This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dCYNszcDmXDHfci5zpWCzFaTXEs.roa File: dCYNszcDmXDHfci5zpWCzFaTXEs.roa (raw, json) Hash identifier: Lf+9vhzIT7JMNh76/DcKU99f68owfMBoxIJ0datF9QE= Subject key identifier: 74:26:0D:B3:37:03:99:70:C7:7D:C8:B9:CE:95:82:CC:56:93:5C:4B Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8522FDC6C44ECFDAAA157A47FC791 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dCYNszcDmXDHfci5zpWCzFaTXEs.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21949 IP address blocks: 205.237.92.0/23 maxlen: 24 205.237.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:52:2f:dc:6c:44:ec:fd:aa:a1:57:a4:7f:c7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74260db337039970c77dc8b9ce9582cc56935c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:4a:94:bf:c2:91:5d:ce:7a:ea:3d:88:11: 5e:c7:bb:5e:a8:a0:b4:55:91:5d:e0:36:f0:84:d9: eb:97:b6:e8:50:8a:2d:49:2b:62:38:80:7c:bf:2f: 1e:61:a8:32:9c:0b:d1:83:d0:66:4a:13:59:a4:84: b7:d2:9a:01:9f:9b:79:ec:1c:da:4b:d3:fd:b6:a5: 81:8d:2a:e6:d1:40:f5:58:08:fb:a4:10:13:ee:b6: 59:4f:dc:19:eb:12:a7:b4:04:e2:c6:5b:94:ba:21: 7d:81:e6:a7:ca:56:9a:dd:b8:69:66:1b:3c:db:68: 97:6f:53:99:9e:b2:98:52:54:64:f3:62:1f:b9:38: 0c:e1:ac:a4:90:52:b9:59:d1:f0:71:d1:e1:d0:30: d5:54:d1:74:e7:ba:a7:7e:f3:c8:ae:26:36:32:04: 3f:39:ba:78:44:10:23:c0:bf:05:f1:79:b2:a7:21: da:31:ca:00:0d:88:94:68:c1:27:66:f5:23:f8:eb: c0:75:4f:95:a1:d5:12:c2:28:7f:9f:2c:4f:42:59: 1e:60:73:67:3a:18:ae:e0:a1:08:ea:89:b9:a0:f8: c7:08:61:90:73:60:1a:fd:f3:c9:ea:45:a6:82:26: 13:f1:d9:c0:41:79:04:2e:e3:9a:a6:a8:18:fe:2f: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:26:0D:B3:37:03:99:70:C7:7D:C8:B9:CE:95:82:CC:56:93:5C:4B X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dCYNszcDmXDHfci5zpWCzFaTXEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.237.92.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:69:2d:c8:98:fb:fa:3c:3e:f6:36:4e:bc:14:b8:35:73:05: 5e:95:4f:45:9f:f5:a3:77:f0:9d:04:b5:1b:6c:92:91:b7:91: 24:26:5e:08:15:ae:82:6e:e0:b4:da:c3:1a:a7:56:fd:5c:62: c4:e8:d2:20:2a:82:4b:12:20:b3:ee:9d:be:77:1d:44:df:c5: dc:51:cc:a9:3a:66:cd:b3:d2:fe:a1:5c:da:b1:e0:53:11:3d: 42:be:54:49:f6:57:41:b5:01:80:c8:0b:a1:f7:3f:8c:d1:86: 58:ca:9d:e9:d2:32:3a:74:0a:3d:d6:e6:8b:6e:5d:60:d1:72: c8:da:8c:17:0f:1c:a1:e5:8d:13:2f:8f:4d:7a:14:50:f5:f1: 0b:e8:a2:c3:1b:6d:71:df:33:1f:3f:06:f0:a8:29:73:22:60: 60:38:e7:92:b7:7c:67:4a:b7:6d:52:9b:2f:77:ae:05:9d:7d: 4d:74:f6:a3:b8:f1:df:fd:2d:e7:3c:b9:98:38:69:95:a1:e0: a0:1c:76:f6:31:c5:27:2b:be:d6:cc:0c:64:0c:c6:3f:a8:38: 5c:4a:84:3f:45:c9:54:1d:6c:50:71:7f:a8:43:56:85:89:6b: 8d:bd:bb:af:35:88:01:fa:4a:5d:fc:5e:7c:4d:9c:4a:a7:8e: c3:ac:ed:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFIv3GxE7P2qoVekf8eRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDI2MGRiMzM3MDM5OTcwYzc3ZGM4YjljZTk1ODJjYzU2OTM1YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFZKlL/CkV3Oeuo9iBFex7teqKC0 VZFd4DbwhNnrl7boUIotSStiOIB8vy8eYagynAvRg9BmShNZpIS30poBn5t57Bza S9P9tqWBjSrm0UD1WAj7pBAT7rZZT9wZ6xKntATixluUuiF9geanylaa3bhpZhs8 22iXb1OZnrKYUlRk82IfuTgM4aykkFK5WdHwcdHh0DDVVNF057qnfvPIriY2MgQ/ Obp4RBAjwL8F8XmypyHaMcoADYiUaMEnZvUj+OvAdU+VodUSwih/nyxPQlkeYHNn Ohiu4KEI6om5oPjHCGGQc2Aa/fPJ6kWmgiYT8dnAQXkELuOapqgY/i9TrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQmDbM3A5lwx33Iuc6VgsxWk1xLMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvZENZTnN6Y0RtWERIZmNpNXpwV0N6RmFUWEVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCze1cMA0G CSqGSIb3DQEBCwUAA4IBAQCOaS3ImPv6PD72Nk68FLg1cwVelU9Fn/Wjd/CdBLUb bJKRt5EkJl4IFa6CbuC02sMap1b9XGLE6NIgKoJLEiCz7p2+dx1E38XcUcypOmbN s9L+oVzaseBTET1CvlRJ9ldBtQGAyAuh9z+M0YZYyp3p0jI6dAo91uaLbl1g0XLI 2owXDxyh5Y0TL49NehRQ9fEL6KLDG21x3zMfPwbwqClzImBgOOeSt3xnSrdtUpsv d64FnX1NdPajuPHf/S3nPLmYOGmVoeCgHHb2McUnK77WzAxkDMY/qDhcSoQ/RclU HWxQcX+oQ1aFiWuNvbuvNYgB+kpd/F58TZxKp47DrO1y -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:41 2026 by rpki-client