This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/drsnkuosbg6qvFQb_xFsNGudfnU.roa File: drsnkuosbg6qvFQb_xFsNGudfnU.roa (raw, json) Hash identifier: NBvp9SPTa0IGtzv6khJhiENmtNEIw9wGReWShX2mC+o= Subject key identifier: 76:BB:27:92:EA:2C:6E:0E:AA:BC:54:1B:FF:11:6C:34:6B:9D:7E:75 Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb Certificate serial: 019B797DEB96212B84A839C6F7F578C0E171 Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/drsnkuosbg6qvFQb_xFsNGudfnU.roa Signing time: Thu 01 Jan 2026 12:17:33 +0000 ROA not before: Thu 01 Jan 2026 12:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 91.201.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:eb:96:21:2b:84:a8:39:c6:f7:f5:78:c0:e1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76bb2792ea2c6e0eaabc541bff116c346b9d7e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:76:cf:a5:37:2d:cb:a4:e2:42:73:99:1d:c6: 06:9a:fb:46:9b:73:88:ae:80:f7:c3:7d:a9:24:d3: 7a:8a:46:59:43:a6:84:e9:23:db:b2:7e:8b:89:55: a4:52:49:61:c9:ef:be:f6:d2:20:9c:3f:f0:fd:2f: e5:50:1a:0d:46:ce:49:16:d5:b4:96:7f:cc:49:84: b3:bc:c3:32:06:bc:ef:f6:49:f0:d7:fd:c3:43:c3: 23:9c:36:ea:d4:a1:bc:c0:04:37:86:2f:72:ce:c1: be:ff:e2:73:cf:07:06:31:f1:0a:c2:33:bb:80:7f: 07:79:50:54:c7:8e:87:58:4e:71:e3:13:35:d2:1a: 28:e1:a1:1d:93:5c:6f:de:36:20:5d:eb:5f:47:40: 61:60:75:79:58:b3:75:f0:d5:0f:1b:b7:b1:a0:54: 59:91:31:73:d0:70:dd:d3:24:0a:df:d6:10:41:0b: 41:eb:4e:e5:8c:94:f4:c8:9b:1d:d8:c7:c0:00:10: 5a:7a:0e:3e:cc:b5:f8:fc:18:cd:db:bf:59:e0:14: 62:b6:d9:bd:d9:49:a8:3a:75:52:d4:01:44:e7:07: 34:8d:73:39:ba:81:15:00:97:6c:81:5f:96:6a:55: b8:b5:24:8e:cf:c9:59:f0:17:fb:ab:60:51:46:e8: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:27:92:EA:2C:6E:0E:AA:BC:54:1B:FF:11:6C:34:6B:9D:7E:75 X509v3 Authority Key Identifier: keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/drsnkuosbg6qvFQb_xFsNGudfnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.199.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:b5:b1:61:44:9a:e1:97:01:0f:80:2a:33:1c:ce:be:04:2f: 2c:41:22:95:5b:aa:d6:be:b3:25:d5:a4:00:bf:42:a8:65:65: 07:12:28:e7:b5:19:09:b3:32:3d:c7:18:03:da:0b:99:e2:bb: 56:8c:f5:80:e5:27:c3:51:9c:88:b1:54:72:57:a7:26:c0:c3: 1f:cf:38:9e:23:08:8c:30:02:35:23:0a:1b:63:c1:0f:53:b3: 26:9f:6a:33:56:a1:9e:b2:7d:bf:f3:73:eb:a9:c0:98:73:3f: 33:75:1e:13:2c:4d:86:23:a1:62:2c:0a:a0:9a:6c:23:65:d9: e8:5f:ef:c2:ce:53:c3:89:2d:f2:f6:cc:43:b5:85:b1:a6:3e: d2:10:9a:cd:e7:0c:65:73:6d:c5:10:23:45:86:d0:bd:14:f1: b2:cf:e1:6c:59:24:75:69:4f:0e:5f:99:f8:e5:57:92:3c:aa: 03:37:a4:25:8d:b6:9d:33:6f:9e:7f:fa:41:d6:2f:28:71:89: 6c:e8:b9:f0:81:8f:ab:52:32:04:4b:4c:7e:1d:ed:68:02:e2: b7:c5:11:ab:fa:5c:88:29:f4:a0:a6:f3:16:23:86:19:8b:19: 99:8c:49:64:d4:49:04:00:14:b9:00:3e:26:ba:93:69:e9:3b: 45:b4:c9:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feuWISuEqDnG9/V4wOFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YzBjZTlmODdkOWQyNzVmNmNhZTRkYzljZGZiNWQ0NDM3 ZDhjZWIwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmJiMjc5MmVhMmM2ZTBlYWFiYzU0MWJmZjExNmMzNDZiOWQ3ZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HbPpTcty6TiQnOZHcYGmvtGm3OI roD3w32pJNN6ikZZQ6aE6SPbsn6LiVWkUklhye++9tIgnD/w/S/lUBoNRs5JFtW0 ln/MSYSzvMMyBrzv9knw1/3DQ8MjnDbq1KG8wAQ3hi9yzsG+/+JzzwcGMfEKwjO7 gH8HeVBUx46HWE5x4xM10hoo4aEdk1xv3jYgXetfR0BhYHV5WLN18NUPG7exoFRZ kTFz0HDd0yQK39YQQQtB607ljJT0yJsd2MfAABBaeg4+zLX4/BjN279Z4BRittm9 2UmoOnVS1AFE5wc0jXM5uoEVAJdsgV+WalW4tSSOz8lZ8Bf7q2BRRugbwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHa7J5LqLG4OqrxUG/8RbDRrnX51MB8GA1UdIwQY MBaAFJbAzp+H2dJ19srk3JzftdRDfYzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjkt NWU3N2ZhMDMzM2EzLzEvZHJzbmt1b3NiZzZxdkZRYl94RnNOR3VkZm5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjktNWU3N2ZhMDMzM2Ez LzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8nHMA0G CSqGSIb3DQEBCwUAA4IBAQAvtbFhRJrhlwEPgCozHM6+BC8sQSKVW6rWvrMl1aQA v0KoZWUHEijntRkJszI9xxgD2guZ4rtWjPWA5SfDUZyIsVRyV6cmwMMfzzieIwiM MAI1IwobY8EPU7Mmn2ozVqGesn2/83PrqcCYcz8zdR4TLE2GI6FiLAqgmmwjZdno X+/CzlPDiS3y9sxDtYWxpj7SEJrN5wxlc23FECNFhtC9FPGyz+FsWSR1aU8OX5n4 5VeSPKoDN6QljbadM2+ef/pB1i8ocYls6LnwgY+rUjIES0x+He1oAuK3xRGr+lyI KfSgpvMWI4YZixmZjElk1EkEABS5AD4mupNp6TtFtMmX -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:14 2026 by rpki-client