This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/dyM1KKt7yPX2fKZQzuMwLHwaBh4.roa File: dyM1KKt7yPX2fKZQzuMwLHwaBh4.roa (raw, json) Hash identifier: CAMGI6YI+jkWn0f4grhMJ+6ImTYbCmFXeMfJXe+pkh8= Subject key identifier: 77:23:35:28:AB:7B:C8:F5:F6:7C:A6:50:CE:E3:30:2C:7C:1A:06:1E Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Certificate serial: 019BD69F49B8DD87A1E52C4DAF6FD3E38212 Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/dyM1KKt7yPX2fKZQzuMwLHwaBh4.roa Signing time: Mon 19 Jan 2026 14:18:41 +0000 ROA not before: Mon 19 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 185.5.146.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:9f:49:b8:dd:87:a1:e5:2c:4d:af:6f:d3:e3:82:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Validity Not Before: Jan 19 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77233528ab7bc8f5f67ca650cee3302c7c1a061e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:99:20:e8:b3:f2:a2:a8:51:f3:36:f0:68:b8: c4:03:69:34:c6:fa:b9:99:1c:4d:90:7a:f3:e4:96: 1e:fe:1c:a1:ab:c2:69:2f:4d:b8:9b:d9:a2:43:31: 7d:c3:a3:06:e6:03:c1:56:67:51:b3:b4:64:cd:d1: a8:68:36:7c:c4:54:d8:57:83:89:7d:f0:79:8c:ef: aa:29:3c:25:80:5e:bc:b7:bc:1c:9c:f4:54:ed:02: ef:e0:76:30:60:a8:38:c1:38:26:2a:23:3a:4a:1b: e6:33:e7:c4:63:bd:e9:0d:c2:fb:02:66:5b:57:74: 3f:76:b4:00:21:b7:d7:31:5d:07:9c:58:a8:cb:48: a7:6a:8a:6f:b8:38:ee:91:d9:f3:be:b6:da:51:ab: fb:c2:84:e7:aa:a6:88:49:b3:5c:55:8b:1a:61:ae: 9e:78:51:4a:f2:fe:9c:7e:e0:2a:a5:90:f9:1c:a4: 7a:ba:3e:56:c6:1f:67:17:83:66:f0:7f:a8:a3:d1: 33:f9:6e:24:ca:bd:1b:8d:af:28:1e:55:3d:59:f1: 80:6f:8a:a6:50:9a:23:ec:6c:08:53:f9:b7:1f:98: 75:11:e8:25:9a:c6:15:1c:05:39:33:8a:fe:e1:ba: 69:8d:86:32:66:33:a1:44:a5:7e:19:63:98:60:ef: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:23:35:28:AB:7B:C8:F5:F6:7C:A6:50:CE:E3:30:2C:7C:1A:06:1E X509v3 Authority Key Identifier: keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/dyM1KKt7yPX2fKZQzuMwLHwaBh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.146.0/24 Signature Algorithm: sha256WithRSAEncryption 10:e0:8a:58:75:59:6e:7e:b8:13:23:32:14:e7:04:87:25:53: 32:27:7a:cd:40:91:e3:ee:17:2f:05:ad:ad:86:c4:fd:37:97: 04:01:6e:f2:f2:03:20:36:f0:56:fe:47:fb:31:ac:42:b2:1a: db:88:c7:4c:30:1d:a8:80:4e:a4:f3:2e:e7:c4:4e:03:dd:b0: c4:66:dd:cc:98:5d:d7:86:1b:26:a4:b9:a9:62:8b:b1:f9:8f: d0:6d:b0:3f:1a:cc:d1:4f:f8:8b:fb:91:cf:64:ad:b2:50:cf: 45:3c:7d:67:05:58:91:4f:65:e2:dc:48:55:74:bf:63:e1:d6: 3c:6a:8e:bf:48:48:eb:d1:b4:17:4b:4a:d1:2b:0e:f0:f9:d6: 59:27:8f:94:8b:19:5a:ca:c2:b9:c2:3a:30:bd:46:50:f1:55: 7e:a3:28:4c:9e:4f:c5:81:c5:c5:23:1c:28:6b:95:18:77:62: 5d:41:86:b0:98:89:96:a4:d2:24:78:21:d1:46:2c:ac:72:ec: 4f:5d:ac:44:a6:a8:e3:fd:54:ca:e5:70:ea:46:32:45:3e:4a: 58:75:8f:8d:7b:52:a8:42:a5:30:6c:ed:dd:26:33:22:83:4a: 8e:8b:a6:01:b8:ff:dc:1d:51:e0:00:4a:c6:db:f1:30:72:cf: 30:13:06:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvWn0m43Yeh5SxNr2/T44ISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx ZGQ3ZjAwHhcNMjYwMTE5MTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzIzMzUyOGFiN2JjOGY1ZjY3Y2E2NTBjZWUzMzAyYzdjMWEwNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45kg6LPyoqhR8zbwaLjEA2k0xvq5 mRxNkHrz5JYe/hyhq8JpL024m9miQzF9w6MG5gPBVmdRs7RkzdGoaDZ8xFTYV4OJ ffB5jO+qKTwlgF68t7wcnPRU7QLv4HYwYKg4wTgmKiM6ShvmM+fEY73pDcL7AmZb V3Q/drQAIbfXMV0HnFioy0inaopvuDjukdnzvrbaUav7woTnqqaISbNcVYsaYa6e eFFK8v6cfuAqpZD5HKR6uj5Wxh9nF4Nm8H+oo9Ez+W4kyr0bja8oHlU9WfGAb4qm UJoj7GwIU/m3H5h1EeglmsYVHAU5M4r+4bppjYYyZjOhRKV+GWOYYO9b3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHcjNSire8j19nymUM7jMCx8GgYeMB8GA1UdIwQY MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt YTRmN2IwODhiYzFhLzEvZHlNMUtLdDd5UFgyZktaUXp1TXdMSHdhQmg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQWSMA0G CSqGSIb3DQEBCwUAA4IBAQAQ4IpYdVlufrgTIzIU5wSHJVMyJ3rNQJHj7hcvBa2t hsT9N5cEAW7y8gMgNvBW/kf7MaxCshrbiMdMMB2ogE6k8y7nxE4D3bDEZt3MmF3X hhsmpLmpYoux+Y/QbbA/GszRT/iL+5HPZK2yUM9FPH1nBViRT2Xi3EhVdL9j4dY8 ao6/SEjr0bQXS0rRKw7w+dZZJ4+UixlaysK5wjowvUZQ8VV+oyhMnk/FgcXFIxwo a5UYd2JdQYawmImWpNIkeCHRRiyscuxPXaxEpqjj/VTK5XDqRjJFPkpYdY+Ne1Ko QqUwbO3dJjMig0qOi6YBuP/cHVHgAErG2/Ewcs8wEwYe -----END CERTIFICATE-----Generated at Sun Jan 25 10:13:54 2026 by rpki-client