This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa File: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (raw, json) Hash identifier: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8= Subject key identifier: 74:F2:4D:E9:4B:14:BE:84:FE:0B:06:83:E8:8E:86:09:20:ED:DA:5F Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1 Certificate serial: 019B76EB37030EF62AF008CC2AE2277BE233 Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa Signing time: Thu 01 Jan 2026 00:18:05 +0000 ROA not before: Thu 01 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34219 IP address blocks: 93.94.4.0/23 maxlen: 23 159.253.112.0/22 maxlen: 22 159.253.116.0/23 maxlen: 23 159.253.118.0/24 maxlen: 24 159.253.119.0/24 maxlen: 24 178.255.16.0/22 maxlen: 22 178.255.20.0/23 maxlen: 23 178.255.22.0/24 maxlen: 24 185.2.56.0/22 maxlen: 22 2a03:1e00::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:37:03:0e:f6:2a:f0:08:cc:2a:e2:27:7b:e2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74f24de94b14be84fe0b0683e88e860920edda5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:ce:66:9d:b0:76:79:dc:06:75:1d:97:4e: ee:3d:c2:ff:ec:9f:cc:8c:9d:8c:84:72:97:83:25: aa:5d:75:e6:7c:28:65:71:e3:d0:38:fe:d9:b8:d5: 5a:3d:47:2c:2c:dd:6d:3a:7d:14:1b:2c:7d:d0:af: 55:21:4a:49:94:29:38:4b:07:05:7b:79:4c:57:1e: 51:d9:50:a7:99:4e:21:ee:2d:65:5a:bc:8c:a5:3d: ac:44:83:8a:cb:d5:c7:6d:05:db:55:25:64:61:cc: ef:2c:c2:1d:d3:51:cc:cd:01:8d:1f:c1:49:88:10: 2b:69:c1:58:d1:8c:d8:26:1e:06:38:3d:06:13:1c: fb:06:6f:bc:2c:bb:2c:76:58:c5:ac:a5:05:41:00: ed:a6:35:6f:9a:7f:9f:ed:15:5e:b5:3a:1c:c9:88: 1d:b5:e9:ae:b2:8d:a6:56:f1:77:12:44:f3:cf:d0: 97:a2:31:06:1c:48:2c:02:5f:85:43:9b:09:45:4f: 5f:69:c9:84:a7:15:db:c7:c2:66:15:89:26:a2:b3: 01:f4:a2:92:3c:d1:ee:11:9a:fd:c0:19:e0:da:80: 04:d3:b7:ae:1d:33:d7:00:c5:38:fc:cd:8d:b5:b0: 8e:70:fd:86:ea:3c:32:06:f1:ac:8c:85:68:72:c7: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F2:4D:E9:4B:14:BE:84:FE:0B:06:83:E8:8E:86:09:20:ED:DA:5F X509v3 Authority Key Identifier: keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.4.0/23 159.253.112.0/21 178.255.16.0-178.255.22.255 185.2.56.0/22 IPv6: 2a03:1e00::/32 Signature Algorithm: sha256WithRSAEncryption a4:4c:41:a5:c3:5e:70:b5:f3:e3:a8:2c:07:7d:ab:36:28:88: b8:cf:18:0c:bd:0d:2a:02:bd:90:2f:2f:9f:7c:d0:05:51:7f: ba:ad:45:c6:51:de:1f:e9:94:e1:0a:64:a9:b0:36:78:a7:41: cd:98:f5:a8:b4:a2:af:ff:5a:34:81:4d:a2:10:69:4d:49:2c: a7:c6:5a:07:85:c4:b4:1d:a6:7a:24:f6:e8:9e:44:d6:e1:d4: 74:67:90:cc:e2:71:b4:0f:37:04:66:8c:18:dc:07:27:ce:6b: 2b:4f:80:5a:c2:95:09:55:a0:04:cd:c9:e8:e0:2d:c2:ed:91: d2:4f:67:aa:b9:09:1f:69:dc:27:c8:e5:dc:0f:a6:f6:a3:22: 00:12:ef:07:88:55:8d:e7:eb:87:69:12:33:2a:cb:b7:e2:6f: 60:ed:b7:76:85:dc:03:4c:89:4d:07:d4:a5:ab:31:c3:12:12: c5:ce:36:82:df:97:20:63:c6:51:9a:e0:7f:84:d1:35:f9:2f: cc:46:ac:d5:7d:e5:74:d2:a3:72:b8:55:ac:01:1f:40:47:e1: 8c:2d:61:fa:78:ca:82:c1:57:28:1e:32:9a:c6:a8:98:c0:62: c3:50:be:8a:d1:74:38:e9:a4:09:06:73:c2:6d:b6:81:86:8f: 08:ab:c3:3c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt26zcDDvYq8AjMKuIne+IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjQ5MzQ1N2IyZjAyZTY5Yjg1ZjcxOGRjYzE2YTlhOWVm MGZjZDEwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGYyNGRlOTRiMTRiZTg0ZmUwYjA2ODNlODhlODYwOTIwZWRkYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApirOZp2wdnncBnUdl07uPcL/7J/M jJ2MhHKXgyWqXXXmfChlcePQOP7ZuNVaPUcsLN1tOn0UGyx90K9VIUpJlCk4SwcF e3lMVx5R2VCnmU4h7i1lWryMpT2sRIOKy9XHbQXbVSVkYczvLMId01HMzQGNH8FJ iBAracFY0YzYJh4GOD0GExz7Bm+8LLssdljFrKUFQQDtpjVvmn+f7RVetTocyYgd temuso2mVvF3EkTzz9CXojEGHEgsAl+FQ5sJRU9facmEpxXbx8JmFYkmorMB9KKS PNHuEZr9wBng2oAE07euHTPXAMU4/M2NtbCOcP2G6jwyBvGsjIVocscOkQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFHTyTelLFL6E/gsGg+iOhgkg7dpfMB8GA1UdIwQY MBaAFL+0k0V7LwLmm4X3GNzBapqe8PzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMt MWY2NDA5ODQ4MTUwLzEvZFBKTjZVc1V2b1QtQ3dhRDZJNkdDU0R0Mmw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMtMWY2NDA5ODQ4MTUw LzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQBXV4EAwQD n/1wMAwDBASy/xADBACy/xYDBAK5AjgwDQQCAAIwBwMFACoDHgAwDQYJKoZIhvcN AQELBQADggEBAKRMQaXDXnC18+OoLAd9qzYoiLjPGAy9DSoCvZAvL5980AVRf7qt RcZR3h/plOEKZKmwNninQc2Y9ai0oq//WjSBTaIQaU1JLKfGWgeFxLQdpnok9uie RNbh1HRnkMzicbQPNwRmjBjcByfOaytPgFrClQlVoATNyejgLcLtkdJPZ6q5CR9p 3CfI5dwPpvajIgAS7weIVY3n64dpEjMqy7fib2Dtt3aF3ANMiU0H1KWrMcMSEsXO NoLflyBjxlGa4H+E0TX5L8xGrNV95XTSo3K4VawBH0BH4YwtYfp4yoLBVygeMprG qJjAYsNQvorRdDjppAkGc8JttoGGjwirwzw= -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:02 2026 by rpki-client