This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/DXojyG6Fa76_70LTpGedxCQc75s.roa File: DXojyG6Fa76_70LTpGedxCQc75s.roa (raw, json) Hash identifier: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4= Subject key identifier: 0D:7A:23:C8:6E:85:6B:BE:BF:EF:42:D3:A4:67:9D:C4:24:1C:EF:9B Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Certificate serial: 019B7E387AACB7D13D1FE48C105EC17EDA6A Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/DXojyG6Fa76_70LTpGedxCQc75s.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 194.169.100.0/24 maxlen: 24 194.169.116.0/24 maxlen: 24 194.169.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7a:ac:b7:d1:3d:1f:e4:8c:10:5e:c1:7e:da:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d7a23c86e856bbebfef42d3a4679dc4241cef9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f1:d3:f6:37:e1:fe:0a:e6:cd:27:9f:9c:52: c7:a4:f5:46:ea:5e:fb:86:5d:1a:9a:24:a4:59:90: 26:a7:79:a9:da:e6:b8:2c:bb:62:01:44:36:4f:47: 59:27:b2:b3:53:a5:65:9d:7f:b1:8e:9d:b1:6e:64: f5:9a:ff:58:e7:b6:c9:fd:ec:0c:93:9c:20:48:c4: 1d:17:d5:14:5f:88:4d:4f:4c:f1:73:a6:47:b5:29: fd:3e:b1:ee:cb:d0:f2:39:33:08:8b:8d:c5:08:31: 8d:35:24:cb:f4:9a:36:6b:d9:82:e3:24:46:5f:7a: e7:65:a2:67:2c:c0:d9:4a:2c:e4:f2:58:20:64:d6: 19:92:96:f1:4c:2d:69:80:40:1e:ef:e4:f8:cf:86: 74:1a:18:ae:65:26:26:41:c0:6c:82:d7:a0:aa:74: f0:61:c3:e4:40:eb:68:83:60:e3:80:ab:e3:ba:f9: e1:46:5a:bb:74:86:05:3f:bf:01:48:a6:52:2f:06: 96:95:67:5c:ff:61:67:dd:d8:e7:a9:e1:6c:0d:42: ab:29:b5:28:11:e4:c0:dc:8d:b8:93:35:c1:5e:b6: e3:98:f9:19:6c:e5:06:6c:c4:41:13:21:a1:e4:4e: 14:c2:fa:42:66:1c:43:4d:f4:d4:1a:c4:31:3b:67: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7A:23:C8:6E:85:6B:BE:BF:EF:42:D3:A4:67:9D:C4:24:1C:EF:9B X509v3 Authority Key Identifier: keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/DXojyG6Fa76_70LTpGedxCQc75s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.100.0/24 194.169.116.0/23 Signature Algorithm: sha256WithRSAEncryption 95:21:d8:05:4e:9e:7c:8f:64:63:3d:51:c3:a5:88:13:e7:2f: 20:5f:a5:ad:44:20:5d:c7:c6:58:b2:34:5e:57:4b:ac:ef:e6: 98:d7:4d:3e:50:f0:c9:2e:6f:b0:46:6a:b1:ef:db:6b:d6:79: c9:6e:5d:9a:01:6f:cd:61:1c:ef:82:3a:09:1d:5f:3a:1d:78: 53:57:dd:1b:de:5f:b4:37:41:0c:c6:21:ec:aa:ee:16:5a:42: 77:cb:72:ee:aa:21:2c:29:a6:30:db:98:6a:70:71:04:b4:75: d1:cf:b0:73:00:d5:c2:4a:a3:aa:fb:e5:8d:3d:f0:27:29:33: 96:e0:59:4b:aa:8f:fe:c9:7e:fe:cd:b6:64:48:9f:f7:51:f1: 96:c2:09:13:c9:a4:be:83:2c:01:fb:63:a2:98:1d:2b:8d:89: ea:69:d1:7b:7c:ce:c3:45:1f:e4:00:8f:c2:7f:a3:d9:e3:90: c7:67:81:cf:58:7c:c6:6c:cf:b8:46:73:d8:6b:11:1d:ef:e2: 08:4a:58:31:80:14:b8:9b:bb:d7:df:61:50:86:f0:ed:ea:59: 73:c8:07:55:37:b9:c6:c4:b2:6a:2c:bf:ac:9d:f8:e1:c2:00: fb:63:15:4b:41:3e:a4:ff:07:16:2c:5b:38:0f:da:67:9e:06: 51:4e:7a:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OHqst9E9H+SMEF7BftpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm ODQ5MzYwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDdhMjNjODZlODU2YmJlYmZlZjQyZDNhNDY3OWRjNDI0MWNlZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fHT9jfh/grmzSefnFLHpPVG6l77 hl0amiSkWZAmp3mp2ua4LLtiAUQ2T0dZJ7KzU6VlnX+xjp2xbmT1mv9Y57bJ/ewM k5wgSMQdF9UUX4hNT0zxc6ZHtSn9PrHuy9DyOTMIi43FCDGNNSTL9Jo2a9mC4yRG X3rnZaJnLMDZSizk8lggZNYZkpbxTC1pgEAe7+T4z4Z0GhiuZSYmQcBsgtegqnTw YcPkQOtog2DjgKvjuvnhRlq7dIYFP78BSKZSLwaWlWdc/2Fn3djnqeFsDUKrKbUo EeTA3I24kzXBXrbjmPkZbOUGbMRBEyGh5E4UwvpCZhxDTfTUGsQxO2eAewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA16I8huhWu+v+9C06RnncQkHO+bMB8GA1UdIwQY MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt ZjViYjJiMmQ2M2JlLzEvRFhvanlHNkZhNzZfNzBMVHBHZWR4Q1FjNzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwqlkAwQB wql0MA0GCSqGSIb3DQEBCwUAA4IBAQCVIdgFTp58j2RjPVHDpYgT5y8gX6WtRCBd x8ZYsjReV0us7+aY100+UPDJLm+wRmqx79tr1nnJbl2aAW/NYRzvgjoJHV86HXhT V90b3l+0N0EMxiHsqu4WWkJ3y3LuqiEsKaYw25hqcHEEtHXRz7BzANXCSqOq++WN PfAnKTOW4FlLqo/+yX7+zbZkSJ/3UfGWwgkTyaS+gywB+2OimB0rjYnqadF7fM7D RR/kAI/Cf6PZ45DHZ4HPWHzGbM+4RnPYaxEd7+IISlgxgBS4m7vX32FQhvDt6llz yAdVN7nGxLJqLL+snfjhwgD7YxVLQT6k/wcWLFs4D9pnngZRTnrZ -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:04 2026 by rpki-client