This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/dzhGd3IrijK6XFNXLPo3QbQe60A.roa File: dzhGd3IrijK6XFNXLPo3QbQe60A.roa (raw, json) Hash identifier: DzSQmk0X+ZHEQPIeJMm37I+zInIF580tNRunoudFrPc= Subject key identifier: 77:38:46:77:72:2B:8A:32:BA:5C:53:57:2C:FA:37:41:B4:1E:EB:40 Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564 Certificate serial: 019B7AC81DB9273E4A8147A478C49F5F8C58 Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/dzhGd3IrijK6XFNXLPo3QbQe60A.roa Signing time: Thu 01 Jan 2026 18:18:13 +0000 ROA not before: Thu 01 Jan 2026 18:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48642 IP address blocks: 91.235.188.0/22 maxlen: 22 109.197.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:1d:b9:27:3e:4a:81:47:a4:78:c4:9f:5f:8c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564 Validity Not Before: Jan 1 18:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77384677722b8a32ba5c53572cfa3741b41eeb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:aa:30:63:fe:fa:40:09:de:bd:2f:c6:ef: fc:89:dd:ef:67:65:b5:11:f2:42:09:f7:a7:73:5c: 35:68:d6:a8:41:52:04:04:c3:5f:e2:1b:4b:27:3b: c2:c7:2a:10:eb:10:fa:b3:e9:c0:18:43:b8:1e:0b: ad:88:62:c5:4e:ec:50:b6:4f:40:af:7e:c2:b7:74: 6d:61:7c:2d:89:ed:f4:b7:e5:02:ba:bd:7e:f8:0a: 94:29:72:c6:d3:d4:55:f9:5b:bf:48:79:9f:7f:8d: cf:b8:c7:ee:61:a7:c9:18:48:ad:3f:67:9d:ed:c4: 59:58:b5:ee:2e:5b:8c:e1:a5:ff:a2:7d:d1:f8:ee: fe:4c:46:ae:25:df:03:9f:0c:ec:15:b2:a8:9d:dc: 77:cb:ca:59:28:68:ba:c7:c6:f8:5a:04:2d:0b:75: 4a:a0:06:9f:5a:1c:da:61:71:14:1c:e2:70:cb:21: 12:f1:39:39:76:c2:d9:06:ef:cd:d2:3e:f9:a5:3b: e2:aa:93:11:05:a6:f3:ee:d7:73:77:58:57:d4:50: d0:ca:e7:12:a5:00:dc:08:de:9a:52:69:1e:69:89: 38:38:fe:62:0d:88:96:a9:eb:09:c1:28:6c:6c:fa: 74:c9:ab:d0:8f:73:33:fe:3a:28:40:09:93:11:6b: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:38:46:77:72:2B:8A:32:BA:5C:53:57:2C:FA:37:41:B4:1E:EB:40 X509v3 Authority Key Identifier: keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/dzhGd3IrijK6XFNXLPo3QbQe60A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.188.0/22 109.197.224.0/21 Signature Algorithm: sha256WithRSAEncryption 20:03:39:3e:ae:59:86:86:90:0c:cd:24:e4:1e:a3:1c:1c:0d: 65:cf:32:6c:73:02:3a:dc:42:6a:12:94:e9:54:da:c9:02:1c: af:96:78:fb:fd:e5:0a:81:ed:53:ac:4f:99:d1:6b:bd:f9:1f: a0:cb:7c:9b:1b:7f:3e:26:ff:96:27:f1:66:88:95:6f:df:74: 94:aa:50:99:25:8e:c2:80:09:04:31:dc:17:00:8c:32:a2:7f: 4c:79:68:e3:84:66:28:3c:09:7e:40:d1:1f:81:a9:a8:c5:66: b3:05:e6:ee:9b:96:ee:25:16:99:51:d6:48:0c:ee:1f:9b:07: 80:f1:a7:2e:85:04:d0:f8:f8:14:e4:8d:e0:de:e3:04:46:4a: 06:a0:82:49:a9:44:11:46:99:0b:d4:04:91:3e:b1:15:8d:45: d3:4c:c9:5c:59:09:0c:ef:30:cf:ed:e5:a0:77:7a:dd:b8:da: fb:f2:39:5a:f3:aa:47:69:46:38:19:c3:49:69:f8:2a:85:93: d3:32:37:8e:7c:12:15:e7:aa:8d:d2:89:3c:74:9d:26:74:69: b3:f4:cb:3f:92:99:9e:e5:7a:0a:b1:17:d9:93:1e:45:5c:a2: 5e:02:2d:4d:a5:3e:37:1b:96:61:93:07:d1:3c:e7:82:e9:ee: 40:da:e6:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yB25Jz5KgUekeMSfX4xYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDBkMDZlMmE2OWEzNjY0YjZhYmNmZTIyYmQyZDA2YjUz MzY1NjQwHhcNMjYwMTAxMTgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzM4NDY3NzcyMmI4YTMyYmE1YzUzNTcyY2ZhMzc0MWI0MWVlYjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3uqMGP++kAJ3r0vxu/8id3vZ2W1 EfJCCfenc1w1aNaoQVIEBMNf4htLJzvCxyoQ6xD6s+nAGEO4HgutiGLFTuxQtk9A r37Ct3RtYXwtie30t+UCur1++AqUKXLG09RV+Vu/SHmff43PuMfuYafJGEitP2ed 7cRZWLXuLluM4aX/on3R+O7+TEauJd8DnwzsFbKondx3y8pZKGi6x8b4WgQtC3VK oAafWhzaYXEUHOJwyyES8Tk5dsLZBu/N0j75pTviqpMRBabz7tdzd1hX1FDQyucS pQDcCN6aUmkeaYk4OP5iDYiWqesJwShsbPp0yavQj3Mz/jooQAmTEWv4UQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHc4RndyK4oyulxTVyz6N0G0HutAMB8GA1UdIwQY MBaAFEMA0G4qaaNmS2q8/iK9LQa1M2VkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYt MjkwYTNmYzRiYjYwLzEvZHpoR2QzSXJpaks2WEZOWExQbzNRYlFlNjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYtMjkwYTNmYzRiYjYw LzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+u8AwQD bcXgMA0GCSqGSIb3DQEBCwUAA4IBAQAgAzk+rlmGhpAMzSTkHqMcHA1lzzJscwI6 3EJqEpTpVNrJAhyvlnj7/eUKge1TrE+Z0Wu9+R+gy3ybG38+Jv+WJ/FmiJVv33SU qlCZJY7CgAkEMdwXAIwyon9MeWjjhGYoPAl+QNEfgamoxWazBebum5buJRaZUdZI DO4fmweA8acuhQTQ+PgU5I3g3uMERkoGoIJJqUQRRpkL1ASRPrEVjUXTTMlcWQkM 7zDP7eWgd3rduNr78jla86pHaUY4GcNJafgqhZPTMjeOfBIV56qN0ok8dJ0mdGmz 9Ms/kpme5XoKsRfZkx5FXKJeAi1NpT43G5ZhkwfRPOeC6e5A2uYW -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:13 2026 by rpki-client