This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_dzqQKKqoRJHs_30QzrRwUYZkYg.roa File: _dzqQKKqoRJHs_30QzrRwUYZkYg.roa (raw, json) Hash identifier: 0Wxp5nN5WluSWCv4juYXzlCCq2KDeJL5ARrVYRgaTZ4= Subject key identifier: FD:DC:EA:40:A2:AA:A1:12:47:B3:FD:F4:43:3A:D1:C1:46:19:91:88 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7F0B8EAD2F8119A6E178AED810896 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_dzqQKKqoRJHs_30QzrRwUYZkYg.roa Signing time: Thu 01 Jan 2026 18:18:02 +0000 ROA not before: Thu 01 Jan 2026 18:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8737 IP address blocks: 145.78.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f0:b8:ea:d2:f8:11:9a:6e:17:8a:ed:81:08:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fddcea40a2aaa11247b3fdf4433ad1c146199188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:ad:ca:ca:7b:62:c0:b0:c6:fa:51:8b:e8: a5:51:91:47:8e:a0:11:db:8c:88:54:3f:40:67:17: 06:8e:12:6d:3e:be:f9:7a:d4:04:15:84:20:4d:10: b8:66:9b:42:a0:27:7d:e3:0a:8e:ef:dd:3b:6c:35: 7f:7d:b2:22:18:b7:c4:46:cf:4b:94:0f:5e:6f:a8: 51:d1:ea:68:46:8a:53:b0:e1:f3:34:d8:3d:e0:4f: d6:44:b3:d7:46:a5:59:63:6e:c1:58:94:f2:9c:ac: bd:1c:ac:4f:88:d8:c2:a6:3b:5b:66:bd:87:f1:49: 67:ba:ca:da:7c:86:ce:8c:c7:ca:94:02:b4:41:8e: 04:2a:d2:9b:dc:1a:c7:b7:63:88:a3:46:11:90:b7: ef:d0:91:a9:da:62:77:44:cf:8e:66:d5:66:2a:cf: 19:0e:04:0f:1e:f8:76:64:5d:d4:68:be:f3:3f:43: bd:e7:87:07:dd:03:d4:8f:a4:19:5f:1a:b8:91:35: 78:ec:d1:fd:bc:1c:3e:1b:81:23:21:f4:f1:79:ef: e4:e4:6b:0c:6d:8c:5f:69:da:ee:d8:77:69:ec:6b: a6:d3:0d:0a:5e:ea:2f:cc:74:6e:51:9d:30:6f:24: 25:ec:ea:bc:a7:4c:4f:b5:52:93:91:e5:a1:63:f0: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DC:EA:40:A2:AA:A1:12:47:B3:FD:F4:43:3A:D1:C1:46:19:91:88 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_dzqQKKqoRJHs_30QzrRwUYZkYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.78.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:2c:ee:92:cc:88:f1:d9:47:e8:3c:3c:e8:fd:45:45:c8:fd: b0:37:ab:4f:e5:a4:12:aa:51:ec:cf:87:3d:b9:86:89:72:43: 58:4c:da:63:1e:99:3b:85:92:68:9a:d9:c9:d8:f1:dd:34:1e: 60:d1:4c:c2:68:1a:15:14:34:26:4f:82:3d:f9:cd:ad:85:f4: 84:c5:0e:93:dc:9b:a7:64:f1:d4:4d:63:d8:bc:42:15:d4:f2: e2:67:31:9a:67:15:5f:ee:b2:a5:8a:f9:4c:ad:5e:ca:6d:c0: 4a:46:cd:80:1e:7d:98:77:ad:dd:25:93:7c:47:b4:59:9e:98: 31:08:46:f4:99:e5:cf:bd:b8:74:09:c7:09:bf:b7:48:cb:0e: 4d:83:96:50:47:a1:e6:92:17:06:01:5f:9e:74:12:66:b1:80: ea:89:84:da:9c:ac:a0:e2:91:ce:af:25:91:95:03:b0:e2:3e: 2f:6c:b8:98:24:94:6e:7e:9b:7b:9f:4d:ea:c5:8e:f8:11:cc: 3f:ff:fd:70:08:d7:16:19:4e:7e:b1:af:48:cc:b2:75:41:d7: b5:03:92:f7:2d:8b:f1:14:91:9f:39:11:57:a6:c7:f9:5e:d8: 3b:84:57:4c:43:95:49:e4:d9:b7:6a:d6:8b:1c:02:a0:10:be: 57:53:ce:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/C46tL4EZpuF4rtgQiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGRjZWE0MGEyYWFhMTEyNDdiM2ZkZjQ0MzNhZDFjMTQ2MTk5MTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPmtysp7YsCwxvpRi+ilUZFHjqAR 24yIVD9AZxcGjhJtPr75etQEFYQgTRC4ZptCoCd94wqO7907bDV/fbIiGLfERs9L lA9eb6hR0epoRopTsOHzNNg94E/WRLPXRqVZY27BWJTynKy9HKxPiNjCpjtbZr2H 8UlnusrafIbOjMfKlAK0QY4EKtKb3BrHt2OIo0YRkLfv0JGp2mJ3RM+OZtVmKs8Z DgQPHvh2ZF3UaL7zP0O954cH3QPUj6QZXxq4kTV47NH9vBw+G4EjIfTxee/k5GsM bYxfadru2Hdp7Gum0w0KXuovzHRuUZ0wbyQl7Oq8p0xPtVKTkeWhY/AT8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP3c6kCiqqESR7P99EM60cFGGZGIMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvX2R6cVFLS3FvUkpIc18zMFF6clJ3VVlaa1lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkU4cMA0G CSqGSIb3DQEBCwUAA4IBAQBdLO6SzIjx2UfoPDzo/UVFyP2wN6tP5aQSqlHsz4c9 uYaJckNYTNpjHpk7hZJomtnJ2PHdNB5g0UzCaBoVFDQmT4I9+c2thfSExQ6T3Jun ZPHUTWPYvEIV1PLiZzGaZxVf7rKlivlMrV7KbcBKRs2AHn2Yd63dJZN8R7RZnpgx CEb0meXPvbh0CccJv7dIyw5Ng5ZQR6HmkhcGAV+edBJmsYDqiYTanKyg4pHOryWR lQOw4j4vbLiYJJRufpt7n03qxY74Ecw///1wCNcWGU5+sa9IzLJ1Qde1A5L3LYvx FJGfORFXpsf5Xtg7hFdMQ5VJ5Nm3ataLHAKgEL5XU84z -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:42 2026 by rpki-client