This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/DkZq0zpUFhASpEE4ImZTT8jsmXs.roa File: DkZq0zpUFhASpEE4ImZTT8jsmXs.roa (raw, json) Hash identifier: DqNcDnHcsyHeYm9qtIpPz2EwaV9dY65pLLq3MnQC1Qk= Subject key identifier: 0E:46:6A:D3:3A:54:16:10:12:A4:41:38:22:66:53:4F:C8:EC:99:7B Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Certificate serial: 019B7758807F2ABF4BA1D66E081FCC3DC11A Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/DkZq0zpUFhASpEE4ImZTT8jsmXs.roa Signing time: Thu 01 Jan 2026 02:17:27 +0000 ROA not before: Thu 01 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 85.158.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:80:7f:2a:bf:4b:a1:d6:6e:08:1f:cc:3d:c1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Validity Not Before: Jan 1 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e466ad33a54161012a441382266534fc8ec997b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:eb:b9:e2:ea:dd:5d:c6:c6:32:6d:e0:91: d2:9c:4b:00:ef:f2:11:a9:f6:ff:31:14:f0:b6:8b: bc:3b:39:84:3d:cc:be:15:e3:ee:e0:ed:81:54:8c: 17:48:6f:84:ae:65:17:49:a0:64:c1:48:ab:4b:9c: 93:54:09:c3:90:0f:46:79:ee:32:4a:cd:2c:2d:9a: 7e:66:55:43:a7:6f:49:10:d1:99:3d:79:36:fc:30: cf:3e:5e:74:ca:69:67:aa:9d:a9:a9:a8:91:89:5c: c3:96:c2:76:14:f1:73:85:96:11:b7:50:47:33:86: 70:cf:0a:60:94:11:7e:09:ce:bd:b2:6d:b7:ba:5a: 8c:9c:b6:21:b8:72:55:ea:16:a8:39:9a:dd:29:65: 5c:2f:da:ce:d8:56:5d:33:a0:8d:b5:2e:ec:7d:ac: 0a:3e:29:dc:fb:00:d5:54:53:ef:1b:a4:8e:e0:c3: 48:52:73:75:91:6c:4c:e5:95:46:a3:3d:66:0b:4f: bd:8a:9e:3b:7e:be:a2:dd:9f:c6:fe:4a:2d:7c:1d: d6:9d:5d:2c:8c:db:16:5e:19:ef:77:6f:b6:4b:a2: ab:6d:f9:6c:e8:68:d1:65:1d:bd:3b:58:06:58:79: fe:31:43:00:70:2c:79:50:a7:0e:dc:b2:19:de:fe: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:46:6A:D3:3A:54:16:10:12:A4:41:38:22:66:53:4F:C8:EC:99:7B X509v3 Authority Key Identifier: keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/DkZq0zpUFhASpEE4ImZTT8jsmXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.232.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:25:eb:32:2d:fa:a0:4a:04:9a:83:ac:d6:11:cb:dc:e7:8d: 5b:19:68:90:a4:f1:94:d8:7f:54:be:0c:1d:87:ad:1c:a7:4f: 12:2c:a4:18:57:e4:2c:af:94:a9:33:bd:c9:3a:6f:fe:a5:f8: 03:01:51:12:52:06:9c:3a:48:5f:8a:1d:58:85:23:5c:54:68: 44:1b:68:bd:5b:d1:d8:e8:47:c0:a0:15:d1:52:dd:d7:9f:04: 7e:cb:80:a7:87:04:0a:54:87:4e:d5:93:6b:4c:16:1b:e7:60: f6:fa:39:a7:cc:e0:f3:c4:d5:bb:cd:cc:90:f7:e8:3c:a5:34: b3:e0:a3:cd:65:99:36:ff:25:f5:58:b8:99:d9:93:d5:3f:b5: 6d:77:bd:ea:59:99:6f:f0:26:7e:05:a4:30:f5:b3:47:a9:bc: 21:4a:98:c6:8a:8a:99:70:eb:4b:ba:c3:55:e4:df:e0:2d:dc: 3f:fc:3d:5c:5b:9e:7a:28:46:e3:13:0e:62:a3:98:7f:34:85: 25:aa:4d:f0:a7:65:aa:fb:72:3c:22:99:6a:1f:4a:c8:36:ad: 08:45:d2:99:39:3b:65:85:72:be:42:bd:73:c6:7f:83:6d:d6: 07:77:e9:85:29:6a:87:fb:e9:f9:dd:c3:6a:95:bf:4e:f2:10: 19:6b:79:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIB/Kr9LodZuCB/MPcEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2JiZjhlNWM3NGE1MjZiYWFmNjE4NWFiZDk0OWRhZmE4 ZjZkY2IwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTQ2NmFkMzNhNTQxNjEwMTJhNDQxMzgyMjY2NTM0ZmM4ZWM5OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8zrueLq3V3GxjJt4JHSnEsA7/IR qfb/MRTwtou8OzmEPcy+FePu4O2BVIwXSG+ErmUXSaBkwUirS5yTVAnDkA9Gee4y Ss0sLZp+ZlVDp29JENGZPXk2/DDPPl50ymlnqp2pqaiRiVzDlsJ2FPFzhZYRt1BH M4ZwzwpglBF+Cc69sm23ulqMnLYhuHJV6haoOZrdKWVcL9rO2FZdM6CNtS7sfawK Pinc+wDVVFPvG6SO4MNIUnN1kWxM5ZVGoz1mC0+9ip47fr6i3Z/G/kotfB3WnV0s jNsWXhnvd2+2S6Krbfls6GjRZR29O1gGWHn+MUMAcCx5UKcO3LIZ3v4KYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA5GatM6VBYQEqRBOCJmU0/I7Jl7MB8GA1UdIwQY MBaAFLh7v45cdKUmuq9hhavZSdr6j23LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUt NTM5MGY5ZjgzNjIwLzEvRGtacTB6cFVGaEFTcEVFNEltWlRUOGpzbVhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUtNTM5MGY5ZjgzNjIw LzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVZ7oMA0G CSqGSIb3DQEBCwUAA4IBAQCcJesyLfqgSgSag6zWEcvc541bGWiQpPGU2H9Uvgwd h60cp08SLKQYV+Qsr5SpM73JOm/+pfgDAVESUgacOkhfih1YhSNcVGhEG2i9W9HY 6EfAoBXRUt3XnwR+y4CnhwQKVIdO1ZNrTBYb52D2+jmnzODzxNW7zcyQ9+g8pTSz 4KPNZZk2/yX1WLiZ2ZPVP7Vtd73qWZlv8CZ+BaQw9bNHqbwhSpjGioqZcOtLusNV 5N/gLdw//D1cW556KEbjEw5io5h/NIUlqk3wp2Wq+3I8IplqH0rINq0IRdKZOTtl hXK+Qr1zxn+DbdYHd+mFKWqH++n53cNqlb9O8hAZa3kq -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:34 2026 by rpki-client