This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/dqaulTVaJdxe0Se94TESS0Xu5Tk.roa File: dqaulTVaJdxe0Se94TESS0Xu5Tk.roa (raw, json) Hash identifier: nLinLeHvfWZfhWqocoBwHCFEyZWPv+TO3g4L1fui8n4= Subject key identifier: 76:A6:AE:95:35:5A:25:DC:5E:D1:27:BD:E1:31:12:4B:45:EE:E5:39 Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019BDC05BB9255F1B3059BE54E20FD47929D Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/dqaulTVaJdxe0Se94TESS0Xu5Tk.roa Signing time: Tue 20 Jan 2026 15:28:41 +0000 ROA not before: Tue 20 Jan 2026 15:28:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205960 IP address blocks: 72.56.216.0/21 maxlen: 24 72.56.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:05:bb:92:55:f1:b3:05:9b:e5:4e:20:fd:47:92:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 20 15:28:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76a6ae95355a25dc5ed127bde131124b45eee539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:0c:c5:e9:ed:3a:f3:44:88:b3:35:89:19: fe:f5:f8:23:e4:5c:96:a9:15:cc:da:65:5b:c9:2d: c4:76:67:11:90:46:c2:d5:6d:46:88:40:e3:4b:14: b1:f3:a0:60:8b:e9:09:44:c0:fa:0f:6c:f5:e2:fa: 52:4f:d9:cc:4e:fb:a4:45:85:04:6d:5d:3f:ef:8e: 8a:67:c8:b7:ea:ba:7d:6c:c8:e9:f7:87:4d:be:7b: 02:aa:13:92:d7:2d:c0:9f:44:b1:7d:60:ab:49:22: 33:06:21:c0:5d:a7:f3:1b:ad:2e:5b:5a:70:06:48: 12:a2:7f:18:e0:ce:16:9a:3e:a0:9f:98:8e:fa:a0: 5d:f6:da:89:91:a8:10:2e:7b:15:79:c2:a1:f8:ad: cc:f0:ba:6a:7e:27:eb:81:13:1e:a3:0f:ab:44:7f: cf:13:b3:98:8c:67:cd:4f:b5:0d:1b:70:c4:45:33: b6:58:17:e0:26:f3:ab:fe:ac:95:0f:41:14:e4:08: cb:77:38:4a:eb:46:9c:44:1b:e6:cb:79:44:25:74: 38:4e:0d:9a:65:95:cc:39:af:09:22:c3:61:fe:86: 7d:3b:52:1b:27:41:52:0a:28:75:a1:69:49:12:78: 0e:f2:d8:cf:25:23:7b:f6:d9:2f:f6:2c:cc:e7:7c: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A6:AE:95:35:5A:25:DC:5E:D1:27:BD:E1:31:12:4B:45:EE:E5:39 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/dqaulTVaJdxe0Se94TESS0Xu5Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.56.216.0-72.56.231.255 Signature Algorithm: sha256WithRSAEncryption 81:71:5e:f5:ad:68:e5:57:4a:41:37:27:77:8a:ea:41:71:7a: dc:63:90:d9:af:b5:54:a0:23:2b:f9:25:f6:d2:bb:20:9e:81: f5:64:fd:92:e1:a1:87:7b:f4:16:5e:80:97:55:78:0f:82:d4: 0d:ec:31:85:63:bb:fb:da:69:47:8a:a4:7e:1e:7d:d2:8c:84: a8:ba:3f:6c:e1:a4:d0:18:92:63:78:74:08:20:24:91:10:94: 49:ad:7a:8d:bf:7d:cc:f3:62:b8:a2:be:7a:fa:0a:3e:38:9e: 82:62:a1:9d:d7:67:fb:aa:dc:3f:93:26:1a:6d:df:36:a5:58: 02:eb:9a:52:9d:08:7a:a5:71:f3:ee:ff:49:29:1c:2a:b3:3c: 56:0b:00:19:4f:ee:77:b6:60:f1:7e:57:49:6d:00:be:2a:fa: eb:38:be:3b:e4:ff:98:8c:87:98:a5:86:9f:fe:e1:35:89:92: 31:7b:d7:1f:fb:ac:d7:f2:8d:01:39:e1:25:bf:a4:d2:91:5e: cc:81:5b:b9:1b:18:fd:fa:0a:af:3f:e4:86:cc:ca:3d:be:55: 72:25:61:9f:23:d3:b9:2f:75:f6:bf:bb:c6:c0:7b:7a:e8:d3: 8f:be:25:89:99:1e:41:97:81:9e:71:cd:ff:3c:f3:15:32:c9: 41:7a:7c:8d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZvcBbuSVfGzBZvlTiD9R5KdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTIwMTUyODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmE2YWU5NTM1NWEyNWRjNWVkMTI3YmRlMTMxMTI0YjQ1ZWVlNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCoMxentOvNEiLM1iRn+9fgj5FyW qRXM2mVbyS3EdmcRkEbC1W1GiEDjSxSx86Bgi+kJRMD6D2z14vpST9nMTvukRYUE bV0/746KZ8i36rp9bMjp94dNvnsCqhOS1y3An0SxfWCrSSIzBiHAXafzG60uW1pw BkgSon8Y4M4Wmj6gn5iO+qBd9tqJkagQLnsVecKh+K3M8LpqfifrgRMeow+rRH/P E7OYjGfNT7UNG3DERTO2WBfgJvOr/qyVD0EU5AjLdzhK60acRBvmy3lEJXQ4Tg2a ZZXMOa8JIsNh/oZ9O1IbJ0FSCih1oWlJEngO8tjPJSN79tkv9izM53y+CQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHamrpU1WiXcXtEnveExEktF7uU5MB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvZHFhdWxUVmFKZHhlMFNlOTRURVNTMFh1NVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANIONgD BANIOOAwDQYJKoZIhvcNAQELBQADggEBAIFxXvWtaOVXSkE3J3eK6kFxetxjkNmv tVSgIyv5JfbSuyCegfVk/ZLhoYd79BZegJdVeA+C1A3sMYVju/vaaUeKpH4efdKM hKi6P2zhpNAYkmN4dAggJJEQlEmteo2/fczzYriivnr6Cj44noJioZ3XZ/uq3D+T Jhpt3zalWALrmlKdCHqlcfPu/0kpHCqzPFYLABlP7ne2YPF+V0ltAL4q+us4vjvk /5iMh5ilhp/+4TWJkjF71x/7rNfyjQE54SW/pNKRXsyBW7kbGP36Cq8/5IbMyj2+ VXIlYZ8j07kvdfa/u8bAe3ro04++JYmZHkGXgZ5xzf888xUyyUF6fI0= -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:59 2026 by rpki-client