This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/DSfT1E-NvrlH-gVy38FoIe4oob0.roa File: DSfT1E-NvrlH-gVy38FoIe4oob0.roa (raw, json) Hash identifier: KxJLZNiFs/Bij8Q1KPky3LUHjn2sxLLLJykm61eyjpw= Subject key identifier: 0D:27:D3:D4:4F:8D:BE:B9:47:FA:05:72:DF:C1:68:21:EE:28:A1:BD Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B5469AB4B1AD6606803901158D2A2342E Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/DSfT1E-NvrlH-gVy38FoIe4oob0.roa Signing time: Thu 25 Dec 2025 07:29:29 +0000 ROA not before: Thu 25 Dec 2025 07:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 22516 IP address blocks: 168.199.0.0/24 maxlen: 24 168.199.4.0/24 maxlen: 24 168.199.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:69:ab:4b:1a:d6:60:68:03:90:11:58:d2:a2:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Dec 25 07:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0d27d3d44f8dbeb947fa0572dfc16821ee28a1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:21:2f:84:4d:92:6b:47:76:af:0f:bd:b0: dd:d8:d6:d4:16:d5:04:f8:c4:08:cb:ba:d8:44:47: 0a:fd:09:02:2e:90:47:44:88:81:f5:e1:3a:ec:fe: 14:95:18:af:56:0b:02:33:a0:8e:d2:c5:d9:90:50: 61:2c:6d:cf:a2:dd:a1:68:a4:c6:c3:19:c4:1b:34: 5e:eb:05:72:ee:c9:fa:11:53:27:33:a5:75:5c:23: b0:03:85:63:5f:67:0d:28:b3:45:eb:d7:67:98:a3: 72:d0:eb:01:f0:26:43:d0:e4:f6:d2:d9:53:c1:e5: 62:aa:c3:0a:3f:24:cf:57:10:b4:1c:7e:72:43:89: 3f:2d:12:88:21:f4:19:c0:32:7a:52:c7:72:37:3d: 65:e0:92:ad:98:10:23:fe:cc:5c:3e:3f:bf:8e:34: 4e:c1:f3:0a:e9:0c:1f:ee:ea:59:a1:21:1d:da:ac: a8:e3:88:a9:38:78:d9:2f:06:c9:14:f3:8b:5b:6c: 82:08:97:4a:4c:c8:8e:c6:cc:02:b9:31:39:a5:4b: a4:fe:90:b1:8a:5f:1c:f0:5b:81:31:c3:82:cc:a0: ff:4b:9e:fe:ad:df:bb:f7:79:14:82:0c:87:8c:bf: 3b:ae:c1:55:4c:f4:39:8a:fe:81:a9:59:09:10:ba: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:27:D3:D4:4F:8D:BE:B9:47:FA:05:72:DF:C1:68:21:EE:28:A1:BD X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/DSfT1E-NvrlH-gVy38FoIe4oob0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.0.0/24 168.199.4.0/24 168.199.126.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ab:7f:88:b2:73:0c:0a:52:11:09:a5:7f:46:1b:f0:bc:76: 30:b0:e9:7e:57:b9:36:26:b7:11:39:f9:09:59:5f:2e:44:4e: 5c:05:04:67:fb:2d:bb:14:b2:6d:ea:e1:17:b6:82:b1:32:22: b5:f2:4b:a1:28:f3:d0:16:86:b5:de:41:92:b8:8b:9c:b0:9a: 12:40:55:d3:02:9f:6e:00:27:e0:db:b4:e2:65:10:af:20:eb: 3b:ac:af:4a:13:9a:90:09:1f:06:73:41:4a:4a:17:e0:fd:c8: 5e:81:56:6a:35:69:6d:39:ef:b7:8e:22:1f:67:d4:79:13:b8: e4:4f:fd:43:e4:78:1d:23:f4:2b:cc:b7:a1:77:28:ed:16:b5: 48:29:53:ab:5c:e4:44:7a:ae:cd:7a:27:41:17:bf:21:fe:25: 7f:7b:28:f2:fa:f3:28:ea:73:8a:55:cf:ba:9a:57:e3:81:59: ad:df:1c:59:32:91:66:dc:cd:45:0a:57:74:d9:42:f6:01:4b: 31:55:9f:2b:b4:92:9c:35:5c:e8:e3:d1:b4:f3:d6:ad:fb:03: a3:06:30:d5:9f:2a:6e:a7:a9:5a:1f:c2:ee:4d:01:ca:ca:d5: 6e:5d:66:4e:77:d4:bf:69:70:83:b6:34:b6:fd:51:c6:a0:78: 46:25:b2:3a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZtUaatLGtZgaAOQEVjSojQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjUxMjI1MDcyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDI3ZDNkNDRmOGRiZWI5NDdmYTA1NzJkZmMxNjgyMWVlMjhhMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYghL4RNkmtHdq8PvbDd2NbUFtUE +MQIy7rYREcK/QkCLpBHRIiB9eE67P4UlRivVgsCM6CO0sXZkFBhLG3Pot2haKTG wxnEGzRe6wVy7sn6EVMnM6V1XCOwA4VjX2cNKLNF69dnmKNy0OsB8CZD0OT20tlT weViqsMKPyTPVxC0HH5yQ4k/LRKIIfQZwDJ6UsdyNz1l4JKtmBAj/sxcPj+/jjRO wfMK6Qwf7upZoSEd2qyo44ipOHjZLwbJFPOLW2yCCJdKTMiOxswCuTE5pUuk/pCx il8c8FuBMcOCzKD/S57+rd+793kUggyHjL87rsFVTPQ5iv6BqVkJELrcmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA0n09RPjb65R/oFct/BaCHuKKG9MB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvRFNmVDFFLU52cmxILWdWeTM4Rm9JZTRvb2IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqMcAAwQA qMcEAwQAqMd+MA0GCSqGSIb3DQEBCwUAA4IBAQBrq3+IsnMMClIRCaV/RhvwvHYw sOl+V7k2JrcROfkJWV8uRE5cBQRn+y27FLJt6uEXtoKxMiK18kuhKPPQFoa13kGS uIucsJoSQFXTAp9uACfg27TiZRCvIOs7rK9KE5qQCR8Gc0FKShfg/chegVZqNWlt Oe+3jiIfZ9R5E7jkT/1D5HgdI/QrzLehdyjtFrVIKVOrXOREeq7NeidBF78h/iV/ eyjy+vMo6nOKVc+6mlfjgVmt3xxZMpFm3M1FCld02UL2AUsxVZ8rtJKcNVzo49G0 89at+wOjBjDVnypup6laH8LuTQHKytVuXWZOd9S/aXCDtjS2/VHGoHhGJbI6 -----END CERTIFICATE-----Generated at Fri Dec 26 05:55:32 2025 by rpki-client