This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Dfq0cZaGZ6qwqPtvCJps8Fum75M.roa File: Dfq0cZaGZ6qwqPtvCJps8Fum75M.roa (raw, json) Hash identifier: /mfWvZc941OFB6qr0+3pWrVQ3GviyJEwOHRtZMs5gu8= Subject key identifier: 0D:FA:B4:71:96:86:67:AA:B0:A8:FB:6F:08:9A:6C:F0:5B:A6:EF:93 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3904297C7AD194CE426BE776BC9197 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Dfq0cZaGZ6qwqPtvCJps8Fum75M.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12724 IP address blocks: 82.179.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:04:29:7c:7a:d1:94:ce:42:6b:e7:76:bc:91:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dfab471968667aab0a8fb6f089a6cf05ba6ef93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:cc:3c:a2:6a:ba:ad:96:b2:15:2b:d4:9c: 53:8c:49:b6:9b:66:f6:53:7d:4f:4b:a2:95:3b:b1: 38:f1:5c:62:61:50:b5:b0:0c:0f:6a:c4:96:8c:d0: d3:e2:e0:df:0f:32:f3:8b:3d:00:42:c7:d3:36:eb: 28:6c:7e:36:e8:35:34:25:f7:06:af:89:6d:f7:31: d8:12:17:83:ed:01:90:a0:44:a4:fd:ce:91:89:96: 91:71:91:fd:09:77:73:3a:3d:f8:a2:23:cf:6f:48: 4d:56:d1:28:62:fc:5a:da:2c:5a:ab:70:6f:2c:2f: 29:e9:72:2e:77:66:a9:b9:25:b8:25:30:9e:36:28: 13:a6:59:e2:fd:8e:b9:8a:42:cf:e4:3f:a4:04:41: 2b:f5:42:3f:8c:b8:b1:cc:08:1a:0c:3d:75:ca:de: 9b:82:5d:d1:d5:72:24:ef:cf:ca:6d:62:da:48:25: ea:d2:99:10:fe:96:89:65:d9:cf:6d:6a:76:a7:dc: 1e:0e:7e:e0:22:09:17:71:b4:16:c7:73:1a:b6:92: 74:5a:47:c9:44:fe:47:b5:94:c1:36:67:a1:e2:2e: e5:74:66:d9:e6:3e:85:47:ce:e0:04:37:ff:3b:d6: 38:96:f0:c9:01:5e:fa:6e:96:0c:a6:b8:07:15:45: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FA:B4:71:96:86:67:AA:B0:A8:FB:6F:08:9A:6C:F0:5B:A6:EF:93 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Dfq0cZaGZ6qwqPtvCJps8Fum75M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.96.0/20 Signature Algorithm: sha256WithRSAEncryption 5d:a9:62:0e:07:33:f0:b8:63:31:bd:b1:1b:03:e7:6e:7d:6a: 44:c0:c2:42:b8:b2:cf:57:36:29:76:92:4e:ca:49:3b:a3:2d: ed:a0:e3:c6:59:a2:89:9a:3f:91:08:fc:51:99:79:8f:f6:5e: bf:5b:40:e7:1d:04:8a:e1:f3:78:a6:99:8c:dc:63:c5:cc:54: 3f:dd:cd:36:87:db:d4:a9:e8:7b:d5:76:98:6d:2e:49:d3:32: 83:2e:28:80:d2:85:11:bb:69:8b:15:8a:ca:18:3f:5f:ca:6e: 8a:1f:8b:74:88:0a:49:ba:6a:01:31:e9:20:4f:eb:87:1f:53: 10:8f:99:e7:ce:fa:9a:f9:0d:d8:fc:0a:6d:5b:11:2f:41:8c: 66:fc:9c:f5:69:9c:f7:b3:db:ab:e7:37:8a:b9:4c:c9:09:32: 70:13:b4:75:9c:5c:a8:fd:3d:49:14:0c:22:03:4e:fd:44:6b: 05:58:74:d3:c1:a1:df:62:5e:39:f6:a5:88:6e:40:6f:02:d1: 3b:bf:4b:44:ac:13:3e:97:48:a7:74:3b:c6:b5:71:dd:c4:53: de:38:10:21:b2:fb:5e:15:93:6f:4c:51:64:60:81:44:13:07: c1:e6:24:11:a3:fa:74:82:db:d2:df:95:35:38:56:4d:d3:76: 8a:58:68:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQQpfHrRlM5Ca+d2vJGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGZhYjQ3MTk2ODY2N2FhYjBhOGZiNmYwODlhNmNmMDViYTZlZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux3MPKJquq2WshUr1JxTjEm2m2b2 U31PS6KVO7E48VxiYVC1sAwPasSWjNDT4uDfDzLziz0AQsfTNusobH426DU0JfcG r4lt9zHYEheD7QGQoESk/c6RiZaRcZH9CXdzOj34oiPPb0hNVtEoYvxa2ixaq3Bv LC8p6XIud2apuSW4JTCeNigTplni/Y65ikLP5D+kBEEr9UI/jLixzAgaDD11yt6b gl3R1XIk78/KbWLaSCXq0pkQ/paJZdnPbWp2p9weDn7gIgkXcbQWx3MatpJ0WkfJ RP5HtZTBNmeh4i7ldGbZ5j6FR87gBDf/O9Y4lvDJAV76bpYMprgHFUWDhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA36tHGWhmeqsKj7bwiabPBbpu+TMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvRGZxMGNaYUdaNnF3cVB0dkNKcHM4RnVtNzVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUrNgMA0G CSqGSIb3DQEBCwUAA4IBAQBdqWIOBzPwuGMxvbEbA+dufWpEwMJCuLLPVzYpdpJO ykk7oy3toOPGWaKJmj+RCPxRmXmP9l6/W0DnHQSK4fN4ppmM3GPFzFQ/3c02h9vU qeh71XaYbS5J0zKDLiiA0oURu2mLFYrKGD9fym6KH4t0iApJumoBMekgT+uHH1MQ j5nnzvqa+Q3Y/AptWxEvQYxm/Jz1aZz3s9ur5zeKuUzJCTJwE7R1nFyo/T1JFAwi A079RGsFWHTTwaHfYl459qWIbkBvAtE7v0tErBM+l0indDvGtXHdxFPeOBAhsvte FZNvTFFkYIFEEwfB5iQRo/p0gtvS35U1OFZN03aKWGhC -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:23 2026 by rpki-client