This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa File: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (raw, json) Hash identifier: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE= Subject key identifier: 74:DA:DC:20:DC:2A:2D:08:74:79:6D:C2:6B:B7:3E:23:03:C2:56:09 Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3 Certificate serial: 019B76EB054CBC00E5D1A7340B9758034BF7 Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa Signing time: Thu 01 Jan 2026 00:17:52 +0000 ROA not before: Thu 01 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39477 IP address blocks: 46.43.144.0/20 maxlen: 20 80.74.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:05:4c:bc:00:e5:d1:a7:34:0b:97:58:03:4b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3 Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74dadc20dc2a2d0874796dc26bb73e2303c25609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:25:dc:bd:02:c1:c9:c2:7f:df:ce:67:05: c5:93:f8:45:66:60:c6:5f:ea:61:97:1c:e8:bf:e5: ef:42:b4:2c:2b:da:74:fb:41:06:5c:43:23:5b:47: 10:dc:b6:b5:cd:d5:de:bb:0a:52:e2:f7:a2:b8:e8: 63:16:63:4b:7d:cc:3e:ad:0f:3a:06:c7:7f:c0:86: f9:61:8c:58:81:47:66:23:44:1a:5f:c8:12:54:2a: 6c:d3:97:9d:0d:a5:d4:c0:fc:c5:9b:24:27:92:69: cd:e9:11:82:6d:29:62:29:ce:89:42:3c:40:4b:69: ba:6f:f5:8f:0c:a6:b2:c8:d4:0b:39:a6:80:5c:b1: e1:fe:1b:ba:d7:1c:7b:b8:8b:fc:21:62:ff:7b:a5: c8:12:3e:bc:14:13:f3:6e:7d:d4:ab:dd:31:ec:bf: de:0e:1a:c0:44:88:45:a7:a8:2a:78:08:c4:9a:57: 9e:57:ae:14:fc:59:dc:99:b9:89:6b:6d:35:78:7a: 6d:a4:54:51:ba:5f:ec:ed:ad:fc:5f:7e:a0:87:99: f9:45:9f:5d:e6:07:29:ea:23:14:6e:9b:22:ed:c8: a0:c8:37:f1:f5:cd:a0:3e:0e:23:21:93:8f:e0:67: a6:15:27:ed:9e:62:b8:3e:a1:db:dd:48:d3:f6:43: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DA:DC:20:DC:2A:2D:08:74:79:6D:C2:6B:B7:3E:23:03:C2:56:09 X509v3 Authority Key Identifier: keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.43.144.0/20 80.74.224.0/20 Signature Algorithm: sha256WithRSAEncryption 87:98:3e:9b:79:a8:b5:5b:99:50:25:43:54:69:8e:ae:72:ed: ce:53:84:6f:49:24:6c:53:a0:3d:1f:95:e3:a7:d2:21:8a:3d: 5d:08:c1:e3:f4:14:0f:14:fa:7e:48:66:9f:64:7a:fc:c2:59: 60:92:7a:cb:34:54:2a:65:3c:35:44:c1:2e:fa:93:96:32:1b: 57:7b:54:e6:95:4f:ea:37:f2:b7:a1:22:a3:70:b8:37:db:fd: 76:9b:a1:f4:a3:39:7f:e5:1e:90:0e:b7:7e:04:42:39:69:b9: ef:f8:3c:08:72:f8:eb:1b:7d:2e:e9:99:56:c4:cf:e8:a3:f7: 8e:8b:1c:70:da:d1:b8:24:7c:85:0b:18:de:be:4a:66:7f:43: 2d:f0:cc:67:ad:21:c7:bc:dd:75:bb:d8:65:97:74:f8:3e:bb: b7:96:01:2e:a9:8e:72:57:e2:60:46:c9:66:6f:19:4d:c2:54: 3c:19:f7:65:2d:a1:01:f6:ed:f8:ba:bd:f3:64:c8:3a:42:61: 88:84:4a:e9:80:f4:00:57:ee:8f:b5:9b:82:c0:df:b5:67:05: 0d:d6:ab:73:1f:40:04:1d:b7:8d:e1:91:73:b1:fa:7f:73:8c: 31:46:13:23:d5:5e:2a:85:a4:a3:d9:dd:da:11:1c:36:65:7f: 6c:93:90:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26wVMvADl0ac0C5dYA0v3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx NzFiZTMwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGRhZGMyMGRjMmEyZDA4NzQ3OTZkYzI2YmI3M2UyMzAzYzI1NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRMl3L0CwcnCf9/OZwXFk/hFZmDG X+phlxzov+XvQrQsK9p0+0EGXEMjW0cQ3La1zdXeuwpS4veiuOhjFmNLfcw+rQ86 Bsd/wIb5YYxYgUdmI0QaX8gSVCps05edDaXUwPzFmyQnkmnN6RGCbSliKc6JQjxA S2m6b/WPDKayyNQLOaaAXLHh/hu61xx7uIv8IWL/e6XIEj68FBPzbn3Uq90x7L/e DhrARIhFp6gqeAjEmleeV64U/FncmbmJa201eHptpFRRul/s7a38X36gh5n5RZ9d 5gcp6iMUbpsi7cigyDfx9c2gPg4jIZOP4GemFSftnmK4PqHb3UjT9kOwLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHTa3CDcKi0IdHltwmu3PiMDwlYJMB8GA1UdIwQY MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt OWI5MzczNTc5NzRkLzEvZE5yY0lOd3FMUWgwZVczQ2E3Yy1Jd1BDVmdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELiuQAwQE UErgMA0GCSqGSIb3DQEBCwUAA4IBAQCHmD6beai1W5lQJUNUaY6ucu3OU4RvSSRs U6A9H5Xjp9Ihij1dCMHj9BQPFPp+SGafZHr8wllgknrLNFQqZTw1RMEu+pOWMhtX e1TmlU/qN/K3oSKjcLg32/12m6H0ozl/5R6QDrd+BEI5abnv+DwIcvjrG30u6ZlW xM/oo/eOixxw2tG4JHyFCxjevkpmf0Mt8MxnrSHHvN11u9hll3T4Pru3lgEuqY5y V+JgRslmbxlNwlQ8GfdlLaEB9u34ur3zZMg6QmGIhErpgPQAV+6PtZuCwN+1ZwUN 1qtzH0AEHbeN4ZFzsfp/c4wxRhMj1V4qhaSj2d3aERw2ZX9sk5A3 -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:00 2026 by rpki-client