This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/diKa-1w5ElMvlcPYjK3PRVqYmi4.roa File: diKa-1w5ElMvlcPYjK3PRVqYmi4.roa (raw, json) Hash identifier: ZihAuU6a+sRKBgVaTd6H1m0T3csQ2DHl/3OILvkWxBE= Subject key identifier: 76:22:9A:FB:5C:39:12:53:2F:95:C3:D8:8C:AD:CF:45:5A:98:9A:2E Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703 Certificate serial: 019B78A365E2B9C61DC3324C8A9E8FCA7503 Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/diKa-1w5ElMvlcPYjK3PRVqYmi4.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54574 IP address blocks: 193.41.248.0/24 maxlen: 24 193.41.250.0/24 maxlen: 24 193.110.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:65:e2:b9:c6:1d:c3:32:4c:8a:9e:8f:ca:75:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76229afb5c3912532f95c3d88cadcf455a989a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:9e:4e:da:85:7a:b1:8b:a6:61:64:cd:80: 80:a8:84:3b:66:27:a3:cb:c4:f2:5a:0b:03:ba:80: 4a:d4:6c:c5:48:8b:b5:ce:e4:a5:fe:fe:03:ae:60: 3a:f3:4d:43:d1:5b:7d:03:6e:e5:ed:24:3c:2c:94: 92:c4:dc:95:10:38:b9:44:ed:cf:3d:fc:6d:b8:01: 13:fd:ad:b1:0c:5d:eb:9e:67:5d:45:8e:25:98:b6: 46:09:59:62:3f:9b:59:f3:58:a6:bd:6a:fe:cd:aa: 35:30:a2:b2:29:9a:b8:b2:12:13:18:b4:ad:c2:c7: 24:72:02:67:74:16:c7:dc:54:02:7b:ff:9c:57:81: 19:41:d1:80:01:81:a1:a4:9d:1a:fd:eb:8e:bc:3c: cf:14:ab:14:de:36:05:4e:88:27:51:e2:92:47:cf: c1:05:c4:26:0d:65:34:b5:83:67:7a:d3:8c:a1:41: a1:c6:64:30:4f:a4:27:6e:cc:bc:7b:22:07:9c:06: 12:de:98:d6:fb:19:8c:74:e4:b7:07:24:72:13:f5: 14:eb:99:32:1c:78:3e:11:df:75:b3:a1:b1:71:16: a1:f5:de:88:de:c6:a6:e4:0e:f6:fd:d9:c1:8c:1d: e6:a8:37:dd:da:fd:c6:cd:d1:61:52:5d:6c:67:26: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:22:9A:FB:5C:39:12:53:2F:95:C3:D8:8C:AD:CF:45:5A:98:9A:2E X509v3 Authority Key Identifier: keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/diKa-1w5ElMvlcPYjK3PRVqYmi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.248.0/24 193.41.250.0/24 193.110.200.0/22 Signature Algorithm: sha256WithRSAEncryption 81:29:52:dc:31:80:ea:e8:21:f2:24:7f:65:2d:b9:99:46:8d: cf:9e:0e:b7:ef:85:ca:5c:e5:f4:d1:70:39:70:59:2b:d5:c8: 94:31:78:2f:83:84:cc:7f:a9:1d:97:62:55:b2:87:84:44:d7: 39:bc:7c:54:b0:01:6c:4a:dd:34:32:cf:15:c0:86:3c:76:8f: 50:30:e4:29:1f:a5:ba:3a:c8:31:0c:b6:95:38:a1:24:39:0e: 75:a7:09:0f:60:ca:6d:b2:ec:55:34:73:d1:74:c6:07:2a:6d: da:8c:c5:bf:58:4a:29:6e:01:5c:ff:0f:35:91:c6:72:ad:b3: 03:e7:14:39:d2:f2:be:36:dd:86:23:82:e6:c1:16:03:d7:72: 96:45:b6:62:66:5e:ad:32:ee:6d:1a:17:fb:b0:d0:fd:44:89: bf:db:73:be:4c:20:a8:8d:6d:1e:d5:e2:d6:65:03:42:04:69: 75:2c:37:69:a5:9d:ab:0f:3e:de:42:3d:18:67:55:43:89:8c: f3:07:ff:38:2a:e4:0f:84:2b:ad:c6:c8:22:f5:12:36:e1:2d: 9e:d2:d9:09:1a:62:e7:22:58:df:ab:9a:6c:e1:9c:ad:c8:8a: ee:45:b2:b4:61:d9:5c:4b:b9:9e:cb:3f:07:63:94:23:5f:f2: 33:3f:df:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4o2XiucYdwzJMip6PynUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYmZiMDA0OGE4ZGE1NTZmZDlkM2RmMTA3NzQwMmY4NDNm NWQ3MDMwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjIyOWFmYjVjMzkxMjUzMmY5NWMzZDg4Y2FkY2Y0NTVhOTg5YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmieTtqFerGLpmFkzYCAqIQ7Ziej y8TyWgsDuoBK1GzFSIu1zuSl/v4DrmA6801D0Vt9A27l7SQ8LJSSxNyVEDi5RO3P PfxtuAET/a2xDF3rnmddRY4lmLZGCVliP5tZ81imvWr+zao1MKKyKZq4shITGLSt wsckcgJndBbH3FQCe/+cV4EZQdGAAYGhpJ0a/euOvDzPFKsU3jYFTognUeKSR8/B BcQmDWU0tYNnetOMoUGhxmQwT6Qnbsy8eyIHnAYS3pjW+xmMdOS3ByRyE/UU65ky HHg+Ed91s6GxcRah9d6I3sam5A72/dnBjB3mqDfd2v3GzdFhUl1sZybDawIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHYimvtcORJTL5XD2Iytz0VamJouMB8GA1UdIwQY MBaAFNy/sASKjaVW/Z098Qd0AvhD9dcDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQt ZTA2MGI0ZmNiY2NiLzEvZGlLYS0xdzVFbE12bGNQWWpLM1BSVnFZbWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQtZTA2MGI0ZmNiY2Ni LzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwSn4AwQA wSn6AwQCwW7IMA0GCSqGSIb3DQEBCwUAA4IBAQCBKVLcMYDq6CHyJH9lLbmZRo3P ng6374XKXOX00XA5cFkr1ciUMXgvg4TMf6kdl2JVsoeERNc5vHxUsAFsSt00Ms8V wIY8do9QMOQpH6W6OsgxDLaVOKEkOQ51pwkPYMptsuxVNHPRdMYHKm3ajMW/WEop bgFc/w81kcZyrbMD5xQ50vK+Nt2GI4LmwRYD13KWRbZiZl6tMu5tGhf7sND9RIm/ 23O+TCCojW0e1eLWZQNCBGl1LDdppZ2rDz7eQj0YZ1VDiYzzB/84KuQPhCutxsgi 9RI24S2e0tkJGmLnIljfq5ps4ZytyIruRbK0YdlcS7meyz8HY5QjX/IzP9/m -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:53 2026 by rpki-client