This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/DXimx1XY9etEzx_enIQDGBa9bm4.roa File: DXimx1XY9etEzx_enIQDGBa9bm4.roa (raw, json) Hash identifier: PZFvhgHYjMFhesaC5VQQRMgpbART5/jL2VnPsqgnMoo= Subject key identifier: 0D:78:A6:C7:55:D8:F5:EB:44:CF:1F:DE:9C:84:03:18:16:BD:6E:6E Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 019B79ECD9DAEA1A7BF77E8B98624BAFECAF Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/DXimx1XY9etEzx_enIQDGBa9bm4.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34878 IP address blocks: 129.13.0.0/16 maxlen: 16 141.3.0.0/16 maxlen: 16 141.52.0.0/16 maxlen: 16 2a00:1398::/29 maxlen: 29 2a00:1398::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d9:da:ea:1a:7b:f7:7e:8b:98:62:4b:af:ec:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d78a6c755d8f5eb44cf1fde9c84031816bd6e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:74:e9:3a:96:5e:cf:06:e5:4c:bd:2f:33: f4:6e:9a:0c:2d:8c:19:de:26:cb:88:ec:2c:4f:37: 7e:9e:22:8e:dc:26:36:59:52:22:dc:64:aa:af:a4: dc:ef:df:0d:86:0e:5a:d2:e7:27:e9:00:e3:8b:ff: 9a:21:77:7c:db:4b:e6:fc:93:36:08:4b:bf:51:d8: 61:32:e9:f6:4d:f7:9f:6d:83:40:95:b6:3f:f7:1a: 71:3a:2d:29:ed:0a:34:9d:6d:ee:47:cb:30:97:f6: b2:bb:61:57:19:9e:ce:03:f8:81:18:b3:fc:db:c0: b4:13:71:05:62:e4:af:ed:31:7b:1f:6e:ba:eb:b9: 66:9d:af:41:2c:da:9f:50:6f:83:11:21:79:2e:a1: 39:44:e2:03:46:4a:ef:72:64:66:39:c9:3d:e9:77: 7c:33:2d:cf:21:94:59:14:a6:78:c1:31:9c:d2:57: 71:bb:1a:5e:34:70:7e:0f:3e:1a:9f:11:53:e6:4e: 05:83:1b:ca:a5:61:86:1f:03:09:31:0b:2a:9a:06: c5:c6:f6:b3:5f:3c:58:5a:d4:90:6d:21:26:41:9f: b0:a4:45:ca:81:0b:15:7e:1a:1e:75:b0:fd:72:5f: 75:c0:1b:cd:ed:3e:ec:31:d1:bc:10:3c:67:13:cd: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:78:A6:C7:55:D8:F5:EB:44:CF:1F:DE:9C:84:03:18:16:BD:6E:6E X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/DXimx1XY9etEzx_enIQDGBa9bm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.13.0.0/16 141.3.0.0/16 141.52.0.0/16 IPv6: 2a00:1398::/29 Signature Algorithm: sha256WithRSAEncryption 0e:a2:60:32:d7:e8:40:bc:6f:07:3e:7e:28:f1:d2:fd:cd:1f: df:80:d3:13:fc:8d:9a:91:84:97:82:1c:de:4a:b1:e4:5b:e0: 04:ea:67:72:ab:5f:1f:0a:3a:27:fb:da:cb:21:1c:d6:1c:7a: f5:d9:0c:8c:59:5e:50:96:54:32:42:a4:f8:17:aa:ba:cc:b1: a9:2c:bc:3f:43:c4:9c:3f:05:af:65:39:67:0c:ed:71:51:61: 59:a6:3c:4f:cf:bb:4a:28:74:e8:d9:5b:0a:90:c7:0b:36:aa: b1:7e:1e:68:a0:3c:34:ba:58:1a:b1:3d:dd:87:3b:21:46:e9: 5b:03:1b:52:04:d1:89:71:37:b6:8e:33:5c:6f:f4:02:5b:da: 2d:a2:76:1a:9c:36:c9:9b:86:bc:9d:0c:29:71:40:80:f3:0b: 8c:d9:c3:2c:49:dd:32:16:90:4d:9e:ea:28:a6:c0:ce:f7:2b: 38:86:16:f3:9d:c5:2d:1c:dd:10:cb:2f:74:45:b1:81:33:88: c7:99:aa:9d:38:3b:63:45:b4:49:59:52:1e:b9:74:16:5b:24: 73:51:3f:63:7c:26:07:bf:2b:cc:2c:25:9f:e5:10:58:6f:13: 8f:95:ea:89:86:8f:6f:47:f7:fb:7f:bb:d7:80:d8:a0:b8:df: a2:c7:4d:24 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt57Nna6hp7936LmGJLr+yvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDc4YTZjNzU1ZDhmNWViNDRjZjFmZGU5Yzg0MDMxODE2YmQ2ZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c906TqWXs8G5Uy9LzP0bpoMLYwZ 3ibLiOwsTzd+niKO3CY2WVIi3GSqr6Tc798Nhg5a0ucn6QDji/+aIXd820vm/JM2 CEu/UdhhMun2TfefbYNAlbY/9xpxOi0p7Qo0nW3uR8swl/ayu2FXGZ7OA/iBGLP8 28C0E3EFYuSv7TF7H26667lmna9BLNqfUG+DESF5LqE5ROIDRkrvcmRmOck96Xd8 My3PIZRZFKZ4wTGc0ldxuxpeNHB+Dz4anxFT5k4FgxvKpWGGHwMJMQsqmgbFxvaz XzxYWtSQbSEmQZ+wpEXKgQsVfhoedbD9cl91wBvN7T7sMdG8EDxnE8089QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFA14psdV2PXrRM8f3pyEAxgWvW5uMB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvRFhpbXgxWFk5ZXRFenhfZW5JUURHQmE5Ym00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAVBAIAATAPAwMAgQ0DAwCN AwMDAI00MA0EAgACMAcDBQMqABOYMA0GCSqGSIb3DQEBCwUAA4IBAQAOomAy1+hA vG8HPn4o8dL9zR/fgNMT/I2akYSXghzeSrHkW+AE6mdyq18fCjon+9rLIRzWHHr1 2QyMWV5QllQyQqT4F6q6zLGpLLw/Q8ScPwWvZTlnDO1xUWFZpjxPz7tKKHTo2VsK kMcLNqqxfh5ooDw0ulgasT3dhzshRulbAxtSBNGJcTe2jjNcb/QCW9otonYanDbJ m4a8nQwpcUCA8wuM2cMsSd0yFpBNnuoopsDO9ys4hhbzncUtHN0Qyy90RbGBM4jH maqdODtjRbRJWVIeuXQWWyRzUT9jfCYHvyvMLCWf5RBYbxOPleqJho9vR/f7f7vX gNiguN+ix00k -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:51 2026 by rpki-client