This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/dxGf9vfm8QE59GMiUFHQVxIMbGE.roa
File: dxGf9vfm8QE59GMiUFHQVxIMbGE.roa (raw, json)
Hash identifier: FZSqF3WaWChaxCSkXHiLYFuVolX85yPIbAjmKkSJQAM=
Subject key identifier: 77:11:9F:F6:F7:E6:F1:01:39:F4:63:22:50:51:D0:57:12:0C:6C:61
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019B7E37F3DEB6BE14097FDA6B107228B270
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/dxGf9vfm8QE59GMiUFHQVxIMbGE.roa
Signing time: Fri 02 Jan 2026 10:19:14 +0000
ROA not before: Fri 02 Jan 2026 10:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 65593
IP address blocks: 84.44.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:f3:de:b6:be:14:09:7f:da:6b:10:72:28:b2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 10:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77119ff6f7e6f10139f463225051d057120c6c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:eb:2e:e7:10:cd:9b:4c:28:35:c6:22:24:
4c:a8:ed:85:1f:e8:d9:96:c9:0d:6f:a7:86:c4:ac:
2b:8b:60:5a:8d:25:f5:6f:91:12:5f:aa:bc:69:23:
d4:4e:1d:a7:cf:df:cf:4f:83:de:eb:2b:ab:c6:55:
03:5f:fa:e6:0b:9a:e3:59:a7:4f:74:f9:b4:be:90:
fd:83:f4:19:ed:c3:4f:c2:9b:f5:0b:12:d3:bc:cd:
97:04:19:74:f3:42:75:a1:31:b8:de:8c:f5:8e:02:
58:20:f5:a8:36:01:94:66:88:3c:21:23:ee:82:a2:
bd:2f:e4:3d:54:78:d9:e0:ae:a8:99:44:48:19:9d:
ce:ae:63:b0:e0:7f:2e:ef:46:16:0a:60:b7:67:b9:
4c:b3:30:d4:59:23:68:30:0f:fd:cf:3f:55:2b:0b:
2d:58:ba:8d:0b:03:03:10:7c:4b:a3:dc:c5:73:c3:
50:0d:d8:0e:bd:75:80:a5:53:95:67:8f:95:14:99:
74:09:a6:70:e6:e6:7f:c4:06:38:26:14:b3:73:3c:
14:17:45:3c:e6:3d:f3:1b:b8:cb:3d:a7:d9:11:23:
75:11:ff:4a:1e:0d:4f:81:2b:21:13:6a:79:96:c9:
ed:63:05:5f:68:a0:18:cc:81:d9:ad:60:6a:22:d1:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:9F:F6:F7:E6:F1:01:39:F4:63:22:50:51:D0:57:12:0C:6C:61
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/dxGf9vfm8QE59GMiUFHQVxIMbGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b5:76:91:e8:b3:95:1e:55:c0:61:d2:57:9c:53:de:1a:85:
20:9a:92:ad:cf:c1:38:1d:8e:5a:fb:0b:2b:89:96:80:65:c6:
85:b7:b3:b6:23:5f:3b:13:d0:0f:ab:a3:3d:ba:46:04:34:f5:
dd:c0:91:f5:32:cb:1f:86:67:f6:4f:5e:29:2e:03:87:9e:f7:
29:de:b4:8b:26:49:22:5c:35:cf:ba:d3:48:dd:3b:51:5d:0a:
3b:e1:ec:b2:1f:7c:a5:7f:a1:cc:fd:3b:75:3c:6e:ed:b5:ec:
27:da:2a:71:bd:ec:07:8d:d0:b5:40:66:1c:e5:75:16:65:64:
34:c8:40:87:87:20:69:ee:a4:a1:2f:43:b4:cb:ff:39:7e:88:
d8:80:88:20:7a:04:b6:23:dd:d6:b3:cc:83:07:ae:50:c5:e0:
79:5c:4b:22:04:ed:45:33:5d:d0:ca:e1:4b:fd:49:3e:d3:6d:
f7:72:8f:a1:2f:2c:07:54:54:3f:a7:1e:3c:7d:47:74:10:24:
21:4c:bb:35:8e:0a:f2:a5:5f:b7:0b:51:9a:f0:4b:1f:fb:7d:
8d:42:1d:7a:0c:8d:70:05:d1:e3:a0:33:ac:f7:9c:19:75:38:
9b:78:9c:6f:3c:96:ff:bb:dd:9f:f2:78:2d:49:74:cf:91:1a:
c1:f9:6d:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N/Petr4UCX/aaxByKLJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzExOWZmNmY3ZTZmMTAxMzlmNDYzMjI1MDUxZDA1NzEyMGM2YzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+zrLucQzZtMKDXGIiRMqO2FH+jZ
lskNb6eGxKwri2BajSX1b5ESX6q8aSPUTh2nz9/PT4Pe6yurxlUDX/rmC5rjWadP
dPm0vpD9g/QZ7cNPwpv1CxLTvM2XBBl080J1oTG43oz1jgJYIPWoNgGUZog8ISPu
gqK9L+Q9VHjZ4K6omURIGZ3OrmOw4H8u70YWCmC3Z7lMszDUWSNoMA/9zz9VKwst
WLqNCwMDEHxLo9zFc8NQDdgOvXWApVOVZ4+VFJl0CaZw5uZ/xAY4JhSzczwUF0U8
5j3zG7jLPafZESN1Ef9KHg1PgSshE2p5lsntYwVfaKAYzIHZrWBqItFUyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHcRn/b35vEBOfRjIlBR0FcSDGxhMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvZHhHZjl2Zm04UUU1OUdNaVVGSFFWeElNYkdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCxQMA0G
CSqGSIb3DQEBCwUAA4IBAQA7tXaR6LOVHlXAYdJXnFPeGoUgmpKtz8E4HY5a+wsr
iZaAZcaFt7O2I187E9APq6M9ukYENPXdwJH1Mssfhmf2T14pLgOHnvcp3rSLJkki
XDXPutNI3TtRXQo74eyyH3ylf6HM/Tt1PG7ttewn2ipxvewHjdC1QGYc5XUWZWQ0
yECHhyBp7qShL0O0y/85fojYgIggegS2I93Ws8yDB65QxeB5XEsiBO1FM13QyuFL
/Uk+0233co+hLywHVFQ/px48fUd0ECQhTLs1jgrypV+3C1Ga8Esf+32NQh16DI1w
BdHjoDOs95wZdTibeJxvPJb/u92f8ngtSXTPkRrB+W0n
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:51 2026 by rpki-client