This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa File: RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa (raw, json) Hash identifier: BRLaihFLCVYFLpw45+cqT3ozkSzNaiRjjdbnkvsoEfo= Subject key identifier: 44:30:95:CE:ED:DA:AE:CB:F0:7D:86:75:D1:DD:CE:07:18:DD:53:E4 Certificate issuer: /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b Certificate serial: 019B7D5D132798A899792F89ED1EA683FD6C Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2602 IP address blocks: 193.168.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:13:27:98:a8:99:79:2f:89:ed:1e:a6:83:fd:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=443095ceeddaaecbf07d8675d1ddce0718dd53e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:ca:69:d5:84:53:cd:41:d1:75:19:10:14: b5:3f:36:8c:5f:f5:95:db:01:22:5d:9a:9e:a5:ba: 3b:35:a9:de:64:ff:99:58:27:76:bc:18:b6:9c:46: 86:62:89:e3:86:23:ea:c5:ee:c6:c3:fb:12:77:36: 34:38:68:05:d7:46:ed:66:ae:01:5b:e7:cc:0e:89: 34:04:17:42:57:64:30:6a:28:b2:93:cf:dc:2e:07: bc:77:aa:ec:da:4b:69:45:79:fc:22:e6:97:4e:83: aa:99:5c:12:a8:cf:3c:e9:dc:f8:a9:51:d8:d3:84: 60:76:a1:f1:75:15:7a:fb:7a:96:d6:7d:b9:87:ad: 6d:2b:14:42:ab:a2:42:cf:b1:69:65:e8:d4:3b:fb: 32:ee:a9:ac:f5:fa:ff:68:ce:4a:d9:80:22:50:05: 76:c7:c7:ff:64:ac:39:d6:88:d6:6d:40:0f:e0:a9: b5:f5:16:d4:27:48:9d:ca:66:85:78:05:ac:25:73: 62:f7:03:ff:a7:2f:ea:6a:d6:72:a1:40:8a:cf:cb: 98:dc:6e:35:3b:27:76:f3:9e:80:06:b8:9a:d5:29: 8b:30:05:1e:ef:91:36:be:12:f3:1f:4b:cc:d0:a9: 0f:70:e6:60:65:13:73:06:9d:5c:a4:fb:79:f9:9c: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:30:95:CE:ED:DA:AE:CB:F0:7D:86:75:D1:DD:CE:07:18:DD:53:E4 X509v3 Authority Key Identifier: keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.1.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:18:98:22:03:e2:8f:47:0e:17:01:83:7c:7b:20:86:97:9f: 19:98:79:6e:4d:c0:d6:a9:b6:24:f5:bb:2a:65:4e:34:f1:a9: e6:27:36:87:c1:93:86:9a:7f:bf:8e:c9:16:03:41:ad:82:1c: 85:8e:98:36:d3:88:87:40:ba:fe:6e:40:c2:30:6f:58:4b:a9: 52:19:52:fa:16:39:f8:53:3e:a1:dd:65:79:85:78:05:1c:ad: 05:ac:82:32:66:bf:6d:ad:52:78:f1:1f:91:4e:e5:f4:07:cb: a6:e5:ae:ee:e2:72:0a:e5:d1:da:48:23:c4:7d:d8:04:0b:32: 62:76:2c:83:b2:75:ba:68:b1:3e:a4:c2:35:85:38:39:d5:23: 2f:16:61:09:5d:6b:00:e3:e2:54:5e:05:fd:32:c6:3d:1b:17: 2f:3d:cb:fa:c7:31:11:2f:f6:1f:a6:a7:f6:bf:19:5d:ab:7f: af:87:20:04:6d:37:84:7b:98:58:1b:cc:a7:56:39:85:76:d0: f0:2a:2a:61:69:e8:b4:c4:4a:2b:c2:9c:e2:8e:ff:c3:0b:07: 67:d1:e0:45:f0:fd:d3:69:1f:98:96:b0:bf:0e:8b:4a:c9:08: b4:fb:0b:89:c5:ad:7b:7a:9e:4d:04:f0:c4:15:5d:35:9e:91: 90:05:2a:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRMnmKiZeS+J7R6mg/1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ODBjZTY0MDU3OTQ3NmViN2FhNzNjMTljYjc0ZWJlZGZk ZDY4MmIwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDMwOTVjZWVkZGFhZWNiZjA3ZDg2NzVkMWRkY2UwNzE4ZGQ1M2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S3KadWEU81B0XUZEBS1PzaMX/WV 2wEiXZqepbo7NaneZP+ZWCd2vBi2nEaGYonjhiPqxe7Gw/sSdzY0OGgF10btZq4B W+fMDok0BBdCV2Qwaiiyk8/cLge8d6rs2ktpRXn8IuaXToOqmVwSqM886dz4qVHY 04RgdqHxdRV6+3qW1n25h61tKxRCq6JCz7FpZejUO/sy7qms9fr/aM5K2YAiUAV2 x8f/ZKw51ojWbUAP4Km19RbUJ0idymaFeAWsJXNi9wP/py/qatZyoUCKz8uY3G41 Oyd2856ABria1SmLMAUe75E2vhLzH0vM0KkPcOZgZRNzBp1cpPt5+ZzDTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQwlc7t2q7L8H2GddHdzgcY3VPkMB8GA1UdIwQY MBaAFFeAzmQFeUdut6pzwZy3Tr7f3WgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjRET1pBVjVSMjYzcW5QQm5MZE92dF9kYUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZDZkYjQtZjUyMy00ZGU2LThiZTYt ZTdlOTcxNWU3ODEzLzEvUkRDVnp1M2Fyc3Z3ZllaMTBkM09CeGpkVS1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kZDZkYjQtZjUyMy00ZGU2LThiZTYtZTdlOTcxNWU3ODEz LzEvVjRET1pBVjVSMjYzcW5QQm5MZE92dF9kYUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwagBMA0G CSqGSIb3DQEBCwUAA4IBAQBqGJgiA+KPRw4XAYN8eyCGl58ZmHluTcDWqbYk9bsq ZU408anmJzaHwZOGmn+/jskWA0GtghyFjpg204iHQLr+bkDCMG9YS6lSGVL6Fjn4 Uz6h3WV5hXgFHK0FrIIyZr9trVJ48R+RTuX0B8um5a7u4nIK5dHaSCPEfdgECzJi diyDsnW6aLE+pMI1hTg51SMvFmEJXWsA4+JUXgX9MsY9GxcvPcv6xzERL/Yfpqf2 vxldq3+vhyAEbTeEe5hYG8ynVjmFdtDwKiphaei0xEorwpzijv/DCwdn0eBF8P3T aR+YlrC/DotKyQi0+wuJxa17ep5NBPDEFV01npGQBSra -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:56 2026 by rpki-client