This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/dKP6zKEOjA35eNWIADhSGj3djko.roa File: dKP6zKEOjA35eNWIADhSGj3djko.roa (raw, json) Hash identifier: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU= Subject key identifier: 74:A3:FA:CC:A1:0E:8C:0D:F9:78:D5:88:00:38:52:1A:3D:DD:8E:4A Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d Certificate serial: 019B7B35A5EBEDA3167592998D97F098466F Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/dKP6zKEOjA35eNWIADhSGj3djko.roa Signing time: Thu 01 Jan 2026 20:17:51 +0000 ROA not before: Thu 01 Jan 2026 20:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 92.62.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a5:eb:ed:a3:16:75:92:99:8d:97:f0:98:46:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74a3facca10e8c0df978d5880038521a3ddd8e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:e3:4a:cf:81:97:27:ad:3b:b2:53:a8:5b: d4:37:3b:22:c1:17:ae:55:64:45:23:7b:d7:e9:b0: 1c:a8:91:40:47:c9:b5:5c:2d:0d:e0:f8:4e:ea:8e: 7d:d0:f1:d6:6f:da:32:90:16:63:b5:d5:25:a2:f0: be:ea:3d:e1:ad:01:05:e1:5f:02:91:ae:e6:86:81: 94:db:84:01:01:68:bb:b9:0b:18:19:a2:b7:03:67: 61:69:76:c5:88:20:03:11:d9:4b:5a:4a:6f:7f:da: e7:02:3e:cb:a2:b9:72:a1:ec:8d:a4:e1:dd:1f:0e: ef:16:f3:a5:01:b7:cd:8e:13:d4:0f:42:44:7e:75: c8:4d:48:7a:64:7c:84:b0:e7:9c:3b:1a:39:e9:5e: c1:a2:10:57:23:3b:8c:22:bc:2b:73:72:25:79:c0: 57:69:c8:6a:29:26:da:f1:51:92:8e:3f:a4:e1:91: 46:a4:ed:8b:21:fc:8c:66:97:9e:15:c8:1f:17:4c: cd:3b:4f:13:ce:25:da:4d:12:18:7a:6c:91:d7:8b: 96:ed:77:15:63:16:a9:32:2b:3c:dd:6e:39:5f:f6: 42:6c:ba:71:98:51:3b:a8:0c:f0:8f:e5:04:92:76: 90:e4:31:ae:0b:27:f3:87:6c:eb:af:59:15:35:54: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:FA:CC:A1:0E:8C:0D:F9:78:D5:88:00:38:52:1A:3D:DD:8E:4A X509v3 Authority Key Identifier: keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/dKP6zKEOjA35eNWIADhSGj3djko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.117.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:f5:55:9c:f6:69:66:22:84:45:b5:fb:11:e6:57:b4:b1:45: 0c:9a:6e:7e:98:0c:5f:c4:f5:e1:2d:8e:69:c6:49:f7:56:9b: e4:b4:1f:be:0a:ab:3e:4d:cc:7a:9e:b4:a8:87:18:0a:2b:03: 00:4c:c3:ff:63:34:a8:04:fd:5d:8b:4a:13:59:9d:ab:c1:5b: ab:c6:bc:99:0c:9d:16:08:e2:d1:66:c0:6f:1a:83:4a:81:ca: 2c:79:06:00:9d:16:19:98:20:95:f3:78:46:f0:93:cf:97:86: cd:8c:ae:fa:86:13:b6:a9:3f:c5:42:0e:26:76:46:ca:ae:88: 29:69:ce:98:23:59:e5:6f:c3:14:bb:22:c0:f5:41:1a:b9:41: 77:36:1b:d7:bc:e8:2a:99:91:b8:57:41:4b:98:d8:03:30:a5: d1:e2:63:da:a3:69:70:8c:ec:39:a3:10:ce:20:de:99:66:42: a9:9e:f5:ec:7e:35:4e:55:7d:06:0b:0a:8d:74:cc:b3:c2:8d: 05:be:28:15:90:01:92:a0:5b:8a:6e:42:e7:59:ff:86:73:9b: 75:dd:72:ea:98:1b:6a:df:48:42:25:79:bb:bb:1a:d4:6d:b7: b6:b5:94:78:28:00:43:50:c3:8a:b0:91:0d:13:f3:60:2f:c9: 4a:c3:65:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaXr7aMWdZKZjZfwmEZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0 YWUyOWQwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGEzZmFjY2ExMGU4YzBkZjk3OGQ1ODgwMDM4NTIxYTNkZGQ4ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwXjSs+BlyetO7JTqFvUNzsiwReu VWRFI3vX6bAcqJFAR8m1XC0N4PhO6o590PHWb9oykBZjtdUlovC+6j3hrQEF4V8C ka7mhoGU24QBAWi7uQsYGaK3A2dhaXbFiCADEdlLWkpvf9rnAj7LorlyoeyNpOHd Hw7vFvOlAbfNjhPUD0JEfnXITUh6ZHyEsOecOxo56V7BohBXIzuMIrwrc3IlecBX achqKSba8VGSjj+k4ZFGpO2LIfyMZpeeFcgfF0zNO08TziXaTRIYemyR14uW7XcV YxapMis83W45X/ZCbLpxmFE7qAzwj+UEknaQ5DGuCyfzh2zrr1kVNVRtiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSj+syhDowN+XjViAA4Uho93Y5KMB8GA1UdIwQY MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt ZGE3ODBjZmI5OWE0LzEvZEtQNnpLRU9qQTM1ZU5XSUFEaFNHajNkamtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0 LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD51MA0G CSqGSIb3DQEBCwUAA4IBAQAO9VWc9mlmIoRFtfsR5le0sUUMmm5+mAxfxPXhLY5p xkn3VpvktB++Cqs+Tcx6nrSohxgKKwMATMP/YzSoBP1di0oTWZ2rwVurxryZDJ0W COLRZsBvGoNKgcoseQYAnRYZmCCV83hG8JPPl4bNjK76hhO2qT/FQg4mdkbKrogp ac6YI1nlb8MUuyLA9UEauUF3NhvXvOgqmZG4V0FLmNgDMKXR4mPao2lwjOw5oxDO IN6ZZkKpnvXsfjVOVX0GCwqNdMyzwo0FvigVkAGSoFuKbkLnWf+Gc5t13XLqmBtq 30hCJXm7uxrUbbe2tZR4KABDUMOKsJENE/NgL8lKw2V8 -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:13 2026 by rpki-client