This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Dbdu-sAYIxR5QPvvVrRAhYH105w.roa File: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (raw, json) Hash identifier: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI= Subject key identifier: 0D:B7:6E:FA:C0:18:23:14:79:40:FB:EF:56:B4:40:85:81:F5:D3:9C Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82AA879CDCB3E0E7CD418FFAD6107 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Dbdu-sAYIxR5QPvvVrRAhYH105w.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26548 IP address blocks: 146.19.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2a:a8:79:cd:cb:3e:0e:7c:d4:18:ff:ad:61:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0db76efac01823147940fbef56b4408581f5d39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:95:96:67:4d:ec:e5:fe:8a:31:cc:7b:57: 89:ac:af:69:fa:b4:d8:99:9c:12:8f:2c:92:0b:a6: b7:3c:46:e0:e0:dd:48:c1:68:87:70:c8:fe:5c:8d: bb:96:2f:0f:43:34:5f:c8:4a:3a:25:8a:bd:77:4f: 2c:fc:09:9e:6a:bf:1d:63:db:c9:90:c0:00:96:fc: 73:3c:80:16:d1:69:52:f7:0d:52:80:56:0b:6f:78: a7:3a:f2:2c:85:61:22:33:e0:46:03:3e:31:c6:65: fc:b0:bd:1d:6c:9d:ac:c5:ea:59:fd:7b:ce:1f:5a: 1f:43:82:a3:d4:3e:94:d0:c3:6d:92:25:55:0e:1f: 93:f0:1d:28:fa:60:29:1c:4a:de:6a:26:fb:76:69: 30:4a:76:07:28:99:0a:a0:94:17:b0:8a:8c:70:73: fe:15:0f:39:d0:8a:1c:cd:91:00:05:f2:d5:b0:66: c1:5b:55:0d:61:d1:8a:c2:54:3d:84:fc:34:85:d1: 3c:98:a5:33:11:87:bf:4e:d3:35:2d:43:60:e6:7a: 74:06:58:90:8c:9d:53:2a:8f:c4:47:7a:38:1a:cf: dc:25:55:0b:f3:59:ee:fb:94:fc:3a:7d:04:e7:b7: 24:32:8b:e8:c9:60:ca:f3:1f:ef:68:51:1c:d5:d7: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B7:6E:FA:C0:18:23:14:79:40:FB:EF:56:B4:40:85:81:F5:D3:9C X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Dbdu-sAYIxR5QPvvVrRAhYH105w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.91.0/24 Signature Algorithm: sha256WithRSAEncryption 85:f9:88:8c:1b:f4:be:f3:ba:fe:3e:21:b4:dc:5f:71:0c:5f: cb:ab:b3:ca:69:9f:12:95:6c:d5:1f:43:b5:6d:ff:e8:85:0b: 68:59:63:d3:f9:44:17:d8:d2:70:05:91:d0:a2:c6:1b:96:86: 34:01:ac:39:31:29:01:1d:1c:99:d2:88:19:7a:79:2d:99:e0: 71:68:b7:be:e6:a4:f0:e0:1d:61:a5:3b:ba:4d:c3:c7:8f:d4: 12:6c:4b:23:11:87:13:f4:5a:ad:4b:01:18:d0:31:a2:4f:7a: ed:1d:d3:71:33:ca:dc:ab:ed:a3:74:00:d4:a4:e5:81:0e:f5: 62:60:a6:ce:1d:a5:04:49:31:9c:a9:12:ab:dd:12:e2:79:67: 6f:09:ca:11:28:9b:2f:e0:93:3c:d0:a8:4d:8b:8d:61:75:3f: 14:5c:96:75:f7:63:f7:c5:96:f0:27:3a:de:f1:87:98:84:73: 36:7f:e3:36:c8:c5:b5:44:60:a3:3d:73:ef:d9:1f:64:3a:16: 0a:97:30:2b:11:27:97:49:14:24:4c:b9:94:3a:63:81:75:24: e8:e1:8e:63:bd:b5:5b:1b:e8:26:56:48:17:11:c0:63:75:06: 94:01:58:41:5c:68:5b:dd:e4:13:5d:0e:12:26:e8:e4:91:8b: c8:2f:b7:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yCqoec3LPg581Bj/rWEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGI3NmVmYWMwMTgyMzE0Nzk0MGZiZWY1NmI0NDA4NTgxZjVkMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRCVlmdN7OX+ijHMe1eJrK9p+rTY mZwSjyySC6a3PEbg4N1IwWiHcMj+XI27li8PQzRfyEo6JYq9d08s/Amear8dY9vJ kMAAlvxzPIAW0WlS9w1SgFYLb3inOvIshWEiM+BGAz4xxmX8sL0dbJ2sxepZ/XvO H1ofQ4Kj1D6U0MNtkiVVDh+T8B0o+mApHEreaib7dmkwSnYHKJkKoJQXsIqMcHP+ FQ850IoczZEABfLVsGbBW1UNYdGKwlQ9hPw0hdE8mKUzEYe/TtM1LUNg5np0BliQ jJ1TKo/ER3o4Gs/cJVUL81nu+5T8On0E57ckMovoyWDK8x/vaFEc1dcaLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA23bvrAGCMUeUD771a0QIWB9dOcMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvRGJkdS1zQVlJeFI1UVB2dlZyUkFoWUgxMDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNbMA0G CSqGSIb3DQEBCwUAA4IBAQCF+YiMG/S+87r+PiG03F9xDF/Lq7PKaZ8SlWzVH0O1 bf/ohQtoWWPT+UQX2NJwBZHQosYbloY0Aaw5MSkBHRyZ0ogZenktmeBxaLe+5qTw 4B1hpTu6TcPHj9QSbEsjEYcT9FqtSwEY0DGiT3rtHdNxM8rcq+2jdADUpOWBDvVi YKbOHaUESTGcqRKr3RLieWdvCcoRKJsv4JM80KhNi41hdT8UXJZ192P3xZbwJzre 8YeYhHM2f+M2yMW1RGCjPXPv2R9kOhYKlzArESeXSRQkTLmUOmOBdSTo4Y5jvbVb G+gmVkgXEcBjdQaUAVhBXGhb3eQTXQ4SJujkkYvIL7dC -----END CERTIFICATE-----Generated at Tue Jan 20 00:06:17 2026 by rpki-client