This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dvgDKJPGgy8gE0Y0WXpehslwvt0.roa File: dvgDKJPGgy8gE0Y0WXpehslwvt0.roa (raw, json) Hash identifier: meuNhcKoxSzT2C1r6JQ6+vLpJFhktyr+xvnGvKjOyuQ= Subject key identifier: 76:F8:03:28:93:C6:83:2F:20:13:46:34:59:7A:5E:86:C9:70:BE:DD Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77DB4EF3B06B4937408AD42B1B4A5 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dvgDKJPGgy8gE0Y0WXpehslwvt0.roa Signing time: Fri 02 Jan 2026 12:21:04 +0000 ROA not before: Fri 02 Jan 2026 12:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56341 IP address blocks: 46.52.224.0/21 maxlen: 21 109.203.198.0/23 maxlen: 23 188.133.224.0/20 maxlen: 20 188.133.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:7d:b4:ef:3b:06:b4:93:74:08:ad:42:b1:b4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76f8032893c6832f20134634597a5e86c970bedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:68:7c:5b:6f:2c:84:07:ad:d1:f4:41:70: 73:ba:25:a0:27:8e:ae:41:0c:46:39:12:d8:fc:01: 8b:c4:fe:3e:c8:d2:b3:e3:f7:60:f8:df:cd:2e:ed: eb:30:73:d9:aa:f5:fd:cb:82:29:cb:30:80:78:ba: 98:4d:04:d1:9a:cc:7d:61:18:cc:19:4b:e8:90:8b: 47:9a:b5:d9:f8:70:c0:99:9e:96:4d:dd:4d:06:ac: 3f:e2:e6:bd:3a:2b:d7:72:c8:b8:76:a5:4c:ae:2c: ce:ef:66:4d:c5:17:3f:52:38:6c:72:60:b1:7d:0c: e6:11:27:a6:c0:77:32:57:13:4f:b5:d4:89:ae:6b: b9:04:78:4c:f8:b5:2e:a4:95:dc:e9:df:6f:5f:14: bb:f8:94:46:b0:13:80:50:28:43:bd:c6:f9:19:a8: f9:35:bb:41:0f:8a:2e:72:d8:76:b4:25:1c:41:93: cb:e6:13:94:3b:d0:6d:ea:4f:2b:11:e2:7d:7a:e9: 1b:f3:91:c7:fb:c1:bb:9f:43:7c:8a:8a:43:dc:ca: b6:2d:b7:7e:b9:9a:dd:98:6c:b4:47:82:61:d2:15: 94:5d:3d:0a:00:8e:aa:2e:9b:bd:af:10:40:17:28: 22:fd:c1:4d:e4:ae:8e:13:c6:4a:ea:a5:fa:48:8a: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F8:03:28:93:C6:83:2F:20:13:46:34:59:7A:5E:86:C9:70:BE:DD X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dvgDKJPGgy8gE0Y0WXpehslwvt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.52.224.0/21 109.203.198.0/23 188.133.224.0/19 Signature Algorithm: sha256WithRSAEncryption 10:c0:2f:d7:1d:99:e4:bd:42:48:05:02:44:1b:2d:7a:dd:7a: ed:64:75:d3:71:39:25:88:41:4a:3d:1e:9f:c1:47:d7:08:3e: b8:bc:02:21:28:07:21:5e:3a:ac:4e:03:ca:ad:8b:94:fc:b4: 68:b6:1c:67:fb:33:eb:01:d8:da:45:9e:a0:bc:84:88:79:86: 6c:96:6f:70:22:8f:e0:27:47:70:fe:51:2d:47:51:66:da:d9: f8:a2:f3:79:1e:94:39:ac:5d:7e:94:a7:1a:01:5b:77:94:d9: dd:19:0f:e0:46:89:ed:cb:0e:0b:ee:c3:37:aa:d4:8c:6f:7d: b8:5e:39:93:c2:3c:51:7b:d9:8a:bf:ed:43:51:71:66:95:51: 38:00:c8:92:20:ac:19:ef:d1:3e:cc:7b:8e:74:01:d1:fe:da: e2:28:cb:41:47:81:a6:28:ec:b1:e0:17:73:d3:91:ea:7b:13: 3f:04:62:f9:15:2f:48:ba:22:87:03:c7:ce:f8:54:36:08:47: 46:a2:38:96:58:d6:4d:ae:b5:91:7f:0d:46:ea:cd:5d:1d:39: 7e:5b:69:21:c3:61:99:53:12:eb:9b:5d:bc:9c:03:83:d2:33: 35:35:6e:3b:1a:aa:73:35:79:e3:1f:7e:cc:31:48:bc:2d:65: 8a:d5:ed:54 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p3207zsGtJN0CK1CsbSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmY4MDMyODkzYzY4MzJmMjAxMzQ2MzQ1OTdhNWU4NmM5NzBiZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgZofFtvLIQHrdH0QXBzuiWgJ46u QQxGORLY/AGLxP4+yNKz4/dg+N/NLu3rMHPZqvX9y4IpyzCAeLqYTQTRmsx9YRjM GUvokItHmrXZ+HDAmZ6WTd1NBqw/4ua9OivXcsi4dqVMrizO72ZNxRc/UjhscmCx fQzmESemwHcyVxNPtdSJrmu5BHhM+LUupJXc6d9vXxS7+JRGsBOAUChDvcb5Gaj5 NbtBD4oucth2tCUcQZPL5hOUO9Bt6k8rEeJ9eukb85HH+8G7n0N8iopD3Mq2Lbd+ uZrdmGy0R4Jh0hWUXT0KAI6qLpu9rxBAFygi/cFN5K6OE8ZK6qX6SIok2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHb4AyiTxoMvIBNGNFl6XobJcL7dMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvZHZnREtKUEdneThnRTBZMFdYcGVoc2x3dnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLjTgAwQB bcvGAwQFvIXgMA0GCSqGSIb3DQEBCwUAA4IBAQAQwC/XHZnkvUJIBQJEGy163Xrt ZHXTcTkliEFKPR6fwUfXCD64vAIhKAchXjqsTgPKrYuU/LRothxn+zPrAdjaRZ6g vISIeYZslm9wIo/gJ0dw/lEtR1Fm2tn4ovN5HpQ5rF1+lKcaAVt3lNndGQ/gRont yw4L7sM3qtSMb324XjmTwjxRe9mKv+1DUXFmlVE4AMiSIKwZ79E+zHuOdAHR/tri KMtBR4GmKOyx4Bdz05HqexM/BGL5FS9IuiKHA8fO+FQ2CEdGojiWWNZNrrWRfw1G 6s1dHTl+W2khw2GZUxLrm128nAOD0jM1NW47GqpzNXnjH37MMUi8LWWK1e1U -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:06 2026 by rpki-client