This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/DgaPvHr8fDi8HuKnXZAkNXbuTbI.roa File: DgaPvHr8fDi8HuKnXZAkNXbuTbI.roa (raw, json) Hash identifier: dvmPY8Gx+T0DKIVhU0f2nfocGW0Bwnwndts2Xgms0Xs= Subject key identifier: 0E:06:8F:BC:7A:FC:7C:38:BC:1E:E2:A7:5D:90:24:35:76:EE:4D:B2 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B41032E501723C3DBEE481F6B38C Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/DgaPvHr8fDi8HuKnXZAkNXbuTbI.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207967 IP address blocks: 193.109.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b4:10:32:e5:01:72:3c:3d:be:e4:81:f6:b3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e068fbc7afc7c38bc1ee2a75d90243576ee4db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:b7:29:35:ee:f1:af:93:c3:8b:ed:2d:28: d6:66:c1:7e:b2:be:e6:63:07:dc:18:f8:15:a0:76: 77:e6:5a:5e:d4:bf:19:91:92:5f:b3:10:e8:96:ab: 29:64:31:6a:09:ac:f0:01:67:26:b4:cf:93:b1:98: 5f:53:4d:ec:4d:3b:91:0e:1e:db:aa:5a:64:6a:23: cd:2a:09:01:d0:e8:62:07:d2:16:96:6b:78:71:01: d7:fd:9b:af:3a:74:ec:a4:db:3d:e6:46:cd:38:d4: 0b:88:1a:40:27:4f:d5:36:d7:9e:e5:ce:1b:23:f2: 98:1c:ca:05:15:ee:9c:8b:6c:8e:8e:ce:cd:99:7b: 8f:47:57:13:9a:bf:80:bf:40:e8:4c:de:d0:71:92: d1:3c:09:57:4b:91:70:ef:ba:5f:a2:c0:05:eb:3a: 09:0b:c1:34:70:16:a4:c4:f2:f4:29:44:dc:b6:86: 3f:0c:67:dd:7d:bb:dd:89:ff:e2:ad:31:56:82:81: 1e:d6:87:8b:ff:ae:9e:b7:9b:95:79:99:3f:fa:18: 1d:fc:2e:a9:50:9f:6a:f6:da:b5:00:e9:46:14:55: 8d:64:1c:ff:01:6a:dd:1b:9d:6b:6d:3e:3a:c8:26: ca:41:36:29:13:39:2c:73:01:47:62:db:fb:16:87: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:06:8F:BC:7A:FC:7C:38:BC:1E:E2:A7:5D:90:24:35:76:EE:4D:B2 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/DgaPvHr8fDi8HuKnXZAkNXbuTbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.160.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:be:3c:0d:ad:34:4e:a0:37:7e:f3:58:e8:58:eb:c4:76:f8: 67:76:db:dd:f8:72:21:4e:8b:29:07:5d:ff:75:51:66:40:9f: 9b:b5:e0:4c:af:33:92:41:fe:3b:70:26:07:4c:d4:40:a5:91: 93:d1:b9:13:57:6f:e6:73:fc:f9:a1:73:cb:67:20:78:18:49: 88:20:9a:38:93:65:d8:9b:0e:9e:a2:23:09:4a:d5:57:3f:df: 1a:29:ae:21:11:82:3f:c1:d8:9b:cb:1d:43:60:00:98:51:77: a0:10:3e:9b:22:fa:b1:3d:4f:34:a9:b6:76:35:b5:2f:4e:58: c6:32:9a:a3:8f:85:45:8d:4b:75:50:0e:c0:c8:15:0e:ef:54: 42:38:bd:65:e6:3a:5c:11:01:3e:46:76:23:53:a9:03:48:e8: ab:94:68:26:4f:42:2b:58:d9:06:d1:1a:6b:42:87:7a:f5:a1: 72:1a:e8:13:48:2e:0e:ed:be:48:2b:27:1f:cc:2e:74:23:48: 4b:3b:45:a6:8d:8b:f5:a9:07:ee:04:8c:b9:f8:f3:0f:c6:8b: de:08:51:81:f0:72:57:28:25:77:aa:c7:c7:61:81:68:b0:91: 70:c0:fd:f6:cb:fb:bf:64:95:f0:2a:a3:33:f9:08:21:82:2a: 4c:f0:b5:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLQQMuUBcjw9vuSB9rOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTA2OGZiYzdhZmM3YzM4YmMxZWUyYTc1ZDkwMjQzNTc2ZWU0ZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMe3KTXu8a+Tw4vtLSjWZsF+sr7m YwfcGPgVoHZ35lpe1L8ZkZJfsxDolqspZDFqCazwAWcmtM+TsZhfU03sTTuRDh7b qlpkaiPNKgkB0OhiB9IWlmt4cQHX/ZuvOnTspNs95kbNONQLiBpAJ0/VNtee5c4b I/KYHMoFFe6ci2yOjs7NmXuPR1cTmr+Av0DoTN7QcZLRPAlXS5Fw77pfosAF6zoJ C8E0cBakxPL0KUTctoY/DGfdfbvdif/irTFWgoEe1oeL/66et5uVeZk/+hgd/C6p UJ9q9tq1AOlGFFWNZBz/AWrdG51rbT46yCbKQTYpEzkscwFHYtv7FofwRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4Gj7x6/Hw4vB7ip12QJDV27k2yMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvRGdhUHZIcjhmRGk4SHVLblhaQWtOWGJ1VGJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW2gMA0G CSqGSIb3DQEBCwUAA4IBAQBbvjwNrTROoDd+81joWOvEdvhndtvd+HIhTospB13/ dVFmQJ+bteBMrzOSQf47cCYHTNRApZGT0bkTV2/mc/z5oXPLZyB4GEmIIJo4k2XY mw6eoiMJStVXP98aKa4hEYI/wdibyx1DYACYUXegED6bIvqxPU80qbZ2NbUvTljG Mpqjj4VFjUt1UA7AyBUO71RCOL1l5jpcEQE+RnYjU6kDSOirlGgmT0IrWNkG0Rpr Qod69aFyGugTSC4O7b5IKycfzC50I0hLO0WmjYv1qQfuBIy5+PMPxoveCFGB8HJX KCV3qsfHYYFosJFwwP32y/u/ZJXwKqMz+QghgipM8LWZ -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:52 2026 by rpki-client