This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/DPcoyqmJ-ibKgBXQhldGarXkL9k.roa File: DPcoyqmJ-ibKgBXQhldGarXkL9k.roa (raw, json) Hash identifier: yqjMHYnxu0/ljepDij0QNQ+cIeV7Y0MQ0KsJKwUmcN4= Subject key identifier: 0C:F7:28:CA:A9:89:FA:26:CA:80:15:D0:86:57:46:6A:B5:E4:2F:D9 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB0AC13F17B39307F71A8437B0447A Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/DPcoyqmJ-ibKgBXQhldGarXkL9k.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50977 IP address blocks: 109.107.96.0/19 maxlen: 24 185.96.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0a:c1:3f:17:b3:93:07:f7:1a:84:37:b0:44:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cf728caa989fa26ca8015d08657466ab5e42fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b2:98:ca:68:7b:03:4d:2d:24:7b:e0:53:b1: 6c:84:18:f2:3c:fa:3f:d4:f5:af:07:a1:bd:41:15: 98:f1:7a:e3:5a:04:fe:02:bc:40:7e:70:0f:94:91: e0:56:38:24:ab:b0:b6:dc:72:0e:9e:54:80:04:72: 4e:84:74:00:2f:6b:35:32:70:b9:42:03:8a:20:9d: 80:69:4e:29:4f:86:7a:64:c9:2b:78:74:77:79:f0: d1:3f:4f:66:52:6c:d3:72:cd:83:6b:d3:72:55:5c: 4d:7e:9a:9f:06:2e:d1:90:4d:57:1e:76:bd:68:d8: 7c:52:33:96:3f:a8:85:e2:ed:33:b2:90:2e:b6:d7: ec:23:2b:07:b2:9e:4d:d4:df:bf:4b:ce:a1:71:7e: 59:fe:e7:6e:6c:04:26:52:87:94:26:ac:45:73:fc: eb:71:76:5e:e4:b6:90:bf:1e:16:ea:c3:88:d1:cb: 8c:5e:3a:dc:a0:6b:06:85:84:2c:34:81:84:3b:37: 51:63:f5:c9:25:0d:28:61:7b:9e:62:34:bf:aa:4b: 1c:45:9a:7f:f8:b7:1c:78:48:52:d0:c7:90:9b:d9: 73:30:5c:d3:b7:05:a8:72:4f:13:3e:78:69:9f:28: 10:92:65:bc:6c:79:24:c6:66:ae:d0:52:a2:21:c6: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F7:28:CA:A9:89:FA:26:CA:80:15:D0:86:57:46:6A:B5:E4:2F:D9 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/DPcoyqmJ-ibKgBXQhldGarXkL9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.96.0/19 185.96.24.0/22 Signature Algorithm: sha256WithRSAEncryption 98:36:ea:c0:bc:18:e7:7e:49:2c:5e:d5:5b:1b:c5:af:20:eb: d9:2c:b6:cc:88:3b:d0:60:41:b7:ff:36:b2:b1:d9:ed:d5:09: a7:a8:16:83:73:bc:eb:17:e6:c6:70:fd:9f:ac:34:ca:39:60: 12:ef:f8:3a:5f:44:b6:30:42:79:c2:71:ed:61:69:8b:ec:9f: ce:39:7e:04:38:50:dd:f6:05:8f:02:ae:51:dd:c0:eb:7b:24: 25:98:32:70:24:2e:4c:38:ba:81:3f:60:37:9b:59:93:a6:73: 71:e5:8a:a1:75:9d:cb:24:ae:41:82:4e:a0:c0:17:3b:c8:ab: bd:6b:a5:bb:63:2a:64:bf:4b:df:ab:33:25:2a:76:1e:69:7d: e9:8f:6f:68:19:6f:dc:6a:58:ef:b9:e6:8d:f8:34:c1:a7:c5: 6a:13:0c:79:4b:17:2a:07:60:fb:2c:8a:2c:da:be:6e:d4:50: ec:48:65:8f:c9:79:dd:9d:7d:90:2b:c8:44:c2:34:cf:86:59: 25:48:f8:c1:17:f1:99:56:bb:7f:d7:e4:d4:e1:44:72:2e:75: 06:95:18:f4:76:4f:88:8f:fd:87:5d:e8:cd:fe:9c:2f:d1:b7: 45:8d:b9:f2:ed:d7:17:09:c0:a9:22:98:85:f6:63:8a:35:eb: 59:90:df:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26wrBPxezkwf3GoQ3sER6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2Y3MjhjYWE5ODlmYTI2Y2E4MDE1ZDA4NjU3NDY2YWI1ZTQyZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27KYymh7A00tJHvgU7FshBjyPPo/ 1PWvB6G9QRWY8XrjWgT+ArxAfnAPlJHgVjgkq7C23HIOnlSABHJOhHQAL2s1MnC5 QgOKIJ2AaU4pT4Z6ZMkreHR3efDRP09mUmzTcs2Da9NyVVxNfpqfBi7RkE1XHna9 aNh8UjOWP6iF4u0zspAuttfsIysHsp5N1N+/S86hcX5Z/udubAQmUoeUJqxFc/zr cXZe5LaQvx4W6sOI0cuMXjrcoGsGhYQsNIGEOzdRY/XJJQ0oYXueYjS/qkscRZp/ +LcceEhS0MeQm9lzMFzTtwWock8TPnhpnygQkmW8bHkkxmau0FKiIcYwnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAz3KMqpifomyoAV0IZXRmq15C/ZMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvRFBjb3lxbUotaWJLZ0JYUWhsZEdhclhrTDlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFbWtgAwQC uWAYMA0GCSqGSIb3DQEBCwUAA4IBAQCYNurAvBjnfkksXtVbG8WvIOvZLLbMiDvQ YEG3/zaysdnt1QmnqBaDc7zrF+bGcP2frDTKOWAS7/g6X0S2MEJ5wnHtYWmL7J/O OX4EOFDd9gWPAq5R3cDreyQlmDJwJC5MOLqBP2A3m1mTpnNx5YqhdZ3LJK5Bgk6g wBc7yKu9a6W7Yypkv0vfqzMlKnYeaX3pj29oGW/caljvueaN+DTBp8VqEwx5Sxcq B2D7LIos2r5u1FDsSGWPyXndnX2QK8hEwjTPhlklSPjBF/GZVrt/1+TU4URyLnUG lRj0dk+Ij/2HXejN/pwv0bdFjbny7dcXCcCpIpiF9mOKNetZkN/U -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:32 2026 by rpki-client