This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/drYQ3de9ij_y2_dBNv1FHhh_HXw.roa File: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (raw, json) Hash identifier: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k= Subject key identifier: 76:B6:10:DD:D7:BD:8A:3F:F2:DB:F7:41:36:FD:45:1E:18:7F:1D:7C Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C12858F5D7C4FA7E105CD4A5DE48764 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/drYQ3de9ij_y2_dBNv1FHhh_HXw.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60602 IP address blocks: 80.66.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:85:8f:5d:7c:4f:a7:e1:05:cd:4a:5d:e4:87:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76b610ddd7bd8a3ff2dbf74136fd451e187f1d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:a8:e7:be:9b:df:4e:de:1f:ba:81:8d:50: 6f:7f:95:13:67:b5:f9:d1:1f:d0:6a:06:8a:d7:b4: 09:61:07:13:a0:89:42:73:4a:34:92:1d:4e:cc:7d: 33:fe:56:dc:cd:69:64:8d:d3:45:68:39:28:54:e7: bb:0c:9c:be:99:55:4b:9e:f2:c7:2b:b2:a0:27:b7: 3e:a0:c1:29:72:bc:68:cd:e7:c5:ba:1c:8b:e8:23: e8:e1:bd:61:4f:4a:bf:a5:17:15:be:82:64:15:36: 43:71:9b:a0:63:55:4a:ba:45:5f:38:ca:61:6e:4f: 1a:56:4a:9e:47:f2:ad:3f:e4:cb:17:17:c8:29:c5: 8d:47:59:43:33:7e:7d:fa:43:43:d3:33:b0:8b:db: 42:f8:18:68:fb:d7:3b:96:77:86:7f:61:c4:4f:06: bc:e9:16:6e:83:0b:0a:b8:73:5f:2f:de:3d:fa:a9: 3c:83:9a:57:02:30:6c:ae:87:03:62:61:9a:a3:40: 2d:c1:41:c1:98:d3:d4:b5:db:75:2d:53:80:23:ad: 6d:39:d9:ac:a9:fa:a6:42:f5:cf:10:f2:f3:a2:5c: e3:c7:93:69:6f:4a:10:ed:4e:1e:30:d5:ac:e6:bd: 63:f9:4b:40:a7:c2:7f:69:51:3e:bc:f5:c7:24:3f: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B6:10:DD:D7:BD:8A:3F:F2:DB:F7:41:36:FD:45:1E:18:7F:1D:7C X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/drYQ3de9ij_y2_dBNv1FHhh_HXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.79.0/24 Signature Algorithm: sha256WithRSAEncryption 29:dc:c4:1d:b6:34:9a:96:73:23:6f:39:c5:03:9e:09:36:00: 4a:68:45:bd:b8:7e:34:56:6f:d7:ca:b5:a1:27:b6:1c:4b:a4: b1:9f:5a:10:0b:b3:6a:15:a6:90:4f:54:8a:1d:5d:8a:68:16: 73:fa:7a:93:ac:d9:e5:9f:93:ad:c2:e3:89:d5:fc:45:0b:ed: db:96:29:82:dc:c1:8b:46:6a:fb:43:27:c2:c2:14:8c:47:8b: 56:e2:b7:10:ca:1b:fc:5e:a2:eb:10:4f:b7:75:dc:d1:00:5e: 34:2a:60:b4:c4:a4:4f:82:ff:f4:b5:e5:c6:b3:23:9a:93:d8: 2a:0c:8e:af:46:1c:fe:ff:16:d5:af:08:3d:a3:b8:7c:8c:31: ff:5a:4b:b2:2c:2c:40:7e:9f:84:00:c1:6c:5c:60:2c:a3:f8: bc:a0:f6:69:2a:28:54:9d:92:10:74:20:3a:1c:90:09:a8:b3: b8:08:7f:41:4b:93:6c:d2:e4:5c:ac:42:9f:44:c9:31:33:4e: f8:59:eb:ec:8e:a4:7f:c4:4a:2d:bf:cb:e7:15:67:b6:77:95: d1:94:a3:c3:01:c3:4a:b8:b5:55:7d:a4:92:0d:bd:0b:23:29: 54:42:cf:20:21:4f:ef:5d:7d:17:f0:9c:56:73:eb:f0:fd:0c: 23:67:5b:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EoWPXXxPp+EFzUpd5IdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmI2MTBkZGQ3YmQ4YTNmZjJkYmY3NDEzNmZkNDUxZTE4N2YxZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFCo576b307eH7qBjVBvf5UTZ7X5 0R/QagaK17QJYQcToIlCc0o0kh1OzH0z/lbczWlkjdNFaDkoVOe7DJy+mVVLnvLH K7KgJ7c+oMEpcrxozefFuhyL6CPo4b1hT0q/pRcVvoJkFTZDcZugY1VKukVfOMph bk8aVkqeR/KtP+TLFxfIKcWNR1lDM359+kND0zOwi9tC+Bho+9c7lneGf2HETwa8 6RZugwsKuHNfL949+qk8g5pXAjBsrocDYmGao0AtwUHBmNPUtdt1LVOAI61tOdms qfqmQvXPEPLzolzjx5Npb0oQ7U4eMNWs5r1j+UtAp8J/aVE+vPXHJD9+pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHa2EN3XvYo/8tv3QTb9RR4Yfx18MB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvZHJZUTNkZTlpal95Ml9kQk52MUZIaGhfSFh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEJPMA0G CSqGSIb3DQEBCwUAA4IBAQAp3MQdtjSalnMjbznFA54JNgBKaEW9uH40Vm/XyrWh J7YcS6Sxn1oQC7NqFaaQT1SKHV2KaBZz+nqTrNnln5OtwuOJ1fxFC+3blimC3MGL Rmr7QyfCwhSMR4tW4rcQyhv8XqLrEE+3ddzRAF40KmC0xKRPgv/0teXGsyOak9gq DI6vRhz+/xbVrwg9o7h8jDH/WkuyLCxAfp+EAMFsXGAso/i8oPZpKihUnZIQdCA6 HJAJqLO4CH9BS5Ns0uRcrEKfRMkxM074WevsjqR/xEotv8vnFWe2d5XRlKPDAcNK uLVVfaSSDb0LIylUQs8gIU/vXX0X8JxWc+vw/QwjZ1ta -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:31 2026 by rpki-client