This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dgcqai-5rmimhxceP0h0vn7Tb_U.roa File: dgcqai-5rmimhxceP0h0vn7Tb_U.roa (raw, json) Hash identifier: 7fT1v+ifcL+D43TXAKYHnmzYEUKzrsbicigmEgabW6Q= Subject key identifier: 76:07:2A:6A:2F:B9:AE:68:A6:87:17:1E:3F:48:74:BE:7E:D3:6F:F5 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78349C59CC08D904B758E76662A191EE Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dgcqai-5rmimhxceP0h0vn7Tb_U.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215138 IP address blocks: 192.121.255.0/24 maxlen: 24 193.234.16.0/24 maxlen: 24 194.14.6.0/24 maxlen: 24 194.14.7.0/24 maxlen: 24 194.68.238.0/24 maxlen: 24 194.71.174.0/24 maxlen: 24 194.71.175.0/24 maxlen: 24 194.71.176.0/24 maxlen: 24 194.71.177.0/24 maxlen: 24 194.71.178.0/24 maxlen: 24 194.71.179.0/24 maxlen: 24 2a01:280:310::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9c:59:cc:08:d9:04:b7:58:e7:66:62:a1:91:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76072a6a2fb9ae68a687171e3f4874be7ed36ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:90:c4:e6:52:da:4e:10:12:7b:a5:a5:26: 80:0a:94:4d:14:a1:c9:40:f4:83:a7:88:db:b8:9b: c3:41:52:14:dd:f2:c1:c3:ad:69:1d:e2:3d:96:af: 95:f4:d5:9f:2d:cb:f9:34:a0:a1:0b:6c:f8:43:67: 43:35:f1:25:aa:0f:00:0c:3a:7d:4e:a9:92:f4:45: ad:b4:30:f6:1b:41:ad:11:ce:85:78:0e:4b:b9:cf: bb:9b:c7:ca:48:8d:a7:17:4d:bb:7b:f8:e6:71:2b: b5:57:96:34:57:77:fd:3c:8c:ea:74:3b:04:56:92: 0f:07:7a:6f:89:3b:c4:6c:1c:cf:79:63:d3:79:a5: a8:84:9f:fc:0f:68:49:66:4a:83:3f:5a:ef:0c:63: 86:90:c6:2b:40:4f:f2:2d:9e:98:83:82:a8:13:cb: 05:b4:00:90:fa:9b:45:6e:36:5f:2b:e7:8f:fb:9e: 45:55:e0:71:d9:70:35:42:e8:1b:15:e7:13:c6:b7: a3:94:0b:d7:a5:12:4e:fa:f5:fc:c0:ca:18:42:c0: 27:57:9f:91:ab:0f:39:09:02:4b:bc:75:83:0c:2d: 52:0a:08:97:f1:f4:64:9d:af:a9:75:49:6c:26:51: a2:ba:c6:16:a4:e7:a8:ec:cf:9d:41:48:ea:4e:e1: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:07:2A:6A:2F:B9:AE:68:A6:87:17:1E:3F:48:74:BE:7E:D3:6F:F5 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dgcqai-5rmimhxceP0h0vn7Tb_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.255.0/24 193.234.16.0/24 194.14.6.0/23 194.68.238.0/24 194.71.174.0-194.71.179.255 IPv6: 2a01:280:310::/48 Signature Algorithm: sha256WithRSAEncryption c6:a1:94:3d:4e:b4:78:d9:50:72:d5:d2:17:d2:ff:df:32:aa: 8f:5a:32:bc:34:10:7a:3c:3b:ff:3a:eb:7e:0e:33:aa:59:4e: 9f:fa:7e:5e:e6:93:72:c3:a4:b1:fa:2a:a8:40:98:ef:f4:b6: 25:32:06:74:24:60:5d:42:a1:14:60:cd:43:97:b1:1d:68:d8: fa:91:b7:6b:78:40:a3:5c:12:02:b2:1a:ec:bd:58:83:f2:8c: eb:84:bb:88:3f:d4:39:e0:9e:be:eb:8c:62:84:2c:77:2e:2b: 5a:bc:51:3b:93:db:77:73:8a:0f:50:68:82:8f:51:a7:de:49: 4c:07:0d:f6:fc:f0:5f:e4:55:f3:52:41:79:64:1e:dc:c7:31: 39:cc:ec:55:fb:43:5d:21:19:b8:69:44:a0:d1:78:81:c2:4d: 40:44:5f:ce:f7:ec:db:c1:b0:8e:a8:e1:5f:ed:6d:69:c9:3e: be:79:b6:75:2e:ab:4a:88:3b:68:ab:86:2a:8b:f2:66:c7:11: b4:5c:db:1e:1f:6e:92:43:9e:4f:35:ee:d1:16:ce:92:a1:3f: 40:06:24:67:4d:3c:61:ef:64:5a:6c:ea:86:03:7c:57:04:96: bd:55:cb:ba:0b:02:17:8c:4d:2c:8f:54:74:a6:a4:1e:21:97: e9:0a:01:ca -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt4NJxZzAjZBLdY52ZioZHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjA3MmE2YTJmYjlhZTY4YTY4NzE3MWUzZjQ4NzRiZTdlZDM2ZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGeQxOZS2k4QEnulpSaACpRNFKHJ QPSDp4jbuJvDQVIU3fLBw61pHeI9lq+V9NWfLcv5NKChC2z4Q2dDNfElqg8ADDp9 TqmS9EWttDD2G0GtEc6FeA5Luc+7m8fKSI2nF027e/jmcSu1V5Y0V3f9PIzqdDsE VpIPB3pviTvEbBzPeWPTeaWohJ/8D2hJZkqDP1rvDGOGkMYrQE/yLZ6Yg4KoE8sF tACQ+ptFbjZfK+eP+55FVeBx2XA1QugbFecTxrejlAvXpRJO+vX8wMoYQsAnV5+R qw85CQJLvHWDDC1SCgiX8fRkna+pdUlsJlGiusYWpOeo7M+dQUjqTuF8LwIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFHYHKmovua5opocXHj9IdL5+02/1MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZGdjcWFpLTVybWltaHhjZVAwaDB2bjdUYl9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQAwHn/AwQA weoQAwQBwg4GAwQAwkTuMAwDBAHCR64DBALCR7AwDwQCAAIwCQMHACoBAoADEDAN BgkqhkiG9w0BAQsFAAOCAQEAxqGUPU60eNlQctXSF9L/3zKqj1oyvDQQejw7/zrr fg4zqllOn/p+XuaTcsOksfoqqECY7/S2JTIGdCRgXUKhFGDNQ5exHWjY+pG3a3hA o1wSArIa7L1Yg/KM64S7iD/UOeCevuuMYoQsdy4rWrxRO5Pbd3OKD1Bogo9Rp95J TAcN9vzwX+RV81JBeWQe3McxOczsVftDXSEZuGlEoNF4gcJNQERfzvfs28Gwjqjh X+1tack+vnm2dS6rSog7aKuGKovyZscRtFzbHh9ukkOeTzXu0RbOkqE/QAYkZ008 Ye9kWmzqhgN8VwSWvVXLugsCF4xNLI9UdKakHiGX6QoByg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:02:01 2026 by rpki-client