This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dp1SVbkYkEWYjQ_GlPwlVUYW3jc.roa File: dp1SVbkYkEWYjQ_GlPwlVUYW3jc.roa (raw, json) Hash identifier: MNin1my/B1kUP498vD4EIRuEtsfqtD5Raw15g6xKO+A= Subject key identifier: 76:9D:52:55:B9:18:90:45:98:8D:0F:C6:94:FC:25:55:46:16:DE:37 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3902EF50BBBB01BE0BDA5697177B1C Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dp1SVbkYkEWYjQ_GlPwlVUYW3jc.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9162 IP address blocks: 82.179.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:02:ef:50:bb:bb:01:be:0b:da:56:97:17:7b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=769d5255b9189045988d0fc694fc25554616de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:15:85:89:35:19:9e:47:9b:88:08:52:18: 55:5a:ba:8f:2e:ee:99:3f:35:84:f2:e4:69:ec:3b: 00:44:76:ef:d3:54:f6:e6:18:31:f1:5f:6e:9a:32: 98:78:fc:e4:f5:97:ab:70:c3:43:9a:48:9a:e0:32: 82:40:5c:89:a0:fa:f8:37:0d:80:39:2b:4e:7c:b8: 8b:d8:ac:ce:8c:4e:f1:a4:92:f7:f5:d3:c1:ef:74: 03:e7:2e:21:d1:25:8a:71:08:12:69:2f:67:53:36: 29:52:d4:81:1f:8b:67:90:b2:e8:20:02:40:20:7f: d5:7f:04:d2:72:e8:82:47:94:eb:25:0c:66:c4:9a: 36:20:1c:d2:8a:f2:55:c0:44:87:b6:38:e8:94:da: 5e:09:c9:f5:99:91:f5:85:75:f6:57:b9:54:da:3e: eb:07:80:b7:a6:2d:cf:a1:a8:47:ff:c0:2a:ab:41: 38:94:67:96:f9:4c:6c:ce:01:0b:27:fc:47:b9:c6: c1:8c:c0:7c:b4:05:59:b6:f5:1f:cb:56:a1:9e:fe: 78:fe:56:c6:c5:72:f2:72:84:23:dc:7e:3f:f5:12: 07:d9:0a:3a:c7:69:01:29:0b:9c:86:3e:77:a2:b4: 3b:50:bf:3d:dd:10:11:bd:9d:0a:27:45:49:4f:fe: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9D:52:55:B9:18:90:45:98:8D:0F:C6:94:FC:25:55:46:16:DE:37 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dp1SVbkYkEWYjQ_GlPwlVUYW3jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.144.0/20 Signature Algorithm: sha256WithRSAEncryption 36:02:90:4b:1c:6d:c1:f1:fd:9f:c3:86:69:ba:bc:36:6c:c4: 09:03:09:3c:ae:47:0c:51:b3:95:3b:c5:c3:5e:84:6f:ea:9d: 55:f3:c9:54:2e:30:39:be:57:e3:47:44:d1:54:80:1c:d8:61: bd:60:be:4e:d5:b7:9a:3e:ee:2f:0e:cb:17:4e:31:d7:b9:d0: 88:3e:b0:05:46:2a:af:c9:12:d2:e2:79:b6:c8:c5:a1:69:73: 9a:6b:72:e9:e5:ba:8d:14:57:c3:d1:de:4e:d9:c5:bb:3d:b6: 61:3c:4e:9d:6c:64:a4:d9:2a:e8:28:7a:ec:04:7a:7b:fe:1f: c7:d8:3d:01:c8:80:2c:6e:ae:6e:7c:a8:0a:e4:f4:32:3a:ad: 66:1a:bc:10:c1:49:ee:ca:5e:f7:9e:f7:24:1e:fe:66:7b:69: 14:d4:d1:c2:ba:61:d0:b8:dc:cc:c6:0b:93:89:cb:92:4b:85: d5:e3:10:ad:bb:95:1b:33:36:37:e7:2f:73:16:6f:d8:ba:d2: bb:1d:06:11:f7:07:a2:6f:b6:80:e6:47:34:04:81:7b:c2:4c: ec:bc:c3:21:3d:a1:a6:96:de:ba:dc:b3:ba:98:85:bd:ab:ba: 2f:90:94:4a:d2:63:2f:78:ca:3c:3e:0e:52:09:76:f6:0a:7d: 02:c2:6b:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQLvULu7Ab4L2laXF3scMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjlkNTI1NWI5MTg5MDQ1OTg4ZDBmYzY5NGZjMjU1NTQ2MTZkZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBgVhYk1GZ5Hm4gIUhhVWrqPLu6Z PzWE8uRp7DsARHbv01T25hgx8V9umjKYePzk9ZercMNDmkia4DKCQFyJoPr4Nw2A OStOfLiL2KzOjE7xpJL39dPB73QD5y4h0SWKcQgSaS9nUzYpUtSBH4tnkLLoIAJA IH/VfwTScuiCR5TrJQxmxJo2IBzSivJVwESHtjjolNpeCcn1mZH1hXX2V7lU2j7r B4C3pi3PoahH/8Aqq0E4lGeW+UxszgELJ/xHucbBjMB8tAVZtvUfy1ahnv54/lbG xXLycoQj3H4/9RIH2Qo6x2kBKQuchj53orQ7UL893RARvZ0KJ0VJT/7WjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHadUlW5GJBFmI0PxpT8JVVGFt43MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvZHAxU1Zia1lrRVdZalFfR2xQd2xWVVlXM2pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUrOQMA0G CSqGSIb3DQEBCwUAA4IBAQA2ApBLHG3B8f2fw4Zpurw2bMQJAwk8rkcMUbOVO8XD XoRv6p1V88lULjA5vlfjR0TRVIAc2GG9YL5O1beaPu4vDssXTjHXudCIPrAFRiqv yRLS4nm2yMWhaXOaa3Lp5bqNFFfD0d5O2cW7PbZhPE6dbGSk2SroKHrsBHp7/h/H 2D0ByIAsbq5ufKgK5PQyOq1mGrwQwUnuyl73nvckHv5me2kU1NHCumHQuNzMxguT icuSS4XV4xCtu5UbMzY35y9zFm/YutK7HQYR9weib7aA5kc0BIF7wkzsvMMhPaGm lt663LO6mIW9q7ovkJRK0mMveMo8Pg5SCXb2Cn0Cwms9 -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:56 2026 by rpki-client