This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/dNkHE3jPImN4EseW6DyqfCow5I0.roa File: dNkHE3jPImN4EseW6DyqfCow5I0.roa (raw, json) Hash identifier: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU= Subject key identifier: 74:D9:07:13:78:CF:22:63:78:12:C7:96:E8:3C:AA:7C:2A:30:E4:8D Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa Certificate serial: 019B7AC7EF7C2248F65059152D87EE22F87F Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/dNkHE3jPImN4EseW6DyqfCow5I0.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49847 IP address blocks: 45.132.172.0/24 maxlen: 24 45.132.173.0/24 maxlen: 24 45.132.174.0/24 maxlen: 24 45.132.175.0/24 maxlen: 24 185.42.224.0/24 maxlen: 24 185.42.225.0/24 maxlen: 24 185.42.226.0/24 maxlen: 24 185.42.227.0/24 maxlen: 24 2a04:9240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ef:7c:22:48:f6:50:59:15:2d:87:ee:22:f8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74d9071378cf22637812c796e83caa7c2a30e48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:5b:8b:03:f5:02:a5:0d:71:61:9c:9b:ac: 66:cf:83:6c:d3:f2:35:0e:2c:b8:52:43:89:c7:c1: 7d:1d:a7:c8:c1:81:72:03:7d:96:b7:fa:f8:04:d2: ba:1b:95:44:85:dc:97:7e:7f:58:10:28:69:60:79: b4:67:fd:71:e6:1b:5c:b5:81:97:66:e7:bb:60:06: a5:dc:4c:d3:24:1a:5d:0f:e4:3f:fb:a9:e7:58:e2: df:90:31:98:5a:fd:4a:0b:ef:1e:4e:b4:65:ef:3c: 5a:77:7a:ca:9a:68:01:2d:d9:68:18:6f:bc:13:fd: a3:f6:f5:13:3d:b7:cc:f0:f5:59:a7:f8:6c:cc:e8: ff:93:4d:22:e1:37:67:88:e9:fa:34:67:a8:a5:04: cc:85:42:4c:57:c5:b0:39:5e:79:2c:20:bf:47:48: 7b:c3:58:dd:e7:d3:25:72:ed:2f:9c:be:17:05:bd: 78:ef:29:46:59:0d:ab:10:c4:ae:02:d4:4d:c3:b8: a1:41:8e:da:69:7e:d6:42:b1:67:0d:a5:52:37:a5: 36:98:c6:25:2c:0b:55:d4:40:7f:9e:93:a7:ac:87: e2:10:54:ad:0f:7b:e5:ee:07:4f:45:57:b9:e0:f8: fb:53:5e:34:40:95:bb:62:0b:4e:54:df:44:f5:44: 92:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D9:07:13:78:CF:22:63:78:12:C7:96:E8:3C:AA:7C:2A:30:E4:8D X509v3 Authority Key Identifier: keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/dNkHE3jPImN4EseW6DyqfCow5I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.172.0/22 185.42.224.0/22 IPv6: 2a04:9240::/29 Signature Algorithm: sha256WithRSAEncryption 31:b5:1a:00:99:d9:1a:58:b2:78:41:a2:63:a0:28:bf:cc:91: ef:41:86:15:29:00:98:9d:58:b5:09:62:73:58:a0:6e:29:97: b2:a7:19:71:e5:9b:f4:27:ab:17:49:ec:68:2d:0b:bf:eb:e5: 8d:8c:8b:19:35:90:9e:d3:ef:73:24:15:8f:bc:af:03:5b:f8: 6d:69:8f:92:c4:68:3b:2f:67:e3:5a:10:74:cb:b6:d1:91:b8: a3:f2:0b:c8:f2:7e:14:9a:b2:cb:60:63:df:9f:b1:b8:fd:44: 34:bf:84:13:f6:28:20:9a:25:10:b7:1b:5e:0d:9f:8c:57:7e: 5a:11:37:dc:9e:af:94:0b:50:f6:9e:3b:37:6e:bf:94:64:86: 3b:6b:f3:25:f9:41:34:9e:36:ea:41:d6:22:bb:e5:c4:8a:6b: 29:bf:7b:d6:31:0e:4d:de:9e:47:b2:c7:1c:0f:72:69:07:cd: 6b:c7:b8:eb:dc:98:3a:e1:bc:a0:f6:d1:54:b4:4b:5c:e7:6e: 15:3d:4f:86:4d:a9:77:93:72:59:65:95:e3:55:e8:f7:d4:a6: 56:35:fe:e4:8a:c3:0a:3a:99:66:e3:fc:bf:11:5e:6a:1c:48: 12:a1:0d:f0:50:f9:bd:0a:e4:db:a4:9c:09:55:73:8f:a7:47: ab:fd:25:43 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x+98Ikj2UFkVLYfuIvh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl NGJhYWEwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQ5MDcxMzc4Y2YyMjYzNzgxMmM3OTZlODNjYWE3YzJhMzBlNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru1biwP1AqUNcWGcm6xmz4Ns0/I1 Diy4UkOJx8F9HafIwYFyA32Wt/r4BNK6G5VEhdyXfn9YEChpYHm0Z/1x5htctYGX Zue7YAal3EzTJBpdD+Q/+6nnWOLfkDGYWv1KC+8eTrRl7zxad3rKmmgBLdloGG+8 E/2j9vUTPbfM8PVZp/hszOj/k00i4TdniOn6NGeopQTMhUJMV8WwOV55LCC/R0h7 w1jd59Mlcu0vnL4XBb147ylGWQ2rEMSuAtRNw7ihQY7aaX7WQrFnDaVSN6U2mMYl LAtV1EB/npOnrIfiEFStD3vl7gdPRVe54Pj7U140QJW7YgtOVN9E9USSOQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHTZBxN4zyJjeBLHlug8qnwqMOSNMB8GA1UdIwQY MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt ZmVjMjVkMmU5MThkLzEvZE5rSEUzalBJbU40RXNlVzZEeXFmQ293NUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYSsAwQC uSrgMA0EAgACMAcDBQMqBJJAMA0GCSqGSIb3DQEBCwUAA4IBAQAxtRoAmdkaWLJ4 QaJjoCi/zJHvQYYVKQCYnVi1CWJzWKBuKZeypxlx5Zv0J6sXSexoLQu/6+WNjIsZ NZCe0+9zJBWPvK8DW/htaY+SxGg7L2fjWhB0y7bRkbij8gvI8n4UmrLLYGPfn7G4 /UQ0v4QT9iggmiUQtxteDZ+MV35aETfcnq+UC1D2njs3br+UZIY7a/Ml+UE0njbq QdYiu+XEimspv3vWMQ5N3p5HssccD3JpB81rx7jr3Jg64byg9tFUtEtc524VPU+G Tal3k3JZZZXjVej31KZWNf7kisMKOplm4/y/EV5qHEgSoQ3wUPm9CuTbpJwJVXOP p0er/SVD -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:12 2026 by rpki-client