This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DXy03EWVpogTipZO7z-KUIwnrWM.roa File: DXy03EWVpogTipZO7z-KUIwnrWM.roa (raw, json) Hash identifier: Yqekr4D1O+2JRv5qdk2FRCX26ir1eQ0wxGbb/7OnLeY= Subject key identifier: 0D:7C:B4:DC:45:95:A6:88:13:8A:96:4E:EF:3F:8A:50:8C:27:AD:63 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE533400CBFCD5A24FD256800ED9C9 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DXy03EWVpogTipZO7z-KUIwnrWM.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33947 IP address blocks: 79.172.232.0/22 maxlen: 22 84.21.0.0/22 maxlen: 22 84.21.9.0/24 maxlen: 24 84.21.14.0/24 maxlen: 24 84.21.17.0/24 maxlen: 24 84.21.20.0/24 maxlen: 24 84.21.21.0/24 maxlen: 24 84.21.22.0/24 maxlen: 24 84.21.23.0/24 maxlen: 24 84.21.24.0/24 maxlen: 24 84.21.25.0/24 maxlen: 24 84.21.26.0/24 maxlen: 24 84.21.27.0/24 maxlen: 24 84.21.28.0/24 maxlen: 24 84.21.29.0/24 maxlen: 24 84.21.30.0/24 maxlen: 24 87.229.1.0/24 maxlen: 24 87.229.2.0/24 maxlen: 24 87.229.3.0/24 maxlen: 24 87.229.4.0/24 maxlen: 24 87.229.5.0/24 maxlen: 24 87.229.13.0/24 maxlen: 24 87.229.27.0/24 maxlen: 24 87.229.28.0/24 maxlen: 24 87.229.29.0/24 maxlen: 24 87.229.30.0/24 maxlen: 24 87.229.46.0/23 maxlen: 23 87.229.49.0/24 maxlen: 24 87.229.109.0/24 maxlen: 24 178.238.214.0/24 maxlen: 24 178.238.219.0/24 maxlen: 24 2a02:730:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:53:34:00:cb:fc:d5:a2:4f:d2:56:80:0e:d9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d7cb4dc4595a688138a964eef3f8a508c27ad63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:67:0d:ec:e7:c5:af:b1:31:c6:33:15:5f: c4:0f:c9:7d:37:52:a6:bd:ff:42:36:3e:59:23:9a: 84:10:ee:06:a4:cf:8a:f2:95:d2:18:cc:54:af:48: c6:cd:21:a2:9e:e7:bb:47:55:b8:2c:c4:fe:29:dd: f3:34:c1:ca:7f:9a:d6:bd:89:f8:dc:c5:25:1b:b1: d7:0f:a9:70:b9:ca:0c:ba:10:0b:eb:4f:0c:1a:2e: 2e:d5:41:62:4a:d9:70:ce:c2:6a:cd:a4:de:ae:6e: ff:cd:87:89:c8:73:0f:15:53:4a:ce:21:33:31:8b: c5:70:15:71:1e:ff:d9:4e:45:c4:3f:49:f4:e1:ea: 00:1c:39:37:a1:e2:5c:93:2f:da:d8:2a:09:11:b4: 76:ef:c3:52:8f:44:f5:14:4b:b9:c5:a8:5e:e8:ff: 78:ed:45:8d:3d:a6:95:3a:0e:40:46:86:22:53:67: fd:2c:f3:63:2c:4f:0e:bb:e9:a2:b0:f2:b8:9f:90: 7c:60:dc:14:2a:bf:d1:3e:9e:8f:c1:21:70:c4:d0: 77:05:14:f0:38:0a:dd:3f:32:7d:4d:d1:84:a2:f4: c3:25:75:4e:f0:14:5c:02:87:63:9d:56:63:d7:67: e7:bd:50:51:6a:ba:83:86:dc:59:d0:1e:08:ce:a4: 54:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:B4:DC:45:95:A6:88:13:8A:96:4E:EF:3F:8A:50:8C:27:AD:63 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DXy03EWVpogTipZO7z-KUIwnrWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.232.0/22 