This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa File: 32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa (raw, json) Hash identifier: nbIrlyDfM/OsIW8q6DxR5+MKnNJS4Cwv/h7ugS3W6kw= Subject key identifier: DF:69:58:63:AB:84:AF:93:50:89:9D:FA:63:0D:4F:0E:91:01:D0:B1 Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Certificate serial: 019B7B365B86AC7E653FB5524DF755B13BBC Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48955 IP address blocks: 2.59.12.0/24 maxlen: 24 2.59.15.0/24 maxlen: 24 91.196.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5b:86:ac:7e:65:3f:b5:52:4d:f7:55:b1:3b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df695863ab84af9350899dfa630d4f0e9101d0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:4d:6d:ab:84:f4:72:61:b6:82:5e:68:57: 89:70:d3:c6:b8:8b:88:ab:d1:c7:de:0d:ba:b2:86: 30:7f:64:5c:30:90:89:35:dd:bb:87:41:2a:75:f0: 01:cc:1f:91:20:b1:8d:f2:74:88:a8:21:93:7f:ab: a1:eb:6b:7c:1b:9e:c4:76:f7:b3:76:0f:50:19:b8: 2e:52:2b:3a:77:e4:58:c2:0c:dc:a1:2c:04:a7:1f: 9c:8a:61:0c:07:4d:02:bd:00:89:22:30:58:b1:8e: 45:8e:bf:d8:71:ba:cd:c7:be:9f:c4:fe:3e:37:fa: a6:a9:41:32:9a:ea:8a:46:6a:1d:79:91:22:4e:a9: 9f:95:fd:0d:26:d8:5e:f5:53:d9:64:4c:ea:8e:6c: cc:43:43:28:8b:53:7f:77:4f:9e:f9:54:c7:8d:c8: da:33:51:57:c3:d1:17:ce:45:5e:7e:d9:c1:13:bb: db:46:cb:1c:05:86:4c:00:91:a7:95:dc:a5:a1:5e: 8f:0c:ea:03:08:33:3b:e7:00:a0:ca:ba:5e:db:fc: 84:09:3f:13:9b:03:25:35:9d:07:6f:a6:d1:6f:29: a1:cf:b0:8e:84:50:6c:11:42:be:26:a1:18:90:a4: e2:b9:b7:67:d5:bf:75:a4:b2:6e:a8:78:a2:3d:b5: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:69:58:63:AB:84:AF:93:50:89:9D:FA:63:0D:4F:0E:91:01:D0:B1 X509v3 Authority Key Identifier: keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.12.0/24 2.59.15.0/24 91.196.154.0/24 Signature Algorithm: sha256WithRSAEncryption 21:81:06:49:d8:c9:96:7f:57:8a:fa:15:f9:89:5d:b2:93:24: 74:44:42:e6:b5:a2:b7:f1:ac:ac:0f:3e:0a:e1:b5:8a:22:50: 12:c2:62:8c:a3:d9:3f:f1:0b:fa:bb:f5:69:c2:e9:93:4f:d4: 4c:0c:31:24:12:c9:55:ef:69:dd:f0:72:44:de:04:4e:be:c6: ec:ec:3e:1e:ec:2c:08:d4:06:48:52:df:2b:37:9e:e4:b3:89: c9:de:aa:e4:4d:91:ed:f2:84:aa:97:57:fe:92:95:16:d1:f1: 03:fa:7c:37:5b:7d:14:ea:59:80:ab:c4:c8:0f:0a:f0:a6:2d: fb:7b:fd:cf:94:21:d5:15:59:17:b1:25:c9:fb:ef:7d:7c:4b: 4f:0b:cb:e2:3a:73:14:12:65:f7:f3:0e:87:2c:71:bb:6f:ab: b6:e5:6d:c5:8d:f0:84:1b:33:b3:dc:23:d0:da:e5:a5:3c:40: 42:8c:69:8a:b8:0e:a8:dc:6d:a1:e6:3a:0f:ec:0a:db:39:9a: 08:66:a1:50:50:08:fc:6b:9e:7a:4f:59:93:46:ba:54:74:e7: 27:3f:35:51:a3:d4:82:78:ac:46:ec:51:16:15:b2:29:a7:fb: 1d:01:6d:66:7b:72:73:b0:ab:d9:40:5d:4c:93:9a:20:6a:41: 84:86:24:cc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NluGrH5lP7VSTfdVsTu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4 MTNjNWYwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjY5NTg2M2FiODRhZjkzNTA4OTlkZmE2MzBkNGYwZTkxMDFkMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL5NbauE9HJhtoJeaFeJcNPGuIuI q9HH3g26soYwf2RcMJCJNd27h0EqdfABzB+RILGN8nSIqCGTf6uh62t8G57Edvez dg9QGbguUis6d+RYwgzcoSwEpx+cimEMB00CvQCJIjBYsY5Fjr/YcbrNx76fxP4+ N/qmqUEymuqKRmodeZEiTqmflf0NJthe9VPZZEzqjmzMQ0Moi1N/d0+e+VTHjcja M1FXw9EXzkVeftnBE7vbRsscBYZMAJGnldyloV6PDOoDCDM75wCgyrpe2/yECT8T mwMlNZ0Hb6bRbymhz7COhFBsEUK+JqEYkKTiubdn1b91pLJuqHiiPbXVaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN9pWGOrhK+TUImd+mMNTw6RAdCxMB8GA1UdIwQY MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt ZDQ4YjQyZWYxNTliLzEvMzJsWVk2dUVyNU5RaVozNll3MVBEcEVCMExFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjsMAwQA AjsPAwQAW8SaMA0GCSqGSIb3DQEBCwUAA4IBAQAhgQZJ2MmWf1eK+hX5iV2ykyR0 RELmtaK38aysDz4K4bWKIlASwmKMo9k/8Qv6u/VpwumTT9RMDDEkEslV72nd8HJE 3gROvsbs7D4e7CwI1AZIUt8rN57ks4nJ3qrkTZHt8oSql1f+kpUW0fED+nw3W30U 6lmAq8TIDwrwpi37e/3PlCHVFVkXsSXJ++99fEtPC8viOnMUEmX38w6HLHG7b6u2 5W3FjfCEGzOz3CPQ2uWlPEBCjGmKuA6o3G2h5joP7ArbOZoIZqFQUAj8a556T1mT RrpUdOcnPzVRo9SCeKxG7FEWFbIpp/sdAW1me3JzsKvZQF1Mk5ogakGEhiTM -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:17 2026 by rpki-client