This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/DCrG4g3sJo2PisD_hc4NckgDZw8.roa File: DCrG4g3sJo2PisD_hc4NckgDZw8.roa (raw, json) Hash identifier: FifxalB73pfyrHIphM4RguBQlmOIeI0ZS9qLf/+J8cI= Subject key identifier: 0C:2A:C6:E2:0D:EC:26:8D:8F:8A:C0:FF:85:CE:0D:72:48:03:67:0F Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2 Certificate serial: 019B7910E90645D5B2EB3B356C34E0F800B9 Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/DCrG4g3sJo2PisD_hc4NckgDZw8.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203485 IP address blocks: 185.133.92.0/22 maxlen: 24 2a05:40::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e9:06:45:d5:b2:eb:3b:35:6c:34:e0:f8:00:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c2ac6e20dec268d8f8ac0ff85ce0d724803670f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:9f:f4:09:46:d8:66:54:9f:dd:36:2f:7b: ef:3f:75:da:39:3a:8c:b0:ec:f5:66:ea:83:67:94: 62:6f:14:99:7e:68:f0:10:30:00:68:25:c9:ad:3a: a8:04:b7:0c:e6:7f:7f:47:bb:2e:60:bb:6c:e4:93: 5f:84:2e:cf:62:6d:df:97:3b:81:d1:a6:0b:36:e8: 32:7d:79:73:7d:10:6a:8e:23:b6:ae:5b:4e:f2:d2: 67:a1:06:75:ae:ca:53:50:33:ac:c6:5f:17:77:db: e0:ec:b3:04:cc:3b:e8:6e:aa:ff:a5:e6:1e:16:33: 65:7e:40:ae:7c:52:2c:9c:ca:64:c0:15:47:7a:ac: 9e:08:61:06:c8:1b:e0:77:0e:41:52:db:8f:14:44: 8c:10:df:4a:7d:6e:1b:90:f9:59:6f:0e:cd:3e:b4: fe:62:23:4b:64:f1:2b:f5:fd:40:b7:e3:a6:a7:9a: 53:61:e2:1f:6f:19:67:b6:aa:07:bb:1f:fa:fc:bf: 5e:14:7c:54:db:8a:0e:b0:44:d3:c3:87:6b:77:18: 65:d9:0a:f8:f4:57:c1:ae:f5:8c:8b:6e:79:fc:82: 42:72:8c:5f:de:66:d8:e3:eb:40:93:5c:14:01:1b: 26:8c:cb:74:49:5b:b4:c7:06:eb:27:40:d7:03:29: f5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2A:C6:E2:0D:EC:26:8D:8F:8A:C0:FF:85:CE:0D:72:48:03:67:0F X509v3 Authority Key Identifier: keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/DCrG4g3sJo2PisD_hc4NckgDZw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.92.0/22 IPv6: 2a05:40::/29 Signature Algorithm: sha256WithRSAEncryption 0a:46:b8:f7:eb:e4:0c:73:e8:3d:62:4c:68:c0:1f:bb:d7:f4: a9:4d:af:d8:a0:ab:e2:27:a8:01:88:14:20:80:76:ad:0e:12: 24:3b:18:d9:17:7b:18:3d:45:0f:6e:fa:66:88:45:4d:4b:52: 66:56:66:52:9b:63:d9:13:a8:6c:d0:9d:41:d1:6a:99:bc:04: bf:4d:fc:fa:30:c7:52:37:c7:e1:14:ea:80:f5:a7:9d:50:53: 6a:20:a8:78:ca:aa:f7:0a:6d:5b:ab:e2:ea:54:a0:43:13:8d: a3:53:29:86:27:91:f8:d6:d5:e7:8b:ab:9a:28:e4:09:40:08: 84:3b:05:9e:a0:e7:2f:23:af:c6:c5:c4:ca:ef:dd:e7:a5:84: 60:97:15:64:5a:47:f7:eb:fc:ca:42:31:3f:ed:c0:15:fd:53: 5d:db:17:5f:d1:b4:75:59:06:05:5e:00:bd:60:5b:45:ca:c3: 99:fd:08:6c:eb:6a:9f:00:af:c8:46:ec:9f:a1:02:39:f4:fc: d4:49:50:fd:df:83:0a:a7:2b:0c:ca:f7:b1:c8:20:73:e8:36: ca:4d:76:f0:6d:63:0a:75:fc:36:e6:17:15:08:69:14:2f:4e: 30:7a:26:30:f6:e6:94:0a:0e:30:bf:1e:ae:b5:6c:c6:74:e2: 10:06:19:af -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EOkGRdWy6zs1bDTg+AC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZGJhOTUyOTBhOTg1YTY5Nzc2M2QzMGFiNDJmOWMzNzg0 MDc4YjIwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzJhYzZlMjBkZWMyNjhkOGY4YWMwZmY4NWNlMGQ3MjQ4MDM2NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo+f9AlG2GZUn902L3vvP3XaOTqM sOz1ZuqDZ5RibxSZfmjwEDAAaCXJrTqoBLcM5n9/R7suYLts5JNfhC7PYm3flzuB 0aYLNugyfXlzfRBqjiO2rltO8tJnoQZ1rspTUDOsxl8Xd9vg7LMEzDvobqr/peYe FjNlfkCufFIsnMpkwBVHeqyeCGEGyBvgdw5BUtuPFESMEN9KfW4bkPlZbw7NPrT+ YiNLZPEr9f1At+Omp5pTYeIfbxlntqoHux/6/L9eFHxU24oOsETTw4drdxhl2Qr4 9FfBrvWMi255/IJCcoxf3mbY4+tAk1wUARsmjMt0SVu0xwbrJ0DXAyn1/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAwqxuIN7CaNj4rA/4XODXJIA2cPMB8GA1UdIwQY MBaAFJvbqVKQqYWml3Y9MKtC+cN4QHiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQt ODBhNjZjMGZjODg0LzEvRENyRzRnM3NKbzJQaXNEX2hjNE5ja2dEWnc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQtODBhNjZjMGZjODg0 LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYVcMA0E AgACMAcDBQMqBQBAMA0GCSqGSIb3DQEBCwUAA4IBAQAKRrj36+QMc+g9YkxowB+7 1/SpTa/YoKviJ6gBiBQggHatDhIkOxjZF3sYPUUPbvpmiEVNS1JmVmZSm2PZE6hs 0J1B0WqZvAS/Tfz6MMdSN8fhFOqA9aedUFNqIKh4yqr3Cm1bq+LqVKBDE42jUymG J5H41tXni6uaKOQJQAiEOwWeoOcvI6/GxcTK793npYRglxVkWkf36/zKQjE/7cAV /VNd2xdf0bR1WQYFXgC9YFtFysOZ/Qhs62qfAK/IRuyfoQI59PzUSVD934MKpysM yvexyCBz6DbKTXbwbWMKdfw25hcVCGkUL04weiYw9uaUCg4wvx6utWzGdOIQBhmv -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:22 2026 by rpki-client