This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dkhQ_UaK7KYvlzpQ9GDq8JVLYXM.roa File: dkhQ_UaK7KYvlzpQ9GDq8JVLYXM.roa (raw, json) Hash identifier: Hysc5ZKIFwdVr2e/1RLMNiLyLDj0bzccSLkW/4M0Q+o= Subject key identifier: 76:48:50:FD:46:8A:EC:A6:2F:97:3A:50:F4:60:EA:F0:95:4B:61:73 Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e Certificate serial: 019B7910330041D3CFA21C9F352B2B3C845A Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dkhQ_UaK7KYvlzpQ9GDq8JVLYXM.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215046 IP address blocks: 193.25.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:33:00:41:d3:cf:a2:1c:9f:35:2b:2b:3c:84:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=764850fd468aeca62f973a50f460eaf0954b6173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:10:e0:a4:33:e8:d7:1d:d0:2f:5a:28:a8: ec:0c:16:fd:6d:3b:b3:29:22:55:72:eb:19:15:b6: 36:05:5c:e5:c3:26:6a:83:46:44:72:ce:b5:d7:fd: f1:63:c1:e4:2b:a1:25:53:4a:38:5e:81:12:ce:fc: 01:ff:7f:be:38:3f:8c:99:e3:07:46:6f:4e:65:94: df:b4:ab:66:29:22:33:c1:a6:de:bc:25:57:6f:45: 0c:61:bc:3d:bb:c0:14:1d:4d:c4:62:7b:95:d6:f8: ac:c1:56:67:93:72:e5:15:f5:6a:35:bf:0d:c0:89: 52:f7:b4:89:45:13:5d:c7:29:66:21:66:36:14:3b: af:ff:96:f3:70:ce:19:3c:f7:11:7c:14:84:57:82: e7:d1:97:17:30:fc:79:ec:2e:7a:b8:2d:91:6f:f4: b0:35:eb:d8:bd:e6:a1:88:b3:51:f9:29:d7:38:a2: 02:38:63:57:4d:86:db:f4:96:d9:0e:bf:27:3b:db: 76:b0:fa:7d:51:1b:92:e5:43:50:d3:e1:fd:8e:f5: ee:9c:0a:44:9b:d4:44:58:a5:c1:6d:3d:6e:e9:c7: 01:8a:2d:ff:1f:d2:8b:87:08:7e:f9:b1:5b:88:fb: 48:59:fb:29:29:ba:ca:ae:8f:43:ce:90:14:60:07: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:48:50:FD:46:8A:EC:A6:2F:97:3A:50:F4:60:EA:F0:95:4B:61:73 X509v3 Authority Key Identifier: keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dkhQ_UaK7KYvlzpQ9GDq8JVLYXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.252.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:d1:03:f2:d7:ba:ca:1f:ef:ee:11:8f:6a:ba:87:4b:70:05: 99:c7:0e:50:b5:da:92:b0:94:fa:2a:a3:a1:d6:3f:c7:21:28: 7e:b1:2a:35:e4:c2:44:fc:66:69:b6:d7:6a:4f:1f:13:b3:d0: 40:d7:d8:7c:92:30:82:46:f8:51:54:35:bf:06:c2:54:d0:38: 54:3c:b6:bb:f0:a8:ae:63:f0:81:83:ed:01:17:7c:4d:f6:cf: 71:23:da:2a:fa:30:0d:85:fb:99:c4:f7:bf:90:53:9f:ef:a7: 0b:18:97:e9:9b:89:4d:a3:46:d4:a4:3a:c4:8c:35:cd:8e:d7: 8c:c4:4e:e1:8e:4e:93:ce:08:80:6d:26:65:bd:ce:83:47:5e: bc:cc:03:45:02:69:e7:48:ad:2c:f1:4d:23:76:78:d2:19:89: fd:10:c2:4f:55:ef:5f:14:24:ef:fd:55:41:a4:d4:30:13:a4: 75:12:09:52:7f:ea:56:8f:42:61:88:92:b4:da:af:9c:be:8e: 77:02:28:ba:46:fa:55:8a:37:8f:36:b6:44:7c:e1:32:f5:58: c4:9a:63:ba:0e:8f:80:a5:ec:86:5f:ac:3f:22:82:b1:a4:ce: 34:f5:36:9d:af:3a:f0:c6:04:2b:56:19:aa:e6:e4:31:c6:cf: 53:e1:b7:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDMAQdPPohyfNSsrPIRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw NDE5NGUwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjQ4NTBmZDQ2OGFlY2E2MmY5NzNhNTBmNDYwZWFmMDk1NGI2MTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXcQ4KQz6Ncd0C9aKKjsDBb9bTuz KSJVcusZFbY2BVzlwyZqg0ZEcs611/3xY8HkK6ElU0o4XoESzvwB/3++OD+MmeMH Rm9OZZTftKtmKSIzwabevCVXb0UMYbw9u8AUHU3EYnuV1viswVZnk3LlFfVqNb8N wIlS97SJRRNdxylmIWY2FDuv/5bzcM4ZPPcRfBSEV4Ln0ZcXMPx57C56uC2Rb/Sw NevYveahiLNR+SnXOKICOGNXTYbb9JbZDr8nO9t2sPp9URuS5UNQ0+H9jvXunApE m9REWKXBbT1u6ccBii3/H9KLhwh++bFbiPtIWfspKbrKro9DzpAUYAcq/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZIUP1GiuymL5c6UPRg6vCVS2FzMB8GA1UdIwQY MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt MWFkNDdjY2QyZDlhLzEvZGtoUV9VYUs3S1l2bHpwUTlHRHE4SlZMWVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRn8MA0G CSqGSIb3DQEBCwUAA4IBAQCa0QPy17rKH+/uEY9quodLcAWZxw5QtdqSsJT6KqOh 1j/HISh+sSo15MJE/GZpttdqTx8Ts9BA19h8kjCCRvhRVDW/BsJU0DhUPLa78Kiu Y/CBg+0BF3xN9s9xI9oq+jANhfuZxPe/kFOf76cLGJfpm4lNo0bUpDrEjDXNjteM xE7hjk6TzgiAbSZlvc6DR168zANFAmnnSK0s8U0jdnjSGYn9EMJPVe9fFCTv/VVB pNQwE6R1EglSf+pWj0JhiJK02q+cvo53Aii6RvpVijePNrZEfOEy9VjEmmO6Do+A peyGX6w/IoKxpM409TadrzrwxgQrVhmq5uQxxs9T4bdB -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:25 2026 by rpki-client