This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa File: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (raw, json) Hash identifier: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA= Subject key identifier: 0D:46:4E:B4:D4:83:0C:78:FB:70:2F:3A:38:FD:5F:CD:91:E8:0F:54 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B7758863A3790A4D40868CDA592C47E94 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2198 IP address blocks: 193.51.249.0/24 maxlen: 24 194.214.55.0/24 maxlen: 24 194.254.189.0/24 maxlen: 24 195.221.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:86:3a:37:90:a4:d4:08:68:cd:a5:92:c4:7e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d464eb4d4830c78fb702f3a38fd5fcd91e80f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:d7:fb:c1:b3:9f:4b:5e:12:1f:e8:8a:f5: 70:55:1c:c9:f5:43:24:7d:01:15:27:9c:c0:f2:9f: 6d:c1:2b:e0:b2:f7:b5:b7:92:39:90:5d:9f:5d:52: 48:36:32:6e:d4:f0:2b:c9:24:4d:1f:c1:19:46:c5: 54:ec:47:38:80:3c:aa:d3:d8:ec:2e:6c:19:ed:92: 5f:ab:c5:33:9f:0d:f1:3f:47:12:41:3a:db:a2:73: 7a:9f:46:a5:c4:87:90:01:73:1a:53:3f:4a:76:d9: ed:e3:90:87:ef:a6:b2:d8:4b:62:94:63:2e:28:ca: 2d:b7:fb:a6:15:c9:5d:58:15:99:e3:ca:0f:fe:a2: ea:38:d1:f4:7d:4a:e9:08:5f:c9:2e:99:0f:ac:60: 8a:19:66:a7:ab:d7:06:1d:f0:cb:31:e8:c2:ae:8d: 4e:49:74:d4:4d:0b:9c:7a:09:0b:4e:ea:52:0a:2a: 06:0f:52:ba:8d:11:0a:b2:6a:66:54:15:6a:b3:ff: a1:3f:5f:cf:46:4f:38:09:51:2f:2d:d7:07:cf:13: 93:3f:34:ff:43:75:e0:bf:e7:7f:5a:4d:f5:f6:ec: c2:04:fa:cf:01:a8:0e:fb:17:f9:be:0d:fa:e8:49: 99:3c:a7:c4:73:e3:76:be:e3:0e:a9:99:c3:d1:5b: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:46:4E:B4:D4:83:0C:78:FB:70:2F:3A:38:FD:5F:CD:91:E8:0F:54 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.51.249.0/24 194.214.55.0/24 194.254.189.0/24 195.221.84.0/24 Signature Algorithm: sha256WithRSAEncryption 60:96:c1:79:e1:9b:90:dc:f6:dd:dc:05:6a:f6:c9:3f:11:aa: 57:f5:47:c9:50:52:0a:e9:81:ad:c5:bb:79:8b:85:b6:ba:fd: b3:ac:e2:e2:a6:73:bf:12:fe:bb:b8:7d:c2:d7:f3:f7:b8:b9: fc:17:42:3f:9a:e3:26:83:86:31:65:00:9b:a0:f9:17:97:d9: f9:dd:fd:74:91:d9:f0:bb:84:6f:55:84:31:7e:0a:68:51:d8: fc:e6:c3:5c:11:65:f3:13:a9:dd:36:58:35:b5:04:0c:d7:67: 48:e1:4c:59:65:71:dc:c1:84:cc:a4:d6:45:ff:82:c7:55:0c: a9:72:44:11:53:ec:94:63:fd:00:e4:55:b3:87:84:de:f6:18: 0f:2a:8c:a1:9f:80:42:20:89:10:24:cb:68:af:1e:8a:0e:86: 8d:9a:63:ef:81:84:c3:90:64:29:ca:d6:24:fb:49:4e:a3:57: 0a:3e:59:48:ab:cb:e3:63:5c:40:d3:ee:4b:f7:00:1d:37:97: 05:37:ca:6a:8e:dd:05:7e:af:a2:34:f4:7c:c5:bf:b5:ee:34: e7:fd:fa:a1:ce:3e:0f:ef:c9:25:50:af:fd:86:08:7d:f1:e1: c9:f7:a5:7e:5f:87:15:e3:2f:9c:9f:7d:2f:ec:3c:1a:14:3e: f1:54:c4:a5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WIY6N5Ck1AhozaWSxH6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDQ2NGViNGQ0ODMwYzc4ZmI3MDJmM2EzOGZkNWZjZDkxZTgwZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5XX+8Gzn0teEh/oivVwVRzJ9UMk fQEVJ5zA8p9twSvgsve1t5I5kF2fXVJINjJu1PArySRNH8EZRsVU7Ec4gDyq09js LmwZ7ZJfq8Uznw3xP0cSQTrbonN6n0alxIeQAXMaUz9Kdtnt45CH76ay2EtilGMu KMott/umFcldWBWZ48oP/qLqONH0fUrpCF/JLpkPrGCKGWanq9cGHfDLMejCro1O SXTUTQucegkLTupSCioGD1K6jREKsmpmVBVqs/+hP1/PRk84CVEvLdcHzxOTPzT/ Q3Xgv+d/Wk319uzCBPrPAagO+xf5vg366EmZPKfEc+N2vuMOqZnD0Vu3gwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA1GTrTUgwx4+3AvOjj9X82R6A9UMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvRFVaT3ROU0RESGo3Y0M4Nk9QMWZ6WkhvRDFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwTP5AwQA wtY3AwQAwv69AwQAw91UMA0GCSqGSIb3DQEBCwUAA4IBAQBglsF54ZuQ3Pbd3AVq 9sk/EapX9UfJUFIK6YGtxbt5i4W2uv2zrOLipnO/Ev67uH3C1/P3uLn8F0I/muMm g4YxZQCboPkXl9n53f10kdnwu4RvVYQxfgpoUdj85sNcEWXzE6ndNlg1tQQM12dI 4UxZZXHcwYTMpNZF/4LHVQypckQRU+yUY/0A5FWzh4Te9hgPKoyhn4BCIIkQJMto rx6KDoaNmmPvgYTDkGQpytYk+0lOo1cKPllIq8vjY1xA0+5L9wAdN5cFN8pqjt0F fq+iNPR8xb+17jTn/fqhzj4P78klUK/9hgh98eHJ96V+X4cV4y+cn30v7DwaFD7x VMSl -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:47 2026 by rpki-client