This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/DGYXYWLKOeu5jzMoeESZW6Y77nY.roa File: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (raw, json) Hash identifier: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k= Subject key identifier: 0C:66:17:61:62:CA:39:EB:B9:8F:33:28:78:44:99:5B:A6:3B:EE:76 Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67 Certificate serial: 019B7EA6754BB3129F92C32BEF149B14817A Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/DGYXYWLKOeu5jzMoeESZW6Y77nY.roa Signing time: Fri 02 Jan 2026 12:19:56 +0000 ROA not before: Fri 02 Jan 2026 12:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204203 IP address blocks: 194.48.198.0/24 maxlen: 24 2a13:9540::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:75:4b:b3:12:9f:92:c3:2b:ef:14:9b:14:81:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67 Validity Not Before: Jan 2 12:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c66176162ca39ebb98f33287844995ba63bee76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:4d:73:7e:20:dd:4c:b1:17:b4:78:ec:2b: d9:15:7b:a6:82:56:3a:5b:5f:fb:e6:0b:62:44:a0: 23:f3:18:7a:6e:fd:77:c4:61:eb:7d:2d:76:ca:ac: 9f:ea:5b:04:c3:c8:ef:cf:b9:95:28:d8:21:4c:d7: 6e:d2:28:85:cf:a6:07:77:bf:83:c6:da:62:09:a8: b4:f8:9a:3e:79:ab:52:0d:5e:b2:ab:2c:96:fa:3e: 55:e5:41:a6:43:c4:c5:6c:1d:e8:27:4f:8d:56:83: ed:7d:fe:28:8f:08:95:1b:58:2d:ad:5f:91:e0:8d: 99:ab:a8:46:9a:b0:92:ce:3c:65:f7:f8:62:83:ad: 13:98:50:25:79:25:a0:48:8a:e3:a7:63:55:ab:bc: 8c:44:c3:04:5f:44:3e:2a:af:e2:e2:12:5f:63:8d: 21:c2:ab:fc:29:ac:1b:09:f6:e1:64:19:8c:30:18: 24:09:9e:17:2f:5a:ba:40:e0:ed:8c:a5:0f:c2:2f: 2e:74:18:b4:a8:2b:0c:11:78:be:4d:c0:b1:27:0c: 11:13:46:84:86:6b:53:73:ff:59:c9:80:25:f0:ac: ae:d7:e2:36:1a:9d:f8:7a:08:13:d4:6f:53:1f:75: 3a:9f:00:a3:0f:bc:fd:33:70:12:af:49:40:58:3d: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:66:17:61:62:CA:39:EB:B9:8F:33:28:78:44:99:5B:A6:3B:EE:76 X509v3 Authority Key Identifier: keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/DGYXYWLKOeu5jzMoeESZW6Y77nY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.198.0/24 IPv6: 2a13:9540::/29 Signature Algorithm: sha256WithRSAEncryption 91:a6:02:f3:63:48:9f:d8:fb:68:de:68:7e:82:ff:f2:83:a6: 3b:35:91:33:bb:b4:9d:03:f6:07:5a:4c:cb:e6:29:a1:4b:9c: e3:aa:9c:4e:e0:a4:7c:83:b2:1a:fb:a8:75:73:06:14:bd:54: a3:b8:96:c7:a2:d3:a3:6d:ed:c8:84:04:4e:a7:22:3c:6b:80: 98:ae:fd:5b:52:84:9e:e5:f6:8c:35:f5:10:e1:8f:8d:78:18: a8:38:d4:38:f3:65:16:30:8f:2c:c5:57:ce:5b:54:98:7d:f7: 77:8c:15:04:20:d1:68:e2:13:35:48:d0:0f:ba:d3:33:5d:a9: de:e8:21:cc:67:4d:70:a5:57:9c:f0:0c:5a:ac:e5:8d:f9:d3: 16:c3:75:22:62:41:c8:92:55:29:7a:f9:2e:8d:1c:57:8f:c6: a3:11:3b:e9:50:5a:69:94:b2:fc:3b:bd:9b:cc:71:6f:a7:33: f2:b4:19:8a:e8:91:6d:8b:c8:b5:f2:04:4a:f1:8c:ec:ad:d3: 7c:70:1d:48:cc:d7:6a:05:c3:18:8c:86:1b:91:ae:64:ea:b3: 4d:e7:1d:92:78:11:2a:bc:7d:8f:35:59:36:56:e3:8e:ac:73: f8:cc:04:7e:11:32:3e:7e:c9:61:69:b4:4e:3b:e3:ab:4c:98: df:7a:f8:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pnVLsxKfksMr7xSbFIF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOWE1MmUzN2Q3Y2FjYzY5ZjhlZmVmYzc1MzNiYzBiMThj YjVlNjcwHhcNMjYwMTAyMTIxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzY2MTc2MTYyY2EzOWViYjk4ZjMzMjg3ODQ0OTk1YmE2M2JlZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzRNc34g3UyxF7R47CvZFXumglY6 W1/75gtiRKAj8xh6bv13xGHrfS12yqyf6lsEw8jvz7mVKNghTNdu0iiFz6YHd7+D xtpiCai0+Jo+eatSDV6yqyyW+j5V5UGmQ8TFbB3oJ0+NVoPtff4ojwiVG1gtrV+R 4I2Zq6hGmrCSzjxl9/hig60TmFAleSWgSIrjp2NVq7yMRMMEX0Q+Kq/i4hJfY40h wqv8KawbCfbhZBmMMBgkCZ4XL1q6QODtjKUPwi8udBi0qCsMEXi+TcCxJwwRE0aE hmtTc/9ZyYAl8Kyu1+I2Gp34eggT1G9TH3U6nwCjD7z9M3ASr0lAWD3TCwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAxmF2FiyjnruY8zKHhEmVumO+52MB8GA1UdIwQY MBaAFO+aUuN9fKzGn47+/HUzvAsYy15nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEt YjFhOWJkMjg2NTFlLzEvREdZWFlXTEtPZXU1anpNb2VFU1pXNlk3N25ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEtYjFhOWJkMjg2NTFl LzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwjDGMA0E AgACMAcDBQMqE5VAMA0GCSqGSIb3DQEBCwUAA4IBAQCRpgLzY0if2Pto3mh+gv/y g6Y7NZEzu7SdA/YHWkzL5imhS5zjqpxO4KR8g7Ia+6h1cwYUvVSjuJbHotOjbe3I hAROpyI8a4CYrv1bUoSe5faMNfUQ4Y+NeBioONQ482UWMI8sxVfOW1SYffd3jBUE INFo4hM1SNAPutMzXane6CHMZ01wpVec8AxarOWN+dMWw3UiYkHIklUpevkujRxX j8ajETvpUFpplLL8O72bzHFvpzPytBmK6JFti8i18gRK8YzsrdN8cB1IzNdqBcMY jIYbka5k6rNN5x2SeBEqvH2PNVk2VuOOrHP4zAR+ETI+fslhabROO+OrTJjfevhO -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:28 2026 by rpki-client