This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/dpSmP8MwfpwQ5S7aBNVu7Cu_-jw.roa File: dpSmP8MwfpwQ5S7aBNVu7Cu_-jw.roa (raw, json) Hash identifier: BZPof1UMJ1v+zPMIFDclsbHu/3hvqXrcm47XyocGPNE= Subject key identifier: 76:94:A6:3F:C3:30:7E:9C:10:E5:2E:DA:04:D5:6E:EC:2B:BF:FA:3C Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C6955663EFE860B701ABC2A48C86CF Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/dpSmP8MwfpwQ5S7aBNVu7Cu_-jw.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203600 IP address blocks: 5.154.114.0/24 maxlen: 24 37.230.86.0/24 maxlen: 24 84.236.191.0/24 maxlen: 24 84.236.200.0/22 maxlen: 22 84.236.200.0/23 maxlen: 23 84.236.202.0/24 maxlen: 24 84.236.203.0/24 maxlen: 24 178.156.24.0/24 maxlen: 24 178.156.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:95:56:63:ef:e8:60:b7:01:ab:c2:a4:8c:86:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7694a63fc3307e9c10e52eda04d56eec2bbffa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:93:8b:9f:92:e9:73:fa:c8:85:79:bb:89: 26:9b:db:0c:42:86:66:3d:10:3f:15:8e:28:dc:7f: 9b:d2:c7:a1:87:b5:29:e8:fc:06:58:e4:b8:4d:46: 43:cb:fd:13:5f:3d:f5:af:80:16:92:f7:ee:a1:61: d9:e3:94:08:42:78:c3:2f:b7:75:b7:58:be:36:49: d7:72:79:a4:61:00:e1:fb:2b:43:b2:87:33:f3:64: 95:3c:4d:5f:6c:4b:06:2c:91:1e:c7:13:5e:d4:96: 75:14:c1:6a:0c:65:bc:f9:99:78:e9:87:93:6b:4c: 64:c3:0c:89:7c:5e:f5:83:a6:01:7d:51:99:86:76: 52:9d:80:bb:1e:36:8f:1e:cf:aa:71:e6:0d:36:12: 1c:b2:8b:74:ba:bc:6c:70:4f:9e:ef:f1:e6:be:1f: 71:b4:16:3c:c9:0a:32:fd:81:13:31:b7:c1:f6:44: 68:1c:b5:0b:70:dc:95:84:22:ed:4d:bf:f0:e8:f1: ea:35:ed:85:be:bb:a1:24:6b:9a:be:c9:82:f4:57: 74:f4:02:c7:8d:6b:61:d8:cd:74:3d:b4:42:13:0e: b1:30:9c:b7:dc:2f:50:15:3e:42:d2:0f:f5:30:53: 9f:68:5d:11:77:b3:ca:c1:36:dc:7c:d5:7a:70:cb: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:A6:3F:C3:30:7E:9C:10:E5:2E:DA:04:D5:6E:EC:2B:BF:FA:3C X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/dpSmP8MwfpwQ5S7aBNVu7Cu_-jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.114.0/24 37.230.86.0/24 84.236.191.0/24 84.236.200.0/22 178.156.24.0/24 178.156.106.0/24 Signature Algorithm: sha256WithRSAEncryption 02:3e:65:fb:a7:70:a8:da:cd:e7:e0:20:53:08:27:e2:95:5b: 4c:60:6b:9d:40:c9:b8:32:e5:f7:62:a3:75:b9:4a:d0:24:1b: 4a:69:b2:5b:b8:fb:e1:8b:c9:e6:3e:44:ad:fd:30:3f:58:58: ef:e8:cf:1a:ae:b9:92:e1:6e:0b:71:e6:e1:60:04:8b:30:08: 9e:08:2a:de:c2:2d:bf:45:11:c4:ce:34:65:ef:3c:a8:01:07: bc:6b:07:ac:39:5a:24:31:ea:88:f2:1d:47:37:e0:66:7e:0a: f8:fd:f6:40:e3:d7:16:f6:b3:05:62:2f:aa:f9:3f:24:6d:6c: f1:7c:10:49:72:6b:7e:b7:02:93:ac:92:d4:7c:9f:b5:1b:97: 14:e2:61:d7:07:dc:0a:28:d3:ac:28:b2:03:c7:2e:57:68:2d: d1:81:58:ad:65:d3:35:2c:81:c8:3c:f5:22:9e:46:05:a9:4f: 95:66:e3:f0:5a:bb:97:70:d1:b1:3e:12:72:54:58:6f:68:1f: d6:4e:84:b3:ae:84:2b:17:5d:84:5d:bf:6a:07:fd:3d:b6:41: cc:9b:55:b7:c0:34:03:7f:c6:e0:86:69:69:d5:20:c9:7f:c1: 7d:f0:c5:bd:89:c1:d1:c1:18:30:f6:f2:11:9d:5a:a4:d5:18: d3:97:44:c6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xpVWY+/oYLcBq8KkjIbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njk0YTYzZmMzMzA3ZTljMTBlNTJlZGEwNGQ1NmVlYzJiYmZmYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkyTi5+S6XP6yIV5u4kmm9sMQoZm PRA/FY4o3H+b0sehh7Up6PwGWOS4TUZDy/0TXz31r4AWkvfuoWHZ45QIQnjDL7d1 t1i+NknXcnmkYQDh+ytDsocz82SVPE1fbEsGLJEexxNe1JZ1FMFqDGW8+Zl46YeT a0xkwwyJfF71g6YBfVGZhnZSnYC7HjaPHs+qceYNNhIcsot0urxscE+e7/Hmvh9x tBY8yQoy/YETMbfB9kRoHLULcNyVhCLtTb/w6PHqNe2FvruhJGuavsmC9Fd09ALH jWth2M10PbRCEw6xMJy33C9QFT5C0g/1MFOfaF0Rd7PKwTbcfNV6cMvWBwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHaUpj/DMH6cEOUu2gTVbuwrv/o8MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvZHBTbVA4TXdmcHdRNVM3YUJOVnU3Q3VfLWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABZpyAwQA JeZWAwQAVOy/AwQCVOzIAwQAspwYAwQAspxqMA0GCSqGSIb3DQEBCwUAA4IBAQAC PmX7p3Co2s3n4CBTCCfilVtMYGudQMm4MuX3YqN1uUrQJBtKabJbuPvhi8nmPkSt /TA/WFjv6M8arrmS4W4LcebhYASLMAieCCrewi2/RRHEzjRl7zyoAQe8awesOVok MeqI8h1HN+Bmfgr4/fZA49cW9rMFYi+q+T8kbWzxfBBJcmt+twKTrJLUfJ+1G5cU 4mHXB9wKKNOsKLIDxy5XaC3RgVitZdM1LIHIPPUinkYFqU+VZuPwWruXcNGxPhJy VFhvaB/WToSzroQrF12EXb9qB/09tkHMm1W3wDQDf8bghmlp1SDJf8F98MW9icHR wRgw9vIRnVqk1RjTl0TG -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:35 2026 by rpki-client