This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/DdZL2Ei2USqI1D8JQatISOxbCY0.roa File: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (raw, json) Hash identifier: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ= Subject key identifier: 0D:D6:4B:D8:48:B6:51:2A:88:D4:3F:09:41:AB:48:48:EC:5B:09:8D Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019B7F82CA92818F81BC28A3FCD022632A0A Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/DdZL2Ei2USqI1D8JQatISOxbCY0.roa Signing time: Fri 02 Jan 2026 16:20:36 +0000 ROA not before: Fri 02 Jan 2026 16:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215446 IP address blocks: 188.93.192.0/22 maxlen: 24 2a0e:5f07::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ca:92:81:8f:81:bc:28:a3:fc:d0:22:63:2a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dd64bd848b6512a88d43f0941ab4848ec5b098d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:0e:e3:64:6c:8b:ed:cb:fd:83:99:08:e3: b4:0b:8c:85:61:53:6e:7b:4b:ed:bd:cf:95:68:8e: ce:72:9c:5f:33:71:b6:d5:8f:7d:bc:01:0f:51:53: 7e:ba:9b:80:07:ea:b6:13:04:4e:49:f2:77:ab:fe: bd:48:76:d9:3a:69:9d:02:85:21:ab:7f:75:3f:02: 10:60:fd:59:35:66:7e:2a:a1:ae:b3:04:03:e0:50: ab:93:12:d2:95:5e:c4:41:f5:dc:dc:88:58:ca:e4: e8:89:bb:99:1e:c4:78:e4:99:e4:d4:6d:f0:9f:4b: 13:a5:a7:f7:d7:4a:68:cf:cb:25:7b:a5:18:b8:e5: cb:d1:78:bb:e5:1f:f4:6d:83:c6:44:ed:52:81:9a: 66:11:44:ba:d6:22:7a:5b:77:e6:b6:08:32:44:9b: 34:6e:cd:a1:fe:c0:a5:e9:08:a8:a2:86:f8:0f:69: cd:e9:64:92:8c:25:d8:98:24:d7:d8:ba:b9:5b:4c: 23:15:2e:ce:ae:0c:d3:ae:26:1f:31:ba:05:90:a2: 43:6c:c5:74:52:65:54:cb:cb:8e:9e:c0:14:14:f3: a1:50:b3:5b:65:f4:26:00:98:36:de:ae:d9:a5:d3: 9e:0b:81:7e:d6:81:95:73:eb:5a:72:a5:c8:9b:f1: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D6:4B:D8:48:B6:51:2A:88:D4:3F:09:41:AB:48:48:EC:5B:09:8D X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/DdZL2Ei2USqI1D8JQatISOxbCY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.93.192.0/22 IPv6: 2a0e:5f07::/32 Signature Algorithm: sha256WithRSAEncryption 2e:47:e8:3e:33:c7:b4:78:e8:a3:80:83:f4:c1:82:41:d1:cc: e5:94:55:38:f8:7f:d8:e3:1e:21:48:c4:dc:c5:d9:df:fe:a5: 4e:3b:90:ca:52:da:a5:57:a7:f5:0b:86:06:91:40:7c:2c:be: 4c:a3:fd:6c:64:d7:c2:c1:b0:72:1a:69:4d:3b:41:5c:1d:27: 64:40:8f:b0:f0:c0:f7:a3:46:30:84:72:ef:47:94:0f:7d:30: be:fa:7b:75:bd:7d:72:76:28:bb:1d:fb:56:3d:0c:b2:eb:7a: db:30:ea:bc:46:40:ea:21:9e:c7:ed:04:71:18:a5:94:00:fc: 42:fc:11:fe:49:a9:56:b5:50:f9:80:32:8b:b6:27:12:94:a0: 75:cf:36:97:ed:e5:d4:35:48:2e:ec:a8:09:f8:80:cf:7d:d2: be:4d:6d:2f:e1:8f:63:47:1e:47:24:ca:0b:3a:fb:83:ee:23: ec:83:13:15:83:2d:e7:6c:82:01:37:05:b8:80:63:8f:f2:c8: 8d:88:db:e9:4c:3a:40:d4:36:34:69:19:ba:be:a0:17:c6:ef: d6:2d:11:4d:7d:f9:97:ff:df:ff:19:f8:72:df:1f:68:5b:de: 58:1b:68:9c:3f:c5:d0:c0:cf:53:67:36:07:4d:4c:7e:ab:51: 4b:22:f4:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gsqSgY+BvCij/NAiYyoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGQ2NGJkODQ4YjY1MTJhODhkNDNmMDk0MWFiNDg0OGVjNWIwOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/kO42Rsi+3L/YOZCOO0C4yFYVNu e0vtvc+VaI7OcpxfM3G21Y99vAEPUVN+upuAB+q2EwROSfJ3q/69SHbZOmmdAoUh q391PwIQYP1ZNWZ+KqGuswQD4FCrkxLSlV7EQfXc3IhYyuToibuZHsR45Jnk1G3w n0sTpaf310poz8sle6UYuOXL0Xi75R/0bYPGRO1SgZpmEUS61iJ6W3fmtggyRJs0 bs2h/sCl6Qiooob4D2nN6WSSjCXYmCTX2Lq5W0wjFS7OrgzTriYfMboFkKJDbMV0 UmVUy8uOnsAUFPOhULNbZfQmAJg23q7ZpdOeC4F+1oGVc+tacqXIm/ET2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA3WS9hItlEqiNQ/CUGrSEjsWwmNMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvRGRaTDJFaTJVU3FJMUQ4SlFhdElTT3hiQ1kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvF3AMA0E AgACMAcDBQAqDl8HMA0GCSqGSIb3DQEBCwUAA4IBAQAuR+g+M8e0eOijgIP0wYJB 0czllFU4+H/Y4x4hSMTcxdnf/qVOO5DKUtqlV6f1C4YGkUB8LL5Mo/1sZNfCwbBy GmlNO0FcHSdkQI+w8MD3o0YwhHLvR5QPfTC++nt1vX1ydii7HftWPQyy63rbMOq8 RkDqIZ7H7QRxGKWUAPxC/BH+SalWtVD5gDKLticSlKB1zzaX7eXUNUgu7KgJ+IDP fdK+TW0v4Y9jRx5HJMoLOvuD7iPsgxMVgy3nbIIBNwW4gGOP8siNiNvpTDpA1DY0 aRm6vqAXxu/WLRFNffmX/9//Gfhy3x9oW95YG2icP8XQwM9TZzYHTUx+q1FLIvSB -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:14 2026 by rpki-client