This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/DcQtZ-Dz8X8GVNr2BI2zUcr15D8.roa File: DcQtZ-Dz8X8GVNr2BI2zUcr15D8.roa (raw, json) Hash identifier: ARWpTu4Im5vDVchDP7TKrgojtqolrGKcQ5Qr0gDHopw= Subject key identifier: 0D:C4:2D:67:E0:F3:F1:7F:06:54:DA:F6:04:8D:B3:51:CA:F5:E4:3F Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7 Certificate serial: 019B77C6D39DE09D2071162BB0E3725C44D2 Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/DcQtZ-Dz8X8GVNr2BI2zUcr15D8.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59676 IP address blocks: 91.212.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d3:9d:e0:9d:20:71:16:2b:b0:e3:72:5c:44:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7 Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dc42d67e0f3f17f0654daf6048db351caf5e43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:7a:61:7c:c0:2c:75:4b:b4:7a:59:f7:98: 42:8f:16:ce:41:9f:33:6b:97:ec:5d:28:e0:7d:a0: 97:3b:e8:0d:db:a1:72:c6:50:d1:c9:fc:f9:0b:51: 8d:66:88:4c:21:74:f3:1f:9e:8b:ba:1a:fe:a1:a6: 1c:55:61:bc:01:1f:3a:3e:8d:eb:86:e0:aa:4b:e6: 92:f0:b9:4e:2a:23:e3:cc:80:82:c4:1f:b7:68:0d: 64:44:ef:b4:74:9e:c4:e8:6b:c9:56:7d:c4:5d:f5: 79:3a:bd:58:e1:6d:00:0d:16:19:a0:87:5b:2f:c0: e8:4b:75:8a:a1:73:d9:7a:5c:be:64:bb:65:f0:cd: 31:f1:50:09:b9:e0:1a:dc:e4:3b:92:24:20:e2:8e: a8:95:3d:39:4a:28:06:df:dc:16:fc:23:31:8b:c9: 38:d1:da:e3:aa:b3:a8:16:39:be:f8:78:95:a9:a3: ad:30:1a:8f:8b:8a:ad:aa:0b:90:6a:d4:35:97:cf: 59:31:35:b1:c1:2c:a2:18:48:94:2f:03:fc:22:74: 5e:b3:3e:1c:ed:74:8c:b4:5d:ec:20:13:71:e5:8b: 68:87:6b:89:c1:6c:2c:bf:68:83:7b:47:84:b9:10: ce:4e:6c:b0:65:00:52:bf:29:d8:7d:2b:50:28:ba: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C4:2D:67:E0:F3:F1:7F:06:54:DA:F6:04:8D:B3:51:CA:F5:E4:3F X509v3 Authority Key Identifier: keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/DcQtZ-Dz8X8GVNr2BI2zUcr15D8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.90.0/24 Signature Algorithm: sha256WithRSAEncryption 67:fd:c2:67:12:36:28:74:ae:6c:f9:cd:04:ab:29:2c:90:94: 9b:1e:dc:0b:a4:a7:96:93:58:69:88:2e:af:81:c2:8b:81:c7: 81:bf:23:98:e3:1b:64:84:05:87:4d:2f:06:76:44:9a:7f:e9: 51:00:f6:0c:a6:ca:16:23:4f:ad:1f:94:15:f1:e1:96:18:68: f7:40:2d:9f:16:f0:1f:a1:c3:c3:8e:37:20:88:42:b8:2e:ec: b9:ed:94:83:69:0c:39:d9:c2:48:f7:a7:ee:21:85:02:6a:eb: d6:98:e1:69:33:74:02:f6:02:9b:68:5a:c6:90:e9:1c:66:c5: 78:f2:08:d0:a6:c8:0e:04:06:44:90:a3:71:d8:7d:fe:87:d8: 14:a0:cc:6d:70:e1:42:c3:cc:e5:13:62:a8:7c:e6:12:9f:a6: ce:00:a2:fa:42:80:ad:48:3f:29:d6:b7:8c:58:6a:06:7d:5c: 3f:b8:40:15:a0:fa:c1:90:cb:61:8b:cc:8a:60:eb:6c:fd:78: 14:b9:57:b3:c0:00:9d:22:92:d9:52:ee:16:ec:57:92:de:3b: 8a:ee:76:26:35:2f:6f:e4:98:96:57:dc:97:7e:62:8c:37:13: 63:8f:ba:c3:d5:8e:a3:bb:67:fe:01:b2:74:a5:a3:e2:6f:be: e8:a4:c0:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtOd4J0gcRYrsONyXETSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4 YzE4YzcwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGM0MmQ2N2UwZjNmMTdmMDY1NGRhZjYwNDhkYjM1MWNhZjVlNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7N6YXzALHVLtHpZ95hCjxbOQZ8z a5fsXSjgfaCXO+gN26FyxlDRyfz5C1GNZohMIXTzH56Luhr+oaYcVWG8AR86Po3r huCqS+aS8LlOKiPjzICCxB+3aA1kRO+0dJ7E6GvJVn3EXfV5Or1Y4W0ADRYZoIdb L8DoS3WKoXPZely+ZLtl8M0x8VAJueAa3OQ7kiQg4o6olT05SigG39wW/CMxi8k4 0drjqrOoFjm++HiVqaOtMBqPi4qtqguQatQ1l89ZMTWxwSyiGEiULwP8InResz4c 7XSMtF3sIBNx5Ytoh2uJwWwsv2iDe0eEuRDOTmywZQBSvynYfStQKLpsbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA3ELWfg8/F/BlTa9gSNs1HK9eQ/MB8GA1UdIwQY MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt M2ZlMTc0ODFmNjA4LzEvRGNRdFotRHo4WDhHVk5yMkJJMnpVY3IxNUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4 LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RaMA0G CSqGSIb3DQEBCwUAA4IBAQBn/cJnEjYodK5s+c0EqykskJSbHtwLpKeWk1hpiC6v gcKLgceBvyOY4xtkhAWHTS8GdkSaf+lRAPYMpsoWI0+tH5QV8eGWGGj3QC2fFvAf ocPDjjcgiEK4Luy57ZSDaQw52cJI96fuIYUCauvWmOFpM3QC9gKbaFrGkOkcZsV4 8gjQpsgOBAZEkKNx2H3+h9gUoMxtcOFCw8zlE2KofOYSn6bOAKL6QoCtSD8p1reM WGoGfVw/uEAVoPrBkMthi8yKYOts/XgUuVezwACdIpLZUu4W7FeS3juK7nYmNS9v 5JiWV9yXfmKMNxNjj7rD1Y6ju2f+AbJ0paPib77opMCM -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:33 2026 by rpki-client