This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dc86yzRdFEGmYtiwRCkDR4xaR0Y.roa File: Dc86yzRdFEGmYtiwRCkDR4xaR0Y.roa (raw, json) Hash identifier: Ic+7bu3RCLpMS01+8mZi7IwqPDhAXBkpDx30ul7ZIZk= Subject key identifier: 0D:CF:3A:CB:34:5D:14:41:A6:62:D8:B0:44:29:03:47:8C:5A:47:46 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A6B0D5AE451F88258FFD3C74E298 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dc86yzRdFEGmYtiwRCkDR4xaR0Y.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197577 IP address blocks: 109.248.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a6:b0:d5:ae:45:1f:88:25:8f:fd:3c:74:e2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dcf3acb345d1441a662d8b0442903478c5a4746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:70:da:ec:b6:b3:a7:ba:71:63:63:da:fa: 6b:83:45:fb:70:ef:f0:30:ab:fb:d0:2c:05:4c:f0: 6f:23:79:06:03:23:03:bb:1a:00:50:3e:5c:f5:c5: c0:bf:3f:a7:6c:2f:25:c7:e4:41:ae:21:d0:eb:0b: 7e:7b:36:28:78:d3:40:09:14:5f:ac:79:f4:ef:fb: 12:ef:64:86:d2:e2:64:a7:dd:ac:c2:a0:28:af:20: 30:7f:90:09:7e:f5:12:59:30:94:3b:df:f8:50:c8: 6f:44:a2:0d:00:09:4e:97:44:72:3d:69:fc:e3:19: 12:69:fc:07:be:b0:57:f5:28:eb:3b:21:6a:c2:2f: 4c:26:bc:37:a5:46:1e:b3:16:56:01:67:1e:fa:00: f1:a5:d3:39:7e:f9:55:d5:49:92:cc:f0:8f:c2:29: b1:55:73:dd:40:39:74:b4:08:e9:19:ab:55:37:16: 24:d3:e0:24:e4:2b:58:87:9b:fc:fa:4e:c5:eb:7c: 98:37:e5:ec:3a:ee:81:ad:0b:be:bf:70:bd:25:80: 30:c5:6d:81:39:7c:3c:62:47:c5:f3:fd:1b:12:45: fc:0d:84:e6:97:5c:0c:08:6c:2d:a1:50:61:b6:a5: fb:a8:a9:77:be:b0:82:75:62:df:78:1c:21:34:a4: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CF:3A:CB:34:5D:14:41:A6:62:D8:B0:44:29:03:47:8C:5A:47:46 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dc86yzRdFEGmYtiwRCkDR4xaR0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.41.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:20:8b:a4:97:c7:f5:f6:7c:7e:d2:a6:b9:01:2e:c5:6e:89: 63:a4:95:6e:38:0d:21:10:07:51:bc:de:2f:8b:d6:38:23:45: df:a9:4e:02:2b:c7:d8:7b:a4:70:5b:72:bf:da:62:b1:17:23: 9e:aa:25:20:66:8f:fc:79:04:95:22:d2:2a:5f:f0:fe:f7:17: c3:d2:0d:42:c8:6f:5f:72:9f:7d:6b:2c:75:34:7c:7b:55:ef: 2d:4b:d1:a4:f5:c8:35:8f:c1:c5:c8:7e:df:16:d6:77:ee:e1: 51:87:6e:79:a4:fd:4c:f8:d7:f1:f5:65:9f:dd:00:d5:d6:aa: d7:fd:d7:91:c8:d3:95:83:05:c1:bb:24:61:20:df:b6:15:2a: 24:d6:77:dd:07:bc:a1:92:0e:bc:8d:5c:38:ce:89:a5:86:3f: d4:a6:22:16:89:f6:72:fe:ec:de:58:81:fc:ed:69:61:8f:13: d8:cd:41:2f:23:a2:44:2d:2d:30:be:f5:21:c7:b1:e0:48:e0: ab:51:33:5a:88:ec:32:27:91:c4:59:83:01:dd:1e:1a:f1:21: 87:4a:8a:f1:f6:88:14:be:97:ec:39:32:cf:fa:c8:43:4e:d2: ca:b3:1b:fa:4e:f0:33:bc:76:fc:51:6c:f4:1b:9b:1d:c4:3b: e6:c2:ea:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqaw1a5FH4glj/08dOKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGNmM2FjYjM0NWQxNDQxYTY2MmQ4YjA0NDI5MDM0NzhjNWE0NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui5w2uy2s6e6cWNj2vprg0X7cO/w MKv70CwFTPBvI3kGAyMDuxoAUD5c9cXAvz+nbC8lx+RBriHQ6wt+ezYoeNNACRRf rHn07/sS72SG0uJkp92swqAoryAwf5AJfvUSWTCUO9/4UMhvRKINAAlOl0RyPWn8 4xkSafwHvrBX9SjrOyFqwi9MJrw3pUYesxZWAWce+gDxpdM5fvlV1UmSzPCPwimx VXPdQDl0tAjpGatVNxYk0+Ak5CtYh5v8+k7F63yYN+XsOu6BrQu+v3C9JYAwxW2B OXw8YkfF8/0bEkX8DYTml1wMCGwtoVBhtqX7qKl3vrCCdWLfeBwhNKSp3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA3POss0XRRBpmLYsEQpA0eMWkdGMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvRGM4Nnl6UmRGRUdtWXRpd1JDa0RSNHhhUjBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfgpMA0G CSqGSIb3DQEBCwUAA4IBAQBrIIukl8f19nx+0qa5AS7FboljpJVuOA0hEAdRvN4v i9Y4I0XfqU4CK8fYe6RwW3K/2mKxFyOeqiUgZo/8eQSVItIqX/D+9xfD0g1CyG9f cp99ayx1NHx7Ve8tS9Gk9cg1j8HFyH7fFtZ37uFRh255pP1M+Nfx9WWf3QDV1qrX /deRyNOVgwXBuyRhIN+2FSok1nfdB7yhkg68jVw4zomlhj/UpiIWifZy/uzeWIH8 7WlhjxPYzUEvI6JELS0wvvUhx7HgSOCrUTNaiOwyJ5HEWYMB3R4a8SGHSorx9ogU vpfsOTLP+shDTtLKsxv6TvAzvHb8UWz0G5sdxDvmwuq1 -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:34 2026 by rpki-client