This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/dtXdklEBCkjgbKoquL4DVM7xMqU.roa File: dtXdklEBCkjgbKoquL4DVM7xMqU.roa (raw, json) Hash identifier: Drj4tg7W2VV/6vKkt0y7Sp3+nXq82WjkyEwAPPM25uA= Subject key identifier: 76:D5:DD:92:51:01:0A:48:E0:6C:AA:2A:B8:BE:03:54:CE:F1:32:A5 Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729 Certificate serial: 019B79ECE7A1CED34A217BDCC0785B7024B2 Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/dtXdklEBCkjgbKoquL4DVM7xMqU.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57562 IP address blocks: 91.205.188.0/23 maxlen: 23 91.205.188.0/24 maxlen: 24 91.205.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e7:a1:ce:d3:4a:21:7b:dc:c0:78:5b:70:24:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76d5dd9251010a48e06caa2ab8be0354cef132a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:bf:8b:57:1c:ed:97:bd:4b:5d:f7:80:fe: e3:03:9c:31:8e:15:68:d3:a5:66:be:6b:aa:48:ae: 35:4c:2b:ae:e4:92:87:4c:14:28:0c:cc:62:e9:78: 20:ca:80:e5:65:b6:88:d8:aa:ca:aa:e7:6f:08:9f: 5a:b4:f5:02:77:a0:ba:8c:32:ed:71:10:d0:03:04: 0f:05:62:6e:2f:50:e8:2a:0c:a0:e1:6f:fc:76:16: 3c:17:bf:7f:44:a9:f8:8d:80:a6:4f:a4:d8:92:b3: f3:8c:0e:fe:c4:12:23:98:e3:3c:c7:c8:a8:a0:93: 95:48:ca:4a:ab:6b:aa:dd:2f:93:62:f2:49:8f:8e: 17:39:47:72:cf:42:14:d4:84:81:7f:d8:db:35:2e: b0:bf:07:3a:57:e6:82:75:6a:02:f9:d3:72:ee:35: 98:2f:bd:61:8c:21:a4:d7:b7:87:09:58:a6:3d:7a: 84:48:a9:63:d0:4d:d4:fd:0f:04:e0:cb:61:ad:d3: ac:42:d0:51:d2:a5:e7:c9:73:5a:ec:04:b9:09:da: 72:ed:dc:ad:24:7a:bf:5f:81:70:11:74:25:7c:08: f3:7a:f0:a7:f3:a2:2f:d8:0e:71:4f:87:78:81:06: 93:4a:b9:57:77:24:0b:88:d3:b7:ff:1a:e2:45:d0: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D5:DD:92:51:01:0A:48:E0:6C:AA:2A:B8:BE:03:54:CE:F1:32:A5 X509v3 Authority Key Identifier: keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/dtXdklEBCkjgbKoquL4DVM7xMqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.188.0/23 Signature Algorithm: sha256WithRSAEncryption 96:b2:51:50:99:7e:a2:a5:ee:bb:51:70:23:b9:59:b5:06:a4: 05:e7:fe:2d:80:2d:30:ba:78:32:40:92:0c:29:75:c8:56:59: 5e:13:d0:ac:35:57:10:fc:ed:3d:25:81:4f:90:87:49:22:82: 21:b4:fd:da:f6:17:e5:e6:9e:8f:53:06:c9:42:54:e4:20:81: fd:f0:ac:21:0c:2f:56:e6:fe:5a:f1:be:3a:69:0d:ec:e1:9a: a4:90:d8:ee:2a:c5:cb:7b:1f:83:5d:ac:cb:e4:ab:f8:4f:55: b1:fe:ac:dc:41:a3:4b:4d:f9:58:3e:cb:5c:a7:86:3a:39:5a: 0a:ea:77:93:65:88:27:e7:d6:39:16:c4:58:28:7f:47:cf:80: b9:32:71:d2:8e:02:25:47:1b:be:96:ad:25:68:35:f2:3c:29: 8f:c6:8a:1c:c7:4a:25:d3:c7:ac:2f:fb:0c:bd:08:0e:30:b4: 24:93:c6:24:8e:20:91:06:da:f7:29:b6:bd:fa:97:9e:df:7d: 17:bc:47:bb:b7:fc:a8:4f:ef:8b:71:94:93:8f:15:56:5c:d2: e0:5c:14:3b:ee:a6:f8:c4:dc:da:da:ef:56:77:3e:4e:e3:d5: e4:cc:e1:17:bc:1c:7f:84:64:17:8c:2d:82:2f:d4:44:71:88: 18:b3:0b:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57OehztNKIXvcwHhbcCSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MmE1MjRmOWIxYjM4MDFkYmQ3Yzg5YTE2MGFlYzA3NmI1 N2U3MjkwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmQ1ZGQ5MjUxMDEwYTQ4ZTA2Y2FhMmFiOGJlMDM1NGNlZjEzMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSS/i1cc7Ze9S133gP7jA5wxjhVo 06VmvmuqSK41TCuu5JKHTBQoDMxi6XggyoDlZbaI2KrKqudvCJ9atPUCd6C6jDLt cRDQAwQPBWJuL1DoKgyg4W/8dhY8F79/RKn4jYCmT6TYkrPzjA7+xBIjmOM8x8io oJOVSMpKq2uq3S+TYvJJj44XOUdyz0IU1ISBf9jbNS6wvwc6V+aCdWoC+dNy7jWY L71hjCGk17eHCVimPXqESKlj0E3U/Q8E4MthrdOsQtBR0qXnyXNa7AS5Cdpy7dyt JHq/X4FwEXQlfAjzevCn86Iv2A5xT4d4gQaTSrlXdyQLiNO3/xriRdDkRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbV3ZJRAQpI4GyqKri+A1TO8TKlMB8GA1UdIwQY MBaAFMcqUk+bGzgB29fImhYK7AdrV+cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYt ZDdhNjg0YTU3YjE5LzEvZHRYZGtsRUJDa2pnYktvcXVMNERWTTd4TXFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYtZDdhNjg0YTU3YjE5 LzEveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW828MA0G CSqGSIb3DQEBCwUAA4IBAQCWslFQmX6ipe67UXAjuVm1BqQF5/4tgC0wungyQJIM KXXIVlleE9CsNVcQ/O09JYFPkIdJIoIhtP3a9hfl5p6PUwbJQlTkIIH98KwhDC9W 5v5a8b46aQ3s4ZqkkNjuKsXLex+DXazL5Kv4T1Wx/qzcQaNLTflYPstcp4Y6OVoK 6neTZYgn59Y5FsRYKH9Hz4C5MnHSjgIlRxu+lq0laDXyPCmPxoocx0ol08esL/sM vQgOMLQkk8YkjiCRBtr3Kba9+pee330XvEe7t/yoT++LcZSTjxVWXNLgXBQ77qb4 xNza2u9Wdz5O49XkzOEXvBx/hGQXjC2CL9REcYgYswv/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:09 2026 by rpki-client