This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/Dyqip5HlZG1j3jgqm5GWpecOrms.roa File: Dyqip5HlZG1j3jgqm5GWpecOrms.roa (raw, json) Hash identifier: eZXfx32LLCAYzTbTHsucPX8yagv3eduCVAzvtgpLqUQ= Subject key identifier: 0F:2A:A2:A7:91:E5:64:6D:63:DE:38:2A:9B:91:96:A5:E7:0E:AE:6B Certificate issuer: /CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13 Certificate serial: 019B7BA349AF73E3FA90C61CA034309D628B Authority key identifier: E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/Dyqip5HlZG1j3jgqm5GWpecOrms.roa Signing time: Thu 01 Jan 2026 22:17:37 +0000 ROA not before: Thu 01 Jan 2026 22:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.2.0/24 maxlen: 24 2001:7f8:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:49:af:73:e3:fa:90:c6:1c:a0:34:30:9d:62:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f2aa2a791e5646d63de382a9b9196a5e70eae6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:00:c0:d6:b4:85:01:6e:ac:58:93:de:e9:ab: 21:15:16:5a:0b:9b:e5:59:c1:72:ed:3e:5c:2a:58: ce:99:d7:09:da:d4:31:66:47:35:07:51:9f:80:f2: d4:e1:ed:cc:00:fa:84:82:d7:3d:63:e8:75:1f:a7: e8:62:ea:fc:3f:7f:0e:e7:fc:ef:0f:13:6e:3f:d5: bd:c4:90:a1:e0:2f:b1:eb:81:7b:af:04:d0:41:1c: 44:d0:3c:1a:d7:4c:23:da:ca:22:40:a4:2e:74:83: 97:7d:4a:e3:ce:e8:c1:5b:df:68:75:97:e0:3d:d0: 9e:43:e9:98:5e:33:5b:b4:e7:e4:09:27:8f:d1:bd: 91:d1:62:e3:e2:de:c9:8b:cb:cc:00:bd:ba:92:91: f2:79:fe:b4:0e:ee:7d:e2:ca:9a:a4:0f:b7:d0:d5: 23:71:cb:f5:78:73:ef:87:73:86:97:a3:d6:8e:69: b9:18:68:88:ec:73:2b:2f:00:d4:1a:0a:c0:58:3c: 21:ef:78:38:69:1a:66:a7:89:3f:f8:46:1e:9f:da: 1e:c3:0a:0e:d9:58:1d:7f:f9:70:51:31:73:86:19: fb:8c:25:7b:73:91:43:54:3b:28:63:f3:91:21:1a: f1:1d:9f:65:65:ba:e8:1f:95:c5:5a:0a:fb:7c:77: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2A:A2:A7:91:E5:64:6D:63:DE:38:2A:9B:91:96:A5:E7:0E:AE:6B X509v3 Authority Key Identifier: keyid:E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/Dyqip5HlZG1j3jgqm5GWpecOrms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.2.0/24 IPv6: 2001:7f8:81::/48 Signature Algorithm: sha256WithRSAEncryption 85:c5:5a:8b:6b:37:d0:85:ac:2f:11:e9:0f:4b:35:2a:9b:68: 7c:5a:0f:20:d2:94:c7:d2:65:ed:66:ef:aa:e4:55:b0:7a:da: 26:49:8e:ff:1d:48:e1:1a:de:9d:19:0a:d4:36:20:5e:11:c9: c1:91:55:7a:b8:c4:21:84:c6:0e:a9:bd:fc:7e:ba:83:de:36: 7f:90:d5:d5:6c:ed:71:32:07:73:cc:a9:98:19:6d:8c:1e:1b: 17:72:fe:be:e0:4d:f5:e8:9e:c7:17:88:67:92:35:f8:bb:49: 62:a5:68:81:3d:6f:32:af:6c:65:19:38:cb:fd:5e:58:c0:50: 63:15:b6:29:57:33:7c:a1:d5:fe:f1:f9:45:da:89:bf:cb:c2: 1e:62:6c:e1:29:86:51:24:28:e0:9b:02:28:96:d9:95:5d:bd: ec:ef:a6:da:9d:fa:b7:1c:48:ab:7e:ac:24:36:ee:71:9b:f6: e6:b8:20:23:4c:30:3a:62:64:3a:8d:4f:9b:7c:d0:d2:16:4d: 72:8e:2c:90:57:2e:bd:56:ee:f0:05:56:98:80:12:1a:37:dc: e7:eb:5f:83:a2:88:d0:34:42:88:15:54:27:ae:0d:8d:ee:64: af:2b:59:b7:95:83:4c:1e:d2:a8:b9:1b:c9:c7:5d:0f:71:16: f4:df:4e:c6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7o0mvc+P6kMYcoDQwnWKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OGRjNWU3ODI1OGU0MjY3MzliZDg4YzJkNGMyMDBhYWRm M2JmMTMwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjJhYTJhNzkxZTU2NDZkNjNkZTM4MmE5YjkxOTZhNWU3MGVhZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgDA1rSFAW6sWJPe6ashFRZaC5vl WcFy7T5cKljOmdcJ2tQxZkc1B1GfgPLU4e3MAPqEgtc9Y+h1H6foYur8P38O5/zv DxNuP9W9xJCh4C+x64F7rwTQQRxE0Dwa10wj2soiQKQudIOXfUrjzujBW99odZfg PdCeQ+mYXjNbtOfkCSeP0b2R0WLj4t7Ji8vMAL26kpHyef60Du594sqapA+30NUj ccv1eHPvh3OGl6PWjmm5GGiI7HMrLwDUGgrAWDwh73g4aRpmp4k/+EYen9oewwoO 2Vgdf/lwUTFzhhn7jCV7c5FDVDsoY/ORIRrxHZ9lZbroH5XFWgr7fHeZewIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA8qoqeR5WRtY944KpuRlqXnDq5rMB8GA1UdIwQY MBaAFOmNxeeCWOQmc5vYjC1MIAqt878TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlkzRjU0Slk1Q1p6bTlpTUxVd2dDcTN6dnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZDdmNmUtYzZkZi00MWQ3LThmZmQt NTA4OWI2MDJiZmMyLzEvRHlxaXA1SGxaRzFqM2pncW01R1dwZWNPcm1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80ZDdmNmUtYzZkZi00MWQ3LThmZmQtNTA4OWI2MDJiZmMy LzEvNlkzRjU0Slk1Q1p6bTlpTUxVd2dDcTN6dnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQECMA8E AgACMAkDBwAgAQf4AIEwDQYJKoZIhvcNAQELBQADggEBAIXFWotrN9CFrC8R6Q9L NSqbaHxaDyDSlMfSZe1m76rkVbB62iZJjv8dSOEa3p0ZCtQ2IF4RycGRVXq4xCGE xg6pvfx+uoPeNn+Q1dVs7XEyB3PMqZgZbYweGxdy/r7gTfXonscXiGeSNfi7SWKl aIE9bzKvbGUZOMv9XljAUGMVtilXM3yh1f7x+UXaib/Lwh5ibOEphlEkKOCbAiiW 2ZVdvezvptqd+rccSKt+rCQ27nGb9ua4ICNMMDpiZDqNT5t80NIWTXKOLJBXLr1W 7vAFVpiAEho33OfrX4OiiNA0QogVVCeuDY3uZK8rWbeVg0we0qi5G8nHXQ9xFvTf TsY= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:46 2026 by rpki-client