This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/dqk8s9yxqVNp2my2D8_Lh1kkZME.roa File: dqk8s9yxqVNp2my2D8_Lh1kkZME.roa (raw, json) Hash identifier: BcaBuTdeFXOO46M5mm/z28gO7plRMI4632bEK6WZ0rQ= Subject key identifier: 76:A9:3C:B3:DC:B1:A9:53:69:DA:6C:B6:0F:CF:CB:87:59:24:64:C1 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775954091ED62804E3315BCE528B8B64 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/dqk8s9yxqVNp2my2D8_Lh1kkZME.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50275 IP address blocks: 188.211.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:54:09:1e:d6:28:04:e3:31:5b:ce:52:8b:8b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76a93cb3dcb1a95369da6cb60fcfcb87592464c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:c7:a2:97:55:e6:ba:66:6c:ad:1c:b4:6e: 93:d4:4b:de:b8:4d:23:53:23:ec:3a:8d:2d:a1:a7: d9:79:f9:78:40:41:67:93:b8:7d:39:82:80:d8:17: 70:0e:4d:2f:19:04:6e:67:f2:70:97:75:e6:9c:fd: f2:77:84:1b:43:6e:c4:6d:81:d6:ac:50:69:2d:7d: cf:dd:0c:39:ae:09:62:f0:4a:49:fb:3b:d2:ba:15: b6:9f:14:40:ce:2c:a4:f8:9c:e1:b3:f3:bb:6c:0e: 26:45:98:f7:53:e6:1d:a4:6f:4e:67:0d:4a:51:ad: 88:4a:8d:44:0c:73:3e:06:3b:0c:e6:ce:87:4a:ff: db:6c:f6:39:94:ba:2b:74:02:e0:05:63:49:d7:ae: 77:13:3d:62:de:de:79:fe:de:6d:60:5f:1f:61:e2: 1d:8c:95:6b:0a:da:0d:37:8a:e0:fd:5d:aa:2b:93: d5:5e:bf:76:bb:6c:2f:db:b0:1a:37:70:d2:bf:5f: a0:da:c8:44:c4:7f:4e:55:dc:22:a4:4c:9f:c3:29: 68:fc:3f:80:7b:72:04:2e:89:15:4c:27:62:83:dc: 12:64:3b:a7:58:e8:96:1a:d5:36:24:c2:3b:43:ab: a3:f7:fe:3a:39:5f:d8:0f:96:ec:a7:40:a5:3d:f4: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A9:3C:B3:DC:B1:A9:53:69:DA:6C:B6:0F:CF:CB:87:59:24:64:C1 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/dqk8s9yxqVNp2my2D8_Lh1kkZME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.211.232.0/24 Signature Algorithm: sha256WithRSAEncryption a7:f9:14:2d:92:73:51:22:17:fd:44:75:d2:54:0a:e4:a4:39: d6:be:e8:11:c3:e9:26:30:bb:30:db:6c:08:5b:25:03:38:ee: 18:7a:54:9e:16:01:24:f1:10:f7:2f:7e:6d:5b:b9:f1:07:c1: 26:9f:86:ca:7e:f0:5f:ff:f5:09:67:a4:82:bc:20:3e:2a:84: fa:66:43:dd:99:9c:06:46:54:d8:66:65:a0:b7:b8:75:f1:9a: 07:f9:09:66:09:35:4a:90:0d:af:c6:d3:65:a6:15:0f:51:71: 7e:0a:25:6f:f2:9e:72:e0:a7:6e:b3:2f:cb:16:7d:fd:c6:09: be:ae:b2:74:4f:5d:c9:88:0f:e2:d8:cd:20:ed:b5:a3:5b:f1: 35:2f:b8:db:b1:75:3b:4c:11:92:d6:ea:3c:4f:a7:87:7c:3c: 47:d1:f8:e4:bc:59:61:ba:b4:1e:64:f2:59:cd:09:de:4d:d4: ff:4d:ab:a1:a4:88:bc:e9:83:00:db:73:cb:84:22:81:58:d7: 27:96:38:65:9d:48:4f:db:8c:cc:92:ff:0e:fa:82:dc:a7:b3: 6a:24:76:74:93:48:59:12:a9:d1:1f:85:18:a9:7e:54:ad:df: d4:97:a7:85:16:60:29:54:e4:ff:78:56:32:cf:f3:8e:c6:98: 0f:4f:a6:b6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVQJHtYoBOMxW85Si4tkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmE5M2NiM2RjYjFhOTUzNjlkYTZjYjYwZmNmY2I4NzU5MjQ2NGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWLHopdV5rpmbK0ctG6T1EveuE0j UyPsOo0toafZefl4QEFnk7h9OYKA2BdwDk0vGQRuZ/Jwl3XmnP3yd4QbQ27EbYHW rFBpLX3P3Qw5rgli8EpJ+zvSuhW2nxRAziyk+Jzhs/O7bA4mRZj3U+YdpG9OZw1K Ua2ISo1EDHM+BjsM5s6HSv/bbPY5lLordALgBWNJ1653Ez1i3t55/t5tYF8fYeId jJVrCtoNN4rg/V2qK5PVXr92u2wv27AaN3DSv1+g2shExH9OVdwipEyfwylo/D+A e3IELokVTCdig9wSZDunWOiWGtU2JMI7Q6uj9/46OV/YD5bsp0ClPfSlGwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHapPLPcsalTadpstg/Py4dZJGTBMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2RxazhzOXl4cVZOcDJteTJEOF9MaDFra1pNRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC80+gw DQYJKoZIhvcNAQELBQADggEBAKf5FC2Sc1EiF/1EddJUCuSkOda+6BHD6SYwuzDb bAhbJQM47hh6VJ4WASTxEPcvfm1bufEHwSafhsp+8F//9QlnpIK8ID4qhPpmQ92Z nAZGVNhmZaC3uHXxmgf5CWYJNUqQDa/G02WmFQ9RcX4KJW/ynnLgp26zL8sWff3G Cb6usnRPXcmID+LYzSDttaNb8TUvuNuxdTtMEZLW6jxPp4d8PEfR+OS8WWG6tB5k 8lnNCd5N1P9Nq6GkiLzpgwDbc8uEIoFY1yeWOGWdSE/bjMyS/w76gtyns2okdnST SFkSqdEfhRipflSt39SXp4UWYClU5P94VjLP847GmA9PprY= -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:44 2026 by rpki-client