This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/DYNx75j8JSgdvr4IB6THRRzY3xI.roa File: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (raw, json) Hash identifier: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM= Subject key identifier: 0D:83:71:EF:98:FC:25:28:1D:BE:BE:08:07:A4:C7:45:1C:D8:DF:12 Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Certificate serial: 019B775971318F4A87D8541C31B968C5539A Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/DYNx75j8JSgdvr4IB6THRRzY3xI.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43623 IP address blocks: 194.59.34.0/23 maxlen: 23 194.59.35.0/24 maxlen: 24 194.127.132.0/23 maxlen: 23 194.127.132.0/24 maxlen: 24 194.127.133.0/24 maxlen: 24 217.66.32.0/20 maxlen: 20 217.66.32.0/24 maxlen: 24 217.66.33.0/24 maxlen: 24 217.66.35.0/24 maxlen: 24 217.66.36.0/24 maxlen: 24 217.66.37.0/24 maxlen: 24 217.66.38.0/24 maxlen: 24 217.66.39.0/24 maxlen: 24 217.66.42.0/24 maxlen: 24 217.66.43.0/24 maxlen: 24 217.66.44.0/24 maxlen: 24 217.66.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:71:31:8f:4a:87:d8:54:1c:31:b9:68:c5:53:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d8371ef98fc25281dbebe0807a4c7451cd8df12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:af:54:4c:d6:67:ee:dd:7f:43:62:50:e7: 18:c9:a5:5a:8e:cb:fd:ea:5a:8e:d4:d9:60:24:0a: 86:c3:61:48:91:79:d6:0a:2b:6a:75:bc:6b:ba:2a: 4b:d1:6d:94:d8:66:90:9a:87:e5:23:81:b2:a2:10: 98:28:2a:d7:9a:c2:74:57:89:a5:ef:61:1a:67:0b: d7:7e:37:8c:d9:1e:2e:a5:47:2d:d7:4e:24:9d:6b: 6a:88:c2:71:06:12:a0:c4:4a:26:3a:14:b6:44:06: c9:94:80:49:84:25:b8:c4:93:60:7d:2f:dd:ea:39: fd:fe:c8:e3:17:8c:2a:fb:6a:bc:70:b1:d6:10:a2: 6e:55:31:c3:62:1f:17:f9:b7:d1:59:2a:3c:c2:f5: 38:c9:40:d1:a9:b2:84:2a:c7:5c:2e:7a:4f:05:5a: 39:13:b9:5a:1b:b9:0e:18:9a:e5:67:84:a8:4c:b9: 9d:91:7f:58:8d:43:6f:ce:27:3c:51:ac:a7:78:c0: 08:41:13:dc:5a:e4:ed:ac:ab:0b:aa:46:e7:79:90: d2:df:1e:62:b7:ae:83:11:15:92:e4:3c:ca:d1:b9: fd:79:eb:ad:de:55:1d:67:9c:d1:01:ab:76:33:72: 04:6b:63:35:93:a1:03:fa:5a:2b:d0:da:af:ff:2b: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:83:71:EF:98:FC:25:28:1D:BE:BE:08:07:A4:C7:45:1C:D8:DF:12 X509v3 Authority Key Identifier: keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/DYNx75j8JSgdvr4IB6THRRzY3xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.34.0/23 194.127.132.0/23 217.66.32.0/20 Signature Algorithm: sha256WithRSAEncryption 07:2c:7c:ae:da:a4:ab:f7:5f:24:fd:05:ce:45:f8:57:34:48: 52:93:43:29:d4:3b:fd:33:52:7d:f3:8b:f3:2c:ef:89:24:62: a4:86:3b:62:81:49:89:bf:26:21:9f:66:0b:88:b2:9f:ca:12: 40:ea:43:8f:63:67:50:67:a2:3a:ab:b0:6c:69:9c:a3:ec:3c: 41:47:55:9b:79:d6:d4:fb:c4:e7:7c:9d:81:fb:42:fe:97:8a: 05:ff:9d:d0:41:26:ae:d3:91:a6:57:50:ea:fb:5e:e9:1f:53: a2:0a:83:92:b8:c6:3b:0e:66:51:ab:75:28:03:d1:d7:4a:d1: 5a:96:3b:fa:0c:52:28:1f:f4:f0:6b:dd:eb:fa:01:05:b2:70: a9:9c:c4:e4:d8:06:5d:59:cc:08:04:ca:62:a6:b2:cb:90:44: 73:bf:0c:20:89:a7:01:7d:18:34:79:1d:01:e6:b3:d1:fd:96: 7e:12:65:84:1d:b2:ea:0d:8d:f2:72:00:b8:9c:39:5b:60:7e: 65:64:6a:65:6b:65:c6:a1:d2:7c:7e:4b:f9:59:e7:74:57:06: 55:a4:13:11:2b:8e:61:ef:83:01:6c:f2:9c:b3:58:55:5e:51: 8f:27:fb:7c:d4:b1:af:45:7e:50:f9:15:ba:84:72:7f:cb:7a: 7a:51:97:1e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WXExj0qH2FQcMbloxVOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl NWUwZTgwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDgzNzFlZjk4ZmMyNTI4MWRiZWJlMDgwN2E0Yzc0NTFjZDhkZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLGvVEzWZ+7df0NiUOcYyaVajsv9 6lqO1NlgJAqGw2FIkXnWCitqdbxruipL0W2U2GaQmoflI4GyohCYKCrXmsJ0V4ml 72EaZwvXfjeM2R4upUct104knWtqiMJxBhKgxEomOhS2RAbJlIBJhCW4xJNgfS/d 6jn9/sjjF4wq+2q8cLHWEKJuVTHDYh8X+bfRWSo8wvU4yUDRqbKEKsdcLnpPBVo5 E7laG7kOGJrlZ4SoTLmdkX9YjUNvzic8UayneMAIQRPcWuTtrKsLqkbneZDS3x5i t66DERWS5DzK0bn9eeut3lUdZ5zRAat2M3IEa2M1k6ED+lor0Nqv/yuKvQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA2Dce+Y/CUoHb6+CAekx0Uc2N8SMB8GA1UdIwQY MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt ZjQ2YjVkNTdhNjg1LzEvRFlOeDc1ajhKU2dkdnI0SUI2VEhSUnpZM3hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1 LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwjsiAwQB wn+EAwQE2UIgMA0GCSqGSIb3DQEBCwUAA4IBAQAHLHyu2qSr918k/QXORfhXNEhS k0Mp1Dv9M1J984vzLO+JJGKkhjtigUmJvyYhn2YLiLKfyhJA6kOPY2dQZ6I6q7Bs aZyj7DxBR1WbedbU+8TnfJ2B+0L+l4oF/53QQSau05GmV1Dq+17pH1OiCoOSuMY7 DmZRq3UoA9HXStFaljv6DFIoH/Twa93r+gEFsnCpnMTk2AZdWcwIBMpiprLLkERz vwwgiacBfRg0eR0B5rPR/ZZ+EmWEHbLqDY3ycgC4nDlbYH5lZGpla2XGodJ8fkv5 Wed0VwZVpBMRK45h74MBbPKcs1hVXlGPJ/t81LGvRX5Q+RW6hHJ/y3p6UZce -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:09 2026 by rpki-client