This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/DcPJY2T-iadNWVBVg9TulaMJxgU.roa File: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (raw, json) Hash identifier: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs= Subject key identifier: 0D:C3:C9:63:64:FE:89:A7:4D:59:50:55:83:D4:EE:95:A3:09:C6:05 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFE8391900292DF79757A7E721287 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/DcPJY2T-iadNWVBVg9TulaMJxgU.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49100 IP address blocks: 46.143.24.0/21 maxlen: 32 46.143.32.0/20 maxlen: 32 79.127.0.0/21 maxlen: 32 79.127.64.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fe:83:91:90:02:92:df:79:75:7a:7e:72:12:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dc3c96364fe89a74d59505583d4ee95a309c605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:9b:cf:53:6d:b2:9d:09:6d:62:ca:9a:32: 03:60:d1:8a:7f:ba:33:65:0f:e6:c2:a2:a6:a8:ac: 6b:81:fe:30:6d:4b:90:1b:4a:b6:09:cf:49:7f:1f: e0:49:13:91:2c:c4:ff:c8:1b:d8:58:d6:ca:16:a7: 80:d9:77:2f:00:43:90:69:d9:67:27:be:31:91:41: e4:18:eb:99:7d:87:bb:9e:c0:cd:23:71:55:d2:e0: 7b:30:e6:2a:60:4a:d2:ea:9c:52:bd:fa:24:bc:06: 61:5c:a4:c8:09:1b:55:dc:c4:d4:2c:99:99:d7:47: 69:d6:6e:49:4b:34:2e:cb:62:b3:14:8b:28:fc:f9: 04:e2:f6:15:3f:2b:33:ae:a2:0f:03:b8:ba:a9:6a: 18:30:52:72:14:93:76:62:f2:03:2c:07:dd:53:ce: 6d:f9:e5:6a:74:ee:91:5a:89:d1:c4:66:15:7d:e5: da:5e:03:61:75:37:bd:8d:71:49:f9:c5:88:59:84: ab:63:a9:6c:2e:75:d7:0c:3b:0c:93:cc:01:95:f0: 98:a6:ee:80:d8:5a:72:af:48:0c:6d:9f:90:00:27: 1c:ec:b8:dc:ea:ac:2c:a0:87:57:1d:4e:36:1e:a9: f8:f4:a0:f3:82:fe:cc:d5:48:6b:cc:cd:9e:d6:cb: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C3:C9:63:64:FE:89:A7:4D:59:50:55:83:D4:EE:95:A3:09:C6:05 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/DcPJY2T-iadNWVBVg9TulaMJxgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.24.0-46.143.47.255 79.127.0.0/21 79.127.64.0/20 Signature Algorithm: sha256WithRSAEncryption 86:50:b4:ca:22:4a:2a:38:05:e5:af:74:ab:fa:4d:ab:fc:74: 6b:d0:15:f6:24:cc:52:d1:87:27:e3:da:f5:36:3f:66:d9:75: 59:6d:58:44:a2:76:38:ed:a4:88:b4:b3:84:c5:29:85:ca:74: 4f:df:94:04:a9:e7:f4:99:83:c9:37:ac:03:72:21:1f:c6:ae: 52:b2:02:c6:7b:78:c5:76:77:41:3f:5e:cf:30:0a:0f:5c:c2: 2d:7c:a2:07:92:53:57:b9:06:18:13:49:71:41:ba:41:17:b9: 73:be:23:b9:8a:76:c3:49:fb:bc:f3:f4:99:2a:0b:97:11:fc: 5d:dd:28:e8:29:30:76:cb:1f:9c:bf:f3:9c:12:d5:85:ea:6d: d7:9b:8d:4d:d2:29:08:3c:6b:a3:29:7f:77:1a:87:ad:a8:24: 38:53:30:7f:64:37:44:ff:7d:84:71:28:d3:bc:70:cb:29:80: 65:32:f4:51:16:4b:c9:9a:ea:2b:1c:88:de:91:77:16:97:b6: 37:0f:0b:b7:d5:dd:d8:33:1e:4d:a9:b6:e6:41:61:5d:13:9a: 31:58:d0:c5:15:41:44:c8:cd:9b:35:9f:df:7b:15:5e:76:38: 71:84:14:3a:25:ea:b8:a4:2b:fa:bc:be:2f:b2:b0:72:30:7e: 1a:b0:f2:e0 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9XP6DkZACkt95dXp+chKHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGMzYzk2MzY0ZmU4OWE3NGQ1OTUwNTU4M2Q0ZWU5NWEzMDljNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Obz1Ntsp0JbWLKmjIDYNGKf7oz ZQ/mwqKmqKxrgf4wbUuQG0q2Cc9Jfx/gSRORLMT/yBvYWNbKFqeA2XcvAEOQadln J74xkUHkGOuZfYe7nsDNI3FV0uB7MOYqYErS6pxSvfokvAZhXKTICRtV3MTULJmZ 10dp1m5JSzQuy2KzFIso/PkE4vYVPyszrqIPA7i6qWoYMFJyFJN2YvIDLAfdU85t +eVqdO6RWonRxGYVfeXaXgNhdTe9jXFJ+cWIWYSrY6lsLnXXDDsMk8wBlfCYpu6A 2Fpyr0gMbZ+QACcc7Ljc6qwsoIdXHU42Hqn49KDzgv7M1UhrzM2e1ss5oQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFA3DyWNk/omnTVlQVYPU7pWjCcYFMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvRGNQSlkyVC1pYWROV1ZCVmc5VHVsYU1KeGdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAMujxgD BAQujyADBANPfwADBARPf0AwDQYJKoZIhvcNAQELBQADggEBAIZQtMoiSio4BeWv dKv6Tav8dGvQFfYkzFLRhyfj2vU2P2bZdVltWESidjjtpIi0s4TFKYXKdE/flASp 5/SZg8k3rANyIR/GrlKyAsZ7eMV2d0E/Xs8wCg9cwi18ogeSU1e5BhgTSXFBukEX uXO+I7mKdsNJ+7zz9JkqC5cR/F3dKOgpMHbLH5y/85wS1YXqbdebjU3SKQg8a6Mp f3cah62oJDhTMH9kN0T/fYRxKNO8cMspgGUy9FEWS8ma6isciN6RdxaXtjcPC7fV 3dgzHk2ptuZBYV0TmjFY0MUVQUTIzZs1n997FV52OHGEFDol6rikK/q8vi+ysHIw fhqw8uA= -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:58 2026 by rpki-client