This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/DxI_kOfaH9nvsBV0r3xzUBEXmgY.roa File: DxI_kOfaH9nvsBV0r3xzUBEXmgY.roa (raw, json) Hash identifier: wU9cPOo8mwz6ydyhIKOGWW7zEmO7xyneDQny8VJv6qI= Subject key identifier: 0F:12:3F:90:E7:DA:1F:D9:EF:B0:15:74:AF:7C:73:50:11:17:9A:06 Certificate issuer: /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548 Certificate serial: 019B79ECA78D6440F4870599EBF2323FE8A5 Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/DxI_kOfaH9nvsBV0r3xzUBEXmgY.roa Signing time: Thu 01 Jan 2026 14:18:30 +0000 ROA not before: Thu 01 Jan 2026 14:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35795 IP address blocks: 91.196.120.0/22 maxlen: 22 91.196.120.0/24 maxlen: 24 91.196.121.0/24 maxlen: 24 91.196.122.0/24 maxlen: 24 91.196.123.0/24 maxlen: 24 195.10.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a7:8d:64:40:f4:87:05:99:eb:f2:32:3f:e8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548 Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f123f90e7da1fd9efb01574af7c735011179a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:1b:f1:a6:b2:03:93:ef:a4:45:fe:c4:7a: 50:bb:23:f7:91:1b:74:b2:96:de:79:6a:59:36:57: 58:9f:a2:44:69:0c:15:9f:79:f5:2e:98:bd:39:d8: 14:0f:41:6e:f9:51:f4:73:64:b5:1b:aa:12:c7:eb: 6c:50:40:e2:f0:3b:cb:85:6a:67:c2:a1:f9:73:a3: 04:4d:d4:bf:80:df:21:ca:3a:d7:da:c4:0c:d8:b9: fe:26:bd:50:1a:12:95:b2:87:f3:13:b4:8c:f0:4e: 1a:9e:8e:42:17:e8:c2:44:cd:55:b5:0f:64:ae:80: da:b1:ca:5b:e4:bd:17:5c:a1:3b:a4:c2:f0:b3:a9: d9:d8:bf:a8:6a:8b:aa:0d:cf:34:19:46:ac:ac:16: ab:15:4c:fd:3a:38:e1:59:d0:43:bf:dc:bd:08:bb: 33:30:9b:53:06:05:99:92:67:e6:34:2f:4a:37:82: 56:72:22:a7:52:d3:ff:f0:97:5f:fc:f0:42:50:ea: ea:c3:26:6a:58:c3:ed:29:8b:d1:85:7f:2c:ce:70: e6:54:c8:86:50:a3:24:db:91:b6:03:97:8c:40:95: a2:1f:28:19:80:ce:e4:f0:ea:a0:0e:2c:2b:f7:f2: 76:34:a2:fe:97:d3:ae:7a:da:1c:e6:1f:27:97:fc: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:12:3F:90:E7:DA:1F:D9:EF:B0:15:74:AF:7C:73:50:11:17:9A:06 X509v3 Authority Key Identifier: keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/DxI_kOfaH9nvsBV0r3xzUBEXmgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.120.0/22 195.10.210.0/24 Signature Algorithm: sha256WithRSAEncryption 38:35:67:10:77:53:45:08:71:09:db:f6:02:9b:74:2a:43:29: 70:1b:25:52:34:2a:a7:49:6e:48:48:f4:53:65:2e:f8:27:55: ed:ac:1f:5e:4b:ac:45:66:58:6e:6b:89:68:8c:5c:6e:d6:be: 25:90:1e:54:cd:40:5b:3d:a7:14:14:95:b9:c0:60:fd:85:24: fc:7d:4d:3a:80:08:05:08:c2:25:0d:ea:3d:f1:ef:e1:d9:f2: 9f:09:59:ca:90:c6:76:8f:90:67:9d:5d:84:91:82:78:6c:89: d0:19:fb:1f:04:f0:22:ae:07:7a:63:2a:b2:d5:5e:f1:9a:a2: 97:8e:36:f7:72:55:3e:5d:6b:1f:6b:0d:60:7d:38:92:de:1d: ca:29:71:20:55:67:1f:88:a0:f0:b1:30:ae:05:83:11:fe:e1: 0a:43:fc:63:fb:fd:de:e6:75:bc:90:21:bb:bd:a4:5f:a3:dc: 6f:b3:0a:72:25:18:1c:66:d8:63:57:b3:95:4f:21:ed:61:4d: 91:09:4c:83:9e:e8:e5:d2:aa:90:c3:dc:09:b1:dd:15:cb:e7: 8e:8c:e4:f0:b5:1c:84:66:e6:74:2e:b9:41:2b:38:7f:e2:11: a7:40:0b:47:ae:8a:e9:da:9a:39:95:06:c8:5d:72:aa:f1:b2: 7b:93:f9:a9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57KeNZED0hwWZ6/IyP+ilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDAxZGMxM2U1MGU5Y2MzZDQyZDkxM2VhNjViMTU1NGM5 NWE1NDgwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjEyM2Y5MGU3ZGExZmQ5ZWZiMDE1NzRhZjdjNzM1MDExMTc5YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHIb8aayA5PvpEX+xHpQuyP3kRt0 spbeeWpZNldYn6JEaQwVn3n1Lpi9OdgUD0Fu+VH0c2S1G6oSx+tsUEDi8DvLhWpn wqH5c6METdS/gN8hyjrX2sQM2Ln+Jr1QGhKVsofzE7SM8E4ano5CF+jCRM1VtQ9k roDascpb5L0XXKE7pMLws6nZ2L+oaouqDc80GUasrBarFUz9OjjhWdBDv9y9CLsz MJtTBgWZkmfmNC9KN4JWciKnUtP/8Jdf/PBCUOrqwyZqWMPtKYvRhX8sznDmVMiG UKMk25G2A5eMQJWiHygZgM7k8OqgDiwr9/J2NKL+l9Ouetoc5h8nl/y1QwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA8SP5Dn2h/Z77AVdK98c1ARF5oGMB8GA1UdIwQY MBaAFE9AHcE+UOnMPULZE+plsVVMlaVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NjY5MGMtZDRlNS00MGZhLWE4Njkt M2EwNWJiNzUzMGM2LzEvRHhJX2tPZmFIOW52c0JWMHIzeHpVQkVYbWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85NjY5MGMtZDRlNS00MGZhLWE4NjktM2EwNWJiNzUzMGM2 LzEvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8R4AwQA wwrSMA0GCSqGSIb3DQEBCwUAA4IBAQA4NWcQd1NFCHEJ2/YCm3QqQylwGyVSNCqn SW5ISPRTZS74J1XtrB9eS6xFZlhua4lojFxu1r4lkB5UzUBbPacUFJW5wGD9hST8 fU06gAgFCMIlDeo98e/h2fKfCVnKkMZ2j5BnnV2EkYJ4bInQGfsfBPAirgd6Yyqy 1V7xmqKXjjb3clU+XWsfaw1gfTiS3h3KKXEgVWcfiKDwsTCuBYMR/uEKQ/xj+/3e 5nW8kCG7vaRfo9xvswpyJRgcZthjV7OVTyHtYU2RCUyDnujl0qqQw9wJsd0Vy+eO jOTwtRyEZuZ0LrlBKzh/4hGnQAtHrorp2po5lQbIXXKq8bJ7k/mp -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:56 2026 by rpki-client