This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/diMb0Y__C013V5wNRSDTtjcvMdc.roa File: diMb0Y__C013V5wNRSDTtjcvMdc.roa (raw, json) Hash identifier: 5qAFRLLRdaxy9CFb2JzhXUFWBwIKzfggOPnonYsFMt8= Subject key identifier: 76:23:1B:D1:8F:FF:0B:4D:77:57:9C:0D:45:20:D3:B6:37:2F:31:D7 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F81796090F6DC3137D9D35F62667362 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/diMb0Y__C013V5wNRSDTtjcvMdc.roa Signing time: Fri 02 Jan 2026 16:19:10 +0000 ROA not before: Fri 02 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211192 IP address blocks: 168.199.128.0/24 maxlen: 24 168.199.130.0/24 maxlen: 24 168.199.194.0/24 maxlen: 24 168.199.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:79:60:90:f6:dc:31:37:d9:d3:5f:62:66:73:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76231bd18fff0b4d77579c0d4520d3b6372f31d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:fe:37:b6:38:6d:7f:c5:b9:16:1b:d0:a5: 10:9d:f2:86:70:8a:fe:5c:87:ad:68:b9:3e:c0:22: 06:32:6e:e3:0d:9a:41:aa:21:63:41:b8:89:a6:da: d6:15:7a:1c:64:2a:62:da:66:81:91:a9:c1:34:89: 48:87:af:9d:4e:ad:fa:8b:2a:9a:11:2f:82:0d:da: 2a:c0:0a:f7:70:a8:ef:1d:68:17:1b:9e:eb:a0:9f: 8e:94:1a:1b:2c:e4:7f:ce:8d:82:af:26:92:ee:26: 6c:a1:e5:3d:49:38:62:78:ed:7e:08:27:90:bc:4a: 57:fe:ee:99:e3:ce:25:e9:36:aa:ce:aa:4e:5c:29: 02:87:29:49:57:c1:7a:5d:d4:af:bc:18:89:57:97: 78:c4:b6:40:56:3a:01:a8:20:20:b0:f0:8b:b3:05: f2:53:3a:bd:23:a8:dc:0f:6d:b1:65:05:f2:59:db: a0:da:91:a1:a6:8a:2f:e9:0d:5b:f9:c6:78:44:57: 90:4b:bb:1f:ab:3e:d3:12:1a:42:4f:fb:9b:10:71: 71:7d:8d:d7:33:61:b3:8f:b6:f2:24:00:f4:2a:26: a6:de:b1:a3:8e:c9:ac:fa:d1:4a:16:53:5a:07:66: ce:1a:f9:5c:44:d3:85:9e:55:16:64:95:83:24:4c: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:23:1B:D1:8F:FF:0B:4D:77:57:9C:0D:45:20:D3:B6:37:2F:31:D7 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/diMb0Y__C013V5wNRSDTtjcvMdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.128.0/24 168.199.130.0/24 168.199.194.0/23 Signature Algorithm: sha256WithRSAEncryption 25:be:f0:14:ba:d4:70:fd:2f:d4:8a:45:bd:67:a1:43:38:55: ce:f1:cc:0f:65:1a:8f:b4:a1:a6:db:ce:c0:29:e5:8e:b8:b1: 76:0a:12:ae:29:5e:77:53:dd:9a:42:20:01:d7:7d:5a:6c:70: 27:b2:db:e6:c5:41:46:f8:26:53:1b:02:5b:50:63:ee:d0:0d: 50:59:c0:69:c4:31:cf:41:0e:85:81:d6:87:f9:2a:2b:16:bd: 98:5e:46:d6:ca:a8:61:3e:11:32:65:9e:1f:c9:26:4c:a1:52: bc:e5:4c:91:8c:b0:72:39:7f:be:21:06:ce:12:b3:aa:be:86: b7:3e:0b:b2:d5:d3:17:fe:56:96:be:0c:73:a1:ee:43:52:be: 82:52:26:bd:a9:19:8b:66:c7:8e:e3:ba:2f:11:0c:6b:96:79: 34:f6:9b:95:fb:81:cb:23:50:bf:0c:80:9a:bd:96:a4:72:ac: d8:3d:e6:5a:a4:16:c7:ab:61:37:1c:e8:7d:c2:d3:c6:4e:df: f2:8a:b1:ce:eb:d8:e1:83:4e:73:43:4b:4d:06:3d:ea:bb:70: 7e:c8:56:36:cd:2a:68:12:79:f0:52:f9:e1:91:28:8d:47:a9: 7a:81:44:77:ea:e4:e7:87:ad:09:db:37:92:31:6c:f5:f7:2c: c7:61:46:52 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/gXlgkPbcMTfZ019iZnNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjIzMWJkMThmZmYwYjRkNzc1NzljMGQ0NTIwZDNiNjM3MmYzMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/v+N7Y4bX/FuRYb0KUQnfKGcIr+ XIetaLk+wCIGMm7jDZpBqiFjQbiJptrWFXocZCpi2maBkanBNIlIh6+dTq36iyqa ES+CDdoqwAr3cKjvHWgXG57roJ+OlBobLOR/zo2CryaS7iZsoeU9SThieO1+CCeQ vEpX/u6Z484l6TaqzqpOXCkChylJV8F6XdSvvBiJV5d4xLZAVjoBqCAgsPCLswXy Uzq9I6jcD22xZQXyWdug2pGhpoov6Q1b+cZ4RFeQS7sfqz7TEhpCT/ubEHFxfY3X M2Gzj7byJAD0Kiam3rGjjsms+tFKFlNaB2bOGvlcRNOFnlUWZJWDJEz7ywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHYjG9GP/wtNd1ecDUUg07Y3LzHXMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvZGlNYjBZX19DMDEzVjV3TlJTRFR0amN2TWRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqMeAAwQA qMeCAwQBqMfCMA0GCSqGSIb3DQEBCwUAA4IBAQAlvvAUutRw/S/UikW9Z6FDOFXO 8cwPZRqPtKGm287AKeWOuLF2ChKuKV53U92aQiAB131abHAnstvmxUFG+CZTGwJb UGPu0A1QWcBpxDHPQQ6FgdaH+SorFr2YXkbWyqhhPhEyZZ4fySZMoVK85UyRjLBy OX++IQbOErOqvoa3Pguy1dMX/laWvgxzoe5DUr6CUia9qRmLZseO47ovEQxrlnk0 9puV+4HLI1C/DICavZakcqzYPeZapBbHq2E3HOh9wtPGTt/yirHO69jhg05zQ0tN Bj3qu3B+yFY2zSpoEnnwUvnhkSiNR6l6gUR36uTnh60J2zeSMWz19yzHYUZS -----END CERTIFICATE-----Generated at Fri Jan 9 16:50:56 2026 by rpki-client