This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/DFbSCIkBvN-gbf9eBnp3DQUtSjM.roa File: DFbSCIkBvN-gbf9eBnp3DQUtSjM.roa (raw, json) Hash identifier: 4ANNNaYCmM44cEh0PesD5gfAd5fKPbOrFIOFq/4zEpE= Subject key identifier: 0C:56:D2:08:89:01:BC:DF:A0:6D:FF:5E:06:7A:77:0D:05:2D:4A:33 Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013 Certificate serial: 019B7CEE36A4C23DF40354A2A40662C8ED11 Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/DFbSCIkBvN-gbf9eBnp3DQUtSjM.roa Signing time: Fri 02 Jan 2026 04:19:04 +0000 ROA not before: Fri 02 Jan 2026 04:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57608 IP address blocks: 84.205.172.0/22 maxlen: 22 91.233.112.0/22 maxlen: 22 185.46.168.0/22 maxlen: 22 185.238.120.0/22 maxlen: 22 2a04:9b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:36:a4:c2:3d:f4:03:54:a2:a4:06:62:c8:ed:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c56d2088901bcdfa06dff5e067a770d052d4a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:e3:a3:e8:77:9c:27:e7:6a:e4:dc:74:84: 39:ff:11:0e:0e:f0:36:fc:66:a4:3a:31:0d:eb:0e: 4b:82:24:e2:03:41:8d:bb:fa:38:f6:e8:16:18:ea: 7d:f5:c1:f5:ff:de:d4:68:6a:fa:38:7d:16:e7:04: ee:9a:12:f4:ae:8d:b3:40:eb:76:38:9f:e4:7c:e6: d0:32:bc:91:89:ab:9c:94:8e:04:11:b0:2d:3a:ca: ed:a9:c6:0f:d7:36:f9:46:4b:8d:7c:1e:3f:d8:71: 15:e5:2d:82:58:8d:0b:12:f5:05:40:5c:dc:16:9a: bc:02:0e:5d:39:a0:b8:62:76:b6:a6:16:8b:42:c0: 94:49:07:b8:da:50:4d:fc:99:c6:2f:f0:ab:f2:b0: 30:23:ed:ab:c7:ee:a0:bc:39:48:ae:f5:35:2e:98: 7b:80:e5:7a:3d:89:c5:f5:53:b7:da:0a:76:6a:d3: 81:7f:3b:bc:06:9d:f1:5c:bb:00:69:1b:0b:21:ee: a1:0f:81:38:e7:3d:cd:78:04:3e:53:d4:ba:83:b5: 3d:dd:cb:e4:c2:a1:34:57:56:10:d4:b2:58:ac:d0: 08:0a:88:d4:d4:13:e2:46:d8:91:97:ce:55:df:47: 43:48:d8:f8:c9:b8:8f:9b:77:06:e5:39:cd:08:7c: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:56:D2:08:89:01:BC:DF:A0:6D:FF:5E:06:7A:77:0D:05:2D:4A:33 X509v3 Authority Key Identifier: keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/DFbSCIkBvN-gbf9eBnp3DQUtSjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.205.172.0/22 91.233.112.0/22 185.46.168.0/22 185.238.120.0/22 IPv6: 2a04:9b80::/29 Signature Algorithm: sha256WithRSAEncryption 53:fd:b1:11:7a:2b:56:58:69:96:e3:9d:f9:fa:67:96:85:f5: d1:21:fb:cd:a3:b4:5f:01:fe:28:bb:65:46:5f:da:c0:74:76: 29:71:ec:05:2d:39:74:13:82:03:a2:5b:70:11:c5:4f:0c:70: 33:4c:f7:56:9d:8b:51:3d:9b:09:bb:04:79:4b:e1:23:46:0c: d0:46:ed:31:1c:7a:d6:1b:51:b6:2d:1f:30:b2:87:b6:19:34: f3:d3:ca:dc:70:2f:74:10:3a:ca:5c:c3:81:08:e4:5e:9e:d5: 0b:9c:eb:8d:7f:0f:f3:1a:b4:b1:c3:71:07:e6:16:13:69:f3: 80:93:73:2c:4d:14:0b:67:4c:70:57:ab:80:43:00:83:d8:70: ac:d7:31:79:58:2f:74:be:5a:d4:ab:35:ef:af:11:a7:23:a2: c1:1f:04:10:39:e1:39:2c:88:5c:94:64:db:32:73:a6:aa:48: 93:25:bc:61:4b:32:81:13:b6:05:dd:de:bd:d4:4f:44:77:cc: 8c:97:1e:20:6c:59:5f:44:b0:38:12:b3:07:02:32:8f:4d:fd: c6:98:d8:e4:a5:15:da:12:a6:3f:03:da:2a:00:a0:89:3a:a8: fd:97:e6:4d:04:27:98:f2:67:13:e5:f9:a0:9f:4c:8b:09:66: 88:8e:65:01 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87jakwj30A1SipAZiyO0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk NjQwMTMwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzU2ZDIwODg5MDFiY2RmYTA2ZGZmNWUwNjdhNzcwZDA1MmQ0YTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGnjo+h3nCfnauTcdIQ5/xEODvA2 /GakOjEN6w5LgiTiA0GNu/o49ugWGOp99cH1/97UaGr6OH0W5wTumhL0ro2zQOt2 OJ/kfObQMryRiauclI4EEbAtOsrtqcYP1zb5RkuNfB4/2HEV5S2CWI0LEvUFQFzc Fpq8Ag5dOaC4Yna2phaLQsCUSQe42lBN/JnGL/Cr8rAwI+2rx+6gvDlIrvU1Lph7 gOV6PYnF9VO32gp2atOBfzu8Bp3xXLsAaRsLIe6hD4E45z3NeAQ+U9S6g7U93cvk wqE0V1YQ1LJYrNAICojU1BPiRtiRl85V30dDSNj4ybiPm3cG5TnNCHyupQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAxW0giJAbzfoG3/XgZ6dw0FLUozMB8GA1UdIwQY MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct MjNmMjI2M2I5YmQyLzEvREZiU0NJa0J2Ti1nYmY5ZUJucDNEUVV0U2pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCVM2sAwQC W+lwAwQCuS6oAwQCue54MA0EAgACMAcDBQMqBJuAMA0GCSqGSIb3DQEBCwUAA4IB AQBT/bEReitWWGmW4535+meWhfXRIfvNo7RfAf4ou2VGX9rAdHYpcewFLTl0E4ID oltwEcVPDHAzTPdWnYtRPZsJuwR5S+EjRgzQRu0xHHrWG1G2LR8wsoe2GTTz08rc cC90EDrKXMOBCORentULnOuNfw/zGrSxw3EH5hYTafOAk3MsTRQLZ0xwV6uAQwCD 2HCs1zF5WC90vlrUqzXvrxGnI6LBHwQQOeE5LIhclGTbMnOmqkiTJbxhSzKBE7YF 3d691E9Ed8yMlx4gbFlfRLA4ErMHAjKPTf3GmNjkpRXaEqY/A9oqAKCJOqj9l+ZN BCeY8mcT5fmgn0yLCWaIjmUB -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:46 2026 by rpki-client