This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/DcqHCtebdDgiEuSQXxi6ig8mM8o.roa File: DcqHCtebdDgiEuSQXxi6ig8mM8o.roa (raw, json) Hash identifier: cRfNZKkpr+LQ6VmzZJFfJ/S+gQUsEnhyoZIF9XUOHHw= Subject key identifier: 0D:CA:87:0A:D7:9B:74:38:22:12:E4:90:5F:18:BA:8A:0F:26:33:CA Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B7BE2C1F9C4A7428466135D82862B Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/DcqHCtebdDgiEuSQXxi6ig8mM8o.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202636 IP address blocks: 91.246.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7b:e2:c1:f9:c4:a7:42:84:66:13:5d:82:86:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dca870ad79b74382212e4905f18ba8a0f2633ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:7e:5d:0e:59:bf:42:7a:51:db:f6:9f:4a: 75:91:89:d1:b3:53:9c:c0:14:5f:16:08:a4:da:78: b0:cb:28:31:ef:42:4b:ba:cf:a2:a7:bb:e5:c6:5c: e4:4b:ba:ac:dc:29:b3:71:e8:cb:a0:f1:e0:a3:5b: 01:e4:ea:5b:ef:e7:69:0d:14:ca:4f:2d:45:6c:7f: a9:a4:c7:22:9f:21:eb:d9:a8:1b:b7:b1:54:d4:2c: c5:1d:93:b7:22:ee:f1:b0:9b:87:67:1b:a2:16:86: d9:43:ed:e1:54:1a:85:72:d5:3b:1a:df:d8:23:31: e5:f2:3f:d2:c6:a7:12:d9:3c:af:3c:5f:6a:56:d1: fc:71:93:08:ce:67:fb:7b:a8:12:40:60:4b:10:72: 0d:bd:92:ff:dd:92:dd:ec:1e:7c:d2:b5:a1:f0:bd: fd:10:9c:5c:a9:81:6c:a3:b0:54:6c:50:28:9e:e6: 1a:f9:bb:19:92:d6:28:51:9e:f8:10:00:e1:2c:12: 0f:e4:73:0e:19:04:c8:d0:0d:b5:dc:b7:0f:61:5c: 54:9f:a1:ef:61:51:fe:35:98:85:d2:40:f1:ba:e0: 9a:30:a0:be:08:5c:fe:b8:70:d0:5e:fe:de:72:b8: 5a:e3:ea:d8:63:f6:44:61:40:fb:f5:e3:96:8f:52: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CA:87:0A:D7:9B:74:38:22:12:E4:90:5F:18:BA:8A:0F:26:33:CA X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/DcqHCtebdDgiEuSQXxi6ig8mM8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.52.0/24 Signature Algorithm: sha256WithRSAEncryption 02:1c:ef:31:ab:75:5a:05:15:b4:4d:e2:63:98:24:d9:c6:06: 95:16:75:fa:cb:d9:e8:07:0c:9f:a5:b8:5d:52:35:6b:12:cd: f5:79:78:40:6f:8d:c6:70:ad:db:dd:de:c9:06:99:b2:42:8d: b3:50:bf:17:3d:84:a7:4a:88:a7:08:4a:28:fa:74:81:6e:ab: 60:79:d3:ec:2b:10:02:6b:15:53:b8:96:27:2b:4a:1b:74:2a: b7:af:a6:ce:4e:83:b8:ca:b8:fd:46:62:3f:90:32:6f:e4:37: fe:5e:b4:5d:f3:75:85:6d:18:bf:a9:b4:ea:45:15:20:f8:bb: 06:d0:08:e4:31:52:fe:8a:0d:34:a4:8e:0e:fe:7d:8b:f1:d7: 6c:a8:97:21:5a:4d:60:9a:23:c7:ef:c6:c2:05:20:fc:0c:3b: 2e:62:d6:83:6f:d9:3e:0d:7c:d2:ea:09:ca:22:50:79:f7:1c: 70:24:30:52:03:be:6c:78:fd:9a:43:c7:18:d0:b9:19:d0:dd: 73:5c:6c:68:6a:ca:b2:a3:20:57:d5:a2:dc:72:54:90:9a:da: e0:34:e5:3f:29:16:79:88:4b:4c:f0:e3:b6:5e:89:cc:23:84: ba:b7:ed:8f:3d:31:c0:c3:d7:8f:d2:fe:94:ee:89:82:9f:ee: 98:c3:30:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3viwfnEp0KEZhNdgoYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGNhODcwYWQ3OWI3NDM4MjIxMmU0OTA1ZjE4YmE4YTBmMjYzM2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfx+XQ5Zv0J6Udv2n0p1kYnRs1Oc wBRfFgik2niwyygx70JLus+ip7vlxlzkS7qs3CmzcejLoPHgo1sB5Opb7+dpDRTK Ty1FbH+ppMcinyHr2agbt7FU1CzFHZO3Iu7xsJuHZxuiFobZQ+3hVBqFctU7Gt/Y IzHl8j/SxqcS2TyvPF9qVtH8cZMIzmf7e6gSQGBLEHINvZL/3ZLd7B580rWh8L39 EJxcqYFso7BUbFAonuYa+bsZktYoUZ74EADhLBIP5HMOGQTI0A213LcPYVxUn6Hv YVH+NZiF0kDxuuCaMKC+CFz+uHDQXv7ecrha4+rYY/ZEYUD79eOWj1IDaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA3KhwrXm3Q4IhLkkF8YuooPJjPKMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvRGNxSEN0ZWJkRGdpRXVTUVh4aTZpZzhtTThvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y0MA0G CSqGSIb3DQEBCwUAA4IBAQACHO8xq3VaBRW0TeJjmCTZxgaVFnX6y9noBwyfpbhd UjVrEs31eXhAb43GcK3b3d7JBpmyQo2zUL8XPYSnSoinCEoo+nSBbqtgedPsKxAC axVTuJYnK0obdCq3r6bOToO4yrj9RmI/kDJv5Df+XrRd83WFbRi/qbTqRRUg+LsG 0AjkMVL+ig00pI4O/n2L8ddsqJchWk1gmiPH78bCBSD8DDsuYtaDb9k+DXzS6gnK IlB59xxwJDBSA75seP2aQ8cY0LkZ0N1zXGxoasqyoyBX1aLcclSQmtrgNOU/KRZ5 iEtM8OO2XonMI4S6t+2PPTHAw9eP0v6U7omCn+6YwzBm -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:26 2026 by rpki-client