This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/DDzoLugVKHUosG6LnSil1zPyskM.roa File: DDzoLugVKHUosG6LnSil1zPyskM.roa (raw, json) Hash identifier: JyTfSK96wfTfZYA0hAe3wAK9JdqgYlzHq8L5Cr8t14Y= Subject key identifier: 0C:3C:E8:2E:E8:15:28:75:28:B0:6E:8B:9D:28:A5:D7:33:F2:B2:43 Certificate issuer: /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424 Certificate serial: 019B78A2F067B6BAB23DB2F57DF8A351C595 Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/DDzoLugVKHUosG6LnSil1zPyskM.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8943 IP address blocks: 83.138.62.0/24 maxlen: 24 2a05:5a40::/32 maxlen: 32 2a05:5a42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f0:67:b6:ba:b2:3d:b2:f5:7d:f8:a3:51:c5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424 Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c3ce82ee815287528b06e8b9d28a5d733f2b243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:83:13:00:89:6e:9f:5f:09:7a:0c:5d:d3: 4e:10:41:fe:48:fc:1e:dc:3b:fb:21:fd:ce:8c:22: b4:38:e3:83:7b:74:4a:04:d3:fe:07:b4:be:1a:ae: e8:ac:ce:32:d8:76:c4:3b:2b:f7:ce:55:5d:a2:8a: fa:c6:a8:2e:f1:f7:c3:f3:bf:1a:50:42:d6:8f:bf: 98:54:87:75:d0:dc:2a:00:70:ed:10:c8:9d:e0:ac: 2e:c3:96:41:e0:68:ac:7b:59:6e:74:6f:16:86:4b: 79:f3:de:96:a6:76:09:4d:66:d4:7e:70:3a:73:52: 9e:67:d2:ea:75:c2:2b:61:81:de:d0:da:8b:46:69: b8:ed:db:6f:cd:3c:e7:f8:b9:8c:c2:bb:49:d1:48: c2:d6:bb:4c:18:b3:35:35:62:a6:40:4b:47:88:50: 0d:bd:80:14:7d:14:00:e5:ab:39:29:6d:06:fc:4d: 0a:fb:05:62:09:80:28:a9:e6:65:b3:93:da:9e:c4: 52:9c:a1:b8:4f:19:41:cf:fc:b4:96:22:20:6d:ae: 95:e3:28:24:52:99:19:0c:fa:a3:4e:2e:fb:91:bc: d1:c1:d9:3b:81:35:dc:3b:64:62:f4:e1:a2:b4:0c: 1c:38:1b:a4:7a:c7:de:f8:11:0d:6f:e4:53:a4:41: 9e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3C:E8:2E:E8:15:28:75:28:B0:6E:8B:9D:28:A5:D7:33:F2:B2:43 X509v3 Authority Key Identifier: keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/DDzoLugVKHUosG6LnSil1zPyskM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.138.62.0/24 IPv6: 2a05:5a40::/32 2a05:5a42::/32 Signature Algorithm: sha256WithRSAEncryption 39:ca:a3:af:c6:19:5f:11:54:96:aa:dc:f2:6a:be:a2:d3:d0: 97:f0:8f:74:36:d6:36:be:0e:97:6f:d7:8e:d0:61:77:62:96: eb:7a:b4:93:6f:8f:c7:29:7d:f3:15:55:1e:24:7d:70:10:df: 15:06:75:04:cb:13:ee:eb:2a:fd:2f:1f:22:ab:37:ea:90:ff: 28:5b:a1:52:de:7c:f2:7f:82:68:c5:35:00:19:5c:27:77:c8: 90:ac:fb:04:f9:fd:1f:9c:cc:44:65:96:c3:a7:6d:a8:93:b2: 7d:1a:0c:8d:b0:56:28:7a:8c:bf:87:77:22:73:6c:91:46:6f: 58:b9:ad:39:98:37:74:77:82:cf:71:3a:20:41:81:4e:aa:6d: 41:dd:a8:9c:41:85:28:8a:7f:d9:fe:03:d5:a5:98:11:71:f7: a0:31:18:6d:8b:03:e9:db:4e:be:2f:32:0a:92:a0:85:13:7e: 20:c6:af:89:12:60:5e:b5:e9:dc:21:17:59:18:f6:16:81:d8: e6:8a:91:8e:88:13:60:03:2b:b0:e2:95:b5:56:46:b1:91:41: 3e:44:e6:53:ce:59:f5:1c:34:0e:e6:14:41:51:d2:d2:ad:76: f7:81:ae:30:10:83:c3:ae:07:83:5f:7b:5d:c8:b2:e8:59:82: 33:34:76:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4ovBntrqyPbL1ffijUcWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOWZmOTFjNmIxYzdhOGVkMDI4NDJiMjVjOWIwZDA2Mzhh OTA0MjQwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzNjZTgyZWU4MTUyODc1MjhiMDZlOGI5ZDI4YTVkNzMzZjJiMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U+DEwCJbp9fCXoMXdNOEEH+SPwe 3Dv7If3OjCK0OOODe3RKBNP+B7S+Gq7orM4y2HbEOyv3zlVdoor6xqgu8ffD878a UELWj7+YVId10NwqAHDtEMid4Kwuw5ZB4Gise1ludG8Whkt5896WpnYJTWbUfnA6 c1KeZ9LqdcIrYYHe0NqLRmm47dtvzTzn+LmMwrtJ0UjC1rtMGLM1NWKmQEtHiFAN vYAUfRQA5as5KW0G/E0K+wViCYAoqeZls5PansRSnKG4TxlBz/y0liIgba6V4ygk UpkZDPqjTi77kbzRwdk7gTXcO2Ri9OGitAwcOBukesfe+BENb+RTpEGeDwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFAw86C7oFSh1KLBui50opdcz8rJDMB8GA1UdIwQY MBaAFOqf+RxrHHqO0ChCslybDQY4qQQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81NzU0OGQtNzA5Ni00NWIwLThiZTgt MDBiN2JmMzJlY2Y4LzEvRER6b0x1Z1ZLSFVvc0c2TG5TaWwxelB5c2tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi81NzU0OGQtNzA5Ni00NWIwLThiZTgtMDBiN2JmMzJlY2Y4 LzEvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAU4o+MBQE AgACMA4DBQAqBVpAAwUAKgVaQjANBgkqhkiG9w0BAQsFAAOCAQEAOcqjr8YZXxFU lqrc8mq+otPQl/CPdDbWNr4Ol2/XjtBhd2KW63q0k2+Pxyl98xVVHiR9cBDfFQZ1 BMsT7usq/S8fIqs36pD/KFuhUt588n+CaMU1ABlcJ3fIkKz7BPn9H5zMRGWWw6dt qJOyfRoMjbBWKHqMv4d3InNskUZvWLmtOZg3dHeCz3E6IEGBTqptQd2onEGFKIp/ 2f4D1aWYEXH3oDEYbYsD6dtOvi8yCpKghRN+IMaviRJgXrXp3CEXWRj2FoHY5oqR jogTYAMrsOKVtVZGsZFBPkTmU85Z9Rw0DuYUQVHS0q1294GuMBCDw64Hg197Xciy 6FmCMzR2fQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:53 2026 by rpki-client