This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/dDrbN1EnOvhkFc0_xZRFXvcNr40.roa File: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (raw, json) Hash identifier: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI= Subject key identifier: 74:3A:DB:37:51:27:3A:F8:64:15:CD:3F:C5:94:45:5E:F7:0D:AF:8D Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d Certificate serial: 019B7F8004F01FE6F70BDED671B292D9F95E Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/dDrbN1EnOvhkFc0_xZRFXvcNr40.roa Signing time: Fri 02 Jan 2026 16:17:34 +0000 ROA not before: Fri 02 Jan 2026 16:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.88.28.0/24 maxlen: 24 45.88.29.0/24 maxlen: 24 45.88.30.0/24 maxlen: 24 45.88.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:04:f0:1f:e6:f7:0b:de:d6:71:b2:92:d9:f9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d Validity Not Before: Jan 2 16:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=743adb3751273af86415cd3fc594455ef70daf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:12:c1:11:93:5a:e9:5c:94:6f:0b:26:fa: ea:6b:b5:d1:db:cf:59:a1:ae:8f:14:79:ba:9a:4f: 89:6d:f3:2d:33:db:e9:71:33:55:16:65:f3:96:62: 98:54:03:33:e5:d2:1d:b8:44:c9:9d:18:9b:5d:cb: ce:6f:67:7a:2b:f2:29:7c:f3:ac:44:92:c9:df:f5: 1a:1f:ba:9b:84:7c:2a:e1:fd:eb:34:60:5d:97:1d: e5:be:a5:f4:c8:ce:55:0b:fa:6e:88:66:af:f3:0e: e6:0d:85:6a:39:aa:7a:18:ba:3b:dc:4e:ea:8b:ea: e0:77:18:2f:9e:e5:97:fd:55:07:4a:e1:ec:e8:58: 76:72:22:b0:a9:3d:47:1a:31:42:d9:1d:59:2c:9d: 06:9a:9a:d4:4b:ad:f0:83:4e:b4:46:34:7d:41:14: 69:70:4f:e5:3e:d2:12:c1:cd:b0:da:ed:55:ba:0d: 02:8e:75:e9:34:1f:3b:0a:ab:d3:8f:b0:e9:ac:49: c3:49:1c:ac:44:5f:14:64:7e:5b:24:ae:8b:c7:9f: 59:d4:c6:90:c2:6e:80:7c:e7:97:1c:b3:64:66:a6: 54:65:a1:d9:01:ea:e7:48:14:a8:38:af:53:8e:c1: 4e:47:15:3f:c2:2d:de:4e:ba:52:0b:44:e9:cc:83: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3A:DB:37:51:27:3A:F8:64:15:CD:3F:C5:94:45:5E:F7:0D:AF:8D X509v3 Authority Key Identifier: keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/dDrbN1EnOvhkFc0_xZRFXvcNr40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.28.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:58:a4:9e:1c:6e:5e:b0:a2:80:c5:64:24:54:1d:b5:90:30: 65:e0:66:4f:75:f5:8f:bb:50:e7:cd:ff:72:a2:1b:ef:87:5a: 24:41:bb:fe:c0:4c:d2:91:e4:78:9d:ec:4b:26:ec:85:b1:50: d1:44:81:74:e1:f9:38:3b:01:4b:99:1b:40:93:a9:7b:47:b2: 5e:63:40:f1:ae:89:3e:0f:d4:3c:71:63:c2:ca:43:42:43:36: 17:d6:47:fa:89:71:31:8c:9a:65:da:f4:c4:c6:a1:7b:02:b1: cc:3b:96:03:d4:4e:91:ee:98:ad:17:61:22:8a:6f:be:09:b2: d8:8e:79:fc:a8:b1:88:fb:07:15:71:78:53:7d:2f:d4:49:b2: 97:3b:29:a9:60:b7:56:60:63:f4:b2:4d:dd:42:e2:18:0e:50: cd:82:34:d6:ba:56:9c:ed:a9:0a:3b:2c:db:80:54:3f:19:80: 2c:86:8f:1d:e5:95:73:a1:3b:fe:b7:02:5e:8b:ae:88:d8:df: de:06:4f:bc:8c:a5:2c:ea:1b:4b:8a:ce:e0:da:d3:0f:30:68: b2:26:d9:74:12:e8:cb:ff:1e:69:0e:b1:c8:4a:b8:11:25:78: c8:53:fc:05:98:f5:53:0e:d3:fe:02:d0:c7:06:22:96:3b:a0: 74:8c:4c:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gATwH+b3C97WcbKS2fleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkM2ZmNzgzNjUzMGQxYzQ3NGY0ZDA4OGI2YjM2MjI0ZmJm Njk4MmQwHhcNMjYwMTAyMTYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDNhZGIzNzUxMjczYWY4NjQxNWNkM2ZjNTk0NDU1ZWY3MGRhZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDESwRGTWulclG8LJvrqa7XR289Z oa6PFHm6mk+JbfMtM9vpcTNVFmXzlmKYVAMz5dIduETJnRibXcvOb2d6K/IpfPOs RJLJ3/UaH7qbhHwq4f3rNGBdlx3lvqX0yM5VC/puiGav8w7mDYVqOap6GLo73E7q i+rgdxgvnuWX/VUHSuHs6Fh2ciKwqT1HGjFC2R1ZLJ0GmprUS63wg060RjR9QRRp cE/lPtISwc2w2u1Vug0CjnXpNB87CqvTj7DprEnDSRysRF8UZH5bJK6Lx59Z1MaQ wm6AfOeXHLNkZqZUZaHZAernSBSoOK9TjsFORxU/wi3eTrpSC0TpzINvfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQ62zdRJzr4ZBXNP8WURV73Da+NMB8GA1UdIwQY MBaAFO0/94NlMNHEdPTQiLazYiT79pgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDkt ZjNlMjRlMDc1ZTM1LzEvZERyYk4xRW5PdmhrRmMwX3haUkZYdmNOcjQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDktZjNlMjRlMDc1ZTM1 LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVgcMA0G CSqGSIb3DQEBCwUAA4IBAQB8WKSeHG5esKKAxWQkVB21kDBl4GZPdfWPu1Dnzf9y ohvvh1okQbv+wEzSkeR4nexLJuyFsVDRRIF04fk4OwFLmRtAk6l7R7JeY0Dxrok+ D9Q8cWPCykNCQzYX1kf6iXExjJpl2vTExqF7ArHMO5YD1E6R7pitF2Eiim++CbLY jnn8qLGI+wcVcXhTfS/USbKXOympYLdWYGP0sk3dQuIYDlDNgjTWulac7akKOyzb gFQ/GYAsho8d5ZVzoTv+twJei66I2N/eBk+8jKUs6htLis7g2tMPMGiyJtl0EujL /x5pDrHISrgRJXjIU/wFmPVTDtP+AtDHBiKWO6B0jEzi -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:21 2026 by rpki-client