This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/dzYbEo-cteZ2L-l9SGVqJRtNPn4.roa File: dzYbEo-cteZ2L-l9SGVqJRtNPn4.roa (raw, json) Hash identifier: nGkk5VkpkEQp3zSwJU2wzLe3I3V3Q1pcrGZeVvvlJsM= Subject key identifier: 77:36:1B:12:8F:9C:B5:E6:76:2F:E9:7D:48:65:6A:25:1B:4D:3E:7E Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f Certificate serial: 019B77C664D043C5C56DA6541EAC459F359D Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/dzYbEo-cteZ2L-l9SGVqJRtNPn4.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202863 IP address blocks: 81.94.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:64:d0:43:c5:c5:6d:a6:54:1e:ac:45:9f:35:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77361b128f9cb5e6762fe97d48656a251b4d3e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:72:b1:53:a0:5a:ff:e4:ab:51:0c:36:b2: bf:19:eb:de:61:32:b1:4c:dc:a9:ed:66:2a:b4:3a: 90:bc:76:75:ae:71:e9:ed:51:17:b8:94:51:5e:90: 0a:d9:ad:fc:40:3b:8f:26:d0:be:08:2a:04:cf:cb: e6:1c:c8:62:a7:6b:5e:47:cb:a4:f6:65:32:8c:c8: e2:8f:ff:a0:78:bd:8f:d1:05:ac:d7:9f:5f:33:0c: e0:6c:ee:e0:59:fb:37:58:f8:40:e5:8b:4d:a4:20: 2e:c3:87:ab:ae:bf:9b:3e:37:32:8a:c8:55:c6:11: 0d:d3:df:52:79:0e:19:50:79:62:18:83:51:e1:fa: b8:9d:84:66:71:95:d1:97:49:83:63:0b:7d:2e:d5: 85:d5:1e:98:09:27:aa:0d:c8:dd:a4:51:b2:66:15: af:7b:0a:f9:ab:28:7b:30:4d:41:57:0b:f2:e9:0d: a7:06:2c:21:9b:f7:f5:99:1f:b2:ce:41:83:03:77: 36:fe:39:e7:de:d2:6a:8f:9b:f8:f2:57:dd:c1:b6: f8:a3:0a:ec:5d:9c:9e:af:47:a0:47:c5:19:e1:ed: 04:7f:5d:72:e4:b1:19:12:13:e5:89:c1:3f:74:39: bd:7f:42:d1:a9:2d:91:79:fc:e3:f9:1c:ed:a4:89: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:1B:12:8F:9C:B5:E6:76:2F:E9:7D:48:65:6A:25:1B:4D:3E:7E X509v3 Authority Key Identifier: keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/dzYbEo-cteZ2L-l9SGVqJRtNPn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.94.234.0/24 Signature Algorithm: sha256WithRSAEncryption 93:53:3f:e4:6c:70:fb:da:1e:7d:98:c5:db:a4:7c:99:5f:b1: e4:b1:e1:7f:d9:06:5b:ff:df:6e:fe:44:b5:ff:01:29:b4:22: 3b:5a:13:83:0e:d1:f8:23:86:ba:ef:62:ea:b2:9c:b6:a6:33: 1f:75:d0:1d:71:2c:5c:20:7b:d9:6d:48:28:59:24:57:46:f2: 9a:09:54:da:c0:74:51:4a:c6:bc:69:e3:41:52:d0:b3:80:73: 0a:bf:35:2c:16:b8:d2:a9:77:68:c3:db:cd:a4:a3:d4:54:b4: e4:e5:39:27:3e:ef:4b:3d:27:b2:fe:a1:b5:96:9e:e4:e3:28: 3a:8d:d5:d7:c8:0d:a8:dc:7e:11:13:75:28:fe:fa:b6:0b:87: 50:1d:a7:92:c2:42:7a:0a:4a:9c:60:e2:d5:67:d9:56:97:9e: a3:9e:2f:01:a1:73:87:41:53:dd:7a:58:60:69:0d:e0:34:9c: e1:54:d9:c5:85:ad:43:c6:3f:13:86:2d:1e:36:0b:54:78:3b: eb:74:31:c8:c9:29:06:a4:ca:0d:04:d9:32:f0:61:de:96:93: 55:a2:a6:26:79:1e:1b:d9:6c:da:54:d1:68:57:ea:cd:bc:87: e6:25:ab:50:0e:12:49:ef:35:a5:21:08:f5:17:9a:0b:d8:a0: ac:a8:d5:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmTQQ8XFbaZUHqxFnzWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3 NGRlMGYwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzM2MWIxMjhmOWNiNWU2NzYyZmU5N2Q0ODY1NmEyNTFiNGQzZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscBysVOgWv/kq1EMNrK/GeveYTKx TNyp7WYqtDqQvHZ1rnHp7VEXuJRRXpAK2a38QDuPJtC+CCoEz8vmHMhip2teR8uk 9mUyjMjij/+geL2P0QWs159fMwzgbO7gWfs3WPhA5YtNpCAuw4errr+bPjcyishV xhEN099SeQ4ZUHliGINR4fq4nYRmcZXRl0mDYwt9LtWF1R6YCSeqDcjdpFGyZhWv ewr5qyh7ME1BVwvy6Q2nBiwhm/f1mR+yzkGDA3c2/jnn3tJqj5v48lfdwbb4owrs XZyer0egR8UZ4e0Ef11y5LEZEhPlicE/dDm9f0LRqS2Refzj+RztpInscQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHc2GxKPnLXmdi/pfUhlaiUbTT5+MB8GA1UdIwQY MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt YWM2N2EzNmU0YWFiLzEvZHpZYkVvLWN0ZVoyTC1sOVNHVnFKUnROUG40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUV7qMA0G CSqGSIb3DQEBCwUAA4IBAQCTUz/kbHD72h59mMXbpHyZX7HkseF/2QZb/99u/kS1 /wEptCI7WhODDtH4I4a672Lqspy2pjMfddAdcSxcIHvZbUgoWSRXRvKaCVTawHRR Ssa8aeNBUtCzgHMKvzUsFrjSqXdow9vNpKPUVLTk5TknPu9LPSey/qG1lp7k4yg6 jdXXyA2o3H4RE3Uo/vq2C4dQHaeSwkJ6CkqcYOLVZ9lWl56jni8BoXOHQVPdelhg aQ3gNJzhVNnFha1Dxj8Thi0eNgtUeDvrdDHIySkGpMoNBNky8GHelpNVoqYmeR4b 2WzaVNFoV+rNvIfmJatQDhJJ7zWlIQj1F5oL2KCsqNUx -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:16 2026 by rpki-client