This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_DhNMXD9fcDCn99pNPtgRkdV9kM.roa File: _DhNMXD9fcDCn99pNPtgRkdV9kM.roa (raw, json) Hash identifier: 8uhdjrbj85gO8miL40fomlE1sPGHLtyURp1rmkFo2dQ= Subject key identifier: FC:38:4D:31:70:FD:7D:C0:C2:9F:DF:69:34:FB:60:46:47:55:F6:43 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C75C70FDBF0C656C2BC9247B4D568F Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_DhNMXD9fcDCn99pNPtgRkdV9kM.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6854 IP address blocks: 80.253.0.0/20 maxlen: 20 83.222.192.0/19 maxlen: 19 83.229.128.0/17 maxlen: 17 195.230.64.0/19 maxlen: 19 213.243.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5c:70:fd:bf:0c:65:6c:2b:c9:24:7b:4d:56:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc384d3170fd7dc0c29fdf6934fb60464755f643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:64:90:51:42:75:8c:22:d0:d6:1e:46:72: 9a:50:09:aa:05:30:c5:9d:27:01:ee:18:0b:21:01: 13:91:0e:ac:1a:9b:67:f9:25:a0:97:af:59:b3:06: 67:20:85:de:86:5e:cb:2e:7b:75:7f:98:eb:b1:6a: 53:a7:76:a4:d8:7a:3b:79:6d:f1:85:3e:aa:38:0b: f9:a6:26:6f:f8:68:21:cc:7e:ac:44:3b:89:2f:81: 80:b5:d9:39:0e:37:39:f6:47:29:aa:df:37:05:3b: 2b:09:fe:43:0a:31:ac:89:75:90:e3:88:d8:00:49: e5:5b:58:e3:73:ea:38:20:26:53:2b:40:24:27:ae: 11:fe:7f:ab:73:2b:7e:5d:b7:89:8b:b0:28:00:82: ae:9f:11:14:68:ea:38:9e:ff:5f:ca:7b:28:3c:8d: 45:91:db:39:05:c3:64:9e:f7:16:e7:ac:0e:1c:24: 36:11:e8:72:cd:fe:df:8d:30:bd:20:4b:f7:43:db: 43:be:5c:70:4e:a9:dc:4e:22:80:ff:bc:28:fd:2d: 31:43:ed:58:17:d8:1b:3c:2e:de:63:40:24:fc:51: 17:3e:34:c1:6a:ab:06:5f:8a:49:f7:19:73:7a:b9: 98:2e:be:78:ff:ae:29:9a:56:06:34:40:57:b4:61: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:38:4D:31:70:FD:7D:C0:C2:9F:DF:69:34:FB:60:46:47:55:F6:43 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_DhNMXD9fcDCn99pNPtgRkdV9kM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.0.0/20 83.222.192.0/19 83.229.128.0/17 195.230.64.0/19 213.243.64.0/18 Signature Algorithm: sha256WithRSAEncryption 5b:5f:48:3b:99:e9:01:b8:bb:09:8c:65:24:03:4b:6f:be:e6: 98:6e:b1:8f:e8:17:d1:1f:6a:3c:53:99:c2:51:25:c3:48:10: ee:f1:36:c1:02:0c:63:48:d2:da:ca:50:6b:32:fd:ed:0b:2f: 86:3f:4b:94:25:45:de:e2:f1:8b:6d:67:38:38:1d:5d:0d:2c: a8:b0:28:bb:0e:3b:54:89:a3:27:fa:67:a6:8d:10:eb:60:c3: d5:7d:06:27:81:ff:96:46:f3:c3:bf:3e:af:eb:2b:77:2d:72: 05:06:27:aa:e9:27:8e:a6:03:5a:83:a5:58:8b:8c:ea:50:35: 0c:6e:6c:47:ac:3b:8b:12:ac:8c:ea:1e:0f:b1:fe:95:dc:29: 06:5e:63:3e:53:f5:de:51:2a:f0:ed:90:1e:c2:a8:8f:6e:37: 9a:fa:dd:e9:94:85:c8:05:40:b4:3d:10:1d:26:64:eb:b8:cd: fc:19:6e:7a:45:c5:e4:f3:6b:a5:f4:55:fb:9c:f8:32:20:d8: cf:68:48:f3:f4:7f:0f:a4:2e:14:13:fd:34:f2:2e:10:35:5d: c3:47:41:e8:19:8a:dd:21:58:48:b0:ab:02:e5:3a:03:58:8e: e0:b1:5d:1b:ab:de:de:31:ee:81:77:12:59:a3:93:de:f4:cf: dc:db:23:12 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3x1xw/b8MZWwrySR7TVaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzM4NGQzMTcwZmQ3ZGMwYzI5ZmRmNjkzNGZiNjA0NjQ3NTVmNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLNkkFFCdYwi0NYeRnKaUAmqBTDF nScB7hgLIQETkQ6sGptn+SWgl69ZswZnIIXehl7LLnt1f5jrsWpTp3ak2Ho7eW3x hT6qOAv5piZv+GghzH6sRDuJL4GAtdk5Djc59kcpqt83BTsrCf5DCjGsiXWQ44jY AEnlW1jjc+o4ICZTK0AkJ64R/n+rcyt+XbeJi7AoAIKunxEUaOo4nv9fynsoPI1F kds5BcNknvcW56wOHCQ2Eehyzf7fjTC9IEv3Q9tDvlxwTqncTiKA/7wo/S0xQ+1Y F9gbPC7eY0Ak/FEXPjTBaqsGX4pJ9xlzermYLr54/64pmlYGNEBXtGE/8wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPw4TTFw/X3Awp/faTT7YEZHVfZDMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvX0RoTk1YRDlmY0RDbjk5cE5QdGdSa2RWOWtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEUP0AAwQF U97AAwQHU+WAAwQFw+ZAAwQG1fNAMA0GCSqGSIb3DQEBCwUAA4IBAQBbX0g7mekB uLsJjGUkA0tvvuaYbrGP6BfRH2o8U5nCUSXDSBDu8TbBAgxjSNLaylBrMv3tCy+G P0uUJUXe4vGLbWc4OB1dDSyosCi7DjtUiaMn+memjRDrYMPVfQYngf+WRvPDvz6v 6yt3LXIFBieq6SeOpgNag6VYi4zqUDUMbmxHrDuLEqyM6h4Psf6V3CkGXmM+U/Xe USrw7ZAewqiPbjea+t3plIXIBUC0PRAdJmTruM38GW56RcXk82ul9FX7nPgyINjP aEjz9H8PpC4UE/008i4QNV3DR0HoGYrdIVhIsKsC5ToDWI7gsV0bq97eMe6BdxJZ o5Pe9M/c2yMS -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:04 2026 by rpki-client