This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/dCjH0v3m8tCVY_tkggWdXHZn358.roa File: dCjH0v3m8tCVY_tkggWdXHZn358.roa (raw, json) Hash identifier: a8K+Ic68j3/hayz7h7GvBE1rHXDfwuhE74wsEmkFkNk= Subject key identifier: 74:28:C7:D2:FD:E6:F2:D0:95:63:FB:64:82:05:9D:5C:76:67:DF:9F Certificate issuer: /CN=cddd902a1271270027e4577778ea35883b4515f6 Certificate serial: 019B76EAF408343ED15CDDB67F5F25066159 Authority key identifier: CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/dCjH0v3m8tCVY_tkggWdXHZn358.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42425 IP address blocks: 2.59.4.0/24 maxlen: 24 2.59.5.0/24 maxlen: 24 2.59.6.0/24 maxlen: 24 2.59.7.0/24 maxlen: 24 94.125.232.0/21 maxlen: 24 94.125.232.0/24 maxlen: 24 94.125.233.0/24 maxlen: 24 94.125.234.0/24 maxlen: 24 94.125.235.0/24 maxlen: 24 94.125.236.0/24 maxlen: 24 94.125.237.0/24 maxlen: 24 94.125.238.0/24 maxlen: 24 94.125.239.0/24 maxlen: 24 178.255.184.0/21 maxlen: 21 178.255.184.0/24 maxlen: 24 178.255.185.0/24 maxlen: 24 178.255.186.0/24 maxlen: 24 178.255.187.0/24 maxlen: 24 178.255.188.0/24 maxlen: 24 178.255.189.0/24 maxlen: 24 178.255.190.0/24 maxlen: 24 178.255.191.0/24 maxlen: 24 185.28.80.0/22 maxlen: 22 185.28.80.0/24 maxlen: 24 185.28.81.0/24 maxlen: 24 185.28.82.0/24 maxlen: 24 185.28.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f4:08:34:3e:d1:5c:dd:b6:7f:5f:25:06:61:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cddd902a1271270027e4577778ea35883b4515f6 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7428c7d2fde6f2d09563fb6482059d5c7667df9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:0c:f8:4c:c2:61:da:66:11:86:7a:dd:59: d7:33:07:3b:83:8b:a7:53:76:94:e8:fc:40:8d:f9: d3:74:7f:0d:63:f8:e1:2f:bf:e5:d4:9c:0e:9f:37: 50:fb:36:1e:15:89:50:7a:81:16:25:00:ed:92:f4: bb:79:41:2b:0d:31:46:59:82:45:a6:f9:57:30:76: 17:63:cf:96:09:63:9a:4f:5d:89:dd:b9:f9:d7:a8: 77:36:44:56:ee:71:a7:5b:4e:71:e5:bb:b7:18:79: 06:68:b0:4e:86:07:ac:a1:6b:70:e7:3e:61:dd:7d: 83:5d:89:1d:6b:e4:f8:13:68:f2:51:3a:14:b5:7a: c0:d8:69:20:49:77:8c:b6:d4:9d:31:a2:ab:84:e4: d9:30:79:4f:e7:54:72:de:76:3e:97:2a:52:1c:c3: f7:a3:38:f3:07:e2:ac:9d:33:31:02:f2:4d:6a:a9: 41:93:a8:73:11:d7:30:69:ee:46:75:13:29:e4:84: f3:19:96:32:de:c7:9d:78:16:bc:ce:f8:4d:1e:89: 5d:9d:8d:c4:aa:d7:f3:e3:86:cf:07:1e:fa:27:da: d2:87:27:49:f9:18:a4:e6:05:b5:81:db:e4:fd:4c: 87:b1:a1:d6:fe:16:cd:16:b4:4d:37:33:12:51:e6: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:28:C7:D2:FD:E6:F2:D0:95:63:FB:64:82:05:9D:5C:76:67:DF:9F X509v3 Authority Key Identifier: keyid:CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/dCjH0v3m8tCVY_tkggWdXHZn358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.4.0/22 94.125.232.0/21 178.255.184.0/21 185.28.80.