This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa File: dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa (raw, json) Hash identifier: FiQzj2IJBDAdsIUNZqGewdZB+7P9vXYxqwfhvf0ZCJA= Subject key identifier: 74:A5:74:4F:C2:1E:1F:FB:29:60:3B:7F:51:54:79:B4:C4:3A:FC:F1 Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454 Certificate serial: 019B7D5CB330BE5266A263602D3F83DA3553 Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa Signing time: Fri 02 Jan 2026 06:19:45 +0000 ROA not before: Fri 02 Jan 2026 06:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25560 IP address blocks: 62.216.160.0/19 maxlen: 24 85.199.128.0/18 maxlen: 24 85.199.184.0/22 maxlen: 24 95.143.160.0/20 maxlen: 24 217.24.208.0/20 maxlen: 24 2001:1a50::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b3:30:be:52:66:a2:63:60:2d:3f:83:da:35:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454 Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74a5744fc21e1ffb29603b7f515479b4c43afcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:8f:25:85:71:f5:78:c4:ab:73:00:6e:77: 21:43:0b:f2:99:5f:9f:0c:e6:40:7b:f9:98:b9:62: 84:99:f7:3e:41:da:92:86:0f:b3:0f:4f:6e:64:0a: 66:8b:95:06:cf:3c:d9:f7:3a:d7:95:86:89:3e:33: 87:e2:05:50:6e:40:f0:c3:d6:0e:16:b4:0f:81:8a: 4c:be:9e:04:24:62:10:97:b5:06:a5:4a:68:4d:2c: 66:ac:ee:a4:31:68:32:50:3f:e4:fc:bb:1d:a9:76: 32:94:9e:c9:e3:73:f1:06:71:ac:f5:0e:4a:ae:f7: 12:2c:18:7e:df:f2:b4:a9:30:4a:dd:2a:74:f0:3a: 4c:82:49:82:3c:06:31:c1:88:36:3c:aa:24:33:cc: 64:35:52:fa:59:ce:83:dc:6f:16:64:04:c1:b7:85: b8:13:cc:09:81:03:fd:bf:b7:43:c3:8a:ec:6c:75: d2:d8:29:7a:c7:7b:15:c8:ec:15:7d:eb:e8:8a:73: 8a:1c:fc:b5:21:6e:0e:36:44:7e:5e:35:1f:fb:0c: 54:24:38:e3:d7:3f:1b:b6:29:45:d2:66:4b:ab:40: 86:9a:6d:69:b2:8b:e8:9b:b3:cc:8b:99:30:32:b5: 3a:0d:ca:d9:5d:13:0c:38:80:78:42:9e:b4:db:a5: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A5:74:4F:C2:1E:1F:FB:29:60:3B:7F:51:54:79:B4:C4:3A:FC:F1 X509v3 Authority Key Identifier: keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.216.160.0/19 85.199.128.0/18 95.143.160.0/20 217.24.208.0/20 IPv6: 2001:1a50::/32 Signature Algorithm: sha256WithRSAEncryption 21:f9:6a:c2:19:bf:ca:42:67:d5:f5:0c:3a:17:77:47:fd:0b: 82:98:fe:29:c7:39:21:ef:ad:f7:a2:77:3f:42:8c:17:b7:66: 4a:d5:35:ea:32:e4:3a:a1:3a:27:94:13:60:42:9b:36:8a:df: 87:e4:7a:e3:38:44:3d:46:87:86:01:5b:13:a3:75:d1:63:ac: 47:42:50:53:65:6f:7d:15:07:2f:98:5f:a0:6e:6d:d4:03:5d: 63:31:6e:bd:a6:a4:70:72:09:da:46:2a:09:d8:0a:94:17:e7: c2:19:7e:a5:25:97:dd:2e:fd:6d:d5:78:4e:69:7e:d5:2c:93: 8d:d5:63:0a:d3:bb:cc:b6:09:05:45:a2:c7:ed:1e:5f:64:85: 1f:ed:02:26:54:8f:e1:bb:64:d5:56:8c:9d:9c:5e:9f:97:8c: cd:33:37:74:b9:c1:1a:bb:44:1a:3b:96:46:27:25:6f:38:40: 67:46:41:97:06:4b:c6:2b:a2:5c:b4:aa:1f:26:28:f4:12:48: 8d:d9:b1:fc:60:74:d0:fd:46:bb:c9:2d:91:59:26:d7:96:4d: f7:3e:7e:84:1d:62:a6:19:fb:50:b8:69:8c:97:fc:6f:23:c5: bd:d5:79:5e:3a:eb:4f:ea:32:8c:64:ad:68:77:7d:77:cc:be: 6c:e7:e2:e1 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9XLMwvlJmomNgLT+D2jVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTgwZjIyYTU5NTJhNGVmOWE0ZWM0YTllMGQwYzM1MWZl Yzk0NTQwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGE1NzQ0ZmMyMWUxZmZiMjk2MDNiN2Y1MTU0NzliNGM0M2FmY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3+PJYVx9XjEq3MAbnchQwvymV+f DOZAe/mYuWKEmfc+QdqShg+zD09uZApmi5UGzzzZ9zrXlYaJPjOH4gVQbkDww9YO FrQPgYpMvp4EJGIQl7UGpUpoTSxmrO6kMWgyUD/k/LsdqXYylJ7J43PxBnGs9Q5K rvcSLBh+3/K0qTBK3Sp08DpMgkmCPAYxwYg2PKokM8xkNVL6Wc6D3G8WZATBt4W4 E8wJgQP9v7dDw4rsbHXS2Cl6x3sVyOwVfevoinOKHPy1IW4ONkR+XjUf+wxUJDjj 1z8btilF0mZLq0CGmm1psovom7PMi5kwMrU6DcrZXRMMOIB4Qp6026X1SQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHSldE/CHh/7KWA7f1FUebTEOvzxMB8GA1UdIwQY MBaAFBuYDyKllSpO+aTsSp4NDDUf7JRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYt MzQ3YjU2NmRkYmQxLzEvZEtWMFQ4SWVIX3NwWUR0X1VWUjV0TVE2X1BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYtMzQ3YjU2NmRkYmQx LzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFPtigAwQG VceAAwQEX4+gAwQE2RjQMA0EAgACMAcDBQAgARpQMA0GCSqGSIb3DQEBCwUAA4IB AQAh+WrCGb/KQmfV9Qw6F3dH/QuCmP4pxzkh7633onc/QowXt2ZK1TXqMuQ6oTon lBNgQps2it+H5HrjOEQ9RoeGAVsTo3XRY6xHQlBTZW99FQcvmF+gbm3UA11jMW69 pqRwcgnaRioJ2AqUF+fCGX6lJZfdLv1t1XhOaX7VLJON1WMK07vMtgkFRaLH7R5f ZIUf7QImVI/hu2TVVoydnF6fl4zNMzd0ucEau0QaO5ZGJyVvOEBnRkGXBkvGK6Jc tKofJij0EkiN2bH8YHTQ/Ua7yS2RWSbXlk33Pn6EHWKmGftQuGmMl/xvI8W91Xle OutP6jKMZK1od313zL5s5+Lh -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:14 2026 by rpki-client