This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DrIKwsX0-9OYFOClIceWQnVYZSY.roa File: DrIKwsX0-9OYFOClIceWQnVYZSY.roa (raw, json) Hash identifier: QQucCyfp9MAfsF69cEXGJJCL1kFEd3XBtKPpnHgnsrw= Subject key identifier: 0E:B2:0A:C2:C5:F4:FB:D3:98:14:E0:A5:21:C7:96:42:75:58:65:26 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A337236C2E979B934DD4C10C47CCC8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DrIKwsX0-9OYFOClIceWQnVYZSY.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209193 IP address blocks: 83.171.206.0/24 maxlen: 24 83.171.207.0/24 maxlen: 24 185.147.100.0/24 maxlen: 24 185.147.101.0/24 maxlen: 24 185.147.102.0/24 maxlen: 24 185.147.103.0/24 maxlen: 24 185.207.12.0/24 maxlen: 24 185.216.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:37:23:6c:2e:97:9b:93:4d:d4:c1:0c:47:cc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eb20ac2c5f4fbd39814e0a521c7964275586526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b2:1a:4c:29:e1:35:8d:b6:6f:fe:22:97:14: 34:83:61:c0:3e:93:24:ab:a5:9a:96:3d:7e:fa:a2: d1:7c:00:ae:f7:80:10:46:2f:f3:e7:22:fd:52:4f: 9a:2e:b2:a6:1d:fd:ae:77:39:38:31:d9:82:a9:0e: 00:66:a4:ac:c2:f9:5f:ec:da:9a:df:89:5a:a4:41: d0:15:5e:5e:01:7c:94:3e:33:29:ad:69:60:2d:8b: 15:2a:7c:7d:f1:f8:d2:b3:a0:36:83:ea:c8:1a:d0: af:cd:98:da:03:8a:10:20:18:06:d3:b5:3c:f7:e5: c1:87:f0:98:ec:c2:a7:cd:b4:63:ca:9e:48:d5:2b: 97:f2:ef:47:45:3f:b7:c5:bb:82:fe:14:38:25:ff: ae:72:fe:3c:d7:bf:0d:77:f1:92:a2:2b:fd:7c:8b: 17:b9:39:90:ef:03:f4:1a:f0:42:21:0b:55:2c:06: 3f:28:59:55:b6:94:39:84:26:af:27:10:92:ec:05: 34:a6:9d:ff:49:39:ee:ea:37:05:a3:6f:76:b7:37: 46:13:da:f7:66:42:d5:b6:61:fc:3f:22:92:d7:97: 6a:66:9d:7b:97:ea:75:fe:2e:38:e6:b2:49:80:8a: 01:04:94:f4:21:17:ad:d9:47:13:52:5a:41:b5:56: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B2:0A:C2:C5:F4:FB:D3:98:14:E0:A5:21:C7:96:42:75:58:65:26 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DrIKwsX0-9OYFOClIceWQnVYZSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.206.0/23 185.147.100.0/22 185.207.12.0/24 185.216.69.0/24 Signature Algorithm: sha256WithRSAEncryption 25:b5:9d:df:3e:11:2b:9c:50:37:e4:c5:83:62:6d:24:4d:6b: d8:08:ef:c1:99:1e:dd:f8:c3:d0:fa:0e:99:41:ec:4a:1f:d3: 34:c4:6f:f0:ad:3c:47:3c:7f:aa:b1:5c:25:b8:38:cf:29:37: 8e:38:ea:f7:2b:e7:2c:e8:66:18:40:aa:70:4a:e3:01:fa:89: ad:9c:21:99:d4:7e:14:7f:15:e3:c0:2b:e2:ac:40:10:71:6c: 4b:fc:5d:45:40:75:15:bb:44:bf:63:08:6d:25:23:69:5d:ed: 72:cc:be:5b:67:96:36:91:41:98:c9:dc:a1:97:2c:5f:22:86: c1:23:4f:d1:93:bc:be:b3:d0:a8:ac:6d:cb:08:00:8d:e0:2f: 14:9d:ab:1f:f7:11:eb:59:90:5d:ac:7f:d9:65:fd:3e:2a:1d: a1:3f:76:69:f3:3d:43:38:3f:67:e1:05:1e:b8:62:80:82:e4: fb:80:91:37:47:2a:38:5e:59:b3:96:f4:70:15:62:1e:3a:9e: a3:bd:85:dd:12:49:aa:63:ec:79:67:92:ea:1a:a3:52:71:d0: c5:5f:3c:28:a0:1c:e9:7a:90:73:b5:9f:14:f4:4d:0b:e9:06: ec:9c:ad:6a:a9:46:d2:e6:b3:32:1c:fe:ec:d6:31:92:8b:70: fc:ad:5b:9b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4ozcjbC6Xm5NN1MEMR8zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWIyMGFjMmM1ZjRmYmQzOTgxNGUwYTUyMWM3OTY0Mjc1NTg2NTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27IaTCnhNY22b/4ilxQ0g2HAPpMk q6Walj1++qLRfACu94AQRi/z5yL9Uk+aLrKmHf2udzk4MdmCqQ4AZqSswvlf7Nqa 34lapEHQFV5eAXyUPjMprWlgLYsVKnx98fjSs6A2g+rIGtCvzZjaA4oQIBgG07U8 9+XBh/CY7MKnzbRjyp5I1SuX8u9HRT+3xbuC/hQ4Jf+ucv48178Nd/GSoiv9fIsX uTmQ7wP0GvBCIQtVLAY/KFlVtpQ5hCavJxCS7AU0pp3/STnu6jcFo292tzdGE9r3 ZkLVtmH8PyKS15dqZp17l+p1/i445rJJgIoBBJT0IRet2UcTUlpBtVb8TwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA6yCsLF9PvTmBTgpSHHlkJ1WGUmMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRHJJS3dzWDAtOU9ZRk9DbEljZVdRblZZWlNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBU6vOAwQC uZNkAwQAuc8MAwQAudhFMA0GCSqGSIb3DQEBCwUAA4IBAQAltZ3fPhErnFA35MWD Ym0kTWvYCO/BmR7d+MPQ+g6ZQexKH9M0xG/wrTxHPH+qsVwluDjPKTeOOOr3K+cs 6GYYQKpwSuMB+omtnCGZ1H4UfxXjwCvirEAQcWxL/F1FQHUVu0S/YwhtJSNpXe1y zL5bZ5Y2kUGYydyhlyxfIobBI0/Rk7y+s9CorG3LCACN4C8Unasf9xHrWZBdrH/Z Zf0+Kh2hP3Zp8z1DOD9n4QUeuGKAguT7gJE3Ryo4XlmzlvRwFWIeOp6jvYXdEkmq Y+x5Z5LqGqNScdDFXzwooBzpepBztZ8U9E0L6QbsnK1qqUbS5rMyHP7s1jGSi3D8 rVub -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:56 2026 by rpki-client