This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/dtGYKYc-L-yIv33hN65J3E-xajc.roa File: dtGYKYc-L-yIv33hN65J3E-xajc.roa (raw, json) Hash identifier: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8= Subject key identifier: 76:D1:98:29:87:3E:2F:EC:88:BF:7D:E1:37:AE:49:DC:4F:B1:6A:37 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF5741BBE82B88CB2F73D03CD176D Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/dtGYKYc-L-yIv33hN65J3E-xajc.roa Signing time: Thu 01 Jan 2026 14:17:45 +0000 ROA not before: Thu 01 Jan 2026 14:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50345 IP address blocks: 93.125.108.0/24 maxlen: 24 2a04:2e80:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f5:74:1b:be:82:b8:8c:b2:f7:3d:03:cd:17:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76d19829873e2fec88bf7de137ae49dc4fb16a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:00:5d:6e:82:15:c9:00:ad:ef:7c:a2:a1: a5:31:9d:0a:de:b9:54:ed:ee:4b:68:8a:9d:6f:20: 1a:cc:c6:5e:b6:a9:75:8c:b9:67:42:c7:5a:55:ea: 55:e7:ce:c4:63:0d:fb:04:df:38:47:e9:29:51:6f: 60:fa:e1:ea:52:81:c9:a7:20:5b:1a:38:e3:cf:1a: 44:b6:7a:ac:ce:49:1d:ab:cf:af:82:fd:85:ea:57: 05:b4:aa:fb:e3:26:f2:04:a7:2e:d4:ad:66:48:0c: 12:cd:ad:1d:af:93:ce:b2:5c:0e:9c:8a:44:b2:83: cd:be:4b:73:cf:fc:58:ab:53:c4:83:4a:98:66:2a: 0c:af:f3:f2:4a:bb:a3:ba:d1:08:6d:9d:7f:a3:67: 5a:9b:0e:c3:f6:e3:5b:26:fc:41:e7:f2:5f:bc:2f: 6a:e4:49:3e:a5:3f:f5:e3:0a:b6:3d:bb:ba:52:90: 6a:8f:7d:cc:f6:28:a0:b4:5f:44:48:b9:fa:26:08: e1:35:04:a9:50:cb:76:66:11:70:86:3d:f7:37:f2: 43:f3:01:50:b2:bb:7a:8c:64:b1:97:2d:84:88:7e: 3c:13:40:b2:80:ed:8f:f4:d1:6c:06:32:72:21:1e: e0:23:ec:a3:59:48:67:04:8c:60:39:b2:5e:75:d6: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D1:98:29:87:3E:2F:EC:88:BF:7D:E1:37:AE:49:DC:4F:B1:6A:37 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/dtGYKYc-L-yIv33hN65J3E-xajc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.125.108.0/24 IPv6: 2a04:2e80:14::/48 Signature Algorithm: sha256WithRSAEncryption 5c:07:a6:ad:25:12:94:f6:fa:bd:3b:26:29:36:ae:ae:40:64: 41:73:8c:4a:6f:39:17:63:bf:46:f6:39:94:17:4f:4e:8a:bd: fd:61:f5:48:01:f9:ef:3f:69:5b:06:85:fd:38:92:19:14:ac: 18:b9:4c:f3:82:83:b0:9c:54:18:47:e3:d2:68:b5:28:7e:3d: 23:60:01:67:a9:44:ab:3d:a3:f2:a4:47:82:e5:f9:1c:54:87: 0f:f2:9c:05:d5:4d:a8:71:cb:9c:82:07:5b:7b:57:d4:21:ba: 5d:28:61:15:d9:2d:f5:a4:3b:ab:65:ee:ec:87:b9:53:85:9a: 21:4f:a2:7c:1b:f7:a9:b0:2f:62:bb:da:4c:51:c1:61:c5:52: 8c:b9:5c:cd:26:12:cc:57:44:18:ce:df:8a:6f:f3:ce:e3:12: c3:49:41:50:4d:78:d2:11:17:54:eb:29:5f:1b:57:59:86:da: 16:7b:59:11:2d:8c:45:d2:40:da:84:53:5c:0f:76:d4:5b:3e: 0b:f1:50:d1:20:6c:9e:cb:6b:39:db:49:c3:82:e0:7f:c0:5e: 40:12:a6:30:dd:66:58:5c:67:6a:b1:8c:50:ae:de:f7:cc:a9: be:61:76:6f:72:d2:a8:26:e1:ef:48:81:8d:38:f8:cf:7d:be: 76:18:1b:a8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt56/V0G76CuIyy9z0DzRdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmQxOTgyOTg3M2UyZmVjODhiZjdkZTEzN2FlNDlkYzRmYjE2YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGMAXW6CFckAre98oqGlMZ0K3rlU 7e5LaIqdbyAazMZetql1jLlnQsdaVepV587EYw37BN84R+kpUW9g+uHqUoHJpyBb GjjjzxpEtnqszkkdq8+vgv2F6lcFtKr74ybyBKcu1K1mSAwSza0dr5POslwOnIpE soPNvktzz/xYq1PEg0qYZioMr/PySrujutEIbZ1/o2damw7D9uNbJvxB5/JfvC9q 5Ek+pT/14wq2Pbu6UpBqj33M9iigtF9ESLn6JgjhNQSpUMt2ZhFwhj33N/JD8wFQ srt6jGSxly2EiH48E0CygO2P9NFsBjJyIR7gI+yjWUhnBIxgObJeddbcAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHbRmCmHPi/siL994TeuSdxPsWo3MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZHRHWUtZYy1MLXlJdjMzaE42NUozRS14YWpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXX1sMA8E AgACMAkDBwAqBC6AABQwDQYJKoZIhvcNAQELBQADggEBAFwHpq0lEpT2+r07Jik2 rq5AZEFzjEpvORdjv0b2OZQXT06Kvf1h9UgB+e8/aVsGhf04khkUrBi5TPOCg7Cc VBhH49JotSh+PSNgAWepRKs9o/KkR4Ll+RxUhw/ynAXVTahxy5yCB1t7V9Qhul0o YRXZLfWkO6tl7uyHuVOFmiFPonwb96mwL2K72kxRwWHFUoy5XM0mEsxXRBjO34pv 887jEsNJQVBNeNIRF1TrKV8bV1mG2hZ7WREtjEXSQNqEU1wPdtRbPgvxUNEgbJ7L aznbScOC4H/AXkASpjDdZlhcZ2qxjFCu3vfMqb5hdm9y0qgm4e9IgY04+M99vnYY G6g= -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:34 2026 by rpki-client