This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa File: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (raw, json) Hash identifier: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s= Subject key identifier: 0D:FF:32:DC:17:DE:54:CB:79:64:BC:36:C7:2E:1A:79:C0:AD:53:C0 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019C1881C830864D1A1D2C7ACD5D2724B1C0 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa Signing time: Sun 01 Feb 2026 09:21:24 +0000 ROA not before: Sun 01 Feb 2026 09:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 176.57.49.0/24 maxlen: 24 176.57.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:18:81:c8:30:86:4d:1a:1d:2c:7a:cd:5d:27:24:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Feb 1 09:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dff32dc17de54cb7964bc36c72e1a79c0ad53c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:32:50:0b:65:89:c3:3c:78:30:2f:9b:a8: f8:c5:f8:9c:49:96:38:11:0e:91:04:eb:d8:d8:e0: d1:6a:af:d2:66:70:4e:2c:e6:fd:0b:8b:5b:bc:7b: 61:5b:00:bb:36:30:be:88:43:9c:e5:1e:79:75:1a: ad:42:2f:23:3d:71:19:36:a1:c6:dd:b5:41:95:da: bd:aa:43:7e:1b:f9:35:ea:12:71:59:5c:b7:1e:e1: 4b:ac:e0:4b:cb:0a:b8:d6:7d:bc:97:26:99:99:04: d8:64:9d:2d:6a:a5:31:29:98:fe:61:f4:1f:57:13: 37:ff:8b:af:3a:48:de:11:0d:9e:ce:ae:81:73:51: 99:2d:44:b5:36:17:cd:44:a9:aa:01:f7:e4:9d:95: ce:63:8b:1d:cd:ee:af:40:1e:d1:16:ff:1e:e0:d5: b4:cd:6d:9a:a2:00:2c:37:10:93:73:83:cd:39:02: 42:32:75:39:27:07:ee:d0:cd:92:fb:11:91:35:e6: d8:16:ae:39:80:ce:64:2e:36:35:a4:5a:cb:61:65: c3:06:7b:4b:47:75:f5:ae:22:9e:2f:5c:21:a5:85: d9:1a:89:c4:88:df:82:ba:10:a1:99:87:41:f6:60: 12:7c:45:98:b0:9b:86:21:34:5b:48:7d:1c:ca:a2: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:32:DC:17:DE:54:CB:79:64:BC:36:C7:2E:1A:79:C0:AD:53:C0 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.49.0/24 176.57.58.0/24 Signature Algorithm: sha256WithRSAEncryption 81:1a:63:ac:0f:dd:bf:85:f4:63:25:b6:8c:fd:60:7c:07:cd: 5b:75:f8:5d:12:bc:bc:7c:e6:d0:11:70:45:51:4b:48:cf:67: e6:cd:79:40:f1:a5:a3:0a:81:b4:f8:db:37:50:2c:b9:da:75: 99:1f:c4:10:4f:b8:c2:b4:17:d4:26:17:19:cd:c2:9c:24:38: 53:51:35:42:84:c5:30:03:3e:37:d2:c4:67:76:ab:19:a0:51: 46:f6:96:d8:fb:b6:af:a7:30:de:9e:12:4b:aa:92:f8:33:c5: c7:0a:e1:a4:57:de:9c:f5:90:a1:b4:a4:88:01:86:96:91:65: 53:9b:85:ee:d3:bc:fe:71:74:99:9e:e6:be:d8:ad:1a:90:85: 58:38:b3:b8:e8:eb:71:87:b8:54:1e:70:ad:8b:19:a7:9f:9e: 22:9c:bc:d2:e5:c4:b8:bd:ea:75:ea:5f:24:3e:77:cb:3d:4c: f2:f5:c4:b9:53:83:7a:2e:20:38:b5:54:e6:2c:a2:dd:64:8e: 0b:c3:5e:b5:29:70:e6:76:fb:6f:32:6a:51:f9:4e:bb:b5:ba: d1:bd:ef:c8:78:ef:51:fe:c0:60:17:b6:9d:23:2c:d5:23:5f: b0:97:40:38:b2:c7:20:a0:f3:c8:ba:3d:03:91:6f:89:6a:40: cc:e7:88:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwYgcgwhk0aHSx6zV0nJLHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMjAxMDkyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGZmMzJkYzE3ZGU1NGNiNzk2NGJjMzZjNzJlMWE3OWMwYWQ1M2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1syUAtlicM8eDAvm6j4xficSZY4 EQ6RBOvY2ODRaq/SZnBOLOb9C4tbvHthWwC7NjC+iEOc5R55dRqtQi8jPXEZNqHG 3bVBldq9qkN+G/k16hJxWVy3HuFLrOBLywq41n28lyaZmQTYZJ0taqUxKZj+YfQf VxM3/4uvOkjeEQ2ezq6Bc1GZLUS1NhfNRKmqAffknZXOY4sdze6vQB7RFv8e4NW0 zW2aogAsNxCTc4PNOQJCMnU5Jwfu0M2S+xGRNebYFq45gM5kLjY1pFrLYWXDBntL R3X1riKeL1whpYXZGonEiN+CuhChmYdB9mASfEWYsJuGITRbSH0cyqIQqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA3/MtwX3lTLeWS8NscuGnnArVPAMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvRGY4eTNCZmVWTXQ1Wkx3Mnh5NGFlY0N0VThBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsDkxAwQA sDk6MA0GCSqGSIb3DQEBCwUAA4IBAQCBGmOsD92/hfRjJbaM/WB8B81bdfhdEry8 fObQEXBFUUtIz2fmzXlA8aWjCoG0+Ns3UCy52nWZH8QQT7jCtBfUJhcZzcKcJDhT UTVChMUwAz430sRndqsZoFFG9pbY+7avpzDenhJLqpL4M8XHCuGkV96c9ZChtKSI AYaWkWVTm4Xu07z+cXSZnua+2K0akIVYOLO46Otxh7hUHnCtixmnn54inLzS5cS4 vep16l8kPnfLPUzy9cS5U4N6LiA4tVTmLKLdZI4Lw161KXDmdvtvMmpR+U67tbrR ve/IeO9R/sBgF7adIyzVI1+wl0A4sscgoPPIuj0DkW+JakDM54in -----END CERTIFICATE-----Generated at Mon Feb 2 13:13:15 2026 by rpki-client