This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/DRO3tCTePWIvKHPgw6pmaXwU0JU.roa File: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (raw, json) Hash identifier: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY= Subject key identifier: 0D:13:B7:B4:24:DE:3D:62:2F:28:73:E0:C3:AA:66:69:7C:14:D0:95 Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b Certificate serial: 019B7BA323DF2E6703E7DE74AFEE6F6F5B5D Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/DRO3tCTePWIvKHPgw6pmaXwU0JU.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29399 IP address blocks: 185.49.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:23:df:2e:67:03:e7:de:74:af:ee:6f:6f:5b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d13b7b424de3d622f2873e0c3aa66697c14d095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:80:eb:b5:23:9f:39:4f:f8:82:89:0a:64: 40:1d:be:2c:ce:a6:54:fd:a0:86:0f:ec:e6:73:41: 66:27:63:45:07:d1:0e:04:c9:f6:7f:99:86:7c:b0: 8f:f6:60:90:dd:79:ea:bf:ae:78:8d:5c:21:89:10: b9:d3:0d:6f:20:b2:46:f9:ed:03:11:fb:07:31:b6: 57:be:7b:2c:0e:dc:51:f7:b3:4c:1b:4a:19:08:7d: b7:c0:fc:57:91:ea:48:77:c0:ce:0e:9e:29:64:b7: da:c2:93:6f:16:7f:48:1f:9c:91:fe:c9:4d:cf:dc: 47:e7:69:fe:0f:42:79:c5:c8:c3:ce:e8:46:37:7c: a7:b7:09:f5:d7:22:77:b6:fe:2e:72:91:e6:92:c3: ef:7e:40:bd:4e:c5:28:83:88:82:5f:91:ce:b4:f6: 6b:fa:b7:51:b6:be:d5:ee:c9:e4:fe:1c:19:16:7f: 09:3f:8d:ed:13:c5:46:bf:65:57:b7:e4:dc:e8:df: ac:8b:23:03:36:94:3e:95:09:c4:d7:aa:d9:27:d5: d3:5d:7d:d5:0c:c1:d0:1e:d0:1e:c4:fa:fa:d8:49: 24:3e:12:ae:65:dc:75:4a:5d:14:19:89:c4:f7:fe: 85:4d:c9:c0:79:37:bd:b6:32:81:60:0d:21:43:39: 0c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:13:B7:B4:24:DE:3D:62:2F:28:73:E0:C3:AA:66:69:7C:14:D0:95 X509v3 Authority Key Identifier: keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/DRO3tCTePWIvKHPgw6pmaXwU0JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.172.0/24 Signature Algorithm: sha256WithRSAEncryption 73:fe:02:1d:1b:eb:e3:46:67:8d:d9:7b:4b:50:22:ba:96:10: ab:3b:45:e6:cf:fe:01:32:61:8d:1d:7d:16:a3:42:6c:23:b9: b2:e8:6b:d0:61:50:b2:c5:7c:6d:6a:3e:42:9d:e8:79:d3:d4: 55:ed:a5:94:ed:ba:c4:d3:7e:4c:1a:25:5e:ec:86:c0:5d:56: f7:f3:e2:62:20:54:a9:03:78:51:3e:79:3a:7a:86:62:f8:1a: 76:4d:fd:a1:91:01:6b:b8:8a:f2:3f:f5:0c:28:3a:bc:83:83: 51:b7:c7:bd:2f:0a:00:72:9c:a2:46:f1:5f:65:30:a6:12:83: ae:56:aa:95:dd:f6:bb:f6:06:14:4b:b0:3f:14:1a:a6:22:b3: 63:e5:c3:c1:e0:d0:1a:3f:c3:44:1b:ec:7a:13:4d:7e:a8:04: a0:ce:85:4f:17:ce:07:ee:26:43:4f:c3:f2:49:9e:2a:bc:e3: ee:36:2a:88:22:14:28:bc:eb:15:af:38:4a:2a:39:fa:e2:4c: f3:8e:b4:c9:b0:20:0f:97:ef:2e:90:b7:db:71:8f:5b:31:54: ce:74:de:52:0f:cc:b9:55:a7:a4:4a:43:7e:46:0c:fe:f4:2d: 47:ce:7e:f4:24:34:91:40:8c:9b:1c:df:c5:5d:b7:7f:10:bb: b2:c3:12:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyPfLmcD5950r+5vb1tdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNTBlNjJjMDQ0ODEyOWY2MzU4OTE4YTcxYzMzNDRlMjVh ODJkOWIwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDEzYjdiNDI0ZGUzZDYyMmYyODczZTBjM2FhNjY2OTdjMTRkMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXmA67UjnzlP+IKJCmRAHb4szqZU /aCGD+zmc0FmJ2NFB9EOBMn2f5mGfLCP9mCQ3Xnqv654jVwhiRC50w1vILJG+e0D EfsHMbZXvnssDtxR97NMG0oZCH23wPxXkepId8DODp4pZLfawpNvFn9IH5yR/slN z9xH52n+D0J5xcjDzuhGN3yntwn11yJ3tv4ucpHmksPvfkC9TsUog4iCX5HOtPZr +rdRtr7V7snk/hwZFn8JP43tE8VGv2VXt+Tc6N+siyMDNpQ+lQnE16rZJ9XTXX3V DMHQHtAexPr62EkkPhKuZdx1Sl0UGYnE9/6FTcnAeTe9tjKBYA0hQzkMOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0Tt7Qk3j1iLyhz4MOqZml8FNCVMB8GA1UdIwQY MBaAFGJQ5iwESBKfY1iRinHDNE4lqC2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUt ODcyNmRkODhmNTI5LzEvRFJPM3RDVGVQV0l2S0hQZ3c2cG1hWHdVMEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUtODcyNmRkODhmNTI5 LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTGsMA0G CSqGSIb3DQEBCwUAA4IBAQBz/gIdG+vjRmeN2XtLUCK6lhCrO0Xmz/4BMmGNHX0W o0JsI7my6GvQYVCyxXxtaj5Cneh509RV7aWU7brE035MGiVe7IbAXVb38+JiIFSp A3hRPnk6eoZi+Bp2Tf2hkQFruIryP/UMKDq8g4NRt8e9LwoAcpyiRvFfZTCmEoOu VqqV3fa79gYUS7A/FBqmIrNj5cPB4NAaP8NEG+x6E01+qASgzoVPF84H7iZDT8Py SZ4qvOPuNiqIIhQovOsVrzhKKjn64kzzjrTJsCAPl+8ukLfbcY9bMVTOdN5SD8y5 VaekSkN+Rgz+9C1Hzn70JDSRQIybHN/FXbd/ELuywxIT -----END CERTIFICATE-----Generated at Mon Jan 26 11:40:02 2026 by rpki-client