This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DBVt-Kol8GtKXZhzeMem7n5aqyE.roa File: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (raw, json) Hash identifier: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE= Subject key identifier: 0C:15:6D:F8:AA:25:F0:6B:4A:5D:98:73:78:C7:A6:EE:7E:5A:AB:21 Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019B7D5C60326FEBE9A41539260DF980E744 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DBVt-Kol8GtKXZhzeMem7n5aqyE.roa Signing time: Fri 02 Jan 2026 06:19:24 +0000 ROA not before: Fri 02 Jan 2026 06:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 193.25.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:60:32:6f:eb:e9:a4:15:39:26:0d:f9:80:e7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c156df8aa25f06b4a5d987378c7a6ee7e5aab21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:a9:7c:59:8e:61:60:3a:cc:c6:c2:70:6d: b7:a6:93:0e:ef:ed:25:92:d0:4a:ac:d8:f6:24:1a: 85:a5:dc:05:14:30:cb:0c:22:26:87:be:fb:12:e3: 4a:d4:9e:7b:b1:de:9c:33:ed:b4:dc:1b:45:3b:8e: 2c:e8:e0:0e:5a:06:fb:47:b2:90:e9:e6:ef:02:c6: 24:ef:54:5d:29:bf:27:62:a2:4b:f9:ba:84:2d:ff: bd:25:24:ed:bb:f4:bc:f5:52:fe:e9:82:ce:ec:9f: b8:3e:75:55:d0:c1:55:aa:16:dd:7e:90:43:1b:26: 68:79:8c:7b:67:cc:d4:9b:d2:77:44:6a:c1:f8:68: 88:e0:f0:04:34:c5:0c:35:7a:68:77:44:53:ae:64: 70:2a:b5:cb:d6:2e:e6:d8:62:5f:4e:47:f0:64:ae: 44:5a:57:ec:e3:19:b7:2b:1b:5b:60:67:e7:c5:b0: 22:42:10:eb:87:6e:43:a3:6b:36:cb:57:b1:ba:24: 19:89:ab:4d:a6:cf:9d:50:9b:e2:81:ab:03:6a:18: ed:81:38:92:69:31:15:7f:3d:03:b4:83:f8:44:e8: c0:41:2e:f4:cc:0e:97:bc:83:42:cc:da:79:81:d6: 06:6b:b1:39:fd:d1:ab:34:b4:f5:de:98:25:9b:65: 72:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:15:6D:F8:AA:25:F0:6B:4A:5D:98:73:78:C7:A6:EE:7E:5A:AB:21 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DBVt-Kol8GtKXZhzeMem7n5aqyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.201.0/24 Signature Algorithm: sha256WithRSAEncryption a3:5b:71:e9:da:e4:3f:fb:dd:6b:5f:3c:ac:5d:7b:b0:29:85: d5:2c:6b:3d:90:fb:0c:80:c3:d9:a7:c3:dd:07:05:21:33:b4: c6:52:63:d7:2d:cc:ba:ff:bf:c4:57:71:a1:d1:3e:31:43:41: 79:93:b1:94:33:a6:98:2e:5d:2c:20:17:27:40:0a:de:a5:6d: a0:85:16:56:16:fc:51:3c:70:aa:b5:0b:99:10:92:c8:6f:ec: 5c:60:43:c8:71:32:d6:6b:32:82:eb:58:9f:89:16:e6:ba:62: f5:d6:13:7d:1e:6f:79:ca:83:10:bf:7a:33:9b:ed:78:cd:1f: e3:c3:bc:81:10:ab:72:95:48:4b:62:cf:5c:53:d1:8a:1a:48: 8b:a7:50:d3:b9:2b:69:83:88:39:ec:a0:b4:d9:d3:2f:77:77: 9b:d8:53:3f:ee:91:2a:2e:40:ce:5b:6a:79:35:6f:35:52:d8: 96:f6:07:0a:f8:2a:e5:53:66:0f:a0:f7:de:38:da:71:6f:6f: 5f:3e:a1:8c:d2:85:31:30:4b:a6:46:31:9b:6c:cb:47:4a:fd: a4:55:7d:b6:50:e3:a6:aa:77:bd:19:ce:c9:c3:b1:09:2e:0c: 13:67:7a:1b:8b:2f:2c:2d:6e:df:36:54:4f:3c:f6:64:e0:21: 43:92:2a:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XGAyb+vppBU5Jg35gOdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzE1NmRmOGFhMjVmMDZiNGE1ZDk4NzM3OGM3YTZlZTdlNWFhYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SepfFmOYWA6zMbCcG23ppMO7+0l ktBKrNj2JBqFpdwFFDDLDCImh777EuNK1J57sd6cM+203BtFO44s6OAOWgb7R7KQ 6ebvAsYk71RdKb8nYqJL+bqELf+9JSTtu/S89VL+6YLO7J+4PnVV0MFVqhbdfpBD GyZoeYx7Z8zUm9J3RGrB+GiI4PAENMUMNXpod0RTrmRwKrXL1i7m2GJfTkfwZK5E Wlfs4xm3KxtbYGfnxbAiQhDrh25Do2s2y1exuiQZiatNps+dUJvigasDahjtgTiS aTEVfz0DtIP4ROjAQS70zA6XvINCzNp5gdYGa7E5/dGrNLT13pglm2VyFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwVbfiqJfBrSl2Yc3jHpu5+WqshMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvREJWdC1Lb2w4R3RLWFpoemVNZW03bjVhcXlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnJMA0G CSqGSIb3DQEBCwUAA4IBAQCjW3Hp2uQ/+91rXzysXXuwKYXVLGs9kPsMgMPZp8Pd BwUhM7TGUmPXLcy6/7/EV3Gh0T4xQ0F5k7GUM6aYLl0sIBcnQArepW2ghRZWFvxR PHCqtQuZEJLIb+xcYEPIcTLWazKC61ifiRbmumL11hN9Hm95yoMQv3ozm+14zR/j w7yBEKtylUhLYs9cU9GKGkiLp1DTuStpg4g57KC02dMvd3eb2FM/7pEqLkDOW2p5 NW81UtiW9gcK+CrlU2YPoPfeONpxb29fPqGM0oUxMEumRjGbbMtHSv2kVX22UOOm qne9Gc7Jw7EJLgwTZ3obiy8sLW7fNlRPPPZk4CFDkiro -----END CERTIFICATE-----Generated at Fri Jan 23 02:02:49 2026 by rpki-client