This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/RDoepao54bTXKl8kP9NhoG1Ivog.roa File: RDoepao54bTXKl8kP9NhoG1Ivog.roa (raw, json) Hash identifier: 2fT1uc6VGm5bVEEMVtNCmGYxme8M4d0HoJ789obnXj0= Subject key identifier: 44:3A:1E:A5:AA:39:E1:B4:D7:2A:5F:24:3F:D3:61:A0:6D:48:BE:88 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8469BA7C75DAB4107961A94CE246D3 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/RDoepao54bTXKl8kP9NhoG1Ivog.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60659 IP address blocks: 213.74.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:69:ba:7c:75:da:b4:10:79:61:a9:4c:e2:46:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=443a1ea5aa39e1b4d72a5f243fd361a06d48be88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:2d:34:ab:5a:09:3b:2e:54:a4:07:d0:61: 52:d0:99:2e:4f:e7:ff:30:e8:88:7e:4e:9c:74:c3: 83:54:bc:3a:2b:17:5e:e5:9c:1f:68:7d:03:63:40: b4:3a:e4:d0:30:3c:e0:8d:d9:54:62:58:d5:56:6f: 3f:8b:06:8c:af:ff:9b:5a:31:b3:21:b2:5e:18:ed: 7f:85:df:9c:96:e8:1f:4f:58:68:f5:54:51:0d:c3: 9f:e5:0f:bc:2b:4c:92:3a:d0:69:f3:dc:17:c6:e2: 5a:e4:58:79:a7:cb:ed:56:3d:f3:51:37:2c:26:33: 01:05:76:d9:3d:c8:c6:24:07:df:b3:7f:e2:41:e0: 3e:57:14:86:2b:71:9a:4b:d4:d3:44:68:6f:2e:33: 70:67:a8:f4:0c:ae:9f:2d:9d:7b:76:0b:af:ee:27: 03:31:83:5e:17:09:25:04:6c:72:e7:18:2c:91:4f: 7a:66:99:a9:da:7a:40:5b:43:bf:e1:ce:fe:6a:d1: ef:2a:13:36:75:b6:46:13:67:32:cb:46:20:c2:fc: f6:c0:7f:de:f7:12:74:56:96:95:99:2e:a2:53:80: 56:5e:63:14:9c:b4:24:a5:dd:cf:b4:4d:3e:56:71: aa:f5:4c:e4:ea:73:dc:e2:b8:b8:32:73:3a:9e:e8: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3A:1E:A5:AA:39:E1:B4:D7:2A:5F:24:3F:D3:61:A0:6D:48:BE:88 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/RDoepao54bTXKl8kP9NhoG1Ivog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.74.102.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ae:4c:37:ac:e6:5c:8b:d9:e4:e4:9a:c8:29:c7:ae:8f:0c: d0:68:04:32:2e:01:17:ff:32:6f:06:83:2d:03:02:3a:ea:9a: 32:84:fa:75:36:51:22:91:e7:b0:e7:c3:c1:ff:88:5e:5e:f2: b5:f9:1a:dc:97:6c:8c:2b:fc:a9:71:d8:04:61:22:6e:fc:47: 3e:04:10:77:34:c8:36:31:7c:30:cf:2e:e7:65:d0:30:97:1c: b5:d4:cd:99:1a:d1:4a:99:ed:ee:bc:07:d6:61:89:4a:81:89: ad:69:21:bb:ea:9f:ef:72:cf:55:4f:b5:6f:ae:8f:1d:5e:55: fb:ff:cf:3f:94:c9:00:95:f3:77:a9:c8:2f:46:31:85:02:d2: a1:bd:d3:98:f1:98:67:6b:fe:d4:49:68:2b:88:44:92:df:1d: 15:68:8e:a4:17:f5:bf:ea:20:51:2a:e8:eb:7e:45:d4:d5:f1: 49:34:59:3f:fa:ec:9f:27:a3:ab:09:2f:0f:10:3d:e4:8b:bd: 59:76:ea:2a:17:b8:d1:ad:29:03:8a:98:a7:bc:cf:f9:7b:04: 80:8b:56:09:07:da:2b:dc:7e:42:c0:a2:e2:eb:ca:a8:6f:c4: 40:57:e6:cd:e7:a0:f2:a1:8c:b4:66:ae:c5:7c:7c:68:e2:34: 15:c0:d4:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGm6fHXatBB5YalM4kbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDNhMWVhNWFhMzllMWI0ZDcyYTVmMjQzZmQzNjFhMDZkNDhiZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjstNKtaCTsuVKQH0GFS0JkuT+f/ MOiIfk6cdMODVLw6Kxde5ZwfaH0DY0C0OuTQMDzgjdlUYljVVm8/iwaMr/+bWjGz IbJeGO1/hd+clugfT1ho9VRRDcOf5Q+8K0ySOtBp89wXxuJa5Fh5p8vtVj3zUTcs JjMBBXbZPcjGJAffs3/iQeA+VxSGK3GaS9TTRGhvLjNwZ6j0DK6fLZ17dguv7icD MYNeFwklBGxy5xgskU96Zpmp2npAW0O/4c7+atHvKhM2dbZGE2cyy0Ygwvz2wH/e 9xJ0VpaVmS6iU4BWXmMUnLQkpd3PtE0+VnGq9Uzk6nPc4ri4MnM6nuigTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQ6HqWqOeG01ypfJD/TYaBtSL6IMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvUkRvZXBhbzU0YlRYS2w4a1A5TmhvRzFJdm9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1UpmMA0G CSqGSIb3DQEBCwUAA4IBAQAjrkw3rOZci9nk5JrIKceujwzQaAQyLgEX/zJvBoMt AwI66poyhPp1NlEikeew58PB/4heXvK1+Rrcl2yMK/ypcdgEYSJu/Ec+BBB3NMg2 MXwwzy7nZdAwlxy11M2ZGtFKme3uvAfWYYlKgYmtaSG76p/vcs9VT7Vvro8dXlX7 /88/lMkAlfN3qcgvRjGFAtKhvdOY8Zhna/7USWgriESS3x0VaI6kF/W/6iBRKujr fkXU1fFJNFk/+uyfJ6OrCS8PED3ki71ZduoqF7jRrSkDipinvM/5ewSAi1YJB9or 3H5CwKLi68qob8RAV+bN56DyoYy0Zq7FfHxo4jQVwNTU -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:38 2026 by rpki-client