This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/DmNgBVzwALAZpD0xt4gW0SabWP4.roa File: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (raw, json) Hash identifier: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc= Subject key identifier: 0E:63:60:05:5C:F0:00:B0:19:A4:3D:31:B7:88:16:D1:26:9B:58:FE Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF2786964F627E53B58A0DEFB2CCBDF Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/DmNgBVzwALAZpD0xt4gW0SabWP4.roa Signing time: Fri 02 Jan 2026 18:22:35 +0000 ROA not before: Fri 02 Jan 2026 18:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201215 IP address blocks: 89.252.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:78:69:64:f6:27:e5:3b:58:a0:de:fb:2c:cb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e6360055cf000b019a43d31b78816d1269b58fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:a3:a6:94:6c:3c:a9:ec:7f:d3:d5:b2:d5: 5c:00:b6:50:b5:03:b9:e6:cc:72:56:b5:a6:4b:8b: 4c:45:cf:20:a3:56:c4:2c:ac:b4:b2:a8:f7:57:4c: a0:a1:92:c5:24:e0:e8:00:b1:a9:c2:f3:80:3a:0b: 4d:e2:84:7e:24:05:73:1f:84:e9:1a:1d:a4:f1:3a: 14:ff:15:81:d2:b1:ac:fc:1e:c5:6c:02:21:25:8a: 95:6c:dd:c6:cd:19:61:ff:7e:62:54:80:40:b9:db: 76:ed:9b:bc:50:3c:94:3d:37:81:46:19:79:3c:b3: ba:32:07:15:c1:cf:c8:f6:47:72:15:d7:e9:be:4b: 25:e9:47:12:72:ff:c1:ce:3c:d0:c1:c5:dd:bf:1b: ff:bc:6f:e5:de:b6:3a:45:0b:84:7d:1b:85:21:18: 2e:f2:c8:91:7d:d2:4c:f3:cd:3c:31:8f:35:fd:4a: 52:e8:70:1c:e2:00:6f:25:a4:64:f0:34:d1:6e:c9: f8:47:2d:73:fb:73:41:3a:cf:b9:45:e0:3f:3f:61: 68:6f:90:49:3a:7a:8a:dc:e7:fb:20:d3:56:82:d6: 4a:60:6b:80:25:a7:49:2b:ba:c6:0b:4c:98:50:23: c3:3e:67:26:fa:58:9b:f4:25:ac:c2:bb:3a:67:9f: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:63:60:05:5C:F0:00:B0:19:A4:3D:31:B7:88:16:D1:26:9B:58:FE X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/DmNgBVzwALAZpD0xt4gW0SabWP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.252.202.0/24 Signature Algorithm: sha256WithRSAEncryption d4:6e:f1:d6:19:8a:b9:a5:9b:d7:64:97:ef:0b:cb:3f:36:09: 21:03:a9:b1:45:ad:db:62:a4:2b:bc:39:1f:b7:dc:86:16:9e: 6d:54:c6:c0:f9:a0:81:30:14:88:39:cc:c2:ee:44:42:f3:a0: ee:35:09:2f:34:24:57:c4:4a:e7:0b:91:f8:ad:8c:4a:78:f8: 4f:58:8e:86:ec:7e:58:29:52:7a:eb:c8:32:5b:ce:19:43:ba: 4a:01:0e:af:65:7e:ae:c4:e8:b3:18:91:a8:0c:97:00:04:ab: 0a:1f:5b:ce:d4:e8:a2:a4:0a:4c:08:be:c4:e0:a7:ea:97:14: 25:38:34:e1:a1:2a:ed:34:d0:92:06:d1:00:f6:e0:4d:3e:ea: 70:6c:23:5d:88:24:3a:c5:b8:5b:11:6c:6e:97:70:05:87:fa: 3c:36:df:09:c2:a9:1c:f1:30:34:a4:8c:2d:d1:7c:18:3b:91: e0:ee:d3:6c:63:1a:95:7f:76:a5:aa:63:19:70:f4:49:7e:9e: d5:c2:9f:b6:fa:ca:bd:64:00:44:e1:cb:06:2b:0f:29:43:c5: b8:69:ce:19:ec:f7:3c:2a:0f:fd:d0:3a:44:a0:3f:0c:b3:90: 67:21:6c:8d:d3:0f:b5:50:b2:70:5e:2c:e9:de:41:59:e7:90: a7:4b:c9:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nhpZPYn5TtYoN77LMvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTYzNjAwNTVjZjAwMGIwMTlhNDNkMzFiNzg4MTZkMTI2OWI1OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEujppRsPKnsf9PVstVcALZQtQO5 5sxyVrWmS4tMRc8go1bELKy0sqj3V0ygoZLFJODoALGpwvOAOgtN4oR+JAVzH4Tp Gh2k8ToU/xWB0rGs/B7FbAIhJYqVbN3GzRlh/35iVIBAudt27Zu8UDyUPTeBRhl5 PLO6MgcVwc/I9kdyFdfpvksl6UcScv/BzjzQwcXdvxv/vG/l3rY6RQuEfRuFIRgu 8siRfdJM8808MY81/UpS6HAc4gBvJaRk8DTRbsn4Ry1z+3NBOs+5ReA/P2Fob5BJ OnqK3Of7INNWgtZKYGuAJadJK7rGC0yYUCPDPmcm+lib9CWswrs6Z58SdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA5jYAVc8ACwGaQ9MbeIFtEmm1j+MB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvRG1OZ0JWendBTEFacEQweHQ0Z1cwU2FiV1A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfzKMA0G CSqGSIb3DQEBCwUAA4IBAQDUbvHWGYq5pZvXZJfvC8s/NgkhA6mxRa3bYqQrvDkf t9yGFp5tVMbA+aCBMBSIOczC7kRC86DuNQkvNCRXxErnC5H4rYxKePhPWI6G7H5Y KVJ668gyW84ZQ7pKAQ6vZX6uxOizGJGoDJcABKsKH1vO1OiipApMCL7E4KfqlxQl ODThoSrtNNCSBtEA9uBNPupwbCNdiCQ6xbhbEWxul3AFh/o8Nt8Jwqkc8TA0pIwt 0XwYO5Hg7tNsYxqVf3alqmMZcPRJfp7Vwp+2+sq9ZABE4csGKw8pQ8W4ac4Z7Pc8 Kg/90DpEoD8Ms5BnIWyN0w+1ULJwXizp3kFZ55CnS8kV -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:32 2026 by rpki-client