This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dKmmwkMlM7nZtApaFQqo9Jh_Xvw.roa File: dKmmwkMlM7nZtApaFQqo9Jh_Xvw.roa (raw, json) Hash identifier: NTpE28YoA3tf8Zt3RLokKAqvfzS6jTmueuVs60IYXGM= Subject key identifier: 74:A9:A6:C2:43:25:33:B9:D9:B4:0A:5A:15:0A:A8:F4:98:7F:5E:FC Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834610ECD718900195975CFB391240D Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dKmmwkMlM7nZtApaFQqo9Jh_Xvw.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44529 IP address blocks: 194.14.100.0/23 maxlen: 24 194.68.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:61:0e:cd:71:89:00:19:59:75:cf:b3:91:24:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74a9a6c2432533b9d9b40a5a150aa8f4987f5efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:fb:cc:3c:a0:70:2d:ea:34:6f:e4:c8:61: ab:f2:df:50:0a:e1:5f:05:b7:6c:f9:b9:c6:38:b2: 3e:2c:d9:f1:91:3d:3d:15:4e:6d:fa:fc:49:1c:2e: 21:2d:a2:d0:af:b2:df:ca:e1:a8:a9:4c:b3:b3:4f: ab:a1:09:ab:06:27:f5:4b:ca:ad:af:75:3d:6e:aa: 87:09:0c:56:b6:89:2b:d4:79:b3:2f:4b:5e:ee:49: 71:10:30:7e:06:23:a9:9f:22:23:de:00:c2:cd:a0: 76:18:c8:7e:7a:80:93:fb:1d:d3:69:89:56:72:9e: 69:6f:14:e1:d6:db:9c:d6:c4:1b:1b:4c:5b:f4:87: d0:1b:0d:8c:f0:09:28:1a:87:83:f5:fe:7c:f4:56: 82:6b:01:1c:61:c8:d4:1f:02:41:57:85:ea:6b:49: 5c:6f:77:7d:94:71:3f:c6:36:38:2f:04:51:5a:55: d4:b1:62:07:d6:05:cb:3c:dd:31:2a:dc:44:b3:91: ea:6b:e9:1a:3d:3a:13:2c:81:ff:19:48:c5:53:af: eb:84:54:46:cd:26:eb:1c:58:b4:4b:1a:60:d9:b3: 01:ce:db:fa:05:72:b4:01:85:e2:d7:0e:9b:88:1d: 1d:f1:9a:bc:40:1f:32:e1:18:f4:0d:aa:ad:4d:ce: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A9:A6:C2:43:25:33:B9:D9:B4:0A:5A:15:0A:A8:F4:98:7F:5E:FC X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dKmmwkMlM7nZtApaFQqo9Jh_Xvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.14.100.0/23 194.68.20.0/24 Signature Algorithm: sha256WithRSAEncryption a4:a9:aa:74:6b:ed:ba:dd:13:7f:a1:03:c5:75:52:e5:74:99: 07:64:25:01:b8:f1:38:81:23:f5:d4:18:5d:5f:17:04:69:5d: 48:66:ea:22:d5:0b:d7:79:c6:0c:e6:9d:b7:9b:f4:e5:d2:18: 68:6f:23:03:c6:56:6d:c6:23:9d:14:88:59:1f:15:76:f4:c4: 1a:6a:8e:34:a8:8a:70:9c:a3:51:c7:6f:86:0c:fb:43:bf:dd: 8d:8b:c0:e3:8c:2e:21:30:38:98:90:23:6a:4f:be:d5:03:06: 85:fd:b1:a1:2b:89:36:55:65:b2:45:e4:aa:3f:f4:63:b3:82: b1:3f:2f:d6:be:fa:4d:56:78:a0:f6:26:91:3f:5c:ca:44:e0: 32:b9:cc:c6:6c:4b:5d:75:77:d8:69:fa:19:70:d1:1d:e4:31: 6f:31:b5:79:bf:7a:1f:c6:eb:40:64:d1:13:56:22:5c:46:da: bf:6c:27:8a:f8:61:32:ff:8f:61:b8:02:52:d6:7d:eb:c5:5b: c9:9e:8b:6b:da:90:b0:0d:a0:7e:66:b3:3a:6d:f1:53:bd:ea: cf:b1:bb:fc:12:e9:ce:e1:f7:1e:af:2e:e2:62:38:6f:c1:9a: cd:76:94:59:a7:7f:57:77:1e:63:43:47:74:12:a2:d4:65:58: 3e:4c:a1:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NGEOzXGJABlZdc+zkSQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGE5YTZjMjQzMjUzM2I5ZDliNDBhNWExNTBhYThmNDk4N2Y1ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Pf7zDygcC3qNG/kyGGr8t9QCuFf Bbds+bnGOLI+LNnxkT09FU5t+vxJHC4hLaLQr7LfyuGoqUyzs0+roQmrBif1S8qt r3U9bqqHCQxWtokr1HmzL0te7klxEDB+BiOpnyIj3gDCzaB2GMh+eoCT+x3TaYlW cp5pbxTh1tuc1sQbG0xb9IfQGw2M8AkoGoeD9f589FaCawEcYcjUHwJBV4Xqa0lc b3d9lHE/xjY4LwRRWlXUsWIH1gXLPN0xKtxEs5Hqa+kaPToTLIH/GUjFU6/rhFRG zSbrHFi0Sxpg2bMBztv6BXK0AYXi1w6biB0d8Zq8QB8y4Rj0DaqtTc7JwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHSppsJDJTO52bQKWhUKqPSYf178MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZEttbXdrTWxNN25adEFwYUZRcW85SmhfWHZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwg5kAwQA wkQUMA0GCSqGSIb3DQEBCwUAA4IBAQCkqap0a+263RN/oQPFdVLldJkHZCUBuPE4 gSP11BhdXxcEaV1IZuoi1QvXecYM5p23m/Tl0hhobyMDxlZtxiOdFIhZHxV29MQa ao40qIpwnKNRx2+GDPtDv92Ni8DjjC4hMDiYkCNqT77VAwaF/bGhK4k2VWWyReSq P/Rjs4KxPy/WvvpNVnig9iaRP1zKROAyuczGbEtddXfYafoZcNEd5DFvMbV5v3of xutAZNETViJcRtq/bCeK+GEy/49huAJS1n3rxVvJnotr2pCwDaB+ZrM6bfFTverP sbv8EunO4fcery7iYjhvwZrNdpRZp39Xdx5jQ0d0EqLUZVg+TKEr -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:35 2026 by rpki-client