This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/DGGg1cwcyckOEj5piFasZLtUpCM.roa File: DGGg1cwcyckOEj5piFasZLtUpCM.roa (raw, json) Hash identifier: b8NWlcDq3cqXueexrQLS4YXKUPoPYtHevhupgWyi2lA= Subject key identifier: 0C:61:A0:D5:CC:1C:C9:C9:0E:12:3E:69:88:56:AC:64:BB:54:A4:23 Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db Certificate serial: 019B7AC93DE23AB9CC8A9723A17BB4775CE3 Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/DGGg1cwcyckOEj5piFasZLtUpCM.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28954 IP address blocks: 80.86.64.0/20 maxlen: 20 194.127.130.0/23 maxlen: 23 194.127.152.0/23 maxlen: 23 2a0a:5a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3d:e2:3a:b9:cc:8a:97:23:a1:7b:b4:77:5c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c61a0d5cc1cc9c90e123e698856ac64bb54a423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:63:96:7f:3f:e8:a4:04:38:7e:ba:0c:52: 05:05:a4:92:cd:e1:c4:63:7e:b3:0f:49:e4:bb:42: 7f:63:53:0f:4e:45:9e:f1:76:1f:d5:c1:a5:a9:91: 83:1f:89:31:19:96:d1:ad:ba:32:61:c9:15:80:20: 72:13:a0:64:dd:79:5e:71:c7:2c:af:98:b6:34:ca: ce:ba:8d:f3:fe:65:e4:f2:c9:cd:78:a0:5a:50:0a: 80:e1:11:2b:1f:92:a5:ad:7e:11:57:7a:59:d6:b1: 07:ad:6e:cd:d3:b6:5b:f3:d8:35:cb:4a:46:59:a5: 92:05:c7:b4:63:ef:86:11:76:6f:14:ef:6b:1b:40: 09:56:6e:ef:e0:16:7a:ce:49:93:79:d2:59:6a:f9: fd:15:6c:73:e2:96:7b:bc:ea:78:3a:18:ed:2d:b4: 67:c6:f0:b2:1c:b2:48:ac:b1:56:1c:0b:90:8f:cf: 9b:e0:1e:d0:ec:2c:5a:95:3c:97:38:c7:1a:f4:8f: 46:3b:db:e2:72:9e:97:b5:b5:07:40:fe:4d:cb:41: 39:cf:64:21:ef:a2:dc:c6:88:17:ca:85:47:2c:32: 72:8a:30:51:ec:97:3d:2c:f0:29:67:bb:4d:4a:04: c4:fa:c0:a7:77:e0:08:f9:5f:af:25:ef:be:6e:5d: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:61:A0:D5:CC:1C:C9:C9:0E:12:3E:69:88:56:AC:64:BB:54:A4:23 X509v3 Authority Key Identifier: keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/DGGg1cwcyckOEj5piFasZLtUpCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.64.0/20 194.127.130.0/23 194.127.152.0/23 IPv6: 2a0a:5a00::/29 Signature Algorithm: sha256WithRSAEncryption 7a:ec:7d:0a:15:a7:2d:72:cd:24:59:58:66:93:bc:83:3c:57: 66:9b:bd:45:9a:c2:4e:5b:32:34:72:e9:3e:e4:08:ec:9b:32: 7b:cc:6f:2b:d5:b1:14:ff:34:0d:6f:a9:f5:83:d4:41:d7:38: e9:af:cc:ca:7e:82:19:cd:c8:07:c8:a2:32:2d:57:f0:48:84: c6:6c:b3:20:1c:28:fd:b9:40:45:9c:54:e0:8e:b0:e1:bd:f2: cc:c6:30:b1:65:5c:e1:65:dd:99:ee:0c:4c:52:ab:f3:81:0d: 91:5c:33:c5:f7:1b:da:a2:2d:c3:77:fa:6c:3e:17:f6:68:d7: fc:d3:7e:2e:a2:3f:0b:8b:e0:ef:02:ae:c1:0b:c2:8a:b7:2f: fa:6d:87:fe:ae:b2:42:c8:78:c1:93:ad:f3:b8:6c:f9:85:13: 6b:7d:d6:d3:73:a2:6c:00:fc:b8:b7:86:6e:1b:28:e6:d2:a7: f9:dc:7d:76:45:f0:fc:a8:44:00:3b:e1:98:3d:94:5a:9d:f0: a8:e5:b6:85:5e:78:65:17:8b:c7:e5:2f:0a:d7:ee:ff:15:11: 2f:c1:93:e8:ba:6b:06:ed:99:af:70:96:05:67:9e:2a:b6:19: 92:9b:73:1e:76:13:86:46:05:b8:a6:70:02:83:f4:70:9c:63: df:83:b3:54 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yT3iOrnMipcjoXu0d1zjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1N2IzMjA4MzBhZDA2ZWE3MWE3MjZlOWI4YjNjNDczMjQx MjE5ZGIwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzYxYTBkNWNjMWNjOWM5MGUxMjNlNjk4ODU2YWM2NGJiNTRhNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Jjln8/6KQEOH66DFIFBaSSzeHE Y36zD0nku0J/Y1MPTkWe8XYf1cGlqZGDH4kxGZbRrboyYckVgCByE6Bk3Xlecccs r5i2NMrOuo3z/mXk8snNeKBaUAqA4RErH5KlrX4RV3pZ1rEHrW7N07Zb89g1y0pG WaWSBce0Y++GEXZvFO9rG0AJVm7v4BZ6zkmTedJZavn9FWxz4pZ7vOp4OhjtLbRn xvCyHLJIrLFWHAuQj8+b4B7Q7CxalTyXOMca9I9GO9vicp6XtbUHQP5Ny0E5z2Qh 76LcxogXyoVHLDJyijBR7Jc9LPApZ7tNSgTE+sCnd+AI+V+vJe++bl1z3QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAxhoNXMHMnJDhI+aYhWrGS7VKQjMB8GA1UdIwQY MBaAFBV7MggwrQbqcacm6bizxHMkEhnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMt YzY1MGM3NmQwOGNlLzEvREdHZzFjd2N5Y2tPRWo1cGlGYXNaTHRVcENNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMtYzY1MGM3NmQwOGNl LzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUFZAAwQB wn+CAwQBwn+YMA0EAgACMAcDBQMqCloAMA0GCSqGSIb3DQEBCwUAA4IBAQB67H0K Factcs0kWVhmk7yDPFdmm71FmsJOWzI0cuk+5AjsmzJ7zG8r1bEU/zQNb6n1g9RB 1zjpr8zKfoIZzcgHyKIyLVfwSITGbLMgHCj9uUBFnFTgjrDhvfLMxjCxZVzhZd2Z 7gxMUqvzgQ2RXDPF9xvaoi3Dd/psPhf2aNf8034uoj8Li+DvAq7BC8KKty/6bYf+ rrJCyHjBk63zuGz5hRNrfdbTc6JsAPy4t4ZuGyjm0qf53H12RfD8qEQAO+GYPZRa nfCo5baFXnhlF4vH5S8K1+7/FREvwZPoumsG7ZmvcJYFZ54qthmSm3MedhOGRgW4 pnACg/RwnGPfg7NU -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:21 2026 by rpki-client