This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/dCyZ9Pf_BM16QCKCTZBWurk5tes.roa File: dCyZ9Pf_BM16QCKCTZBWurk5tes.roa (raw, json) Hash identifier: igMWMbqYVYQOf++wz4/c/zhgP+nD+9kvBZJquJqrWeo= Subject key identifier: 74:2C:99:F4:F7:FF:04:CD:7A:40:22:82:4D:90:56:BA:B9:39:B5:EB Certificate issuer: /CN=9fac2fdddabf20ea449870e1dcc0915e60148346 Certificate serial: 019B7A5A1CB59853CCA0B2272799DCAFFC1E Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/dCyZ9Pf_BM16QCKCTZBWurk5tes.roa Signing time: Thu 01 Jan 2026 16:18:04 +0000 ROA not before: Thu 01 Jan 2026 16:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 77.246.64.0/20 maxlen: 24 92.242.168.0/22 maxlen: 24 2a0d:b340::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:1c:b5:98:53:cc:a0:b2:27:27:99:dc:af:fc:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346 Validity Not Before: Jan 1 16:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=742c99f4f7ff04cd7a4022824d9056bab939b5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:d0:52:f7:d3:23:ff:88:9e:fa:c6:78:73: e0:00:0c:12:dc:af:0a:ad:84:72:55:ce:20:19:b3: f3:9e:85:4d:35:9e:06:ad:bd:c5:3a:2e:26:93:e3: 4d:d6:03:52:25:90:ab:e2:d6:a0:88:c2:87:79:94: 95:34:cc:1e:19:d9:73:9e:64:b5:f3:50:0d:de:d2: 17:f3:a8:73:ea:e4:cd:33:80:1b:3a:fc:b1:96:26: 87:8d:37:4d:da:f0:d0:68:92:90:e8:84:da:61:4f: 23:b9:31:8d:96:e3:b4:a2:e1:81:1c:a5:ab:26:3d: ad:7d:74:a2:3f:22:c8:9f:5e:06:bf:66:a0:a7:d8: d0:ba:1f:09:5e:eb:c5:71:ad:da:8c:95:a3:ea:9a: b2:32:fd:ab:d1:7d:ff:37:11:c0:98:f2:23:08:d3: 3d:3d:89:f2:4a:9c:43:e6:7e:94:7f:eb:bd:0e:6b: 39:0d:57:36:ea:a5:5c:bc:c0:2f:aa:cb:74:9b:db: ad:d4:c4:6e:9f:81:9e:ad:84:5e:30:ed:1f:76:23: e9:8b:ea:26:a9:6e:0e:56:5e:93:cd:87:ce:a2:0f: 43:d5:ba:13:0d:19:a3:71:05:36:6d:13:1a:19:91: ea:5a:2c:33:7a:5f:ff:bd:07:10:86:87:23:85:89: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2C:99:F4:F7:FF:04:CD:7A:40:22:82:4D:90:56:BA:B9:39:B5:EB X509v3 Authority Key Identifier: keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/dCyZ9Pf_BM16QCKCTZBWurk5tes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.64.0/20 92.242.168.0/22 IPv6: 2a0d:b340::/29 Signature Algorithm: sha256WithRSAEncryption 85:74:f3:d0:1f:85:90:00:8a:2d:55:99:6b:db:44:fc:3a:ef: be:a1:7e:2d:11:7c:f6:ce:62:a1:72:e6:0a:48:83:74:79:78: 1d:a8:f5:36:0c:75:6a:f5:62:ac:5c:b5:4e:1b:78:3d:e2:7c: