This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa File: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (raw, json) Hash identifier: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw= Subject key identifier: 75:FA:FB:BA:86:D7:FF:0E:25:43:88:BD:C8:D8:D4:1D:85:A9:E2:8C Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99 Certificate serial: 019B7CEDB819BFCBC533A86FAB99EF8AC296 Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa Signing time: Fri 02 Jan 2026 04:18:32 +0000 ROA not before: Fri 02 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198063 IP address blocks: 194.116.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b8:19:bf:cb:c5:33:a8:6f:ab:99:ef:8a:c2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04248504b54555a9443b02a33d351a902863bb99 Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75fafbba86d7ff0e254388bdc8d8d41d85a9e28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:95:60:f5:cb:bc:a0:95:1a:1a:29:c3:49: 99:c3:b9:52:af:9d:42:05:bc:91:48:25:7f:44:f3: 3b:a9:0b:56:f4:df:45:37:62:91:03:a4:e0:ff:29: ab:9d:b1:c3:2b:c3:30:aa:70:b6:45:d2:39:45:77: 82:50:cf:60:33:1f:ef:de:1d:c2:9c:96:10:fd:dc: cf:a3:dc:65:f5:5f:28:c7:92:da:30:67:1c:90:df: 8d:34:f2:e5:0b:59:23:ec:fb:eb:a5:27:b0:4b:0b: ad:11:a4:57:26:6f:53:c2:11:0f:a6:40:8e:60:4b: 23:52:53:79:0f:d1:a6:4f:1c:61:29:be:d9:f2:23: 3c:f0:cc:8d:58:64:57:0d:30:dd:aa:87:3c:b7:59: 9c:3c:be:ab:68:8f:d4:e8:a4:cf:30:02:e4:0b:6f: 53:e9:df:9d:f2:7e:84:6b:e6:43:ad:51:69:67:f0: 48:32:3c:33:6d:e2:f5:f6:f5:36:85:7d:b7:b8:e7: d9:9c:50:79:5a:29:92:67:64:bd:eb:c1:de:d9:b1: 1f:f5:f8:db:38:7d:31:88:00:8a:d6:0f:e9:c1:09: e5:c6:31:a4:44:af:d5:1e:03:86:53:11:c6:b5:f7: 49:42:cc:d1:98:68:e3:4e:dd:ef:2b:d5:8f:cd:7e: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FA:FB:BA:86:D7:FF:0E:25:43:88:BD:C8:D8:D4:1D:85:A9:E2:8C X509v3 Authority Key Identifier: keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.167.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:04:b4:9f:36:47:2f:02:5a:20:4f:18:2b:63:61:7e:6d:4a: 7e:eb:a3:c6:2a:87:da:6d:fb:b1:d7:86:f6:db:3a:67:8d:02: 6c:57:5b:e9:3a:67:c6:2d:b1:4c:97:75:39:10:53:5d:8a:a2: 6f:38:27:96:ae:a6:85:d1:79:7a:a4:2f:27:89:8b:12:ac:ea: eb:10:ee:37:c5:84:fe:79:41:55:b2:32:d0:35:68:78:ab:ca: db:a0:55:5d:7b:92:6a:85:b7:95:b6:ad:c9:38:de:c4:74:c2: c7:ad:38:9c:b4:41:ba:b8:d4:25:74:a1:e6:ee:7b:e9:ab:59: c0:3c:37:38:41:48:67:7f:93:21:4b:68:53:44:64:d3:b6:ac: 8b:b3:44:2f:18:c8:4d:63:4c:86:f8:c5:c1:af:73:7a:0e:a0: a1:b8:c0:0f:b4:92:c7:24:d3:4c:17:2d:ff:33:eb:dd:63:59: 99:a3:6b:70:74:fc:bd:b4:42:95:f6:6b:e7:8c:39:b0:05:0a: 8c:c0:55:2f:2d:99:c2:40:36:61:8a:a5:36:dd:df:23:2d:6d: 29:cf:19:64:8a:0d:a1:85:fc:48:64:be:ff:65:58:c0:19:79: a2:6a:ea:53:1c:f7:53:b4:76:9e:9f:c9:ef:47:e6:c3:aa:97: 04:9a:27:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bgZv8vFM6hvq5nvisKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjQ4NTA0YjU0NTU1YTk0NDNiMDJhMzNkMzUxYTkwMjg2 M2JiOTkwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWZhZmJiYTg2ZDdmZjBlMjU0Mzg4YmRjOGQ4ZDQxZDg1YTllMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5uVYPXLvKCVGhopw0mZw7lSr51C BbyRSCV/RPM7qQtW9N9FN2KRA6Tg/ymrnbHDK8MwqnC2RdI5RXeCUM9gMx/v3h3C nJYQ/dzPo9xl9V8ox5LaMGcckN+NNPLlC1kj7PvrpSewSwutEaRXJm9TwhEPpkCO YEsjUlN5D9GmTxxhKb7Z8iM88MyNWGRXDTDdqoc8t1mcPL6raI/U6KTPMALkC29T 6d+d8n6Ea+ZDrVFpZ/BIMjwzbeL19vU2hX23uOfZnFB5WimSZ2S968He2bEf9fjb OH0xiACK1g/pwQnlxjGkRK/VHgOGUxHGtfdJQszRmGjjTt3vK9WPzX56UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHX6+7qG1/8OJUOIvcjY1B2FqeKMMB8GA1UdIwQY MBaAFAQkhQS1RVWpRDsCoz01GpAoY7uZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iOGJiMWEtYTg4ZS00YjJmLTk4N2Yt NDcwMTVhNjA3N2IyLzEvZGZyN3VvYlhfdzRsUTRpOXlOalVIWVdwNG93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iOGJiMWEtYTg4ZS00YjJmLTk4N2YtNDcwMTVhNjA3N2Iy LzEvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnSnMA0G CSqGSIb3DQEBCwUAA4IBAQB/BLSfNkcvAlogTxgrY2F+bUp+66PGKofabfux14b2 2zpnjQJsV1vpOmfGLbFMl3U5EFNdiqJvOCeWrqaF0Xl6pC8niYsSrOrrEO43xYT+ eUFVsjLQNWh4q8rboFVde5JqhbeVtq3JON7EdMLHrTictEG6uNQldKHm7nvpq1nA PDc4QUhnf5MhS2hTRGTTtqyLs0QvGMhNY0yG+MXBr3N6DqChuMAPtJLHJNNMFy3/ M+vdY1mZo2twdPy9tEKV9mvnjDmwBQqMwFUvLZnCQDZhiqU23d8jLW0pzxlkig2h hfxIZL7/ZVjAGXmiaupTHPdTtHaen8nvR+bDqpcEmieq -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:05 2026 by rpki-client