This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/dGmTMuCLcokZ_dpzsnFglotPhbE.roa File: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (raw, json) Hash identifier: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0= Subject key identifier: 74:69:93:32:E0:8B:72:89:19:FD:DA:73:B2:71:60:96:8B:4F:85:B1 Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9 Certificate serial: 019B7E37B19B9AE9A3C8BED5438B138139DD Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/dGmTMuCLcokZ_dpzsnFglotPhbE.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 193.31.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b1:9b:9a:e9:a3:c8:be:d5:43:8b:13:81:39:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9 Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74699332e08b728919fdda73b27160968b4f85b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:eb:da:69:b6:24:5a:6a:9c:98:37:34:43: 42:56:cc:ce:1e:67:13:82:de:a9:85:a1:b6:69:cc: ef:89:bc:6a:f2:4b:c8:ee:f0:64:97:eb:8d:59:43: 2e:0d:c3:01:71:11:ea:f5:2f:78:5b:4c:c2:ab:79: a7:ec:0a:1e:94:f5:f2:6d:4b:9b:90:2b:64:c6:33: 4b:29:15:17:ad:14:75:fa:ee:8e:70:c6:68:66:61: 44:7b:8a:5f:10:b1:ef:3a:4c:b2:1d:29:21:d6:7a: ca:b2:1d:d0:8c:9d:3c:c9:ef:1e:33:b2:c6:ed:d5: 0d:15:0b:fb:e0:10:10:8d:00:c4:bb:7c:6d:54:ef: b1:a3:3b:58:6a:d8:d3:bb:d9:e0:4d:0f:84:b3:19: 13:0a:15:81:2a:a1:d9:68:b4:4f:3d:ba:c8:ce:86: 55:ab:2a:da:45:c0:f6:6b:1d:97:cf:c2:ef:bb:57: db:fd:e1:41:1f:05:66:85:c8:53:34:97:2c:d4:09: fa:e7:7e:1e:c6:61:08:c2:26:e4:08:13:10:89:42: 27:bf:52:e3:15:ed:3d:3c:0b:36:51:ee:7a:05:9a: 15:23:40:1e:44:de:90:d6:ea:0e:b7:3c:65:e4:fc: 8e:7e:7a:e3:79:18:06:c4:5e:3a:48:bd:05:52:e3: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:69:93:32:E0:8B:72:89:19:FD:DA:73:B2:71:60:96:8B:4F:85:B1 X509v3 Authority Key Identifier: keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/dGmTMuCLcokZ_dpzsnFglotPhbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.16.0/24 Signature Algorithm: sha256WithRSAEncryption ac:1e:32:d7:ec:94:30:dd:a6:4e:c9:50:92:23:6d:20:f7:68: ed:52:60:cd:f6:0c:48:a2:27:63:7b:84:0b:85:a0:6b:0c:e7: 38:de:06:43:13:a5:47:c7:43:80:94:1f:6b:bf:6f:a8:79:27: 56:c5:96:53:b5:81:0d:21:73:76:e2:86:c4:3d:ca:61:b5:26: f5:35:6e:c8:15:5b:b9:5e:4f:72:68:7e:5e:97:1d:73:5a:c0: fc:80:d5:56:ea:ab:73:3e:a0:da:64:be:e5:33:d3:3c:0d:d6: 2c:bc:80:fb:79:48:48:6a:14:af:bf:ac:9d:06:b7:e6:4c:3b: f4:e2:65:1d:2a:c1:db:54:8d:dd:9b:f8:db:b7:ce:69:25:b7: f5:99:b7:e3:27:04:de:86:17:a9:7a:5b:d9:41:f2:c7:e2:5c: b9:d5:bf:5b:bf:15:a9:c2:ed:aa:83:b5:61:7b:f0:14:6a:9e: e0:43:9f:86:9f:82:a1:ae:10:2b:2e:79:2a:d9:27:20:63:84: 43:77:aa:55:ae:13:e3:19:2f:1f:6e:6d:fd:ff:37:99:14:4e: c6:fb:e2:af:b2:e7:76:e5:00:69:05:bc:02:1a:3c:0b:0a:96: 80:93:12:8d:d6:c8:56:95:b6:8a:37:f8:22:3b:d7:5b:e0:25: 18:9a:9f:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7GbmumjyL7VQ4sTgTndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWYxMjg1ZDc3NWE5ZjU4OTI0M2VhYzg0NGFkYzVhYjg5 ZDk3YzkwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDY5OTMzMmUwOGI3Mjg5MTlmZGRhNzNiMjcxNjA5NjhiNGY4NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMfr2mm2JFpqnJg3NENCVszOHmcT gt6phaG2aczvibxq8kvI7vBkl+uNWUMuDcMBcRHq9S94W0zCq3mn7AoelPXybUub kCtkxjNLKRUXrRR1+u6OcMZoZmFEe4pfELHvOkyyHSkh1nrKsh3QjJ08ye8eM7LG 7dUNFQv74BAQjQDEu3xtVO+xoztYatjTu9ngTQ+EsxkTChWBKqHZaLRPPbrIzoZV qyraRcD2ax2Xz8Lvu1fb/eFBHwVmhchTNJcs1An6534exmEIwibkCBMQiUInv1Lj Fe09PAs2Ue56BZoVI0AeRN6Q1uoOtzxl5PyOfnrjeRgGxF46SL0FUuNYgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHRpkzLgi3KJGf3ac7JxYJaLT4WxMB8GA1UdIwQY MBaAFIIfEoXXdan1iSQ+rIRK3Fq4nZfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2g4U2hkZDFxZldKSkQ2c2hFcmNXcmlkbDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xN2Q4MWQtMTczZC00NDg2LTk1NWQt NDhlZWE4ZDVmZWYxLzEvZEdtVE11Q0xjb2taX2RwenNuRmdsb3RQaGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xN2Q4MWQtMTczZC00NDg2LTk1NWQtNDhlZWE4ZDVmZWYx LzEvZ2g4U2hkZDFxZldKSkQ2c2hFcmNXcmlkbDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR8QMA0G CSqGSIb3DQEBCwUAA4IBAQCsHjLX7JQw3aZOyVCSI20g92jtUmDN9gxIoidje4QL haBrDOc43gZDE6VHx0OAlB9rv2+oeSdWxZZTtYENIXN24obEPcphtSb1NW7IFVu5 Xk9yaH5elx1zWsD8gNVW6qtzPqDaZL7lM9M8DdYsvID7eUhIahSvv6ydBrfmTDv0 4mUdKsHbVI3dm/jbt85pJbf1mbfjJwTehhepelvZQfLH4ly51b9bvxWpwu2qg7Vh e/AUap7gQ5+Gn4KhrhArLnkq2ScgY4RDd6pVrhPjGS8fbm39/zeZFE7G++Kvsud2 5QBpBbwCGjwLCpaAkxKN1shWlbaKN/giO9db4CUYmp9k -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:38 2026 by rpki-client