This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Dyn7-9bL-rxxqD4uTwM6HjvswH8.roa File: Dyn7-9bL-rxxqD4uTwM6HjvswH8.roa (raw, json) Hash identifier: D/Tw/pdl7nzmkIdUj2OFtvZ2zWyK3ye9pyWVA4YRq2k= Subject key identifier: 0F:29:FB:FB:D6:CB:FA:BC:71:A8:3E:2E:4F:03:3A:1E:3B:EC:C0:7F Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3907D582946AAA3854CE11EF1A69C1 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Dyn7-9bL-rxxqD4uTwM6HjvswH8.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39503 IP address blocks: 194.190.225.0/24 maxlen: 24 195.209.230.0/23 maxlen: 23 195.209.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:07:d5:82:94:6a:aa:38:54:ce:11:ef:1a:69:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f29fbfbd6cbfabc71a83e2e4f033a1e3becc07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:e7:92:f8:fa:50:57:05:a3:51:5b:fa:54: 71:ae:1e:32:31:9c:c8:50:ec:f9:c3:a7:e4:4b:12: bd:3b:cb:da:b0:dd:d1:20:e0:78:20:a5:39:f6:da: b5:37:2a:e6:8f:20:c2:30:0e:2b:5a:e6:9f:47:ab: fe:7d:84:03:ae:1b:fa:65:0e:07:35:b6:0e:9d:40: c1:c6:dd:46:a7:aa:4b:07:f5:0c:35:40:a8:cc:0d: 41:51:83:83:25:a7:d9:87:66:35:48:4f:75:6d:2f: a5:e2:7e:4b:8b:73:42:fc:dc:eb:ae:83:4b:81:2e: 16:10:10:6a:a0:46:09:53:a9:b5:dd:b8:09:ff:27: 48:2c:b3:41:40:c3:9f:9e:9b:c1:2c:d8:10:d5:4f: 94:69:b3:53:44:ca:cd:c9:46:e4:5c:c0:47:b4:76: f4:3e:36:51:26:46:fb:1e:60:e7:8d:3f:47:09:a9: 8c:1c:81:86:14:d2:49:c3:b3:a2:16:ef:bf:5d:d7: 90:75:ab:29:e2:94:d5:42:cb:3a:ee:cf:0b:7b:54: 29:48:79:17:b2:d5:c9:0f:fb:88:ce:4e:a4:4b:7a: 3d:8a:f0:33:aa:68:b1:a6:95:39:a8:8e:ef:8f:35: 20:6e:02:81:dc:9a:c3:10:d9:f5:40:10:05:7f:31: 57:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:29:FB:FB:D6:CB:FA:BC:71:A8:3E:2E:4F:03:3A:1E:3B:EC:C0:7F X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Dyn7-9bL-rxxqD4uTwM6HjvswH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.190.225.0/24 195.209.230.0-195.209.233.255 Signature Algorithm: sha256WithRSAEncryption 91:fd:32:b9:82:12:b3:d6:7b:3a:b8:03:7c:ef:f4:ef:68:b1: 7c:80:74:b6:b6:b7:8b:87:e8:3e:5a:c1:44:6f:d9:d5:4d:fb: cb:ab:4c:e3:d4:88:20:2b:d3:d1:82:07:40:a0:94:24:18:3b: 2b:d6:77:82:15:47:0b:c1:18:4f:e9:72:9b:a7:b7:c5:36:79: 46:6a:4b:9f:57:2d:f4:13:eb:22:27:e2:d1:57:26:2d:f0:67: 27:bf:14:cf:70:12:20:cd:a3:cb:71:d6:df:c6:6e:3a:27:9b: 2e:a8:22:ad:1f:f4:57:70:d9:23:73:09:e5:e8:b0:75:b7:30: 64:c4:a0:ad:a0:73:98:fc:b9:5e:be:37:0b:12:f0:ce:b9:c3: 5b:86:4c:d0:64:2e:b4:fb:e2:b4:03:4f:c2:4a:ac:04:c7:99: b4:98:ad:6a:70:02:b0:4a:ab:9e:a1:48:5a:0a:a7:00:1d:a3: 43:33:e0:51:31:32:1f:a9:e0:a0:57:b7:68:dd:ed:92:28:b2: 9f:c0:9a:95:50:43:7d:6b:25:73:24:45:2f:e6:d3:43:b8:c4: db:6a:58:c4:f1:57:2f:46:b9:4d:05:80:7e:ec:3a:46:66:22: 0c:dd:41:f5:e5:3a:b4:f3:34:8e:15:06:18:92:a8:53:ff:8b: d8:9c:76:7e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+OQfVgpRqqjhUzhHvGmnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjI5ZmJmYmQ2Y2JmYWJjNzFhODNlMmU0ZjAzM2ExZTNiZWNjMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVbnkvj6UFcFo1Fb+lRxrh4yMZzI UOz5w6fkSxK9O8vasN3RIOB4IKU59tq1NyrmjyDCMA4rWuafR6v+fYQDrhv6ZQ4H NbYOnUDBxt1Gp6pLB/UMNUCozA1BUYODJafZh2Y1SE91bS+l4n5Li3NC/NzrroNL gS4WEBBqoEYJU6m13bgJ/ydILLNBQMOfnpvBLNgQ1U+UabNTRMrNyUbkXMBHtHb0 PjZRJkb7HmDnjT9HCamMHIGGFNJJw7OiFu+/XdeQdasp4pTVQss67s8Le1QpSHkX stXJD/uIzk6kS3o9ivAzqmixppU5qI7vjzUgbgKB3JrDENn1QBAFfzFXbQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFA8p+/vWy/q8cag+Lk8DOh477MB/MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvRHluNy05Ykwtcnh4cUQ0dVR3TTZIanZzd0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwr7hMAwD BAHD0eYDBAHD0egwDQYJKoZIhvcNAQELBQADggEBAJH9MrmCErPWezq4A3zv9O9o sXyAdLa2t4uH6D5awURv2dVN+8urTOPUiCAr09GCB0CglCQYOyvWd4IVRwvBGE/p cpunt8U2eUZqS59XLfQT6yIn4tFXJi3wZye/FM9wEiDNo8tx1t/Gbjonmy6oIq0f 9Fdw2SNzCeXosHW3MGTEoK2gc5j8uV6+NwsS8M65w1uGTNBkLrT74rQDT8JKrATH mbSYrWpwArBKq56hSFoKpwAdo0Mz4FExMh+p4KBXt2jd7ZIosp/AmpVQQ31rJXMk RS/m00O4xNtqWMTxVy9GuU0FgH7sOkZmIgzdQfXlOrTzNI4VBhiSqFP/i9icdn4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:24 2026 by rpki-client