This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/Dro43UswDXgv1T5j_BRPwIsOV10.roa File: Dro43UswDXgv1T5j_BRPwIsOV10.roa (raw, json) Hash identifier: oIkm99AZjkjz6X4ghJ78sK9ulOao8b5MSKTe16jyBVE= Subject key identifier: 0E:BA:38:DD:4B:30:0D:78:2F:D5:3E:63:FC:14:4F:C0:8B:0E:57:5D Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca Certificate serial: 019B7CED523958559E5FBF4F8AC058630B0F Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/Dro43UswDXgv1T5j_BRPwIsOV10.roa Signing time: Fri 02 Jan 2026 04:18:06 +0000 ROA not before: Fri 02 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29080 IP address blocks: 195.68.200.0/23 maxlen: 23 195.68.200.0/24 maxlen: 24 195.68.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:52:39:58:55:9e:5f:bf:4f:8a:c0:58:63:0b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eba38dd4b300d782fd53e63fc144fc08b0e575d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:6a:82:43:a9:0e:e4:93:99:e7:7c:5b:dc: 99:84:de:d2:e0:16:c2:0b:c2:d0:93:1f:50:5a:43: ac:a2:7f:c6:ec:93:9a:64:03:5f:c3:e2:57:8d:a1: 5b:f0:53:04:cb:5f:1d:a4:92:a3:7b:91:3d:9c:4e: ac:b9:21:95:ea:d2:61:3a:5f:9c:82:90:95:74:7f: 00:55:81:c4:40:c0:97:2a:56:18:2a:2f:b2:56:12: 1c:3c:fc:42:52:77:0b:92:bc:13:b1:70:ba:fb:32: 36:d9:6e:72:33:b5:c0:34:3f:42:0e:bb:76:4c:e9: 9f:7d:e0:8a:20:3a:61:fe:d3:cf:43:90:30:d0:42: 18:fb:7c:c5:42:24:5e:f3:1d:1c:03:be:3d:d1:31: ec:b0:29:dc:41:71:44:38:80:f6:52:cb:33:0e:2e: d4:66:7b:ec:48:36:28:4b:2e:a5:17:5b:a5:68:ac: 4b:7e:77:a7:17:c1:c2:6a:b0:03:86:bf:4a:64:44: 6b:77:db:2b:75:cf:07:f3:d4:16:12:8c:ee:af:7e: 3e:26:bc:e3:b3:e8:5c:93:2e:6d:9b:b0:21:28:49: ed:ae:f8:92:5b:26:78:31:66:25:d0:1e:1d:18:8a: de:66:e7:0f:0b:45:28:ef:46:c7:24:36:72:9e:3d: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:38:DD:4B:30:0D:78:2F:D5:3E:63:FC:14:4F:C0:8B:0E:57:5D X509v3 Authority Key Identifier: keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/Dro43UswDXgv1T5j_BRPwIsOV10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.68.200.0/23 Signature Algorithm: sha256WithRSAEncryption 19:6b:0b:c5:0b:7c:81:d9:f3:9c:28:73:e0:37:e1:b5:b2:eb: 90:b3:3d:78:9a:c0:a5:ad:93:9d:14:d1:ba:33:4a:c6:71:63: ab:3c:9b:14:2a:2a:ed:92:1c:b3:23:06:25:42:d6:bd:83:9f: 51:6b:47:ab:6e:fd:44:15:3e:10:da:94:89:f3:76:2e:04:ca: 53:7b:84:b6:94:37:f8:c6:a0:9a:5a:69:5f:27:53:b3:6d:70: 9f:a9:f2:d9:06:6a:4f:76:e2:88:11:aa:47:cd:83:da:3b:a2: 38:59:81:b9:14:50:50:c6:24:9e:bf:67:a7:e8:4d:8d:be:b1: 10:e2:bf:6b:3b:b9:4f:ba:c3:a7:7d:93:d5:92:87:1b:ec:c3: aa:30:98:b8:f5:36:b9:0f:9c:09:bb:45:90:44:3d:60:3c:ea: 26:a9:c3:00:5d:64:f7:58:52:9a:ed:11:9a:31:a6:a3:43:45: 8f:6a:a8:eb:b1:e1:6d:04:72:98:fb:93:ce:8c:5e:90:df:01: 41:ba:23:6f:b4:a6:b2:ba:18:fe:61:d5:02:1f:74:b7:ea:1e: e4:c6:7c:97:b1:3f:3a:3b:53:e6:26:16:3f:c9:74:71:4f:b8: 11:8c:40:55:c5:f0:aa:5f:9e:0d:ff:ea:24:24:4b:0e:db:f2: d0:6e:5e:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VI5WFWeX79PisBYYwsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNmY0YzhmM2EzNzdmNDZjNTUyMjAwOTY3OGYzOGQ2MTU3 MWM2Y2EwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWJhMzhkZDRiMzAwZDc4MmZkNTNlNjNmYzE0NGZjMDhiMGU1NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U9qgkOpDuSTmed8W9yZhN7S4BbC C8LQkx9QWkOson/G7JOaZANfw+JXjaFb8FMEy18dpJKje5E9nE6suSGV6tJhOl+c gpCVdH8AVYHEQMCXKlYYKi+yVhIcPPxCUncLkrwTsXC6+zI22W5yM7XAND9CDrt2 TOmffeCKIDph/tPPQ5Aw0EIY+3zFQiRe8x0cA7490THssCncQXFEOID2UsszDi7U ZnvsSDYoSy6lF1ulaKxLfnenF8HCarADhr9KZERrd9srdc8H89QWEozur34+Jrzj s+hcky5tm7AhKEntrviSWyZ4MWYl0B4dGIreZucPC0Uo70bHJDZynj01JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA66ON1LMA14L9U+Y/wUT8CLDlddMB8GA1UdIwQY MBaAFHxvTI86N39GxVIgCWePONYVccbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81YzZjOWYtNjkxZi00Mjg0LWI4NGQt MWQzNjdhNWY4NmQ0LzEvRHJvNDNVc3dEWGd2MVQ1al9CUlB3SXNPVjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81YzZjOWYtNjkxZi00Mjg0LWI4NGQtMWQzNjdhNWY4NmQ0 LzEvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0TIMA0G CSqGSIb3DQEBCwUAA4IBAQAZawvFC3yB2fOcKHPgN+G1suuQsz14msClrZOdFNG6 M0rGcWOrPJsUKirtkhyzIwYlQta9g59Ra0erbv1EFT4Q2pSJ83YuBMpTe4S2lDf4 xqCaWmlfJ1OzbXCfqfLZBmpPduKIEapHzYPaO6I4WYG5FFBQxiSev2en6E2NvrEQ 4r9rO7lPusOnfZPVkocb7MOqMJi49Ta5D5wJu0WQRD1gPOomqcMAXWT3WFKa7RGa MaajQ0WPaqjrseFtBHKY+5POjF6Q3wFBuiNvtKayuhj+YdUCH3S36h7kxnyXsT86 O1PmJhY/yXRxT7gRjEBVxfCqX54N/+okJEsO2/LQbl64 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:53 2026 by rpki-client