This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/dUgHWvpijFkm-akrw3sQ7y1cNbs.roa File: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (raw, json) Hash identifier: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4= Subject key identifier: 75:48:07:5A:FA:62:8C:59:26:F9:A9:2B:C3:7B:10:EF:2D:5C:35:BB Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af Certificate serial: 019B7F8532CCBD459D3B4C710FBF2CAD1DBA Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/dUgHWvpijFkm-akrw3sQ7y1cNbs.roa Signing time: Fri 02 Jan 2026 16:23:14 +0000 ROA not before: Fri 02 Jan 2026 16:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35258 IP address blocks: 46.254.120.0/21 maxlen: 21 83.143.208.0/21 maxlen: 21 83.143.210.0/24 maxlen: 24 87.253.184.0/22 maxlen: 22 91.208.244.0/24 maxlen: 24 185.6.252.0/22 maxlen: 22 195.85.38.0/24 maxlen: 24 195.85.72.0/23 maxlen: 23 213.238.48.0/23 maxlen: 23 2a00:e400::/29 maxlen: 29 2a06:23c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:32:cc:bd:45:9d:3b:4c:71:0f:bf:2c:ad:1d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7548075afa628c5926f9a92bc37b10ef2d5c35bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:7e:d7:43:f3:0e:40:e9:6d:a0:a6:0e:e7: 87:d3:e4:63:a8:0a:8b:00:6e:b8:d5:04:12:08:51: 02:c1:12:10:3e:37:76:a7:7c:f4:7d:ae:92:61:36: 74:66:d3:e5:ec:fd:fd:6c:ec:2a:67:90:f5:1d:ac: 80:fb:69:e7:a4:e3:49:ab:54:b4:6e:7e:e1:b3:6e: 89:01:a2:b1:2b:00:13:4a:4b:1f:86:83:36:3a:ae: f9:9c:d8:14:94:5f:b1:dd:b6:cc:4d:2b:b3:e8:32: a0:28:a8:6d:86:68:a8:95:18:33:6a:15:91:45:bb: db:54:70:c1:93:0a:2a:7a:55:73:38:27:8b:4a:19: 27:fd:25:71:80:26:2f:4c:60:62:57:b8:a9:47:4b: 07:ad:4a:5a:75:a0:48:1a:ec:2f:f9:d1:26:e5:94: cf:5c:ec:74:17:04:58:d7:df:be:67:0a:ed:67:62: ac:56:28:a0:99:26:f8:b9:49:21:90:1d:7d:96:80: a2:7f:52:bd:24:05:75:c8:2b:30:3d:26:ad:f8:01: 54:f4:e3:67:67:65:06:a8:86:c0:09:e5:e8:4b:ef: db:24:d8:36:d7:90:24:df:b3:3e:ef:0a:2c:69:fd: 03:f0:aa:5f:8c:1f:8d:e0:76:8b:3d:33:d5:6f:35: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:48:07:5A:FA:62:8C:59:26:F9:A9:2B:C3:7B:10:EF:2D:5C:35:BB X509v3 Authority Key Identifier: keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/dUgHWvpijFkm-akrw3sQ7y1cNbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.120.0/21 83.143.208.0/21 87.253.184.0/22 91.208.244.0/24 185.6.252.0/22 195.85.38.0/24 195.85.72.0/23 213.238.48.0/23 IPv6: 2a00:e400::/29 2a06:23c0::/29 Signature Algorithm: sha256WithRSAEncryption 6d:bb:2a:a3:87:10:75:d8:f1:27:2a:17:03:c1:fe:8a:3a:b0: 90:01:53:74:b9:47:3a:b2:b7:10:db:13:5e:7d:c8:ef:0f:77: f0:fb:40:b6:2d:64:35:9b:0c:90:7a:71:a8:56:c6:21:e1:6c: 5c:a7:ae:0d:d0:42:89:1d:30:10:25:bc:bd:5a:bb:a8:ed:f5: 4f:4d:9c:d8:f3:28:4c:2d:6d:78:6f:c8:4a:b7:9a:92:a9:b6: d3:7f:d4:36:f2:a8:42:56:5b:bd:48:73:e3:c1:13:ec:b8:52: 5a:31:85:ab:19:2c:00:90:a5:8a:09:82:e2:81:20:4f:1c:b3: 17:ba:62:02:15:5f:5c:a2:37:19:5e:05:e0:9b:9c:9c:86:d0: e1:8b:0f:24:55:15:b6:79:31:e8:37:31:c4:eb:38:93:a4:45: 31:83:1d:4b:62:cf:9a:41:db:c7:df:de:fb:2b:cc:73:40:c2: fa:4d:e8:ee:39:31:b9:20:91:59:36:da:e0:f3:25:83:33:3a: 73:2d:14:dc:ad:62:74:7e:1f:b2:6b:4d:7a:c2:14:a4:da:2f: c8:9a:a6:8f:c5:e1:51:57:7c:70:5f:36:0c:9e:c6:2e:da:6d: f3:38:88:48:3c:09:3a:46:4b:c7:35:a9:72:7b:6e:0e:23:8c: a2:c2:7a:5b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt/hTLMvUWdO0xxD78srR26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk ZTUzYWYwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTQ4MDc1YWZhNjI4YzU5MjZmOWE5MmJjMzdiMTBlZjJkNWMzNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPp+10PzDkDpbaCmDueH0+RjqAqL AG641QQSCFECwRIQPjd2p3z0fa6SYTZ0ZtPl7P39bOwqZ5D1HayA+2nnpONJq1S0 bn7hs26JAaKxKwATSksfhoM2Oq75nNgUlF+x3bbMTSuz6DKgKKhthmiolRgzahWR RbvbVHDBkwoqelVzOCeLShkn/SVxgCYvTGBiV7ipR0sHrUpadaBIGuwv+dEm5ZTP XOx0FwRY19++ZwrtZ2KsViigmSb4uUkhkB19loCif1K9JAV1yCswPSat+AFU9ONn Z2UGqIbACeXoS+/bJNg215Ak37M+7wosaf0D8KpfjB+N4HaLPTPVbzWmEQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFHVIB1r6YoxZJvmpK8N7EO8tXDW7MB8GA1UdIwQY MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt MWIzZDk4YmVmMWU5LzEvZFVnSFd2cGlqRmttLWFrcnczc1E3eTFjTmJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5 LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQDLv54AwQD U4/QAwQCV/24AwQAW9D0AwQCuQb8AwQAw1UmAwQBw1VIAwQB1e4wMBQEAgACMA4D BQMqAOQAAwUDKgYjwDANBgkqhkiG9w0BAQsFAAOCAQEAbbsqo4cQddjxJyoXA8H+ ijqwkAFTdLlHOrK3ENsTXn3I7w938PtAti1kNZsMkHpxqFbGIeFsXKeuDdBCiR0w ECW8vVq7qO31T02c2PMoTC1teG/ISreakqm203/UNvKoQlZbvUhz48ET7LhSWjGF qxksAJCligmC4oEgTxyzF7piAhVfXKI3GV4F4JucnIbQ4YsPJFUVtnkx6DcxxOs4 k6RFMYMdS2LPmkHbx9/e+yvMc0DC+k3o7jkxuSCRWTba4PMlgzM6cy0U3K1idH4f smtNesIUpNovyJqmj8XhUVd8cF82DJ7GLtpt8ziISDwJOkZLxzWpcntuDiOMosJ6 Ww== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:43 2026 by rpki-client