This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/dcYzfKgMLWUSmc87zTpEWATDf3g.roa File: dcYzfKgMLWUSmc87zTpEWATDf3g.roa (raw, json) Hash identifier: u+h/4AryCzwpCIQR5wy3fZ9DxV6BlPTBzPZ0uYrCmuI= Subject key identifier: 75:C6:33:7C:A8:0C:2D:65:12:99:CF:3B:CD:3A:44:58:04:C3:7F:78 Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828 Certificate serial: 019B76EB79938AEB0E0E16D30072BB12E61A Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/dcYzfKgMLWUSmc87zTpEWATDf3g.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197391 IP address blocks: 91.220.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:79:93:8a:eb:0e:0e:16:d3:00:72:bb:12:e6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75c6337ca80c2d651299cf3bcd3a445804c37f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:37:ca:90:6c:77:c7:75:70:89:f0:bd:b9: 53:51:ce:6b:9b:02:a6:49:f2:a1:72:a9:c5:cd:b2: 92:7b:62:1a:9e:3c:a0:cb:47:30:4a:92:8d:e4:28: d4:1f:9f:e5:fd:f7:19:49:67:3e:1d:e9:cd:57:7c: 1c:f8:57:2b:69:77:f3:cc:69:14:6f:ff:b6:cc:f3: eb:a4:dd:60:36:05:a4:1c:91:82:dd:57:1c:ad:8b: 4e:af:60:07:25:bd:98:b1:fa:be:90:a1:9d:e0:fc: 59:a0:e0:ab:aa:d6:40:dc:01:cd:98:81:61:22:cc: bf:8b:e9:6e:30:30:8b:22:ba:ed:96:23:53:17:0b: f0:c6:99:89:29:6f:e3:6b:cf:f6:9c:d0:86:e3:37: ca:20:bc:a8:76:59:7d:f6:27:ac:03:60:df:6c:54: 57:45:86:c9:a5:e9:22:97:bc:76:c3:de:1f:30:a6: b6:33:cb:9f:db:74:d4:79:62:30:95:09:19:66:e8: 99:ed:50:b4:63:31:8d:79:b2:2d:82:ae:b5:f7:49: 8c:44:4f:0a:14:34:02:a9:1b:11:64:8e:af:fe:cc: bb:24:70:ce:c6:dd:1d:65:98:45:9b:ab:f6:ae:41: 1f:3f:e4:cb:9e:f0:e8:f5:f9:6b:12:53:08:47:76: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C6:33:7C:A8:0C:2D:65:12:99:CF:3B:CD:3A:44:58:04:C3:7F:78 X509v3 Authority Key Identifier: keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/dcYzfKgMLWUSmc87zTpEWATDf3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.119.0/24 Signature Algorithm: sha256WithRSAEncryption 85:75:f7:84:ed:e4:77:82:18:8c:9a:ac:58:be:5f:b3:b3:cc: e6:4f:00:9f:45:41:25:06:a7:d6:cb:d5:86:86:92:98:77:a3: da:30:3a:7f:88:ca:67:c1:5e:23:b4:15:ca:70:69:76:9a:7d: 21:d2:db:42:13:bb:94:c7:27:e1:af:0a:ec:52:b4:16:56:48: cd:ea:c8:b0:0f:7c:04:5d:8c:94:8b:2b:ab:cd:ba:c7:bd:60: 8e:33:92:09:97:63:cd:5f:3c:8e:9e:ec:d9:85:dd:6f:86:8e: 0f:c7:27:b5:f4:01:1f:8c:29:3a:7e:09:4c:8e:1c:5b:13:19: bf:14:15:04:7c:40:52:20:98:54:3a:fd:3b:b2:70:ce:5c:8d: ef:1c:61:8e:88:50:16:5b:46:04:68:9c:3a:59:01:b2:52:9b: a2:f4:31:fd:f4:41:b3:9b:e4:13:2f:ae:58:04:6e:78:dd:54: a2:b2:db:68:4e:ff:74:51:79:5f:8a:a5:17:91:b9:79:ec:59: aa:33:dd:e9:6a:5c:a6:b4:b8:96:21:01:56:33:85:f8:5f:82: b7:88:c6:72:86:a7:7d:c1:d5:07:ac:c1:06:ca:95:86:56:10: 87:d8:36:fb:03:90:01:40:13:78:81:25:da:96:e6:fa:0e:1b: 0f:72:50:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263mTiusODhbTAHK7EuYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YzdlYTRkMzlmNWNiNWY0NTg2MGEwOWVhMzgzM2VmOGFk ZDY4MjgwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWM2MzM3Y2E4MGMyZDY1MTI5OWNmM2JjZDNhNDQ1ODA0YzM3Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHg3ypBsd8d1cInwvblTUc5rmwKm SfKhcqnFzbKSe2Ianjygy0cwSpKN5CjUH5/l/fcZSWc+HenNV3wc+FcraXfzzGkU b/+2zPPrpN1gNgWkHJGC3VccrYtOr2AHJb2Ysfq+kKGd4PxZoOCrqtZA3AHNmIFh Isy/i+luMDCLIrrtliNTFwvwxpmJKW/ja8/2nNCG4zfKILyodll99iesA2DfbFRX RYbJpekil7x2w94fMKa2M8uf23TUeWIwlQkZZuiZ7VC0YzGNebItgq6190mMRE8K FDQCqRsRZI6v/sy7JHDOxt0dZZhFm6v2rkEfP+TLnvDo9flrElMIR3bOVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXGM3yoDC1lEpnPO806RFgEw394MB8GA1UdIwQY MBaAFHnH6k059ctfRYYKCeo4M++K3WgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTIt MjhiZjNkOTBiZDdiLzEvZGNZemZLZ01MV1VTbWM4N3pUcEVXQVREZjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTItMjhiZjNkOTBiZDdi LzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9x3MA0G CSqGSIb3DQEBCwUAA4IBAQCFdfeE7eR3ghiMmqxYvl+zs8zmTwCfRUElBqfWy9WG hpKYd6PaMDp/iMpnwV4jtBXKcGl2mn0h0ttCE7uUxyfhrwrsUrQWVkjN6siwD3wE XYyUiyurzbrHvWCOM5IJl2PNXzyOnuzZhd1vho4Pxye19AEfjCk6fglMjhxbExm/ FBUEfEBSIJhUOv07snDOXI3vHGGOiFAWW0YEaJw6WQGyUpui9DH99EGzm+QTL65Y BG543VSisttoTv90UXlfiqUXkbl57FmqM93palymtLiWIQFWM4X4X4K3iMZyhqd9 wdUHrMEGypWGVhCH2Db7A5ABQBN4gSXalub6DhsPclCl -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:17 2026 by rpki-client