This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/da21FZlB-EiwRoOLCN5ITMfxNFo.roa File: da21FZlB-EiwRoOLCN5ITMfxNFo.roa (raw, json) Hash identifier: 1w1sUJ0dtbKqnb7RxW32/zqJ1lJ/MMxyHIhHBbfSnXc= Subject key identifier: 75:AD:B5:15:99:41:F8:48:B0:46:83:8B:08:DE:48:4C:C7:F1:34:5A Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Certificate serial: 019B7E38F0D8D5851EFBB48A9976081C200A Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/da21FZlB-EiwRoOLCN5ITMfxNFo.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.162.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f0:d8:d5:85:1e:fb:b4:8a:99:76:08:1c:20:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75adb5159941f848b046838b08de484cc7f1345a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:e6:2b:bb:ea:8c:6d:ca:f2:5a:e6:80:52: f1:50:5e:22:46:ac:2d:9f:fa:5c:6c:14:bb:6a:f6: 52:77:54:fe:a8:d7:80:14:5d:d3:a6:14:3e:21:95: b5:f1:d9:e7:f3:96:f0:3c:10:b8:0a:27:dc:5a:ea: 0f:1b:de:e2:52:7b:5d:b1:e6:f4:b0:2d:31:62:2d: 24:e9:81:f1:57:14:d3:25:70:78:95:a0:ab:42:c5: 7b:f5:1c:3a:c5:1e:2e:17:74:c5:73:89:3d:cf:18: 90:e0:de:9c:c1:43:10:5d:80:ec:30:6e:97:38:40: dd:54:9e:00:9f:ab:dc:3c:aa:9f:6d:f1:20:71:cd: a0:c8:b9:35:b8:0f:ec:d7:0f:cb:fa:bd:79:cd:3f: 6e:b1:57:5b:2d:d7:00:11:21:76:f7:93:19:ec:67: 7b:15:e1:72:eb:e1:07:6f:64:c6:23:da:7e:19:98: a0:b3:f6:00:69:83:1b:7d:8c:2f:a1:76:d9:11:d7: 88:d6:61:71:0d:0f:88:c4:9f:a9:de:f9:8c:25:1b: f9:3e:38:6a:f2:0d:84:c8:3b:37:98:46:f9:e1:ee: de:15:74:e9:b9:a7:fc:a4:7a:8f:91:68:01:ab:27: a4:b5:ac:03:a9:89:54:c9:97:49:ee:b7:53:82:90: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AD:B5:15:99:41:F8:48:B0:46:83:8B:08:DE:48:4C:C7:F1:34:5A X509v3 Authority Key Identifier: keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/da21FZlB-EiwRoOLCN5ITMfxNFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.103.0/24 Signature Algorithm: sha256WithRSAEncryption 06:4f:27:6c:47:10:b5:cc:b3:b4:05:05:a7:d5:25:b2:38:79: 6a:9a:a6:b1:66:31:e0:91:bf:72:45:31:97:d7:99:ff:34:c9: 52:1a:cd:0c:14:8d:d9:35:06:7b:ac:4f:8f:8d:4f:de:1b:62: 1c:5b:ef:a7:5e:05:05:67:b2:03:d9:87:ff:db:c1:54:84:5a: de:cb:fb:5a:fb:84:29:26:69:11:15:8a:fd:b9:a7:31:eb:07: 0f:e9:c1:ae:58:0b:bf:7a:94:3e:00:2c:c5:4a:01:95:8c:2e: d2:b6:f5:dd:a9:03:d5:c7:d6:af:30:3c:c9:02:c9:cb:70:3e: 45:60:02:d1:ea:56:d2:8e:43:8f:80:c0:4a:9f:a3:2a:ff:8b: a1:9e:f4:de:4a:6e:a2:f1:09:fa:76:0a:6b:09:02:b1:64:ba: bb:86:1b:ef:d6:9e:1e:a2:de:de:32:18:6e:33:86:35:7c:00: ea:52:9c:34:8c:f2:c5:80:6a:27:3f:62:33:07:7f:f7:37:ac: 1d:48:06:ba:43:e5:cb:30:af:80:e6:ec:96:7c:f8:26:65:fe: ed:b4:5c:c3:27:0e:82:e2:e2:ca:1b:8b:36:66:c3:2f:aa:45: 70:58:5c:69:4e:c8:07:e0:fa:9f:b3:10:49:a3:d0:84:66:e6: 53:9d:80:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPDY1YUe+7SKmXYIHCAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODA3YTNkY2JjMDI1YWNmNjk3YmVmODFlNDAzYjRhOTZj ZmJiNTEwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWFkYjUxNTk5NDFmODQ4YjA0NjgzOGIwOGRlNDg0Y2M3ZjEzNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApffmK7vqjG3K8lrmgFLxUF4iRqwt n/pcbBS7avZSd1T+qNeAFF3TphQ+IZW18dnn85bwPBC4CifcWuoPG97iUntdseb0 sC0xYi0k6YHxVxTTJXB4laCrQsV79Rw6xR4uF3TFc4k9zxiQ4N6cwUMQXYDsMG6X OEDdVJ4An6vcPKqfbfEgcc2gyLk1uA/s1w/L+r15zT9usVdbLdcAESF295MZ7Gd7 FeFy6+EHb2TGI9p+GZigs/YAaYMbfYwvoXbZEdeI1mFxDQ+IxJ+p3vmMJRv5Pjhq 8g2EyDs3mEb54e7eFXTpuaf8pHqPkWgBqyektawDqYlUyZdJ7rdTgpB87QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWttRWZQfhIsEaDiwjeSEzH8TRaMB8GA1UdIwQY MBaAFFWAej3LwCWs9pe++B5AO0qWz7tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTct N2UyMTdiZWYyZDllLzEvZGEyMUZabEItRWl3Um9PTENONUlUTWZ4TkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTctN2UyMTdiZWYyZDll LzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaJnMA0G CSqGSIb3DQEBCwUAA4IBAQAGTydsRxC1zLO0BQWn1SWyOHlqmqaxZjHgkb9yRTGX 15n/NMlSGs0MFI3ZNQZ7rE+PjU/eG2IcW++nXgUFZ7ID2Yf/28FUhFrey/ta+4Qp JmkRFYr9uacx6wcP6cGuWAu/epQ+ACzFSgGVjC7StvXdqQPVx9avMDzJAsnLcD5F YALR6lbSjkOPgMBKn6Mq/4uhnvTeSm6i8Qn6dgprCQKxZLq7hhvv1p4eot7eMhhu M4Y1fADqUpw0jPLFgGonP2IzB3/3N6wdSAa6Q+XLMK+A5uyWfPgmZf7ttFzDJw6C 4uLKG4s2ZsMvqkVwWFxpTsgH4PqfsxBJo9CEZuZTnYD7 -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:32 2026 by rpki-client