This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/DVhhYEUtlGY-o7FWTsaEjCsuSfM.roa File: DVhhYEUtlGY-o7FWTsaEjCsuSfM.roa (raw, json) Hash identifier: 3BdDvo6VSykP4vfXUdkCcVvQTTeKHnDzmOoaSk9BBMM= Subject key identifier: 0D:58:61:60:45:2D:94:66:3E:A3:B1:56:4E:C6:84:8C:2B:2E:49:F3 Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4 Certificate serial: 019B7F14D2D352863FEE6CE44E7E51A256B6 Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/DVhhYEUtlGY-o7FWTsaEjCsuSfM.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62206 IP address blocks: 31.133.80.0/22 maxlen: 24 176.103.224.0/22 maxlen: 22 176.103.232.0/22 maxlen: 22 176.103.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d2:d3:52:86:3f:ee:6c:e4:4e:7e:51:a2:56:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4 Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d586160452d94663ea3b1564ec6848c2b2e49f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bf:a3:c3:c5:50:89:89:d7:38:87:32:0a:15: 9f:45:a9:c1:e5:2f:c2:36:5f:16:c5:8f:2f:37:0a: 09:76:58:e2:90:db:d2:a0:b1:05:ce:a0:61:92:b6: 5e:f2:df:6f:d1:81:2e:55:ce:ff:df:80:7d:1f:e5: a7:d8:99:57:7f:84:13:a1:a6:23:37:56:8f:09:54: 43:7a:ca:b0:4d:55:d3:a4:be:5f:8e:cd:a4:f9:33: 07:d1:6d:9f:51:4c:62:7a:b2:4f:79:1d:d8:ec:58: 48:8c:39:cf:b1:c9:c9:b4:46:b3:de:5d:71:54:e7: 6f:a6:9d:8d:3d:28:53:90:b0:da:55:da:31:54:de: 1c:92:f7:c0:5c:b6:1b:68:40:61:d2:bf:6f:24:78: 4e:f4:6a:0f:c3:86:a2:97:df:4c:d3:e3:74:e8:51: f7:e0:cb:f7:e4:2a:c2:ff:06:89:76:5a:32:0c:09: f9:0a:97:36:1c:92:bd:7c:d5:29:41:1f:65:02:40: a5:99:4c:c4:d5:96:3f:49:58:88:b8:00:24:b6:b5: 6a:0b:ad:62:c6:73:cf:86:60:9b:93:7b:bd:d1:af: 8f:3e:da:5c:a4:d4:40:cf:fe:0e:4d:60:8f:f0:bf: 75:ac:38:96:96:e8:5b:3f:77:74:89:ee:47:9e:be: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:61:60:45:2D:94:66:3E:A3:B1:56:4E:C6:84:8C:2B:2E:49:F3 X509v3 Authority Key Identifier: keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/DVhhYEUtlGY-o7FWTsaEjCsuSfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.80.0/22 176.103.224.0/22 176.103.232.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:b3:d2:6b:ab:94:19:e0:97:c4:eb:62:d9:09:de:fa:09:db: eb:93:93:bc:b2:a4:da:72:a7:0d:e7:6e:39:99:78:cb:4f:19: 3d:80:62:8f:ae:22:c7:f3:c3:d1:34:c6:ab:a3:d0:13:26:3e: 0a:09:73:d8:ef:43:0e:ca:12:38:8f:cf:2d:d2:7a:10:5a:72: e3:40:fb:39:1d:f6:37:53:c6:e4:8d:74:f9:cf:ae:6d:7a:62: fc:4c:cd:d8:8d:c5:97:7b:c2:94:9f:a8:85:d9:65:0e:23:a5: db:ee:20:25:9d:a4:60:e7:da:d4:a6:78:73:01:a0:2e:4c:e2: 53:64:16:58:24:31:83:a4:ed:6f:18:9f:3c:14:22:ab:7c:e2: fb:e7:a2:64:e0:25:52:bd:6f:fe:55:06:c4:08:d7:6a:62:b8: bc:24:7b:0b:aa:e1:46:e2:97:23:81:f6:53:41:2e:86:25:b1: f9:c5:f8:83:d6:6a:62:66:44:2e:35:8b:56:cf:eb:d6:81:ed: 37:a7:b4:a9:e6:9c:bf:ea:d7:c8:ee:21:55:e3:f2:09:d1:44: dd:68:ec:3d:82:a9:a1:6a:15:dd:af:65:15:c0:70:74:c6:b8: 99:a8:62:d8:42:72:47:ae:4f:b4:6b:ff:a6:0b:fa:c4:55:ce: 03:ff:d5:da -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FNLTUoY/7mzkTn5Rola2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz ODllZDQwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDU4NjE2MDQ1MmQ5NDY2M2VhM2IxNTY0ZWM2ODQ4YzJiMmU0OWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L+jw8VQiYnXOIcyChWfRanB5S/C Nl8WxY8vNwoJdljikNvSoLEFzqBhkrZe8t9v0YEuVc7/34B9H+Wn2JlXf4QToaYj N1aPCVRDesqwTVXTpL5fjs2k+TMH0W2fUUxierJPeR3Y7FhIjDnPscnJtEaz3l1x VOdvpp2NPShTkLDaVdoxVN4ckvfAXLYbaEBh0r9vJHhO9GoPw4ail99M0+N06FH3 4Mv35CrC/waJdloyDAn5Cpc2HJK9fNUpQR9lAkClmUzE1ZY/SViIuAAktrVqC61i xnPPhmCbk3u90a+PPtpcpNRAz/4OTWCP8L91rDiWluhbP3d0ie5Hnr6n9QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA1YYWBFLZRmPqOxVk7GhIwrLknzMB8GA1UdIwQY MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt MDgxY2IyYjE3YWI1LzEvRFZoaFlFVXRsR1ktbzdGV1RzYUVqQ3N1U2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1 LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH4VQAwQC sGfgAwQDsGfoMA0GCSqGSIb3DQEBCwUAA4IBAQBbs9Jrq5QZ4JfE62LZCd76Cdvr k5O8sqTacqcN5245mXjLTxk9gGKPriLH88PRNMaro9ATJj4KCXPY70MOyhI4j88t 0noQWnLjQPs5HfY3U8bkjXT5z65temL8TM3YjcWXe8KUn6iF2WUOI6Xb7iAlnaRg 59rUpnhzAaAuTOJTZBZYJDGDpO1vGJ88FCKrfOL756Jk4CVSvW/+VQbECNdqYri8 JHsLquFG4pcjgfZTQS6GJbH5xfiD1mpiZkQuNYtWz+vWge03p7Sp5py/6tfI7iFV 4/IJ0UTdaOw9gqmhahXdr2UVwHB0xriZqGLYQnJHrk+0a/+mC/rEVc4D/9Xa -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:31 2026 by rpki-client