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:49:57:94:77:17:e9:14:0f:14:07:a1:31:4b:29:9b:41:3f: 60:c0:a8:87:4a:6d:e9:ec:ff:02:06:8b:87:60:b1:c4:74:c0: 43:7d:c2:83:39:d9:1f:e2:86:e2:8c:d9:dc:ad:92:fe:fa:0e: 78:fe:ea:c2:5b:bf:54:72:0e:71:e7:52:cb:31:36:68:69:2f: 7a:fe:8d:1c:db:0d:cd:10:ee:67:78:23:7a:5a:91:84:8c:9d: 99:d4:d2:9a:f5:bc:a0:4b:6a:bf:c8:7b:b0:36:fc:2d:0d:f9: da:5f:05:74:b4:4a:42:a0:c7:6e:6d:7b:df:81:6b:56:07:f3: bf:f6:a5:47:f8:d9:a3:9c:72:ec:91:96:be:e8:22:b8:cf:90: 31:4b:82:aa:03:bb:11:28:af:8c:0f:8e:5a:a4:46:5b:2a:a3: 6e:77:48:7c:03:76:84:98:53:3a:cc:ab:ef:09:36:56:75:c0: af:ab:68:5c:3f:82:d0:a8:ad:fe:6b:29:26:cf:ae:61:97:7a: 83:83:90:40:55:22:09:07:1c:a5:13:93:1d:07:3c:11:21:63: 9b:8b:aa:e5:16:61:95:3f:09:a1:21:44:84:6f:5f:a4:47:cf: 59:25:92:4d:cd:45:5b:b5:41:72:30:c3:bf:45:c5:cf:5a:6a: 8e:e0:13:7f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt26vQIND7RXN22f18lBmFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZGQ5MDJhMTI3MTI3MDAyN2U0NTc3Nzc4ZWEzNTg4M2I0 NTE1ZjYwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDI4YzdkMmZkZTZmMmQwOTU2M2ZiNjQ4MjA1OWQ1Yzc2NjdkZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu20M+EzCYdpmEYZ63VnXMwc7g4un U3aU6PxAjfnTdH8NY/jhL7/l1JwOnzdQ+zYeFYlQeoEWJQDtkvS7eUErDTFGWYJF pvlXMHYXY8+WCWOaT12J3bn516h3NkRW7nGnW05x5bu3GHkGaLBOhgesoWtw5z5h 3X2DXYkda+T4E2jyUToUtXrA2GkgSXeMttSdMaKrhOTZMHlP51Ry3nY+lypSHMP3 ozjzB+KsnTMxAvJNaqlBk6hzEdcwae5GdRMp5ITzGZYy3sedeBa8zvhNHoldnY3E qtfz44bPBx76J9rShydJ+Rik5gW1gdvk/UyHsaHW/hbNFrRNNzMSUeY2HwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHQox9L95vLQlWP7ZIIFnVx2Z9+fMB8GA1UdIwQY MBaAFM3dkCoScScAJ+RXd3jqNYg7RRX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemQyUUtoSnhKd0FuNUZkM2VPbzFpRHRGRmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83YTFlYjQtMjkwYS00Njg2LThiYmEt ZGM3NTQyMTM4OTUyLzEvZENqSDB2M204dENWWV90a2dnV2RYSFpuMzU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83YTFlYjQtMjkwYS00Njg2LThiYmEtZGM3NTQyMTM4OTUy LzEvemQyUUtoSnhKd0FuNUZkM2VPbzFpRHRGRmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCAjsEAwQD Xn3oAwQDsv+4AwQCuRxQMA0GCSqGSIb3DQEBCwUAA4IBAQBrSVeUdxfpFA8UB6Ex SymbQT9gwKiHSm3p7P8CBouHYLHEdMBDfcKDOdkf4obijNncrZL++g54/urCW79U cg5x51LLMTZoaS96/o0c2w3NEO5neCN6WpGEjJ2Z1NKa9bygS2q/yHuwNvwtDfna XwV0tEpCoMdubXvfgWtWB/O/9qVH+NmjnHLskZa+6CK4z5AxS4KqA7sRKK+MD45a pEZbKqNud0h8A3aEmFM6zKvvCTZWdcCvq2hcP4LQqK3+aykmz65hl3qDg5BAVSIJ BxylE5MdBzwRIWObi6rlFmGVPwmhIUSEb1+kR89ZJZJNzUVbtUFyMMO/RcXPWmqO 4BN/ -----END CERTIFICATE-----Generated at Thu Jan 1 15:34:07 2026 by rpki-client