This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/dDBO-S6Wp6dejnuaBq43TxSUg-A.roa File: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (raw, json) Hash identifier: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y= Subject key identifier: 74:30:4E:F9:2E:96:A7:A7:5E:8E:7B:9A:06:AE:37:4F:14:94:83:E0 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019B7A5B3EBB150B4A3FB4FE24B50DFB6224 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/dDBO-S6Wp6dejnuaBq43TxSUg-A.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206119 IP address blocks: 5.181.19.0/24 maxlen: 24 5.182.244.0/24 maxlen: 24 5.182.245.0/24 maxlen: 24 5.182.246.0/24 maxlen: 24 89.200.216.0/24 maxlen: 24 89.200.217.0/24 maxlen: 24 89.200.218.0/24 maxlen: 24 93.157.189.0/24 maxlen: 24 93.157.191.0/24 maxlen: 24 146.19.12.0/24 maxlen: 24 185.93.52.0/24 maxlen: 24 185.93.53.0/24 maxlen: 24 185.93.54.0/24 maxlen: 24 185.93.55.0/24 maxlen: 24 185.107.132.0/24 maxlen: 24 185.195.253.0/24 maxlen: 24 185.195.254.0/24 maxlen: 24 185.195.255.0/24 maxlen: 24 185.233.245.0/24 maxlen: 24 185.233.246.0/24 maxlen: 24 185.233.247.0/24 maxlen: 24 2a05:f740::/29 maxlen: 29 2a06:af40::/29 maxlen: 29 2a0a:61c0::/29 maxlen: 29 2a0c:f700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3e:bb:15:0b:4a:3f:b4:fe:24:b5:0d:fb:62:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74304ef92e96a7a75e8e7b9a06ae374f149483e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:71:0c:8d:f2:87:32:77:f2:6b:d6:8b:95: 87:69:75:5f:87:71:17:c6:bd:e1:33:dc:a8:7d:04: 95:e8:a5:de:ed:af:03:d9:8f:e4:90:46:42:6a:88: 60:96:56:93:e1:60:e0:2c:c3:04:c5:b0:9e:21:3f: 48:2c:52:8e:12:3a:2e:da:ac:bb:5c:2a:36:67:58: ed:ea:11:52:12:51:15:50:19:91:ad:19:24:1d:28: bf:31:c0:96:e1:2a:68:b7:48:a2:f8:47:52:b6:ef: 93:37:89:e2:9c:4b:08:70:b4:5b:94:11:1d:51:bb: fd:68:cd:70:d3:7f:a4:97:73:c5:14:75:05:4f:7d: 85:0f:bd:69:4a:f3:67:18:41:2d:97:cb:46:4d:32: 23:b6:6c:d5:e4:53:6b:7f:ab:80:5a:ee:01:61:98: 61:7e:15:51:84:95:40:22:61:5a:c2:c8:0e:8b:44: ce:42:8b:7b:2c:d4:08:3b:45:7b:ac:30:fa:9e:13: 78:9d:a5:a3:81:cb:a6:46:91:99:ff:18:c0:ef:99: 21:1f:26:14:40:ad:4b:57:46:6a:49:43:ba:c3:d5: 4c:af:bb:47:ad:f9:52:1d:07:a3:30:85:4d:a2:31: 8a:67:0b:57:d6:81:1a:72:0d:ba:dd:5a:23:ac:80: a8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:30:4E:F9:2E:96:A7:A7:5E:8E:7B:9A:06:AE:37:4F:14:94:83:E0 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/dDBO-S6Wp6dejnuaBq43TxSUg-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.19.0/24 5.182.244.0-5.182.246.255 