This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa File: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (raw, json) Hash identifier: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co= Subject key identifier: 0F:37:73:FF:1F:CE:E2:08:F6:7B:68:67:19:61:3A:5E:F2:5B:2C:9B Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Certificate serial: 019B7F14D9758DB58C9EE4E75AFB0FBCB573 Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa Signing time: Fri 02 Jan 2026 14:20:31 +0000 ROA not before: Fri 02 Jan 2026 14:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 185.76.124.0/22 maxlen: 24 185.126.56.0/22 maxlen: 24 185.210.120.0/22 maxlen: 24 2a0b:56c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d9:75:8d:b5:8c:9e:e4:e7:5a:fb:0f:bc:b5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f3773ff1fcee208f67b686719613a5ef25b2c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:d2:f9:8b:a0:d8:56:56:a6:14:dc:a7:b1: 02:64:58:e6:69:02:bb:7e:28:2e:a1:07:52:ff:80: a3:7e:a8:26:9a:4f:8c:87:c7:eb:e5:64:a0:7f:55: 4f:e0:ee:61:c3:63:20:c8:b1:d2:e3:ec:d0:ed:de: 65:11:e9:28:11:28:77:f2:6c:14:78:37:c5:6e:47: 9f:0b:a7:1c:3f:76:56:50:a5:f4:0d:59:6b:90:6b: bf:60:c9:15:72:c0:e0:a1:ee:2b:2a:79:01:71:1b: 57:9f:31:de:a5:17:1f:76:0c:46:de:4e:61:8e:c0: 11:19:52:17:01:fc:4a:6e:9e:32:1a:d6:d7:22:4a: 0b:10:ac:a2:19:8f:b6:15:4e:48:53:f1:43:7e:e9: ed:f3:03:3f:36:8c:74:c7:22:3f:74:cd:1c:d4:2e: 4f:d5:28:19:5a:eb:30:ce:1b:a1:f0:36:0a:f7:f4: 27:ea:e3:27:19:4f:62:1c:cd:7d:74:a2:14:25:88: b9:6c:27:b1:94:82:3a:17:08:16:aa:62:7a:4d:83: 36:8b:7b:73:5c:01:c0:1c:af:15:47:88:94:6b:d7: 86:ab:71:7e:2c:bd:35:aa:4b:d8:3b:10:79:a3:20: f0:ff:b0:fc:a7:74:f4:9c:f0:64:e9:af:bd:13:ca: 38:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:37:73:FF:1F:CE:E2:08:F6:7B:68:67:19:61:3A:5E:F2:5B:2C:9B X509v3 Authority Key Identifier: keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.124.0/22 185.126.56.0/22 185.210.120.0/22 IPv6: 2a0b:56c0::/29 Signature Algorithm: sha256WithRSAEncryption 0a:92:df:3a:be:b2:96:be:f6:0a:a3:de:84:85:3f:cf:a3:bd: 22:2b:50:7f:0b:53:30:5a:74:dd:d7:81:fb:47:8b:37:ce:bd: 7d:16:ee:8e:39:1e:bd:cf:38:41:a1:14:67:e2:15:c2:d9:37: 18:73:d8:eb:0f:90:98:e4:d2:f0:cb:75:97:7d:4c:2f:4e:b1: a7:bc:0c:fe:2c:34:77:a2:12:0d:2b:06:67:53:10:76:b6:8f: 85:ad:ec:5f:04:aa:54:14:17:0a:39:a1:54:d8:f4:de:52:cf: 95:44:ba:9b:1f:d4:c1:c6:b5:96:32:65:ff:bc:54:39:22:15: 7f:a8:5a:5d:cd:69:92:a3:7b:8e:a2:4e:9b:7a:20:9c:cc:67: 0d:0e:71:a9:41:8a:e8:24:93:32:9b:af:40:e0:f2:72:1f:77: 09:cf:ce:ec:05:e3:b4:95:d7:a8:dd:4a:46:21:e7:94:4a:54: cd:08:a5:81:c8:7f:a8:ee:16:22:37:11:15:0a:55:fe:73:97: bf:c3:4b:e2:56:a0:de:2a:e2:6f:ba:46:8e:27:9a:95:20:11: 69:44:d3:a9:89:ae:f3:b8:d5:05:3e:43:12:fd:1d:ab:3b:de: 08:6e:81:80:38:26:7a:ce:d2:ed:d6:d2:82:6e:a0:30:68:88: 86:04:f4:df -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FNl1jbWMnuTnWvsPvLVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh NjVhYzUwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjM3NzNmZjFmY2VlMjA4ZjY3YjY4NjcxOTYxM2E1ZWYyNWIyYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KvS+Yug2FZWphTcp7ECZFjmaQK7 figuoQdS/4Cjfqgmmk+Mh8fr5WSgf1VP4O5hw2MgyLHS4+zQ7d5lEekoESh38mwU eDfFbkefC6ccP3ZWUKX0DVlrkGu/YMkVcsDgoe4rKnkBcRtXnzHepRcfdgxG3k5h jsARGVIXAfxKbp4yGtbXIkoLEKyiGY+2FU5IU/FDfunt8wM/Nox0xyI/dM0c1C5P 1SgZWuswzhuh8DYK9/Qn6uMnGU9iHM19dKIUJYi5bCexlII6FwgWqmJ6TYM2i3tz XAHAHK8VR4iUa9eGq3F+LL01qkvYOxB5oyDw/7D8p3T0nPBk6a+9E8o4+wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFA83c/8fzuII9ntoZxlhOl7yWyybMB8GA1UdIwQY MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt MWEwZTUwNDg2MzJhLzEvRHpkel94X080Z2oyZTJobkdXRTZYdkpiTEpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUx8AwQC uX44AwQCudJ4MA0EAgACMAcDBQMqC1bAMA0GCSqGSIb3DQEBCwUAA4IBAQAKkt86 vrKWvvYKo96EhT/Po70iK1B/C1MwWnTd14H7R4s3zr19Fu6OOR69zzhBoRRn4hXC 2TcYc9jrD5CY5NLwy3WXfUwvTrGnvAz+LDR3ohINKwZnUxB2to+FrexfBKpUFBcK OaFU2PTeUs+VRLqbH9TBxrWWMmX/vFQ5IhV/qFpdzWmSo3uOok6beiCczGcNDnGp QYroJJMym69A4PJyH3cJz87sBeO0ldeo3UpGIeeUSlTNCKWByH+o7hYiNxEVClX+ c5e/w0viVqDeKuJvukaOJ5qVIBFpRNOpia7zuNUFPkMS/R2rO94IboGAOCZ6ztLt 1tKCbqAwaIiGBPTf -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:45 2026 by rpki-client