This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/dpPfCuiR8pRLjvVZ0FpaeUvLwOE.roa File: dpPfCuiR8pRLjvVZ0FpaeUvLwOE.roa (raw, json) Hash identifier: +VGxCjOIKu7xJt4Tpt9PYVubXq3VD5Qnk9SNKMXxmvE= Subject key identifier: 76:93:DF:0A:E8:91:F2:94:4B:8E:F5:59:D0:5A:5A:79:4B:CB:C0:E1 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15B9B15F8500B36130E68C55373EC7 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/dpPfCuiR8pRLjvVZ0FpaeUvLwOE.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35264 IP address blocks: 194.224.168.0/24 maxlen: 24 195.235.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b9:b1:5f:85:00:b3:61:30:e6:8c:55:37:3e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7693df0ae891f2944b8ef559d05a5a794bcbc0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:87:72:0b:bc:ce:2d:16:e4:86:85:20:60:58: 4b:45:eb:4d:5a:2f:80:50:4c:cd:3e:8b:bf:c7:7f: 40:13:76:e6:0b:fb:e5:41:e5:28:67:55:b6:e8:97: f3:8d:c6:de:4c:c7:12:da:7a:9e:3f:17:e6:59:0f: 94:25:43:3b:fe:e6:ef:df:2d:1b:ae:5e:05:a5:db: 73:7c:e8:07:eb:3d:a7:ba:88:b3:86:1c:63:cb:e7: 4f:ae:76:e1:5a:8f:0c:9a:8b:1e:e5:86:1e:65:99: ad:8f:f1:f7:0a:44:58:6d:de:d7:26:b9:05:eb:67: 80:78:14:d2:37:18:43:f9:da:04:24:e8:4a:d7:a1: a0:c7:94:2e:84:2d:ec:aa:e3:10:b0:3d:e5:d6:06: 69:04:08:33:12:b1:69:19:67:f8:76:39:c1:ef:c0: df:6b:be:38:cf:60:2c:3e:95:7a:c9:fe:ed:18:f2: 70:88:f0:bc:78:36:9f:98:90:8d:3d:d4:f4:a8:4c: 44:5e:45:41:1a:47:d1:0b:92:9a:bc:eb:be:0c:5f: 38:f4:71:d8:1e:0f:c7:e1:96:51:d0:a9:11:ff:e5: c6:3d:a9:b5:eb:17:4c:b4:de:c9:88:82:e8:99:ad: c0:f2:5a:62:89:2f:bd:08:c3:4f:8c:6a:fe:59:70: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:93:DF:0A:E8:91:F2:94:4B:8E:F5:59:D0:5A:5A:79:4B:CB:C0:E1 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/dpPfCuiR8pRLjvVZ0FpaeUvLwOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.224.168.0/24 195.235.112.0/24 Signature Algorithm: sha256WithRSAEncryption b8:18:a7:f7:39:f0:9d:fb:e5:f7:ee:c7:66:bc:4f:dd:1a:7b: 36:c4:25:1f:c5:78:50:d3:3f:94:a4:aa:94:2d:34:e5:24:69: 84:e0:52:f8:10:3f:63:55:ce:0c:e4:1b:b4:e0:5e:ca:d8:66: 3f:71:24:0c:3b:95:15:65:00:30:e6:0d:6a:17:6a:64:f2:f2: af:e2:2d:ff:99:53:f6:f9:98:9b:3c:cf:19:34:98:22:30:1e: 39:34:45:e5:5c:08:cf:2f:e4:a9:3e:2d:d8:df:cd:4c:46:4b: 34:84:3f:1f:b8:d6:66:04:8a:39:8e:09:73:ca:e4:f0:95:8e: 8f:f3:f2:cb:0b:ca:82:0a:c8:30:10:a5:4c:e5:c1:35:30:0d: 7f:a8:90:da:1d:62:69:58:cf:b0:74:f1:39:ed:38:ba:81:37: 5d:78:fd:f6:a4:e5:21:e9:2b:f4:4e:23:79:86:8f:89:c1:61: d2:23:00:99:bb:7c:41:d1:0a:1f:7b:6a:78:69:87:88:0e:9b: ce:d2:30:e9:15:c8:1e:64:e4:65:e5:d1:07:af:76:5a:68:60: e6:36:31:0d:30:b9:a0:b3:44:56:b6:86:8e:0a:89:02:0e:43: 4a:aa:54:0c:3b:03:d5:e0:4d:39:be:30:f0:69:a7:1c:da:6b: 62:76:ec:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FbmxX4UAs2Ew5oxVNz7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjkzZGYwYWU4OTFmMjk0NGI4ZWY1NTlkMDVhNWE3OTRiY2JjMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YdyC7zOLRbkhoUgYFhLRetNWi+A UEzNPou/x39AE3bmC/vlQeUoZ1W26JfzjcbeTMcS2nqePxfmWQ+UJUM7/ubv3y0b rl4FpdtzfOgH6z2nuoizhhxjy+dPrnbhWo8Mmose5YYeZZmtj/H3CkRYbd7XJrkF 62eAeBTSNxhD+doEJOhK16Ggx5QuhC3squMQsD3l1gZpBAgzErFpGWf4djnB78Df a744z2AsPpV6yf7tGPJwiPC8eDafmJCNPdT0qExEXkVBGkfRC5KavOu+DF849HHY Hg/H4ZZR0KkR/+XGPam16xdMtN7JiILoma3A8lpiiS+9CMNPjGr+WXCjBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHaT3wrokfKUS471WdBaWnlLy8DhMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvZHBQZkN1aVI4cFJManZWWjBGcGFlVXZMd09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwuCoAwQA w+twMA0GCSqGSIb3DQEBCwUAA4IBAQC4GKf3OfCd++X37sdmvE/dGns2xCUfxXhQ 0z+UpKqULTTlJGmE4FL4ED9jVc4M5Bu04F7K2GY/cSQMO5UVZQAw5g1qF2pk8vKv 4i3/mVP2+ZibPM8ZNJgiMB45NEXlXAjPL+SpPi3Y381MRks0hD8fuNZmBIo5jglz yuTwlY6P8/LLC8qCCsgwEKVM5cE1MA1/qJDaHWJpWM+wdPE57Ti6gTddeP32pOUh 6Sv0TiN5ho+JwWHSIwCZu3xB0Qofe2p4aYeIDpvO0jDpFcgeZORl5dEHr3ZaaGDm NjENMLmgs0RWtoaOCokCDkNKqlQMOwPV4E05vjDwaacc2mtiduyi -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:16 2026 by rpki-client