This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dzb6SDUsl4mkiGIM9ZknpuD0SF0.roa File: dzb6SDUsl4mkiGIM9ZknpuD0SF0.roa (raw, json) Hash identifier: /vrE//vTUKcj6vsxi+two4jBoQqSRk0Ssr9GCopUTCc= Subject key identifier: 77:36:FA:48:35:2C:97:89:A4:88:62:0C:F5:99:27:A6:E0:F4:48:5D Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8467A2251A352F284A9BC0AA2D5B3D Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dzb6SDUsl4mkiGIM9ZknpuD0SF0.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57834 IP address blocks: 176.235.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:67:a2:25:1a:35:2f:28:4a:9b:c0:aa:2d:5b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7736fa48352c9789a488620cf59927a6e0f4485d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:22:50:eb:df:51:20:3a:34:c4:49:72:87: fa:5b:e0:90:50:b6:5a:2d:a1:0f:0d:f7:c3:71:8c: 52:f7:bc:f1:ae:c8:36:80:da:71:ca:61:bc:9a:a9: 55:cf:15:b5:3f:c5:46:37:6b:4c:1f:4c:d0:7d:c2: 31:c3:c6:8b:03:a4:07:c7:4e:f1:23:1e:ac:15:89: 64:5c:db:87:7a:92:d3:e6:1d:e1:6c:99:58:c2:ce: 8a:0c:cc:4a:ac:ad:2c:55:76:3f:01:fb:0c:3c:07: 4e:a4:95:97:03:0e:66:cf:cb:67:b5:c6:7e:eb:6a: b7:ea:b3:73:04:08:3b:ff:e7:de:2c:98:65:40:85: fc:ec:9c:15:ca:89:82:3a:ac:6e:95:c7:73:ad:1d: d6:b7:1e:9c:cb:21:95:3f:c8:41:80:c0:c7:f1:17: 71:90:e3:26:4b:ad:bc:38:d2:72:96:bd:9c:7b:f7: 31:bf:13:8f:2b:bb:f6:ee:cf:ef:a2:fa:47:57:42: 13:ea:4f:69:75:9a:c9:fb:1b:d3:9d:14:9f:18:1a: 93:df:75:a3:a7:0d:5e:bf:89:97:57:02:96:2e:c5: d1:49:5d:57:17:f9:e9:09:8c:97:f4:af:74:c8:ec: 2a:9b:2d:48:4a:2a:98:09:18:d7:f8:8e:e4:d8:8d: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:FA:48:35:2C:97:89:A4:88:62:0C:F5:99:27:A6:E0:F4:48:5D X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dzb6SDUsl4mkiGIM9ZknpuD0SF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.235.122.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:da:a6:a7:58:27:70:f4:1e:03:e9:bc:c2:8e:eb:d8:7c:73: b9:86:53:1d:41:23:af:a3:96:66:ed:68:74:3f:96:5f:e6:e7: ba:b6:30:5d:c1:8a:83:be:ed:d7:ff:34:ca:16:fc:90:df:10: 48:25:b6:d8:4a:14:67:60:34:f4:fd:3a:25:37:f0:3a:fb:72: a4:9a:63:97:c5:b5:63:b4:0a:d5:79:d1:4c:63:d9:84:17:e8: 73:c3:9b:f3:df:58:07:71:03:26:c7:85:40:bd:5b:82:2c:4b: 1a:d1:5f:52:f0:5e:8e:7f:55:27:ce:02:3b:21:02:dd:62:78: 6b:3a:b6:4f:08:25:87:e6:02:02:f7:30:9d:02:8a:99:85:5d: 06:8c:44:46:a0:e8:db:96:c9:20:2c:54:34:2d:c0:f5:01:e5: ba:04:76:90:f0:13:c7:87:a1:61:d0:61:7f:27:ef:25:77:b2: fc:a6:f9:fe:3d:b0:df:ea:cb:70:bd:e0:4e:4c:a1:10:18:9d: f8:55:6a:01:e2:e8:87:6b:79:76:35:57:05:68:4a:46:21:b0: bf:c0:6a:79:8b:98:45:15:90:66:14:b1:8e:d2:e6:3f:74:89: cd:08:4e:0c:32:d5:ea:0b:af:e2:8a:a3:73:bb:ed:81:30:7a: cd:b2:7b:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGeiJRo1LyhKm8CqLVs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzM2ZmE0ODM1MmM5Nzg5YTQ4ODYyMGNmNTk5MjdhNmUwZjQ0ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDAiUOvfUSA6NMRJcof6W+CQULZa LaEPDffDcYxS97zxrsg2gNpxymG8mqlVzxW1P8VGN2tMH0zQfcIxw8aLA6QHx07x Ix6sFYlkXNuHepLT5h3hbJlYws6KDMxKrK0sVXY/AfsMPAdOpJWXAw5mz8tntcZ+ 62q36rNzBAg7/+feLJhlQIX87JwVyomCOqxulcdzrR3Wtx6cyyGVP8hBgMDH8Rdx kOMmS628ONJylr2ce/cxvxOPK7v27s/vovpHV0IT6k9pdZrJ+xvTnRSfGBqT33Wj pw1ev4mXVwKWLsXRSV1XF/npCYyX9K90yOwqmy1ISiqYCRjX+I7k2I2i5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHc2+kg1LJeJpIhiDPWZJ6bg9EhdMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvZHpiNlNEVXNsNG1raUdJTTlaa25wdUQwU0YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsOt6MA0G CSqGSIb3DQEBCwUAA4IBAQBb2qanWCdw9B4D6bzCjuvYfHO5hlMdQSOvo5Zm7Wh0 P5Zf5ue6tjBdwYqDvu3X/zTKFvyQ3xBIJbbYShRnYDT0/TolN/A6+3KkmmOXxbVj tArVedFMY9mEF+hzw5vz31gHcQMmx4VAvVuCLEsa0V9S8F6Of1UnzgI7IQLdYnhr OrZPCCWH5gIC9zCdAoqZhV0GjERGoOjblskgLFQ0LcD1AeW6BHaQ8BPHh6Fh0GF/ J+8ld7L8pvn+PbDf6stwveBOTKEQGJ34VWoB4uiHa3l2NVcFaEpGIbC/wGp5i5hF FZBmFLGO0uY/dInNCE4MMtXqC6/iiqNzu+2BMHrNsnuI -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:08 2026 by rpki-client