This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DpbQYIiSvsLfzBM4mCG26iRsMq4.roa File: DpbQYIiSvsLfzBM4mCG26iRsMq4.roa (raw, json) Hash identifier: GPbXWcYPcuJJlSIN6iJUai1CReON07WU3lSkNuUtCa0= Subject key identifier: 0E:96:D0:60:88:92:BE:C2:DF:CC:13:38:98:21:B6:EA:24:6C:32:AE Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B8A09D243911E72C965BE0981C18DCFC7 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DpbQYIiSvsLfzBM4mCG26iRsMq4.roa Signing time: Sun 04 Jan 2026 17:24:17 +0000 ROA not before: Sun 04 Jan 2026 17:24:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.197.135.0/24 maxlen: 24 2a06:e881:7340::/42 maxlen: 48 2a06:e881:73ef::/48 maxlen: 48 2a06:e881:73ff::/48 maxlen: 48 2a06:e881:9200::/45 maxlen: 48 2a06:e881:9208::/45 maxlen: 48 2a06:e881:9600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:09:d2:43:91:1e:72:c9:65:be:09:81:c1:8d:cf:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 4 17:24:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e96d0608892bec2dfcc13389821b6ea246c32ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2b:01:eb:a5:04:0e:16:86:87:21:fc:58:b2: 05:39:ba:b2:21:ec:12:49:62:9e:04:4a:89:20:cc: bf:41:8c:d9:53:9b:e5:7e:10:df:22:ae:b7:f2:32: f8:c2:ff:6f:aa:94:a1:94:fc:a1:ef:96:00:4c:fc: 31:ce:ac:b7:f3:c7:f6:b6:35:9e:5b:19:23:73:f6: 4f:9b:7f:dd:e8:a2:72:2c:64:35:2c:0b:4a:e8:26: 2d:dc:6d:29:6c:a8:bd:bf:7f:1c:2e:02:cd:50:1f: 0b:86:43:57:f7:3c:42:3f:e2:3e:2a:e4:5c:25:1f: f3:5d:24:e1:81:11:14:75:58:25:ad:82:04:a3:59: 22:b8:45:66:36:d8:3b:5a:a7:e1:c5:ad:64:4b:a9: 3d:47:2f:70:c1:52:b9:bf:79:cc:2c:ca:bd:42:2d: ce:b6:e6:2e:dc:4d:cf:0e:8e:1f:55:60:5c:84:9a: 5b:0c:59:b8:4f:87:71:03:0e:2a:5c:cf:f6:e4:1c: b2:cb:29:77:a1:21:99:5f:20:04:05:22:2b:6c:56: 6a:6a:54:d3:8a:6e:b8:ec:56:42:95:0b:c9:ae:20: 4a:68:2c:6b:53:6e:b4:8b:97:bb:98:7b:bd:51:6d: d1:0e:84:56:a9:3c:4d:81:45:ca:91:35:ee:ae:05: 02:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:96:D0:60:88:92:BE:C2:DF:CC:13:38:98:21:B6:EA:24:6C:32:AE X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DpbQYIiSvsLfzBM4mCG26iRsMq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.135.0/24 IPv6: 2a06:e881:7340::/42 2a06:e881:73ef::/48 2a06:e881:73ff::/48 2a06:e881:9200::/44 2a06:e881:9600::/48 Signature Algorithm: sha256WithRSAEncryption 98:6a:5f:f5:9a:07:97:84:f5:de:b5:05:26:04:db:fa:98:a3: aa:b4:b0:cc:75:e8:08:ed:b5:38:2e:80:4e:f9:65:77:6b:5e: 71:3e:ff:e1:d1:63:2b:57:e1:4f:35:cf:7f:6e:21:8f:2b:65: 98:06:62:72:0d:61:f2:e1:24:53:b2:7b:a9:f4:b5:75:cb:6c: bd:3b:c8:31:cc:c7:f8:1e:95:50:88:97:ff:17:a0:e5:86:fd: 14:07:f8:30:7d:fa:5b:65:60:f0:ee:b0:c9:17:c8:f3:fd:bf: 0c:39:98:66:43:ca:86:82:cd:e1:d3:cb:f2:fe:19:4e:0e:23: 51:37:8a:16:45:38:91:4b:27:6e:64:13:f1:78:bd:f7:85:2d: 15:9f:2f:1f:e4:5d:ac:e1:f3:1a:18:d0:ce:f6:b7:b3:74:68: c1:59:37:45:a5:af:9f:b3:ba:31:75:c2:fe:e4:38:fa:46:f9: 41:a3:bc:53:08:eb:89:17:bf:0d:56:48:e1:54:ce:73:a9:bc: d6:b4:58:fd:d2:61:00:99:6b:5b:5e:e7:5c:2a:cc:a3:19:26: 1d:fd:d5:b9:e0:22:3f:9e:82:e7:25:35:85:b3:ad:e9:b4:c1: 16:18:50:cc:c3:cf:d8:aa:34:6f:f4:0c:38:7f:34:b9:ea:d9: e9:87:e3:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZuKCdJDkR5yyWW+CYHBjc/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTA0MTcyNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTk2ZDA2MDg4OTJiZWMyZGZjYzEzMzg5ODIxYjZlYTI0NmMzMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SsB66UEDhaGhyH8WLIFObqyIewS SWKeBEqJIMy/QYzZU5vlfhDfIq638jL4wv9vqpShlPyh75YATPwxzqy388f2tjWe Wxkjc/ZPm3/d6KJyLGQ1LAtK6CYt3G0pbKi9v38cLgLNUB8LhkNX9zxCP+I+KuRc JR/zXSThgREUdVglrYIEo1kiuEVmNtg7Wqfhxa1kS6k9Ry9wwVK5v3nMLMq9Qi3O tuYu3E3PDo4fVWBchJpbDFm4T4dxAw4qXM/25Byyyyl3oSGZXyAEBSIrbFZqalTT im647FZClQvJriBKaCxrU260i5e7mHu9UW3RDoRWqTxNgUXKkTXurgUCwQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFA6W0GCIkr7C38wTOJghtuokbDKuMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvRHBiUVlJaVN2c0xmekJNNG1DRzI2aVJzTXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAMBAIAATAGAwQAucWHMDME AgACMC0DBwYqBuiBc0ADBwAqBuiBc+8DBwAqBuiBc/8DBwQqBuiBkgADBwAqBuiB lgAwDQYJKoZIhvcNAQELBQADggEBAJhqX/WaB5eE9d61BSYE2/qYo6q0sMx16Ajt tTgugE75ZXdrXnE+/+HRYytX4U81z39uIY8rZZgGYnINYfLhJFOye6n0tXXLbL07 yDHMx/gelVCIl/8XoOWG/RQH+DB9+ltlYPDusMkXyPP9vww5mGZDyoaCzeHTy/L+ GU4OI1E3ihZFOJFLJ25kE/F4vfeFLRWfLx/kXazh8xoY0M72t7N0aMFZN0Wlr5+z ujF1wv7kOPpG+UGjvFMI64kXvw1WSOFUznOpvNa0WP3SYQCZa1te51wqzKMZJh39 1bngIj+eguclNYWzrem0wRYYUMzDz9iqNG/0DDh/NLnq2emH4zA= -----END CERTIFICATE-----Generated at Sat Jan 17 08:23:00 2026 by rpki-client