This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa File: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (raw, json) Hash identifier: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo= Subject key identifier: 0E:60:84:BE:73:DA:D9:C4:74:9B:85:AA:F0:C8:18:60:6B:0C:D9:F7 Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026 Certificate serial: 019B76EB1CB1A0CCEA37305525D1DF42324B Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57944 IP address blocks: 91.236.248.0/22 maxlen: 24 91.236.248.0/24 maxlen: 24 91.236.250.0/24 maxlen: 24 91.236.251.0/24 maxlen: 24 2001:67c:440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1c:b1:a0:cc:ea:37:30:55:25:d1:df:42:32:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e6084be73dad9c4749b85aaf0c818606b0cd9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:c9:b2:de:b1:7d:e4:34:b1:80:b5:d3:33: ef:6a:7c:9a:e8:07:e9:fc:ef:dc:55:e5:56:a3:a6: 26:68:ed:a5:a0:fc:79:45:e7:e9:1c:1f:a1:e9:42: e8:f1:51:4e:d9:34:5a:31:1c:f4:b0:b2:65:60:67: 18:a9:20:a3:29:ad:53:87:26:81:67:a6:98:f4:f1: a3:13:59:6a:8e:cb:13:c0:bc:92:ef:1c:6d:a6:d3: 9b:f5:db:65:ac:4c:11:a2:31:33:e6:86:9c:9e:0e: cf:a2:49:ca:e9:08:ba:66:95:c9:cf:91:39:fd:31: 73:81:46:6a:ab:60:7c:54:a4:87:2a:74:0c:75:d3: ad:cb:bf:b8:48:55:cc:0d:8d:ec:62:43:5a:de:4d: 09:4e:aa:a2:57:0a:08:7d:2e:c8:ed:ae:67:c2:a3: e8:7d:a7:35:10:36:48:58:af:84:ab:d6:33:53:c7: ba:5f:6c:41:c0:f6:49:61:fe:0c:86:ff:80:1e:bf: 3a:22:54:dd:fd:3d:2c:c5:ed:0f:ee:fe:a4:ac:7d: aa:1b:17:5e:dd:18:28:39:10:a5:85:d7:88:b3:06: 95:ca:81:d3:d4:cf:92:0b:93:3e:6b:42:99:5b:ee: 62:5a:44:e1:a1:91:56:e4:eb:55:de:80:4c:4e:d1: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:60:84:BE:73:DA:D9:C4:74:9B:85:AA:F0:C8:18:60:6B:0C:D9:F7 X509v3 Authority Key Identifier: keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.248.0/22 IPv6: 2001:67c:440::/48 Signature Algorithm: sha256WithRSAEncryption b0:f8:4d:cd:67:89:53:63:48:85:b2:5f:a9:14:2f:f3:5e:58: 4b:1f:6d:6b:8b:27:25:99:d0:32:d1:a4:13:e6:ed:e9:1c:3e: b4:f3:f3:fe:ac:bb:ee:6a:81:2e:7b:77:bc:55:25:75:7f:1e: c9:37:8f:77:a7:77:fc:cf:cf:88:c4:c8:4c:19:18:ca:aa:21: c9:b9:9a:c4:fa:c9:1f:e2:e9:e1:f4:2f:8f:65:6b:f5:b6:fc: 47:34:83:e5:e0:10:60:8d:6f:3b:42:87:f4:bb:8b:16:02:a3: 0e:0e:13:b3:35:bb:df:a0:0f:f1:ea:79:68:0b:59:7b:ce:6c: 66:76:39:64:cf:29:97:e7:89:87:e5:b7:09:2e:50:07:88:e8: 4c:07:ea:d2:66:e8:c6:47:c8:e7:25:a5:fa:cc:52:6f:0f:79: ac:b1:09:41:33:31:08:57:b0:51:89:aa:4e:83:47:12:79:fc: 23:30:18:e5:0a:83:66:0c:75:eb:98:f7:7c:1f:a1:12:76:af: 31:47:bb:6d:0f:ee:3b:54:74:ce:8b:7e:69:ea:f9:4a:3e:23: 48:f1:e4:9a:8a:0f:fa:27:3b:89:3d:06:25:56:f0:df:f3:4f: 7a:c6:f9:12:28:07:3c:98:b4:b4:bf:f0:2e:74:89:44:92:6b: e6:17:2c:a6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26xyxoMzqNzBVJdHfQjJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj NTYwMjYwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTYwODRiZTczZGFkOWM0NzQ5Yjg1YWFmMGM4MTg2MDZiMGNkOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM/Jst6xfeQ0sYC10zPvanya6Afp /O/cVeVWo6YmaO2loPx5RefpHB+h6ULo8VFO2TRaMRz0sLJlYGcYqSCjKa1ThyaB Z6aY9PGjE1lqjssTwLyS7xxtptOb9dtlrEwRojEz5oacng7PoknK6Qi6ZpXJz5E5 /TFzgUZqq2B8VKSHKnQMddOty7+4SFXMDY3sYkNa3k0JTqqiVwoIfS7I7a5nwqPo fac1EDZIWK+Eq9YzU8e6X2xBwPZJYf4Mhv+AHr86IlTd/T0sxe0P7v6krH2qGxde 3RgoORClhdeIswaVyoHT1M+SC5M+a0KZW+5iWkThoZFW5OtV3oBMTtF61wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA5ghL5z2tnEdJuFqvDIGGBrDNn3MB8GA1UdIwQY MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt Y2M5MDYyMGU5OWNmLzEvRG1DRXZuUGEyY1IwbTRXcThNZ1lZR3NNMmZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW+z4MA8E AgACMAkDBwAgAQZ8BEAwDQYJKoZIhvcNAQELBQADggEBALD4Tc1niVNjSIWyX6kU L/NeWEsfbWuLJyWZ0DLRpBPm7ekcPrTz8/6su+5qgS57d7xVJXV/Hsk3j3end/zP z4jEyEwZGMqqIcm5msT6yR/i6eH0L49la/W2/Ec0g+XgEGCNbztCh/S7ixYCow4O E7M1u9+gD/HqeWgLWXvObGZ2OWTPKZfniYfltwkuUAeI6EwH6tJm6MZHyOclpfrM Um8PeayxCUEzMQhXsFGJqk6DRxJ5/CMwGOUKg2YMdeuY93wfoRJ2rzFHu20P7jtU dM6Lfmnq+Uo+I0jx5JqKD/onO4k9BiVW8N/zT3rG+RIoBzyYtLS/8C50iUSSa+YX LKY= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:25 2026 by rpki-client