This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa File: dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa (raw, json) Hash identifier: YiThV6hGoAFFghLAZu6/Suaci71yHsUeFK7P3D3y8FQ= Subject key identifier: 74:5B:1F:1C:35:C5:01:5B:C8:3C:13:F9:9D:12:6A:36:66:CA:B9:73 Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Certificate serial: 019B77591E64CEEAC7801C84F7FA517EAF73 Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215423 IP address blocks: 37.122.152.0/24 maxlen: 24 176.106.227.0/24 maxlen: 24 176.106.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1e:64:ce:ea:c7:80:1c:84:f7:fa:51:7e:af:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=745b1f1c35c5015bc83c13f99d126a3666cab973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:92:74:af:dd:16:72:e9:1c:8a:93:bf:16: 71:f3:8c:37:af:b7:45:d9:48:6a:bf:43:1d:aa:f3: 14:ee:a7:dd:8a:14:d0:5f:9c:93:a9:b5:94:5c:b9: 3d:11:d9:c7:9f:82:b5:90:45:0a:53:b3:2a:29:79: b1:21:24:dd:4d:99:4c:b9:e2:56:44:06:67:c8:d1: c8:a0:ce:d1:18:9f:6b:fd:12:f6:06:fd:17:9e:02: 7e:f9:4f:f4:fc:e5:1b:e0:aa:19:45:06:ed:47:83: eb:96:1f:f9:75:61:05:aa:9c:9a:bf:2b:32:af:5d: 2a:b6:6b:27:2e:80:36:95:b4:df:8a:e2:35:47:86: 46:09:7b:93:2e:d1:9d:a1:36:ff:aa:ee:b9:0a:38: d3:aa:d6:bb:cc:49:22:2a:39:aa:ff:72:dc:21:ae: be:5c:2b:cf:0e:09:45:0e:ed:0e:ba:3c:3c:7b:2a: 11:c8:4f:2e:4d:d8:21:ca:86:90:cc:46:20:ed:d7: fb:b0:d8:25:e0:f8:3f:8f:56:fc:fc:8d:a6:c7:2f: c9:b2:b8:8c:9c:89:36:9c:18:b2:fb:cc:4a:e9:24: b9:9c:ae:bf:25:be:fb:51:fc:e9:9c:76:96:12:32: c8:cb:39:e4:c9:3e:8c:9d:35:ec:63:95:d6:22:76: 9c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5B:1F:1C:35:C5:01:5B:C8:3C:13:F9:9D:12:6A:36:66:CA:B9:73 X509v3 Authority Key Identifier: keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.152.0/24 176.106.227.0-176.106.228.255 Signature Algorithm: sha256WithRSAEncryption 15:50:e5:88:f0:5d:2f:42:06:21:9e:96:49:6f:0c:0a:6a:08: 2a:73:f0:f0:cc:56:20:a6:5e:1f:2c:bc:9c:9c:10:ac:86:09: cd:21:21:06:b9:44:5b:02:4b:00:c0:8c:99:75:8a:24:ef:06: 4e:12:9a:9c:a2:bb:75:e5:dd:35:4c:2b:26:93:c6:35:7d:99: da:77:19:d9:9b:c2:73:d0:b0:d3:b4:c5:f4:92:b1:e8:20:93: a0:71:74:4a:d6:cc:68:5e:ff:9a:da:0f:49:9b:e4:33:82:5f: b2:c0:e7:d5:aa:68:2f:19:3e:3d:61:24:72:6f:e0:09:dd:87: 00:a8:ce:86:16:59:07:f7:77:34:b3:91:46:86:3d:e5:35:03: 9c:fb:c5:a1:5c:40:2e:e0:0c:7b:65:d1:3f:02:75:41:1c:27: 1c:cb:d6:2c:fc:84:aa:0c:6e:cb:04:b5:0c:6f:94:2e:0b:3a: 35:9a:93:51:7b:b6:3c:70:15:73:a5:64:66:62:68:14:a7:e0: ad:e2:d0:67:cc:d4:4c:7d:41:d2:8b:a8:d2:85:fc:3c:71:97: 49:54:5d:51:8a:64:df:e3:ba:c8:2a:2a:fd:c8:57:57:a2:26: 29:5e:49:23:03:01:c4:d9:1e:e7:d8:5d:e7:30:9f:dc:f3:b6: 44:0b:a8:34 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WR5kzurHgByE9/pRfq9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYjMwYTQxYTZhNmYyMWE5YjJkZDdlNTg1NmEyMGQ1YjVl ZmZlMWMwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDViMWYxYzM1YzUwMTViYzgzYzEzZjk5ZDEyNmEzNjY2Y2FiOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumOSdK/dFnLpHIqTvxZx84w3r7dF 2Uhqv0MdqvMU7qfdihTQX5yTqbWUXLk9EdnHn4K1kEUKU7MqKXmxISTdTZlMueJW RAZnyNHIoM7RGJ9r/RL2Bv0XngJ++U/0/OUb4KoZRQbtR4Prlh/5dWEFqpyavysy r10qtmsnLoA2lbTfiuI1R4ZGCXuTLtGdoTb/qu65CjjTqta7zEkiKjmq/3LcIa6+ XCvPDglFDu0Oujw8eyoRyE8uTdghyoaQzEYg7df7sNgl4Pg/j1b8/I2mxy/JsriM nIk2nBiy+8xK6SS5nK6/Jb77UfzpnHaWEjLIyznkyT6MnTXsY5XWInaccQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHRbHxw1xQFbyDwT+Z0SajZmyrlzMB8GA1UdIwQY MBaAFG2zCkGmpvIamy3X5YVqINW17/4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAt ZDg5MzIxMWU2NzE5LzEvZEZzZkhEWEZBVnZJUEJQNW5SSnFObWJLdVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAtZDg5MzIxMWU2NzE5 LzEvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAJXqYMAwD BACwauMDBACwauQwDQYJKoZIhvcNAQELBQADggEBABVQ5YjwXS9CBiGelklvDApq CCpz8PDMViCmXh8svJycEKyGCc0hIQa5RFsCSwDAjJl1iiTvBk4Smpyiu3Xl3TVM KyaTxjV9mdp3GdmbwnPQsNO0xfSSseggk6BxdErWzGhe/5raD0mb5DOCX7LA59Wq aC8ZPj1hJHJv4AndhwCozoYWWQf3dzSzkUaGPeU1A5z7xaFcQC7gDHtl0T8CdUEc JxzL1iz8hKoMbssEtQxvlC4LOjWak1F7tjxwFXOlZGZiaBSn4K3i0GfM1Ex9QdKL qNKF/Dxxl0lUXVGKZN/jusgqKv3IV1eiJileSSMDAcTZHufYXecwn9zztkQLqDQ= -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:31 2026 by rpki-client