This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa File: dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa (raw, json) Hash identifier: dYbqxC2rCCWq/yRZ4yUkpOLINJDRJe/smtZyFeEbLZs= Subject key identifier: 75:39:F2:1E:EE:DC:E6:59:99:E5:85:8D:AA:E1:37:1A:9E:D0:86:15 Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223 Certificate serial: 019B797E11B8106AE934F76D4E7FAF532FDC Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa Signing time: Thu 01 Jan 2026 12:17:43 +0000 ROA not before: Thu 01 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34300 IP address blocks: 62.173.128.0/19 maxlen: 32 85.93.128.0/19 maxlen: 32 185.31.160.0/22 maxlen: 32 185.113.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:11:b8:10:6a:e9:34:f7:6d:4e:7f:af:53:2f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223 Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7539f21eeedce65999e5858daae1371a9ed08615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:d5:70:54:4c:fc:79:94:ef:8c:a1:90:5e: 7a:e7:14:20:fc:cc:af:3e:2f:42:95:4a:74:9a:b3: dc:b4:36:25:bb:e5:c3:8b:68:f1:0a:96:d3:6e:3d: a6:f0:4d:67:ae:08:82:3b:7c:0f:3a:94:7e:cc:78: 40:40:11:51:42:ec:c4:5c:64:0f:d3:2c:be:31:dd: a1:f2:08:08:94:a4:c6:15:ad:ff:16:be:78:ad:4c: 4b:4a:87:71:5a:c7:cd:6e:59:17:fd:e7:e9:fe:95: 0e:8a:fd:0a:a0:00:2f:7f:35:f7:84:0c:c8:c3:99: 56:df:5b:36:b5:31:82:21:4e:18:82:c6:ff:86:a2: 87:46:ee:34:ef:58:d8:23:4e:9b:61:62:da:bb:a0: d4:ea:97:f4:0a:d1:aa:89:85:87:da:df:32:a7:4d: 95:46:9e:73:2e:68:b8:fd:80:af:9d:87:29:fa:df: 10:64:c6:66:6b:bd:ef:f9:b8:3f:29:d6:ed:7c:0d: 1e:cd:6c:4c:74:ce:43:df:d7:36:bc:2e:de:06:11: 5e:58:2d:bf:84:52:e3:0e:a1:2d:15:bf:6a:92:b3: c8:19:24:ed:4d:52:03:42:86:15:03:1d:da:1e:79: cc:d6:64:42:75:15:83:bd:7b:7a:86:6c:c2:64:13: f6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:39:F2:1E:EE:DC:E6:59:99:E5:85:8D:AA:E1:37:1A:9E:D0:86:15 X509v3 Authority Key Identifier: keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.173.128.0/19 85.93.128.0/19 185.31.160.0/22 185.113.108.0/22 Signature Algorithm: sha256WithRSAEncryption 54:0d:86:a4:4d:ce:7d:42:86:db:58:83:7e:52:92:33:d4:d1: 99:90:e7:e2:45:4a:14:10:d0:f7:27:24:a6:48:2e:25:94:7a: ed:ad:9e:a8:60:85:53:77:07:b0:56:d2:da:f4:1d:e1:24:5b: 8b:f6:57:c6:fc:1c:c3:8a:0b:63:c0:a6:33:37:fe:68:57:43: ff:f1:0f:4e:39:71:79:f6:d7:9e:94:32:f7:07:a2:76:d2:7e: 4b:18:63:4e:79:59:50:88:3e:4a:c2:72:a8:1c:1e:61:da:0e: a5:78:7a:a2:9b:e4:6c:c5:23:80:a9:05:78:7c:2f:3d:59:32: bd:ef:f7:8c:b8:ad:f1:5a:51:64:56:43:d2:62:dc:8a:c4:35: 26:16:2c:01:19:de:76:e5:8c:de:e9:f9:03:19:7b:c4:ff:4e: 8e:2b:da:ec:91:7e:02:da:8b:bc:28:43:47:f3:20:6a:4c:ba: 1a:0c:fc:98:60:2c:c1:fd:1e:05:5f:58:08:11:fe:ab:81:f6: 98:80:af:33:82:b3:a4:5a:75:e2:e7:c4:23:62:72:aa:54:4e: 09:b3:f0:1f:1d:03:92:c2:c6:4c:85:31:a8:48:5b:08:77:b1: 3a:50:71:87:d2:12:2e:67:6d:aa:65:c3:f6:93:47:6a:35:fd: 60:4b:f6:9b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fhG4EGrpNPdtTn+vUy/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZWRmMTE3NzRmNDQwN2FkZGJkZjNjZmJhNGMxZTdhYTAy NDIyMjMwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTM5ZjIxZWVlZGNlNjU5OTllNTg1OGRhYWUxMzcxYTllZDA4NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdHVcFRM/HmU74yhkF565xQg/Myv Pi9ClUp0mrPctDYlu+XDi2jxCpbTbj2m8E1nrgiCO3wPOpR+zHhAQBFRQuzEXGQP 0yy+Md2h8ggIlKTGFa3/Fr54rUxLSodxWsfNblkX/efp/pUOiv0KoAAvfzX3hAzI w5lW31s2tTGCIU4Ygsb/hqKHRu4071jYI06bYWLau6DU6pf0CtGqiYWH2t8yp02V Rp5zLmi4/YCvnYcp+t8QZMZma73v+bg/KdbtfA0ezWxMdM5D39c2vC7eBhFeWC2/ hFLjDqEtFb9qkrPIGSTtTVIDQoYVAx3aHnnM1mRCdRWDvXt6hmzCZBP2xQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHU58h7u3OZZmeWFjarhNxqe0IYVMB8GA1UdIwQY MBaAFLPt8Rd09EB63b3zz7pMHnqgJCIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgt YWRjYTFhNTdhYjBjLzEvZFRueUh1N2M1bG1aNVlXTnF1RTNHcDdRaGhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgtYWRjYTFhNTdhYjBj LzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFPq2AAwQF VV2AAwQCuR+gAwQCuXFsMA0GCSqGSIb3DQEBCwUAA4IBAQBUDYakTc59QobbWIN+ UpIz1NGZkOfiRUoUEND3JySmSC4llHrtrZ6oYIVTdwewVtLa9B3hJFuL9lfG/BzD igtjwKYzN/5oV0P/8Q9OOXF59teelDL3B6J20n5LGGNOeVlQiD5KwnKoHB5h2g6l eHqim+RsxSOAqQV4fC89WTK97/eMuK3xWlFkVkPSYtyKxDUmFiwBGd525Yze6fkD GXvE/06OK9rskX4C2ou8KENH8yBqTLoaDPyYYCzB/R4FX1gIEf6rgfaYgK8zgrOk WnXi58QjYnKqVE4Js/AfHQOSwsZMhTGoSFsId7E6UHGH0hIuZ22qZcP2k0dqNf1g S/ab -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:37 2026 by rpki-client