This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/rFwq2nzQIEZ5NhQDePRqPCbQDko.roa File: rFwq2nzQIEZ5NhQDePRqPCbQDko.roa (raw, json) Hash identifier: bEqUY1ErOtavF/ybp/ETS33kos0+WHhMLq9SxRm4BB8= Subject key identifier: AC:5C:2A:DA:7C:D0:20:46:79:36:14:03:78:F4:6A:3C:26:D0:0E:4A Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019B79ED628F0AF905757CD881BA46B09082 Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/rFwq2nzQIEZ5NhQDePRqPCbQDko.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28910 IP address blocks: 84.54.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:62:8f:0a:f9:05:75:7c:d8:81:ba:46:b0:90:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac5c2ada7cd020467936140378f46a3c26d00e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:e2:3e:c8:fc:7a:7f:9e:83:5a:ff:d6:ee: a0:8a:ba:2a:0d:67:d3:78:e0:7b:02:1e:04:7a:29: 5a:42:c3:81:b2:e5:42:41:f0:8f:13:3a:ce:13:8d: 3b:dd:f9:e7:b5:e4:04:bb:5f:76:45:29:71:aa:51: a1:29:88:1d:5e:f5:14:38:cf:56:39:cf:5c:65:06: 8f:c0:88:5e:90:b3:c6:bf:10:2d:68:2b:96:70:e4: 86:32:ae:29:8c:b1:ea:ad:df:54:5c:ab:97:42:53: 4c:34:c2:9c:d8:63:73:73:7b:0b:54:98:69:ba:7e: 9c:6c:11:29:db:9b:c9:dd:e7:2f:f8:04:e9:08:df: d1:a7:0a:06:29:3a:9c:2e:e8:cb:03:15:92:a8:f4: fe:18:05:16:2a:43:e3:59:55:3a:cb:24:e7:85:95: f4:4a:f2:74:82:ac:79:39:1b:65:64:10:08:22:2f: fe:a0:92:e9:3f:81:82:46:fc:f9:8c:33:0c:f0:68: de:0f:5c:63:63:a6:38:71:75:5c:09:69:8b:e7:c0: a6:e5:ec:e6:00:fa:8b:2c:b9:3f:40:15:fc:bf:b5: ae:e5:59:06:56:43:ef:19:47:57:d9:14:48:5d:8c: 1e:1f:60:7a:a4:39:b9:bf:df:a6:0b:31:12:2e:dd: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5C:2A:DA:7C:D0:20:46:79:36:14:03:78:F4:6A:3C:26:D0:0E:4A X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/rFwq2nzQIEZ5NhQDePRqPCbQDko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.124.0/24 Signature Algorithm: sha256WithRSAEncryption 21:28:5a:3a:f2:bb:e5:a8:06:c3:b2:d5:cc:aa:5c:94:35:04: e3:44:82:89:b5:92:92:7a:79:e6:8d:36:c8:18:ce:36:a0:e4: e8:8a:2a:d4:df:a8:fb:88:03:47:be:0d:fb:1b:5f:21:2a:d2: 28:56:49:83:6f:37:74:2e:fd:76:1e:5c:43:40:62:b5:92:5a: 74:ff:f8:b8:ec:df:c3:9a:dd:8a:f3:2c:e7:b3:1a:db:58:93: 18:47:21:e0:72:52:a2:ce:dd:7d:c2:94:d4:ec:ef:3a:e5:2b: 0d:38:ce:f4:fc:b7:bb:c0:86:3b:f0:7d:74:46:61:27:f7:75: cf:15:0c:1c:72:01:c8:ab:cf:c8:4f:54:22:9c:31:d4:db:85: 04:00:df:f0:a3:61:49:27:77:63:12:54:27:54:d1:2d:66:a8: 68:43:56:0b:ee:08:b6:a1:41:dc:8a:d4:31:8c:a6:22:7f:82: 19:24:da:b9:6c:d3:dd:1c:5f:d5:27:51:b5:93:b1:27:c9:69: dc:9a:b2:d7:dc:12:e4:3a:bc:06:92:2e:1c:84:81:8d:0a:5f: aa:8b:a8:08:2a:56:d6:a3:f7:e7:92:ff:f4:e9:8a:26:56:1a: 68:9a:f4:a7:6d:68:53:21:5c:24:4d:be:6b:f8:4e:18:6a:0e: e6:7a:0f:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WKPCvkFdXzYgbpGsJCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzVjMmFkYTdjZDAyMDQ2NzkzNjE0MDM3OGY0NmEzYzI2ZDAwZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCTiPsj8en+eg1r/1u6giroqDWfT eOB7Ah4EeilaQsOBsuVCQfCPEzrOE4073fnnteQEu192RSlxqlGhKYgdXvUUOM9W Oc9cZQaPwIhekLPGvxAtaCuWcOSGMq4pjLHqrd9UXKuXQlNMNMKc2GNzc3sLVJhp un6cbBEp25vJ3ecv+ATpCN/RpwoGKTqcLujLAxWSqPT+GAUWKkPjWVU6yyTnhZX0 SvJ0gqx5ORtlZBAIIi/+oJLpP4GCRvz5jDMM8GjeD1xjY6Y4cXVcCWmL58Cm5ezm APqLLLk/QBX8v7Wu5VkGVkPvGUdX2RRIXYweH2B6pDm5v9+mCzESLt2uLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxcKtp80CBGeTYUA3j0ajwm0A5KMB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEvckZ3cTJuelFJRVo1TmhRRGVQUnFQQ2JRRGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDZ8MA0G CSqGSIb3DQEBCwUAA4IBAQAhKFo68rvlqAbDstXMqlyUNQTjRIKJtZKSennmjTbI GM42oOToiirU36j7iANHvg37G18hKtIoVkmDbzd0Lv12HlxDQGK1klp0//i47N/D mt2K8yznsxrbWJMYRyHgclKizt19wpTU7O865SsNOM70/Le7wIY78H10RmEn93XP FQwccgHIq8/IT1QinDHU24UEAN/wo2FJJ3djElQnVNEtZqhoQ1YL7gi2oUHcitQx jKYif4IZJNq5bNPdHF/VJ1G1k7EnyWncmrLX3BLkOrwGki4chIGNCl+qi6gIKlbW o/fnkv/06YomVhpomvSnbWhTIVwkTb5r+E4Yag7meg8p -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:18 2026 by rpki-client