This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa File: DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa (raw, json) Hash identifier: eZVLmuCp5+bXUFcL2aI3C/aZXJNWqBIZX9DvM7Y7ZFY= Subject key identifier: 0D:15:86:6E:4B:C4:70:3F:DB:35:04:E0:8D:41:1F:A1:B2:D9:F8:F0 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B77C70C90E8B0BDE92F845F061AC4FE20 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203778 IP address blocks: 212.7.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0c:90:e8:b0:bd:e9:2f:84:5f:06:1a:c4:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d15866e4bc4703fdb3504e08d411fa1b2d9f8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:36:92:ee:4e:c8:b5:b4:ec:28:f3:bb:22: 82:c8:60:38:79:b7:6d:0b:fa:e6:27:9f:5b:76:90: 47:7d:6e:28:7b:b0:7f:c0:aa:5e:db:61:39:07:bf: ba:0b:3b:8c:d9:ab:c5:22:99:36:a5:2f:38:2c:a7: ee:ef:5a:d6:81:17:aa:31:00:41:21:8b:32:36:77: 77:76:da:55:18:b6:49:50:dc:60:02:7e:92:cb:db: 65:cb:ea:51:a2:18:f5:7e:69:5e:fc:d4:9a:b9:83: 19:83:2d:97:d1:cf:be:72:f3:b7:16:83:1f:70:89: dd:56:69:75:c7:a8:49:7a:a9:15:5d:04:d9:77:7c: ab:bf:f2:43:3c:62:da:30:60:53:3d:b3:92:37:dc: 47:5f:18:aa:b1:93:29:a3:26:49:af:36:a6:e5:6c: f6:f8:c1:60:fa:98:50:a7:d0:35:9e:0b:f9:23:0b: dd:f0:2f:36:5d:f4:2d:e7:04:f8:f1:70:2f:ca:5f: 91:cf:a4:51:04:c9:31:33:85:49:d6:d7:62:69:da: 75:81:26:c3:7e:74:46:50:20:80:9e:a7:4a:c0:65: 3f:4c:26:7d:6c:d1:ef:0e:fb:94:df:fe:e7:a5:03: 11:8d:5e:3d:9e:07:e8:b7:2d:62:12:77:44:80:2b: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:15:86:6E:4B:C4:70:3F:DB:35:04:E0:8D:41:1F:A1:B2:D9:F8:F0 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.7.214.0/24 Signature Algorithm: sha256WithRSAEncryption 66:9d:6a:1e:0e:ec:43:92:3d:b7:40:12:70:51:30:05:8e:51: 07:61:4a:48:f5:a1:50:a3:3d:d0:0a:18:18:39:fe:e8:39:95: ed:15:4b:f8:2e:5a:b1:e7:0a:72:32:38:43:20:a4:aa:50:72: 29:0a:17:2b:4b:6d:43:e4:ff:34:0a:aa:4e:e5:c4:30:2a:6d: c0:6d:42:b0:dc:f8:82:d4:c7:36:5a:34:72:5c:90:c2:89:fd: e2:2a:bc:e6:bb:9c:06:9f:e0:6e:0c:14:d5:2d:9a:29:8f:e9: ed:4b:ee:db:07:44:b1:ff:94:b0:11:7b:cd:0d:64:47:5d:71: 08:99:96:91:2d:9a:aa:52:79:27:f2:86:f9:3d:54:9c:c4:32: ce:45:c4:d9:ad:a5:5d:91:1d:df:de:00:ba:ac:7e:f6:21:97: 19:3f:d8:3f:2b:1a:ef:e5:30:6f:07:7f:3f:56:75:05:42:5a: 49:bd:37:9d:59:dd:b1:54:7e:20:5d:a2:fc:81:85:a9:ea:de: ec:21:36:da:fa:3a:34:bc:0e:d1:0b:c0:3a:4f:7d:9c:5b:37: 81:8a:65:ec:2f:f0:58:14:a3:db:d7:0b:88:80:ba:cd:ab:23: 26:07:55:b3:a6:65:29:23:b1:19:d5:b2:60:e8:48:ce:8a:ce: eb:06:80:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwyQ6LC96S+EXwYaxP4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDE1ODY2ZTRiYzQ3MDNmZGIzNTA0ZTA4ZDQxMWZhMWIyZDlmOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47Y2ku5OyLW07CjzuyKCyGA4ebdt C/rmJ59bdpBHfW4oe7B/wKpe22E5B7+6CzuM2avFIpk2pS84LKfu71rWgReqMQBB IYsyNnd3dtpVGLZJUNxgAn6Sy9tly+pRohj1fmle/NSauYMZgy2X0c++cvO3FoMf cIndVml1x6hJeqkVXQTZd3yrv/JDPGLaMGBTPbOSN9xHXxiqsZMpoyZJrzam5Wz2 +MFg+phQp9A1ngv5Iwvd8C82XfQt5wT48XAvyl+Rz6RRBMkxM4VJ1tdiadp1gSbD fnRGUCCAnqdKwGU/TCZ9bNHvDvuU3/7npQMRjV49ngfoty1iEndEgCthXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0Vhm5LxHA/2zUE4I1BH6Gy2fjwMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvRFJXR2JrdkVjRF9iTlFUZ2pVRWZvYkxaLVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AfWMA0G CSqGSIb3DQEBCwUAA4IBAQBmnWoeDuxDkj23QBJwUTAFjlEHYUpI9aFQoz3QChgY Of7oOZXtFUv4Llqx5wpyMjhDIKSqUHIpChcrS21D5P80CqpO5cQwKm3AbUKw3PiC 1Mc2WjRyXJDCif3iKrzmu5wGn+BuDBTVLZopj+ntS+7bB0Sx/5SwEXvNDWRHXXEI mZaRLZqqUnkn8ob5PVScxDLORcTZraVdkR3f3gC6rH72IZcZP9g/Kxrv5TBvB38/ VnUFQlpJvTedWd2xVH4gXaL8gYWp6t7sITba+jo0vA7RC8A6T32cWzeBimXsL/BY FKPb1wuIgLrNqyMmB1WzpmUpI7EZ1bJg6EjOis7rBoDS -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:29 2026 by rpki-client