84.21.0.0/22 84.21.9.0/24 84.21.14.0/24 84.21.17.0/24 84.21.20.0-84.21.30.255 87.229.1.0-87.229.5.255 87.229.13.0/24 87.229.27.0-87.229.30.255 87.229.46.0/23 87.229.49.0/24 87.229.109.0/24 178.238.214.0/24 178.238.219.0/24 IPv6: 2a02:730:2000::/48 Signature Algorithm: sha256WithRSAEncryption 5f:21:27:b9:0f:9d:53:01:b7:d4:2d:bf:e5:7c:2e:30:36:2f: 89:f9:73:af:83:ba:5c:ae:16:27:01:2c:41:da:d2:ba:11:bb: e8:c3:0f:79:78:1c:90:c8:d4:5d:f3:69:9d:8e:22:70:95:fc: 8e:b6:1f:11:75:46:29:bf:f4:46:01:68:75:06:6b:b6:a4:37: d7:bf:ad:1d:a2:ff:8e:5e:9b:98:84:d7:38:4b:d4:47:bf:e5: f5:7f:5b:51:80:5b:8a:a1:5a:32:b2:5c:0f:ba:04:88:6b:a7: 32:16:48:a8:d3:28:72:c0:10:93:28:18:cc:64:18:81:53:56: 39:04:d2:2a:e5:db:08:16:c9:23:6c:3c:58:35:78:51:e2:92: 7b:cb:54:1e:a0:7e:f4:8f:22:16:ef:4a:51:5c:e1:4e:48:06: 51:a3:9a:2b:74:95:22:27:9e:39:a9:01:01:dc:97:2d:82:98: a3:a8:e4:db:20:3f:25:0c:61:06:4c:d5:ab:55:2d:91:a2:dd: 21:f6:fc:5f:9f:75:b8:eb:d7:11:41:37:a5:69:b2:17:09:a8: a6:5e:95:c7:70:1b:cf:d4:1e:0f:cb:98:94:79:33:5f:1e:98: c0:19:39:c7:42:cc:df:53:cb:4c:65:87:62:db:fb:5c:ff:fb: 83:47:c5:c3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt87lM0AMv81aJP0laADtnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDdjYjRkYzQ1OTVhNjg4MTM4YTk2NGVlZjNmOGE1MDhjMjdhZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WVnDeznxa+xMcYzFV/ED8l9N1Km vf9CNj5ZI5qEEO4GpM+K8pXSGMxUr0jGzSGinue7R1W4LMT+Kd3zNMHKf5rWvYn4 3MUlG7HXD6lwucoMuhAL608MGi4u1UFiStlwzsJqzaTerm7/zYeJyHMPFVNKziEz MYvFcBVxHv/ZTkXEP0n04eoAHDk3oeJcky/a2CoJEbR278NSj0T1FEu5xahe6P94 7UWNPaaVOg5ARoYiU2f9LPNjLE8Ou+misPK4n5B8YNwUKr/RPp6PwSFwxNB3BRTw OArdPzJ9TdGEovTDJXVO8BRcAodjnVZj12fnvVBRarqDhtxZ0B4IzqRUFwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFA18tNxFlaaIE4qWTu8/ilCMJ61jMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvRFh5MDNFV1Zwb2dUaXBaTzd6LUtVSXducldNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTByBAIAATBsAwQCT6zo AwQCVBUAAwQAVBUJAwQAVBUOAwQAVBURMAwDBAJUFRQDBABUFR4wDAMEAFflAQME AVflBAMEAFflDTAMAwQAV+UbAwQAV+UeAwQBV+UuAwQAV+UxAwQAV+VtAwQAsu7W AwQAsu7bMA8EAgACMAkDBwAqAgcwIAAwDQYJKoZIhvcNAQELBQADggEBAF8hJ7kP nVMBt9Qtv+V8LjA2L4n5c6+DulyuFicBLEHa0roRu+jDD3l4HJDI1F3zaZ2OInCV /I62HxF1Rim/9EYBaHUGa7akN9e/rR2i/45em5iE1zhL1Ee/5fV/W1GAW4qhWjKy XA+6BIhrpzIWSKjTKHLAEJMoGMxkGIFTVjkE0irl2wgWySNsPFg1eFHiknvLVB6g fvSPIhbvSlFc4U5IBlGjmit0lSInnjmpAQHcly2CmKOo5NsgPyUMYQZM1atVLZGi 3SH2/F+fdbjr1xFBN6VpshcJqKZelcdwG8/UHg/LmJR5M18emMAZOcdCzN9Ty0xl h2Lb+1z/+4NHxcM= -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:21 2026 by rpki-client