da:65:da:13:89:89:19:fd:50:5d:c7:29:91:b8:68:fd:aa:40: f7:68:5b:4f:14:90:4a:4f:be:2b:05:e1:82:ac:3d:50:3e:87: 36:97:ed:f6:d6:25:29:fb:e4:4e:0a:43:05:7e:ce:cc:bf:ea: 76:81:e8:7b:39:36:54:38:2f:9f:a3:26:ee:f9:68:6c:1b:b1: ab:cf:c5:e7:ee:e1:6c:a5:43:e6:60:4f:a1:b2:22:53:fb:67: e2:63:a4:23:6b:85:aa:f2:73:9a:67:44:22:4b:9f:2d:0f:41: b9:ba:e0:d3:45:4b:fe:ef:30:b9:54:fd:f4:a5:d9:d9:bc:c8: 1e:3b:fd:ae:3a:17:de:31:c7:a5:3a:d9:26:4c:53:04:72:e4: 93:09:9a:ba:b9:0c:f2:fa:d7:78:03:9f:6c:a7:46:a3:9a:ae: b3:74:1e:47:2c:e3:23:95:0e:ad:d9:12:81:4c:f1:be:1d:95: 05:44:c8:72:d3:a4:3f:8d:05:51:e4:5b:d7:1a:aa:9c:34:68: 57:89:0c:3e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6Why1mFPMoLInJ5ncr/weMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYWMyZmRkZGFiZjIwZWE0NDk4NzBlMWRjYzA5MTVlNjAx NDgzNDYwHhcNMjYwMTAxMTYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDJjOTlmNGY3ZmYwNGNkN2E0MDIyODI0ZDkwNTZiYWI5MzliNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lPQUvfTI/+InvrGeHPgAAwS3K8K rYRyVc4gGbPznoVNNZ4Grb3FOi4mk+NN1gNSJZCr4tagiMKHeZSVNMweGdlznmS1 81AN3tIX86hz6uTNM4AbOvyxliaHjTdN2vDQaJKQ6ITaYU8juTGNluO0ouGBHKWr Jj2tfXSiPyLIn14Gv2agp9jQuh8JXuvFca3ajJWj6pqyMv2r0X3/NxHAmPIjCNM9 PYnySpxD5n6Uf+u9Dms5DVc26qVcvMAvqst0m9ut1MRun4GerYReMO0fdiPpi+om qW4OVl6TzYfOog9D1boTDRmjcQU2bRMaGZHqWiwzel//vQcQhocjhYk68QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHQsmfT3/wTNekAigk2QVrq5ObXrMB8GA1UdIwQY MBaAFJ+sL93avyDqRJhw4dzAkV5gFINGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjZ3djNkcV9JT3BFbUhEaDNNQ1JYbUFVZzBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wYjkzOGYtMTg5Yi00YTdkLThjMzYt MmEzZmE2MWMzZGM1LzEvZEN5WjlQZl9CTTE2UUNLQ1RaQld1cms1dGVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wYjkzOGYtMTg5Yi00YTdkLThjMzYtMmEzZmE2MWMzZGM1 LzEvbjZ3djNkcV9JT3BFbUhEaDNNQ1JYbUFVZzBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQETfZAAwQC XPKoMA0EAgACMAcDBQMqDbNAMA0GCSqGSIb3DQEBCwUAA4IBAQCFdPPQH4WQAIot VZlr20T8Ou++oX4tEXz2zmKhcuYKSIN0eXgdqPU2DHVq9WKsXLVOG3g94nzaZdoT iYkZ/VBdxymRuGj9qkD3aFtPFJBKT74rBeGCrD1QPoc2l+321iUp++ROCkMFfs7M v+p2geh7OTZUOC+foybu+WhsG7Grz8Xn7uFspUPmYE+hsiJT+2fiY6Qja4Wq8nOa Z0QiS58tD0G5uuDTRUv+7zC5VP30pdnZvMgeO/2uOhfeMcelOtkmTFMEcuSTCZq6 uQzy+td4A59sp0ajmq6zdB5HLOMjlQ6t2RKBTPG+HZUFRMhy06Q/jQVR5FvXGqqc NGhXiQw+ -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:48 2026 by rpki-client