This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/DM0EXQBkZr0e7E2rftq5-TtNVUc.roa File: DM0EXQBkZr0e7E2rftq5-TtNVUc.roa (raw, json) Hash identifier: 4qPVGZtejJWXy8T9lJtHmIGF6CkNf88ym74PPqmxTh0= Subject key identifier: 0C:CD:04:5D:00:64:66:BD:1E:EC:4D:AB:7E:DA:B9:F9:3B:4D:55:47 Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85 Certificate serial: 019B7E387541BB50EE6EF99D33A0E04AFE85 Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/DM0EXQBkZr0e7E2rftq5-TtNVUc.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56791 IP address blocks: 176.32.128.0/19 maxlen: 32 176.119.197.0/24 maxlen: 32 185.45.100.0/22 maxlen: 32 2a00:9e80::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:75:41:bb:50:ee:6e:f9:9d:33:a0:e0:4a:fe:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ccd045d006466bd1eec4dab7edab9f93b4d5547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:9a:06:8d:0a:7c:ad:75:d3:75:3e:fa:e9: b3:84:07:c8:7a:d4:b4:a7:99:f2:d7:4b:9d:f6:97: 00:f1:4a:7a:4e:d0:83:c7:31:2a:08:a4:04:ac:57: 70:d6:28:4a:38:56:43:54:4f:a3:be:92:78:1d:fc: 75:a4:1a:64:3f:89:c5:93:53:fa:19:1a:6f:10:64: 40:f2:3d:10:3d:fb:1c:0a:a2:6e:b1:90:8e:f8:78: ab:78:1b:9a:d9:d9:6f:a8:60:fe:13:33:72:22:25: 11:58:ed:76:74:bd:27:4c:e2:7e:43:c8:22:dc:ec: 5a:b2:d7:24:2a:b8:ad:00:0d:07:51:91:a1:87:26: 82:ba:93:da:45:bf:e6:36:ba:38:53:58:3b:b5:71: c1:0f:61:50:27:95:bd:46:ef:51:a4:46:fe:4a:4e: 7f:7b:45:26:34:10:91:4e:3a:b3:3b:72:1b:33:70: 0a:99:3c:c1:0b:a6:54:af:c2:f9:6b:97:ea:05:30: 50:e1:ab:50:b7:59:d4:1d:7d:f2:74:42:6f:5a:cf: 80:9c:61:38:af:c7:45:cf:82:e4:b2:17:3f:6c:5e: 47:31:ee:06:65:8e:92:2f:e3:98:ac:58:5b:dc:82: 1f:35:68:7e:29:95:d2:1b:93:db:f3:13:17:f2:dc: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CD:04:5D:00:64:66:BD:1E:EC:4D:AB:7E:DA:B9:F9:3B:4D:55:47 X509v3 Authority Key Identifier: keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/DM0EXQBkZr0e7E2rftq5-TtNVUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.32.128.0/19 176.119.197.0/24 185.45.100.0/22 IPv6: 2a00:9e80::/29 Signature Algorithm: sha256WithRSAEncryption 48:c3:03:47:de:54:b3:21:cb:4d:3d:a3:53:6a:7c:bb:52:34: 4e:97:dc:b2:f8:e4:43:c0:31:57:21:58:7f:54:13:dd:fb:de: 55:28:35:fd:e5:83:f6:3b:5b:89:ba:86:35:5f:7c:75:12:f2: e8:26:3b:c9:d8:5c:53:c2:95:52:c3:59:ab:cc:4f:52:ef:00: 65:8e:ff:80:33:aa:9b:b0:84:d2:41:42:b7:3d:08:7e:ce:a5: f7:eb:7d:52:86:5c:f5:21:25:20:dc:76:87:1a:bf:0b:c5:27: 86:73:b2:6a:3c:24:1b:00:88:4a:0f:7d:04:d3:aa:45:98:d2: ed:08:65:49:98:da:0c:d5:be:0e:4a:4e:55:6b:1f:01:29:31: 59:a8:7b:6c:8a:ee:59:fa:09:fa:65:0c:af:1f:2f:6e:a5:2f: 8f:97:06:8e:b7:78:c1:e2:dc:d9:7a:ef:38:57:47:80:21:2a: 85:bf:c1:c9:74:99:bb:d6:e7:90:63:ce:bb:6a:01:b6:11:63: 5f:9b:c1:29:97:e9:af:3f:96:e1:17:f9:cd:fd:f2:aa:55:13: 21:b5:0a:a5:38:8e:a2:f6:4e:83:e7:83:71:3d:61:13:41:de: 09:ca:f0:0d:b8:34:f1:9e:59:fa:0e:0e:9e:c6:45:9d:a9:d6: 20:83:57:61 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OHVBu1DubvmdM6DgSv6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzFjMzM5YjE4NjE3MjJiZmZlODY3MjE4MzE0Y2UxMjk1 YzNjODUwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2NkMDQ1ZDAwNjQ2NmJkMWVlYzRkYWI3ZWRhYjlmOTNiNGQ1NTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooSaBo0KfK1103U++umzhAfIetS0 p5ny10ud9pcA8Up6TtCDxzEqCKQErFdw1ihKOFZDVE+jvpJ4Hfx1pBpkP4nFk1P6 GRpvEGRA8j0QPfscCqJusZCO+HireBua2dlvqGD+EzNyIiURWO12dL0nTOJ+Q8gi 3OxastckKritAA0HUZGhhyaCupPaRb/mNro4U1g7tXHBD2FQJ5W9Ru9RpEb+Sk5/ e0UmNBCRTjqzO3IbM3AKmTzBC6ZUr8L5a5fqBTBQ4atQt1nUHX3ydEJvWs+AnGE4 r8dFz4Lkshc/bF5HMe4GZY6SL+OYrFhb3IIfNWh+KZXSG5Pb8xMX8txH/QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAzNBF0AZGa9HuxNq37aufk7TVVHMB8GA1UdIwQY MBaAFPcxwzmxhhciv/6GchgxTOEpXDyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAt MGRjMjBhN2Q4MmI5LzEvRE0wRVhRQmtacjBlN0UycmZ0cTUtVHROVlVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAtMGRjMjBhN2Q4MmI5 LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFsCCAAwQA sHfFAwQCuS1kMA0EAgACMAcDBQMqAJ6AMA0GCSqGSIb3DQEBCwUAA4IBAQBIwwNH 3lSzIctNPaNTany7UjROl9yy+ORDwDFXIVh/VBPd+95VKDX95YP2O1uJuoY1X3x1 EvLoJjvJ2FxTwpVSw1mrzE9S7wBljv+AM6qbsITSQUK3PQh+zqX3631Shlz1ISUg 3HaHGr8LxSeGc7JqPCQbAIhKD30E06pFmNLtCGVJmNoM1b4OSk5Vax8BKTFZqHts iu5Z+gn6ZQyvHy9upS+PlwaOt3jB4tzZeu84V0eAISqFv8HJdJm71ueQY867agG2 EWNfm8Epl+mvP5bhF/nN/fKqVRMhtQqlOI6i9k6D54NxPWETQd4JyvANuDTxnln6 Dg6exkWdqdYgg1dh -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:56 2026 by rpki-client