgOD1eCCNGs.roa (raw, json) Hash identifier: hc7so0LQYU8sxZCxb5wNZJ1X+oWMevqkrEqrG75cW/g= Subject key identifier: 86:83:DF:BB:8B:D0:97:52:DB:7F:1B:91:12:03:83:D5:E0:82:34:6B Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4 Certificate serial: 019B77C745BE7E84F479B163B598D2883AC4 Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/hoPfu4vQl1LbfxuREgOD1eCCNGs.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6681 IP address blocks: 45.128.218.0/24 maxlen: 24 45.128.219.0/24 maxlen: 24 89.150.33.0/24 maxlen: 24 193.200.64.0/24 maxlen: 24 193.200.65.0/24 maxlen: 24 195.191.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:45:be:7e:84:f4:79:b1:63:b5:98:d2:88:3a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8683dfbb8bd09752db7f1b91120383d5e082346b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:ab:a6:e7:d9:dc:b0:8e:b5:49:f5:be:00: ab:df:9a:13:0b:98:86:2d:fa:9d:03:ba:48:17:d8: c1:08:cb:85:13:a2:a2:6e:66:5e:4e:63:00:f0:6b: 6d:cd:c9:55:e6:c7:ac:46:47:4d:a2:06:18:bf:7c: 12:33:03:52:ff:09:8b:d5:ee:ca:f9:ec:14:28:80: f2:0f:22:36:17:d6:ae:0d:de:62:04:68:98:e2:95: 89:05:47:e2:85:72:dd:ec:31:70:a8:0f:a4:71:bb: 36:f0:db:33:dd:bf:7d:b8:94:84:4c:b2:64:1f:0e: 55:e5:31:9c:b3:93:10:d9:5e:60:9b:23:3c:c8:bf: 94:24:a3:5a:e0:61:2e:5e:06:f5:1e:98:bd:28:a3: bd:d6:35:bb:30:93:67:56:35:25:a6:34:a8:e8:9d: 9c:25:e4:9a:2c:b0:95:a6:28:37:b4:02:83:20:5a: f8:09:9e:9d:8c:36:c8:84:9b:6c:ce:68:ba:77:07: 61:3d:22:0b:02:a7:b6:a6:e1:4c:de:33:97:2c:1d: 4d:c1:40:ef:1f:81:3f:9c:ad:44:ca:69:74:e7:e4: 2f:68:87:f0:53:7b:8c:fc:7f:c4:b0:0b:65:70:fc: 30:aa:0e:ba:e8:05:92:d7:70:97:e3:01:51:47:35: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:83:DF:BB:8B:D0:97:52:DB:7F:1B:91:12:03:83:D5:E0:82:34:6B X509v3 Authority Key Identifier: keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/hoPfu4vQl1LbfxuREgOD1eCCNGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.218.0/23 89.150.33.0/24 193.200.64.0/23 195.191.234.0/24 Signature Algorithm: sha256WithRSAEncryption 10:6e:85:1f:17:54:ef:e6:bd:15:b2:5f:a0:68:80:46:8f:98: a5:9b:8c:19:b8:d0:ca:2f:ff:a7:21:ed:ec:cc:3a:81:29:8f: 1e:66:c5:ed:6c:56:95:4f:19:bd:f8:6a:f8:64:a7:b8:a3:2a: 4d:6e:49:51:b7:5d:5c:84:14:4e:27:5d:b6:b0:5e:58:2d:08: c7:c7:61:08:4c:6e:37:1d:f6:4b:13:79:c7:4c:fe:e9:01:b5: db:1c:28:80:7b:dc:35:ac:81:ec:e8:df:d5:b4:ac:44:cb:b5: a9:6e:17:84:ea:69:42:63:7a:0d:b6:a1:3f:87:fa:a7:39:20: d0:da:10:72:a3:dd:12:76:4d:58:99:1f:01:96:88:99:29:8c: 94:27:d6:14:47:d0:f4:0a:fd:7e:74:cc:f7:c0:54:fe:72:5f: 70:1f:11:bf:69:ac:4e:99:cd:23:56:c4:a0:4c:a4:ac:44:c1: 38:ff:3a:e3:4c:50:08:f9:a2:27:c5:8c:92:bf:55:c9:0b:78: b7:2e:55:56:e0:56:d0:b0:cd:cc:44:a1:4b:0d:6c:23:c6:ba: 48:4b:cd:bb:a5:4c:b9:a9:9e:a9:fd:0f:c5:42:11:b5:86:c2: 3b:65:41:28:1e:a4:58:84:cd:63:d7:67:6b:0e:1f:8c:3d:7d: 80:12:53:71 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x0W+foT0ebFjtZjSiDrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw MzZmZTQwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjgzZGZiYjhiZDA5NzUyZGI3ZjFiOTExMjAzODNkNWUwODIzNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p2rpufZ3LCOtUn1vgCr35oTC5iG LfqdA7pIF9jBCMuFE6KibmZeTmMA8GttzclV5sesRkdNogYYv3wSMwNS/wmL1e7K +ewUKIDyDyI2F9auDd5iBGiY4pWJBUfihXLd7DFwqA+kcbs28Nsz3b99uJSETLJk Hw5V5TGcs5MQ2V5gmyM8yL+UJKNa4GEuXgb1Hpi9KKO91jW7MJNnVjUlpjSo6J2c JeSaLLCVpig3tAKDIFr4CZ6djDbIhJtszmi6dwdhPSILAqe2puFM3jOXLB1NwUDv H4E/nK1Eyml05+QvaIfwU3uM/H/EsAtlcPwwqg666AWS13CX4wFRRzWQFQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIaD37uL0JdS238bkRIDg9XggjRrMB8GA1UdIwQY MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt MjY2ZmUyNzM3YjhmLzEvaG9QZnU0dlFsMUxiZnh1UkVnT0QxZUNDTkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYDaAwQA WZYhAwQBwchAAwQAw7/qMA0GCSqGSIb3DQEBCwUAA4IBAQAQboUfF1Tv5r0Vsl+g aIBGj5ilm4wZuNDKL/+nIe3szDqBKY8eZsXtbFaVTxm9+Gr4ZKe4oypNbklRt11c hBROJ122sF5YLQjHx2EITG43HfZLE3nHTP7pAbXbHCiAe9w1rIHs6N/VtKxEy7Wp bheE6mlCY3oNtqE/h/qnOSDQ2hByo90Sdk1YmR8BloiZKYyUJ9YUR9D0Cv1+dMz3 wFT+cl9wHxG/aaxOmc0jVsSgTKSsRME4/zrjTFAI+aInxYySv1XJC3i3LlVW4FbQ sM3MRKFLDWwjxrpIS827pUy5qZ6p/Q/FQhG1hsI7ZUEoHqRYhM1j12drDh+MPX2A ElNx -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:32 2026 by rpki-client