This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dANCF-_ELvUXZe_N9iPSiuIBUYs.roa File: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (raw, json) Hash identifier: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0= Subject key identifier: 74:03:42:17:EF:C4:2E:F5:17:65:EF:CD:F6:23:D2:8A:E2:01:51:8B Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B7C8033213902985A62BDDA0D483AD44E Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dANCF-_ELvUXZe_N9iPSiuIBUYs.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 93.88.152.0/24 maxlen: 24 93.88.159.0/24 maxlen: 24 152.89.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:33:21:39:02:98:5a:62:bd:da:0d:48:3a:d4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74034217efc42ef51765efcdf623d28ae201518b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:29:4c:ed:cc:69:c4:1f:8d:95:2a:e8:77: 5c:1d:ab:43:91:b6:bc:0d:fa:c1:ed:01:ef:90:55: 83:9c:44:4f:ac:94:b0:3b:a7:86:8d:3e:a7:2f:40: f0:96:8c:c2:4c:f7:f8:02:7c:cf:55:49:96:53:a1: 6a:89:97:b2:9a:be:0f:36:1e:4e:d2:87:5c:a2:6f: 19:77:87:18:81:ad:fe:1c:df:4e:a8:80:9b:7b:ef: 2b:6d:6e:a2:82:b4:74:3a:38:07:f6:59:05:87:bd: d5:68:f4:1c:1a:05:9f:80:73:9b:54:5e:73:90:a1: 33:27:71:43:6a:0a:cd:2b:0a:cf:de:27:a9:6e:11: 76:77:81:bb:0b:a0:8c:16:f8:ad:fe:7b:c0:16:95: ca:b6:4c:0c:8e:c3:f7:a0:47:6c:e2:42:9e:e6:ba: be:54:a7:92:12:0c:93:7f:7e:91:a1:33:c0:9b:98: 91:31:e1:b5:35:3f:06:b7:02:47:5e:e7:59:14:39: 5b:f6:10:f4:6c:51:52:05:1c:a3:8e:03:d1:be:fd: 1e:54:78:38:9b:64:08:fa:19:04:96:17:23:a3:df: ab:7c:90:cb:2c:ee:c3:30:7a:32:d8:db:20:a7:c8: 7e:08:4c:04:02:8e:03:c4:27:33:a7:68:6d:41:4c: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:03:42:17:EF:C4:2E:F5:17:65:EF:CD:F6:23:D2:8A:E2:01:51:8B X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dANCF-_ELvUXZe_N9iPSiuIBUYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.152.0/24 93.88.159.0/24 152.89.85.0/24 Signature Algorithm: sha256WithRSAEncryption 61:9e:44:3e:88:0f:87:e6:df:25:d8:60:6d:cc:0e:50:00:24: e2:6c:cc:4d:bc:42:d6:a4:b7:50:b3:2c:59:ec:56:65:cb:6d: 08:67:9d:f0:4a:69:79:6a:5d:8f:b4:cf:4f:10:88:7d:36:a1: 56:66:11:34:6f:00:30:a0:f0:c0:a1:a3:58:fc:f3:a2:42:f6: da:ca:d6:f1:68:05:35:bf:2b:bd:17:c3:ec:ac:6f:f3:d6:c3: 33:20:f3:5e:26:05:f1:fc:cc:ae:52:65:6b:39:22:45:33:35: 02:4f:7f:be:0f:a3:1a:36:5f:7b:94:7f:a5:3f:e4:f9:fb:b0: 6f:fb:cd:d0:5f:73:09:b8:a1:51:87:1e:b9:f9:ad:67:3b:61: 8f:9e:f3:ac:96:ca:ca:db:03:26:5f:94:d8:a8:99:ed:af:a8: 77:82:11:5d:26:ed:1e:31:5f:da:71:e1:9d:db:17:81:5a:05: 61:a6:ce:16:13:9c:23:f9:66:c3:05:e6:d8:1b:0f:bc:3a:c9: 19:d7:25:fa:98:23:9a:38:52:99:e6:47:d2:63:fb:1f:79:38: 28:ec:f3:47:70:d2:63:22:d4:f1:a0:cd:56:5f:3f:24:5d:f2: 99:ab:1a:85:04:c2:d7:4a:67:5a:9f:c7:23:3d:a9:b2:7e:b6: 58:d0:3c:42 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gDMhOQKYWmK92g1IOtROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDAzNDIxN2VmYzQyZWY1MTc2NWVmY2RmNjIzZDI4YWUyMDE1MThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPkpTO3MacQfjZUq6HdcHatDkba8 DfrB7QHvkFWDnERPrJSwO6eGjT6nL0DwlozCTPf4AnzPVUmWU6FqiZeymr4PNh5O 0odcom8Zd4cYga3+HN9OqICbe+8rbW6igrR0OjgH9lkFh73VaPQcGgWfgHObVF5z kKEzJ3FDagrNKwrP3iepbhF2d4G7C6CMFvit/nvAFpXKtkwMjsP3oEds4kKe5rq+ VKeSEgyTf36RoTPAm5iRMeG1NT8GtwJHXudZFDlb9hD0bFFSBRyjjgPRvv0eVHg4 m2QI+hkElhcjo9+rfJDLLO7DMHoy2Nsgp8h+CEwEAo4DxCczp2htQUyuVwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHQDQhfvxC71F2XvzfYj0oriAVGLMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvZEFOQ0YtX0VMdlVYWmVfTjlpUFNpdUlCVVlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXViYAwQA XVifAwQAmFlVMA0GCSqGSIb3DQEBCwUAA4IBAQBhnkQ+iA+H5t8l2GBtzA5QACTi bMxNvELWpLdQsyxZ7FZly20IZ53wSml5al2PtM9PEIh9NqFWZhE0bwAwoPDAoaNY /POiQvbaytbxaAU1vyu9F8PsrG/z1sMzIPNeJgXx/MyuUmVrOSJFMzUCT3++D6Ma Nl97lH+lP+T5+7Bv+83QX3MJuKFRhx65+a1nO2GPnvOslsrK2wMmX5TYqJntr6h3 ghFdJu0eMV/aceGd2xeBWgVhps4WE5wj+WbDBebYGw+8OskZ1yX6mCOaOFKZ5kfS Y/sfeTgo7PNHcNJjItTxoM1WXz8kXfKZqxqFBMLXSmdan8cjPamyfrZY0DxC -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:53 2026 by rpki-client