89.200.216.0-89.200.218.255 93.157.189.0/24 93.157.191.0/24 146.19.12.0/24 185.93.52.0/22 185.107.132.0/24 185.195.253.0-185.195.255.255 185.233.245.0-185.233.247.255 IPv6: 2a05:f740::/29 2a06:af40::/29 2a0a:61c0::/29 2a0c:f700::/29 Signature Algorithm: sha256WithRSAEncryption 23:88:65:73:ab:f5:c6:81:4a:9c:51:90:52:0d:87:ce:d4:dc: 4b:c2:11:7a:b9:41:49:a4:5d:77:a4:f9:ad:ae:d5:4d:8c:b9: 22:61:f8:6b:c7:e5:c8:da:8c:23:e6:2a:b1:81:d9:5a:09:dc: c2:4d:06:df:2f:5b:26:9b:6c:65:83:50:e8:68:ed:3b:66:ec: 7e:38:79:40:27:50:0a:47:39:85:0e:31:89:4c:4d:5c:97:fd: 14:0b:cf:f9:83:e3:f8:3b:81:96:59:a9:91:5d:2f:2c:77:01: e0:02:92:b9:25:98:67:81:0a:d6:53:81:c6:b4:8e:ce:d1:d3: 4a:f1:98:59:3f:dd:70:1f:6b:80:ab:bf:b7:59:eb:05:b7:6e: 2c:56:60:0e:17:4b:3b:7c:ce:85:c5:1f:f5:0e:2e:6c:be:9a: b7:db:a4:8c:1b:7c:23:30:4e:08:b0:ba:41:c6:3e:a2:21:33: 5d:21:de:eb:8b:92:2d:27:27:d4:47:02:ac:a7:5a:1f:40:92: 2f:25:36:bd:7d:28:83:ad:8d:98:d3:48:10:2c:69:98:7b:cc: e1:d6:ea:13:e4:b2:1d:b9:a7:06:95:44:1d:c2:96:5c:f0:73: 66:c9:af:ff:9c:15:71:96:c3:3c:4c:f2:6a:4b:b4:a1:a7:11: e4:5d:48:a3 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt6Wz67FQtKP7T+JLUN+2IkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDMwNGVmOTJlOTZhN2E3NWU4ZTdiOWEwNmFlMzc0ZjE0OTQ4M2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXxxDI3yhzJ38mvWi5WHaXVfh3EX xr3hM9yofQSV6KXe7a8D2Y/kkEZCaohgllaT4WDgLMMExbCeIT9ILFKOEjou2qy7 XCo2Z1jt6hFSElEVUBmRrRkkHSi/McCW4Spot0ii+EdStu+TN4ninEsIcLRblBEd Ubv9aM1w03+kl3PFFHUFT32FD71pSvNnGEEtl8tGTTIjtmzV5FNrf6uAWu4BYZhh fhVRhJVAImFawsgOi0TOQot7LNQIO0V7rDD6nhN4naWjgcumRpGZ/xjA75khHyYU QK1LV0ZqSUO6w9VMr7tHrflSHQejMIVNojGKZwtX1oEacg263VojrICofwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFHQwTvkulqenXo57mgauN08UlIPgMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvZERCTy1TNldwNmRlam51YUJxNDNUeFNVZy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzBhBAIAATBbAwQABbUT MAwDBAIFtvQDBAAFtvYwDAMEA1nI2AMEAFnI2gMEAF2dvQMEAF2dvwMEAJITDAME ArldNAMEALlrhDALAwQAucP9AwMCucAwDAMEALnp9QMEA7np8DAiBAIAAjAcAwUD KgX3QAMFAyoGr0ADBQMqCmHAAwUDKgz3ADANBgkqhkiG9w0BAQsFAAOCAQEAI4hl c6v1xoFKnFGQUg2HztTcS8IRerlBSaRdd6T5ra7VTYy5ImH4a8flyNqMI+YqsYHZ Wgncwk0G3y9bJptsZYNQ6GjtO2bsfjh5QCdQCkc5hQ4xiUxNXJf9FAvP+YPj+DuB llmpkV0vLHcB4AKSuSWYZ4EK1lOBxrSOztHTSvGYWT/dcB9rgKu/t1nrBbduLFZg DhdLO3zOhcUf9Q4ubL6at9ukjBt8IzBOCLC6QcY+oiEzXSHe64uSLScn1EcCrKda H0CSLyU2vX0og62NmNNIECxpmHvM4dbqE+SyHbmnBpVEHcKWXPBzZsmv/5wVcZbD PEzyaku0oacR5F1Iow== -----END CERTIFICATE-----Generated at Wed Jan 21 22:07:44 2026 by rpki-client