This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/dXyU9dvy-RL56kxAeM9aZtX19b4.roa File: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (raw, json) Hash identifier: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds= Subject key identifier: 75:7C:94:F5:DB:F2:F9:12:F9:EA:4C:40:78:CF:5A:66:D5:F5:F5:BE Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18 Certificate serial: 019B7AC8165298C233976A9898DEFAEB48F5 Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/dXyU9dvy-RL56kxAeM9aZtX19b4.roa Signing time: Thu 01 Jan 2026 18:18:11 +0000 ROA not before: Thu 01 Jan 2026 18:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213277 IP address blocks: 94.46.24.0/24 maxlen: 24 2a00:1651::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:16:52:98:c2:33:97:6a:98:98:de:fa:eb:48:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3545a7200164912041bb931efb1feac123b43a18 Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=757c94f5dbf2f912f9ea4c4078cf5a66d5f5f5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:02:5d:61:ae:5f:40:c6:da:92:1e:57:87: 6c:39:cf:77:64:e4:dc:2f:65:75:cb:8b:2d:82:1a: 5c:2f:fd:b8:50:ed:0a:0b:e6:46:1c:ce:e5:6e:0c: b9:75:7c:53:09:48:d4:95:1a:2e:a9:1f:b1:dc:c3: 89:cb:38:51:0e:60:19:3c:f5:66:d0:39:ca:b6:d6: 50:ff:5f:55:e9:d4:df:d3:88:17:a7:b1:75:0f:25: f7:24:8d:98:6a:a4:c2:f7:5b:59:bf:d1:13:76:15: 18:7e:06:fd:5c:66:65:13:3d:1c:84:46:50:65:da: fa:b5:c2:fc:82:15:01:54:e6:c7:82:04:a0:5d:26: dd:0b:6b:c6:6d:7a:c7:14:6c:92:45:52:b1:99:27: a9:d6:37:be:6b:82:35:23:9f:9d:0f:d3:0f:4c:f3: 23:76:a6:51:d8:42:46:f6:b6:da:d4:3c:f6:59:fa: 1b:a4:4f:37:e5:d1:f0:ee:2c:46:ce:83:81:02:31: 38:51:04:ec:a4:c6:e8:75:94:9c:98:2a:19:bf:d5: 68:09:68:61:a7:c8:47:6f:9a:ee:ee:01:30:39:85: 65:cc:52:46:53:b3:4f:ee:9b:56:16:64:89:e8:54: 9a:ee:23:d3:7e:80:4a:d7:fc:4f:81:54:e2:f2:8c: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7C:94:F5:DB:F2:F9:12:F9:EA:4C:40:78:CF:5A:66:D5:F5:F5:BE X509v3 Authority Key Identifier: keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/dXyU9dvy-RL56kxAeM9aZtX19b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.46.24.0/24 IPv6: 2a00:1651::/33 Signature Algorithm: sha256WithRSAEncryption 2c:b3:38:42:f9:12:07:9c:77:f5:d4:10:fa:8d:a9:91:05:1e: f4:6e:c5:28:d1:b8:0b:f4:dd:e7:f8:1f:ee:8c:55:50:26:6c: c7:b8:92:76:5a:eb:63:49:46:4a:e1:8b:64:fb:9a:d6:82:b4: 46:06:17:c0:c4:43:59:61:e3:9a:52:8b:48:0a:f5:12:92:28: e4:e0:8b:80:dd:a0:45:c0:fc:e4:cc:47:5c:cf:94:18:89:b9: 27:ff:82:52:81:7e:fd:22:d8:c9:be:74:4b:b5:02:e8:c7:3a: ba:24:99:21:85:72:77:31:08:d3:ab:a8:89:ed:ff:0e:8d:c7: 9d:91:15:89:40:3a:c2:a3:f0:1f:89:fe:0b:6a:6c:d1:c5:39: ee:ec:df:ba:fc:a5:0b:02:63:fd:6a:6a:ee:1c:75:79:90:b0: 2a:d0:b7:7b:e1:86:57:36:1e:6a:4d:a7:cb:bc:27:4f:a2:83: 9f:e1:c3:5b:48:d7:3f:ef:58:e9:70:4c:3f:1f:17:64:ea:f5: 39:f4:cb:a3:4a:4d:fc:99:b3:e6:9e:be:f7:0c:b8:6f:70:5f: 85:50:74:42:ab:99:d4:c4:e9:df:45:ed:1a:a0:19:58:0c:72: 00:6d:20:c6:71:d2:e7:9c:0b:ce:4e:5a:93:4b:fc:a5:f5:e6: 39:9d:0f:16 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6yBZSmMIzl2qYmN7660j1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi NDNhMTgwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTdjOTRmNWRiZjJmOTEyZjllYTRjNDA3OGNmNWE2NmQ1ZjVmNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ycCXWGuX0DG2pIeV4dsOc93ZOTc L2V1y4stghpcL/24UO0KC+ZGHM7lbgy5dXxTCUjUlRouqR+x3MOJyzhRDmAZPPVm 0DnKttZQ/19V6dTf04gXp7F1DyX3JI2YaqTC91tZv9ETdhUYfgb9XGZlEz0chEZQ Zdr6tcL8ghUBVObHggSgXSbdC2vGbXrHFGySRVKxmSep1je+a4I1I5+dD9MPTPMj dqZR2EJG9rba1Dz2WfobpE835dHw7ixGzoOBAjE4UQTspMbodZScmCoZv9VoCWhh p8hHb5ru7gEwOYVlzFJGU7NP7ptWFmSJ6FSa7iPTfoBK1/xPgVTi8oxxewIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFHV8lPXb8vkS+epMQHjPWmbV9fW+MB8GA1UdIwQY MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt YWFiYjA2MmU0MGRiLzEvZFh5VTlkdnktUkw1Nmt4QWVNOWFadFgxOWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAXi4YMA4E AgACMAgDBgcqABZRADANBgkqhkiG9w0BAQsFAAOCAQEALLM4QvkSB5x39dQQ+o2p kQUe9G7FKNG4C/Td5/gf7oxVUCZsx7iSdlrrY0lGSuGLZPua1oK0RgYXwMRDWWHj mlKLSAr1EpIo5OCLgN2gRcD85MxHXM+UGIm5J/+CUoF+/SLYyb50S7UC6Mc6uiSZ IYVydzEI06uoie3/Do3HnZEViUA6wqPwH4n+C2ps0cU57uzfuvylCwJj/Wpq7hx1 eZCwKtC3e+GGVzYeak2ny7wnT6KDn+HDW0jXP+9Y6XBMPx8XZOr1OfTLo0pN/Jmz 5p6+9wy4b3BfhVB0QquZ1MTp30XtGqAZWAxyAG0gxnHS55wLzk5ak0v8pfXmOZ0P Fg== -----END CERTIFICATE-----Generated at Tue Jan 27 17:23:21 2026 by rpki-client