This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/r-DgonvlWJqtYHHlaiaRiANzpGc.roa File: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (raw, json) Hash identifier: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ= Subject key identifier: AF:E0:E0:A2:7B:E5:58:9A:AD:60:71:E5:6A:26:91:88:03:73:A4:67 Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Certificate serial: 019B790FF8683866FDAC89A67926EC2D494A Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/r-DgonvlWJqtYHHlaiaRiANzpGc.roa Signing time: Thu 01 Jan 2026 10:17:28 +0000 ROA not before: Thu 01 Jan 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202761 IP address blocks: 193.218.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f8:68:38:66:fd:ac:89:a6:79:26:ec:2d:49:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afe0e0a27be5589aad6071e56a2691880373a467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:28:d5:fd:0b:e3:e4:cc:ab:ef:71:b3:82: 2b:c4:93:6d:39:35:64:d8:bd:bb:49:58:73:2d:85: 33:6a:e2:0e:74:69:79:c6:7e:dd:1f:9e:f2:25:ec: dd:96:b3:51:3a:c7:b7:7a:0d:cf:e9:c1:0a:a2:82: fc:3f:b2:40:f4:6e:7d:b3:c0:ae:b4:3e:d9:f9:e4: 80:d8:5f:5d:e6:47:a1:69:b3:aa:9f:d7:8d:58:2a: 5a:68:cc:17:29:0e:74:b6:45:06:0b:99:19:27:84: cd:8e:9a:63:cf:4c:98:77:05:a6:7a:fc:a4:83:cf: db:0a:72:d2:7c:cf:c6:47:e7:89:de:c3:e3:98:f1: a9:a7:d5:63:79:bf:32:0e:07:70:69:bc:61:9c:01: 3e:d9:ac:43:2b:9b:c6:3f:97:91:b3:4d:79:df:bc: 70:e7:0f:f2:dc:29:8e:4b:be:4c:ba:42:88:88:b2: e3:b1:0b:3b:57:3e:0c:61:3a:1b:2f:3f:66:69:38: e8:d4:95:26:b3:10:37:c5:74:f9:78:05:3e:7b:ee: 76:83:0a:69:bc:41:72:34:5d:85:0d:65:1a:a9:ca: 01:9f:b5:89:59:d3:8d:84:53:61:93:5a:4f:d3:cc: 18:10:d6:7b:ba:50:86:fc:4b:1a:60:1b:12:bd:6c: 6c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E0:E0:A2:7B:E5:58:9A:AD:60:71:E5:6A:26:91:88:03:73:A4:67 X509v3 Authority Key Identifier: keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/r-DgonvlWJqtYHHlaiaRiANzpGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.176.0/22 Signature Algorithm: sha256WithRSAEncryption a7:a8:be:a3:5f:39:4f:19:ca:a3:fc:dd:2c:2f:76:ca:44:d9: 2e:b7:72:5b:35:ac:86:0f:c5:68:94:b5:b0:0e:9f:6d:fc:63: ed:f8:40:d2:53:1e:9d:ff:4e:22:4d:40:12:e6:21:e6:f0:71: 76:25:6c:e2:69:1b:37:2d:1a:88:91:e1:af:f3:b8:d6:b8:b4: d0:35:f0:28:07:28:e4:8f:c6:c8:cd:a6:73:f3:0b:39:d1:02: 4c:bd:19:6d:2b:8a:8b:34:79:01:dc:1d:84:56:dc:f8:4f:4b: 09:0e:af:b4:34:18:f8:c5:51:77:64:c4:5c:f9:2f:42:ed:c7: 07:d9:6f:05:47:72:14:ca:22:cf:1c:6e:09:94:61:62:79:32: ce:ed:19:93:b0:c8:bd:2e:3f:cf:fe:e5:84:04:97:d4:f6:02: 75:39:da:3c:08:a1:22:61:99:5f:19:23:10:2f:98:a2:fd:a8: d0:d6:8e:3f:8c:b0:fd:b8:19:3d:ce:9c:a7:0a:b3:91:cd:76: 98:92:c5:04:2a:f4:55:6e:aa:88:7a:c8:c6:c5:30:57:68:96: 96:c9:01:da:e0:91:4a:dc:67:0d:66:c7:81:8a:63:eb:cd:9a: 56:b8:2b:71:06:53:3f:fa:c1:99:72:42:43:a9:9c:ce:c5:27: b2:45:0a:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/hoOGb9rImmeSbsLUlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5 MjJkZDcwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmUwZTBhMjdiZTU1ODlhYWQ2MDcxZTU2YTI2OTE4ODAzNzNhNDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU4o1f0L4+TMq+9xs4IrxJNtOTVk 2L27SVhzLYUzauIOdGl5xn7dH57yJezdlrNROse3eg3P6cEKooL8P7JA9G59s8Cu tD7Z+eSA2F9d5kehabOqn9eNWCpaaMwXKQ50tkUGC5kZJ4TNjppjz0yYdwWmevyk g8/bCnLSfM/GR+eJ3sPjmPGpp9Vjeb8yDgdwabxhnAE+2axDK5vGP5eRs01537xw 5w/y3CmOS75MukKIiLLjsQs7Vz4MYTobLz9maTjo1JUmsxA3xXT5eAU+e+52gwpp vEFyNF2FDWUaqcoBn7WJWdONhFNhk1pP08wYENZ7ulCG/EsaYBsSvWxs4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/g4KJ75ViarWBx5WomkYgDc6RnMB8GA1UdIwQY MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt ZjlhNDM3MDlkMDBiLzEvci1EZ29udmxXSnF0WUhIbGFpYVJpQU56cEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwdqwMA0G CSqGSIb3DQEBCwUAA4IBAQCnqL6jXzlPGcqj/N0sL3bKRNkut3JbNayGD8VolLWw Dp9t/GPt+EDSUx6d/04iTUAS5iHm8HF2JWziaRs3LRqIkeGv87jWuLTQNfAoByjk j8bIzaZz8ws50QJMvRltK4qLNHkB3B2EVtz4T0sJDq+0NBj4xVF3ZMRc+S9C7ccH 2W8FR3IUyiLPHG4JlGFieTLO7RmTsMi9Lj/P/uWEBJfU9gJ1Odo8CKEiYZlfGSMQ L5ii/ajQ1o4/jLD9uBk9zpynCrORzXaYksUEKvRVbqqIesjGxTBXaJaWyQHa4JFK 3GcNZseBimPrzZpWuCtxBlM/+sGZckJDqZzOxSeyRQpE -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:10 2026 by rpki-client