This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dhGTZrzAMxCoHl02uEnVYrcP8uY.roa File: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (raw, json) Hash identifier: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o= Subject key identifier: 76:11:93:66:BC:C0:33:10:A8:1E:5D:36:B8:49:D5:62:B7:0F:F2:E6 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101C05F5D985944F1A76B2CB05F91F Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dhGTZrzAMxCoHl02uEnVYrcP8uY.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 185.92.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1c:05:f5:d9:85:94:4f:1a:76:b2:cb:05:f9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76119366bcc03310a81e5d36b849d562b70ff2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:ed:62:ec:20:09:db:b5:7c:89:01:fc:c4: 79:71:95:31:55:4e:45:7a:c6:90:fa:f4:ca:fa:28: 36:dd:95:d4:62:cf:d4:ae:af:22:34:3b:67:26:fd: ab:16:6d:16:8b:e6:c1:08:fb:68:32:ff:57:33:ed: 7c:10:36:9e:02:9b:a1:1f:c1:85:73:b0:6d:a8:b3: eb:3a:94:df:7f:79:89:00:66:04:ba:ec:38:32:23: ae:62:08:8e:57:e2:26:3e:13:a7:3a:2e:f0:3b:1c: fe:94:17:4d:c3:82:67:5d:8c:3a:57:09:ed:88:dc: 5c:c4:c1:90:47:80:35:fb:3e:71:21:de:c3:73:12: c8:6e:eb:c3:f9:2a:9c:5a:24:95:31:14:82:2f:85: 80:e3:83:99:37:1a:ab:77:33:e3:21:17:e1:c1:00: d1:62:d4:28:34:e8:a1:fc:46:d9:38:cc:32:46:9b: 30:66:bb:a9:76:83:3c:2c:bb:de:43:75:db:8b:d3: f0:bd:d9:c9:db:c4:4d:95:a0:ed:6b:74:68:54:10: 15:93:1f:df:22:e8:6e:88:9a:9f:1f:66:05:16:af: 45:96:d0:0a:56:ee:b9:93:8f:00:97:14:7f:30:de: da:be:c1:95:bc:f4:f0:e9:34:db:59:f8:e5:9d:fd: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:11:93:66:BC:C0:33:10:A8:1E:5D:36:B8:49:D5:62:B7:0F:F2:E6 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dhGTZrzAMxCoHl02uEnVYrcP8uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.44.0/24 Signature Algorithm: sha256WithRSAEncryption 98:25:a2:76:2e:a2:30:84:4c:1a:7a:f6:14:1b:a2:4d:83:0c: eb:3d:3b:6b:e5:14:0b:73:93:66:f4:4b:b8:ff:5a:f9:f0:c8: 50:25:47:e9:9a:53:45:dc:5b:22:88:eb:85:a8:d5:be:97:31: df:13:72:57:75:c8:13:d8:e2:0d:0e:b6:71:00:6e:d2:33:fe: af:38:97:d6:b3:14:52:69:f6:cb:9b:45:48:62:86:a5:de:c0: 43:e7:d8:c4:f7:8c:bc:47:e5:e5:7b:07:5e:02:6f:52:aa:92: 1c:91:c3:c3:f9:d8:33:b7:75:b9:f5:db:06:19:b8:c4:41:41: 79:c6:d0:f6:ff:30:96:e4:8e:cc:ad:74:7c:d2:1d:a2:25:01: 2f:62:db:53:7f:57:70:ad:49:ed:50:5c:04:f6:41:7f:fd:a6: c1:3e:94:5d:00:75:fe:8b:fb:1d:2f:a8:c3:61:6a:0f:41:ae: 5a:28:4b:16:d0:26:d9:96:d5:20:93:d4:3b:96:46:e8:77:fe: 57:00:d4:25:22:01:c9:5c:5b:f1:7c:b6:c1:c4:d3:3d:26:8a: bf:bb:95:c5:36:48:df:32:92:ca:e3:8a:81:89:01:63:92:8c: 0c:e8:28:81:22:40:8a:a3:77:b7:36:2d:e5:b6:d9:7d:4a:81: 80:35:3e:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBwF9dmFlE8adrLLBfkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjExOTM2NmJjYzAzMzEwYTgxZTVkMzZiODQ5ZDU2MmI3MGZmMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms/tYuwgCdu1fIkB/MR5cZUxVU5F esaQ+vTK+ig23ZXUYs/Urq8iNDtnJv2rFm0Wi+bBCPtoMv9XM+18EDaeApuhH8GF c7BtqLPrOpTff3mJAGYEuuw4MiOuYgiOV+ImPhOnOi7wOxz+lBdNw4JnXYw6Vwnt iNxcxMGQR4A1+z5xId7DcxLIbuvD+SqcWiSVMRSCL4WA44OZNxqrdzPjIRfhwQDR YtQoNOih/EbZOMwyRpswZrupdoM8LLveQ3Xbi9PwvdnJ28RNlaDta3RoVBAVkx/f IuhuiJqfH2YFFq9FltAKVu65k48AlxR/MN7avsGVvPTw6TTbWfjlnf0qZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYRk2a8wDMQqB5dNrhJ1WK3D/LmMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvZGhHVFpyekFNeENvSGwwMnVFblZZcmNQOHVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVwsMA0G CSqGSIb3DQEBCwUAA4IBAQCYJaJ2LqIwhEwaevYUG6JNgwzrPTtr5RQLc5Nm9Eu4 /1r58MhQJUfpmlNF3FsiiOuFqNW+lzHfE3JXdcgT2OINDrZxAG7SM/6vOJfWsxRS afbLm0VIYoal3sBD59jE94y8R+XlewdeAm9SqpIckcPD+dgzt3W59dsGGbjEQUF5 xtD2/zCW5I7MrXR80h2iJQEvYttTf1dwrUntUFwE9kF//abBPpRdAHX+i/sdL6jD YWoPQa5aKEsW0CbZltUgk9Q7lkbod/5XANQlIgHJXFvxfLbBxNM9Joq/u5XFNkjf MpLK44qBiQFjkowM6CiBIkCKo3e3Ni3lttl9SoGANT7N -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client