This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Dg5PEYmKpTVI2DCPpp7B0MOqhXQ.roa File: Dg5PEYmKpTVI2DCPpp7B0MOqhXQ.roa (raw, json) Hash identifier: 0r9Wvfa6jCmlqCpm1KLg+xpqhpapVEOAPFkYXdbs38g= Subject key identifier: 0E:0E:4F:11:89:8A:A5:35:48:D8:30:8F:A6:9E:C1:D0:C3:AA:85:74 Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2 Certificate serial: 019B7F83FEEEE9722AF9A86E544774D11794 Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Dg5PEYmKpTVI2DCPpp7B0MOqhXQ.roa Signing time: Fri 02 Jan 2026 16:21:55 +0000 ROA not before: Fri 02 Jan 2026 16:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198890 IP address blocks: 87.120.100.0/22 maxlen: 22 93.187.110.0/24 maxlen: 24 185.161.184.0/23 maxlen: 23 2a13:1540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:fe:ee:e9:72:2a:f9:a8:6e:54:47:74:d1:17:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2 Validity Not Before: Jan 2 16:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e0e4f11898aa53548d8308fa69ec1d0c3aa8574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:44:40:11:a6:93:ba:c6:e1:02:44:34:09: 3d:ce:35:8e:ec:b5:24:4e:f3:55:31:8e:bf:0f:eb: 14:03:66:d6:e8:60:0c:d0:d7:64:cf:1f:8e:26:bd: f0:2c:19:81:b1:80:8a:9e:8d:59:c1:1a:f4:32:08: 99:98:ce:65:4a:5c:00:e4:ec:e9:8f:92:29:6b:26: 3d:a1:d6:8d:42:78:bf:ac:46:bf:c9:b4:56:a5:bd: e0:d9:62:1c:62:43:d8:ca:03:f6:42:0c:3b:67:62: 1b:f0:9d:dd:fd:cc:b5:a8:0b:68:85:8d:6e:4c:82: d1:9a:a4:a7:90:f1:fa:3c:de:98:01:83:91:4c:5b: ab:09:b6:a9:bf:de:3a:66:d5:95:da:dc:4f:84:cf: 4d:04:b5:e5:ee:0b:7e:1b:9b:bc:01:d9:6e:6d:b3: d4:cb:27:ec:01:e6:86:b0:a4:4a:2d:f7:fe:6e:e0: 08:2b:0b:81:71:c0:a6:a9:80:35:ae:35:55:13:82: 80:8d:67:a4:04:a7:a2:52:da:01:10:fb:07:26:1e: d5:0c:23:8a:06:ee:46:15:ac:a0:6d:1d:00:8a:9d: 0b:f5:e0:a0:98:96:9c:d0:53:ce:c2:8b:71:94:cd: f6:55:b4:a6:6a:23:a8:53:9d:5d:db:ba:de:71:f7: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0E:4F:11:89:8A:A5:35:48:D8:30:8F:A6:9E:C1:D0:C3:AA:85:74 X509v3 Authority Key Identifier: keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Dg5PEYmKpTVI2DCPpp7B0MOqhXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.100.0/22 93.187.110.0/24 185.161.184.0/23 IPv6: 2a13:1540::/48 Signature Algorithm: sha256WithRSAEncryption 63:9f:ce:87:3b:2c:ac:9a:a7:47:1f:7c:06:af:27:25:34:55: f2:f0:cf:58:ca:78:21:4c:f5:bf:00:75:81:fe:19:17:a8:ec: 32:bb:c1:9c:71:41:c7:95:37:79:68:e9:f4:19:45:96:8c:3b: 89:d6:38:4a:29:33:0f:b6:d4:2d:07:a7:f6:0b:48:a4:7e:7c: f4:20:2f:2c:58:14:80:b4:ea:66:e6:0c:4d:69:fb:83:03:cf: e9:5a:ea:b9:d2:93:6d:d8:15:5f:81:bd:95:2f:23:c3:eb:3d: 07:1c:6c:1e:24:c0:45:42:d1:a4:43:04:74:65:41:c5:e9:26: 65:ae:f2:db:b3:91:60:bb:58:e6:49:37:d7:a5:73:e2:4d:37: c1:3a:2c:74:35:6e:ec:44:4d:3e:38:df:f6:ad:73:d1:a3:96: 6a:46:d8:90:c9:35:49:78:80:01:11:d6:7e:98:fe:cd:bd:c4: bd:8a:f3:52:da:47:f7:2f:3a:d8:46:c6:aa:25:5d:ab:76:3e: 00:4f:69:f9:53:9a:31:28:2a:bc:ec:d7:38:ea:b0:5a:56:35: 47:a4:55:42:e1:0b:9f:be:e6:f6:d7:17:24:ae:57:0d:a1:72: 21:4e:94:9a:bf:bc:21:f6:a7:5b:da:9a:fe:31:5f:01:a3:d7: 93:fe:49:87 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/g/7u6XIq+ahuVEd00ReUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGFmMDAyMjUxMDZiMjA5NmU5YjIxZDlhYzJmMjA0MDY4 OGRlYTIwHhcNMjYwMTAyMTYyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTBlNGYxMTg5OGFhNTM1NDhkODMwOGZhNjllYzFkMGMzYWE4NTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHJEQBGmk7rG4QJENAk9zjWO7LUk TvNVMY6/D+sUA2bW6GAM0Ndkzx+OJr3wLBmBsYCKno1ZwRr0MgiZmM5lSlwA5Ozp j5IpayY9odaNQni/rEa/ybRWpb3g2WIcYkPYygP2Qgw7Z2Ib8J3d/cy1qAtohY1u TILRmqSnkPH6PN6YAYORTFurCbapv946ZtWV2txPhM9NBLXl7gt+G5u8AdlubbPU yyfsAeaGsKRKLff+buAIKwuBccCmqYA1rjVVE4KAjWekBKeiUtoBEPsHJh7VDCOK Bu5GFaygbR0Aip0L9eCgmJac0FPOwotxlM32VbSmaiOoU51d27recffJuQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFA4OTxGJiqU1SNgwj6aewdDDqoV0MB8GA1UdIwQY MBaAFIEK8AIlEGsglumyHZrC8gQGiN6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMt M2NhNDg4ZGVlZTg5LzEvRGc1UEVZbUtwVFZJMkRDUHBwN0IwTU9xaFhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMtM2NhNDg4ZGVlZTg5 LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCV3hkAwQA XbtuAwQBuaG4MA8EAgACMAkDBwAqExVAAAAwDQYJKoZIhvcNAQELBQADggEBAGOf zoc7LKyap0cffAavJyU0VfLwz1jKeCFM9b8AdYH+GReo7DK7wZxxQceVN3lo6fQZ RZaMO4nWOEopMw+21C0Hp/YLSKR+fPQgLyxYFIC06mbmDE1p+4MDz+la6rnSk23Y FV+BvZUvI8PrPQccbB4kwEVC0aRDBHRlQcXpJmWu8tuzkWC7WOZJN9elc+JNN8E6 LHQ1buxETT443/atc9GjlmpG2JDJNUl4gAER1n6Y/s29xL2K81LaR/cvOthGxqol Xat2PgBPaflTmjEoKrzs1zjqsFpWNUekVULhC5++5vbXFySuVw2hciFOlJq/vCH2 p1vamv4xXwGj15P+SYc= -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:12 2026 by rpki-client