This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/DPIuTlPDQsCMliQH2yCW70IWFSA.roa File: DPIuTlPDQsCMliQH2yCW70IWFSA.roa (raw, json) Hash identifier: XoPgon1icCFhtP9xfLWgNL9py4uMSqIopAyjCfTp874= Subject key identifier: 0C:F2:2E:4E:53:C3:42:C0:8C:96:24:07:DB:20:96:EF:42:16:15:20 Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b Certificate serial: 019B7AC77FBE5953FE8D2078C00C1A6BB8D4 Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/DPIuTlPDQsCMliQH2yCW70IWFSA.roa Signing time: Thu 01 Jan 2026 18:17:33 +0000 ROA not before: Thu 01 Jan 2026 18:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20847 IP address blocks: 62.165.64.0/18 maxlen: 24 80.65.96.0/19 maxlen: 24 84.241.128.0/18 maxlen: 24 2001:1690::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7f:be:59:53:fe:8d:20:78:c0:0c:1a:6b:b8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cf22e4e53c342c08c962407db2096ef42161520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:00:73:ac:5d:1c:5c:ba:f5:95:b6:55:7e: c1:54:57:90:a6:02:fa:fc:f2:52:fd:ce:12:71:fc: c3:76:31:05:6d:49:e3:cb:70:11:9b:37:72:7c:97: 7f:e4:76:d6:66:2d:6d:54:2e:0a:dd:f0:49:0d:fe: f1:a9:70:4c:19:ef:fa:c1:93:7a:cd:19:21:04:da: 05:9c:ff:7c:9e:7f:d4:31:7c:02:68:9a:fa:61:15: 24:3a:c2:7f:77:34:89:c5:4a:e8:02:56:f9:80:d1: b3:2e:b4:4b:6f:fc:3a:01:44:ad:1f:8f:64:b4:e2: ef:e6:43:b8:0c:eb:c5:b3:43:cb:cd:d3:5f:c8:57: 79:18:54:06:f0:b7:58:28:04:ac:fc:9e:71:df:8e: 4d:3f:4f:dd:a2:3c:a7:8d:2e:f7:9f:62:a5:eb:26: 03:8d:e8:f3:ba:9c:6c:e3:39:a8:53:92:7b:bf:05: 5f:1e:ab:c9:90:59:91:0d:7a:73:19:f0:6d:3c:5f: 87:af:7c:99:57:0b:db:fe:01:cd:8b:8b:10:f3:a9: 42:5c:c7:03:72:fc:ec:1e:08:79:4b:a6:2b:52:8e: 46:4f:32:8c:b6:58:77:18:49:07:50:34:9b:fd:8b: 5c:a4:5e:66:c7:e7:d3:87:35:dc:bc:f9:4d:42:88: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:2E:4E:53:C3:42:C0:8C:96:24:07:DB:20:96:EF:42:16:15:20 X509v3 Authority Key Identifier: keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/DPIuTlPDQsCMliQH2yCW70IWFSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.165.64.0/18 80.65.96.0/19 84.241.128.0/18 IPv6: 2001:1690::/32 Signature Algorithm: sha256WithRSAEncryption 2a:39:2d:57:ec:99:ed:e5:ce:77:ac:b1:25:e6:3e:01:f5:5a: 81:e9:2b:a2:8a:4d:fa:49:be:16:5c:10:9e:2b:8f:b9:0b:d0: e9:2a:95:39:ce:e6:d7:3d:fd:9d:7c:2c:7c:6c:70:5e:96:cc: 6b:1b:07:8e:8b:dd:67:0b:aa:cb:80:e9:ac:0d:37:c9:34:82: 93:f1:b0:ce:cd:ba:0e:a6:0c:e4:82:27:2c:b9:e6:d9:87:35: 51:c3:9a:bc:f5:fb:53:7f:31:46:af:36:d7:72:b4:49:50:37: 8b:98:d5:c4:ee:8f:fb:7c:2d:61:c5:85:83:6e:b4:14:c1:db: 1b:20:fa:8b:15:7c:98:31:53:34:73:00:82:3d:29:7c:3c:d4: 3a:be:31:73:28:e2:56:d1:d4:66:42:1f:a9:d0:c7:04:76:3c: ca:a4:99:09:f0:d2:e6:92:1f:91:55:99:3b:c6:24:6d:df:77: af:af:26:f7:12:96:d4:77:a5:98:b6:1a:85:d7:67:13:52:1b: 57:c0:d4:71:c6:85:c7:70:ca:dc:c4:52:0e:c6:9f:ba:c3:62: b0:ef:88:24:42:fc:5c:63:fb:8e:6b:ea:62:b5:fa:30:21:1b: d0:91:f5:3a:52:87:eb:5d:93:66:cb:66:d7:d1:96:3e:56:66: dd:ad:a9:2b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6x3++WVP+jSB4wAwaa7jUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMjY5Njc1YWNlZmJiZjg0OTdiMWUyMWNhNzM3NjRhZjRh YThjN2IwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2YyMmU0ZTUzYzM0MmMwOGM5NjI0MDdkYjIwOTZlZjQyMTYxNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HUAc6xdHFy69ZW2VX7BVFeQpgL6 /PJS/c4ScfzDdjEFbUnjy3ARmzdyfJd/5HbWZi1tVC4K3fBJDf7xqXBMGe/6wZN6 zRkhBNoFnP98nn/UMXwCaJr6YRUkOsJ/dzSJxUroAlb5gNGzLrRLb/w6AUStH49k tOLv5kO4DOvFs0PLzdNfyFd5GFQG8LdYKASs/J5x345NP0/dojynjS73n2Kl6yYD jejzupxs4zmoU5J7vwVfHqvJkFmRDXpzGfBtPF+Hr3yZVwvb/gHNi4sQ86lCXMcD cvzsHgh5S6YrUo5GTzKMtlh3GEkHUDSb/YtcpF5mx+fThzXcvPlNQojz/QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAzyLk5Tw0LAjJYkB9sglu9CFhUgMB8GA1UdIwQY MBaAFCEmlnWs77v4SXseIcpzdkr0qox7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzkt MWQ0ZGZiNGY0ODAwLzEvRFBJdVRsUERRc0NNbGlRSDJ5Q1c3MElXRlNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzktMWQ0ZGZiNGY0ODAw LzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGPqVAAwQF UEFgAwQGVPGAMA0EAgACMAcDBQAgARaQMA0GCSqGSIb3DQEBCwUAA4IBAQAqOS1X 7Jnt5c53rLEl5j4B9VqB6Suiik36Sb4WXBCeK4+5C9DpKpU5zubXPf2dfCx8bHBe lsxrGweOi91nC6rLgOmsDTfJNIKT8bDOzboOpgzkgicsuebZhzVRw5q89ftTfzFG rzbXcrRJUDeLmNXE7o/7fC1hxYWDbrQUwdsbIPqLFXyYMVM0cwCCPSl8PNQ6vjFz KOJW0dRmQh+p0McEdjzKpJkJ8NLmkh+RVZk7xiRt33evryb3EpbUd6WYthqF12cT UhtXwNRxxoXHcMrcxFIOxp+6w2Kw74gkQvxcY/uOa+pitfowIRvQkfU6UofrXZNm y2bX0ZY+Vmbdrakr -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:43 2026 by rpki-client