This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa File: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (raw, json) Hash identifier: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI= Subject key identifier: 0D:BE:36:81:52:0E:73:EA:FA:53:45:DD:90:F1:84:91:A5:10:FC:5F Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2 Certificate serial: 019B7B3690E9183A03FD73FCB0BEDD5F9E61 Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa Signing time: Thu 01 Jan 2026 20:18:52 +0000 ROA not before: Thu 01 Jan 2026 20:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198331 IP address blocks: 89.145.176.0/21 maxlen: 21 2a02:7b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:90:e9:18:3a:03:fd:73:fc:b0:be:dd:5f:9e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dbe3681520e73eafa5345dd90f18491a510fc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:a9:29:d0:6c:67:78:ee:cc:38:09:54:04: 76:3a:d4:dd:fb:8c:fc:98:55:af:68:47:e8:df:77: ed:e1:0c:5b:7f:32:b5:6b:bb:6f:95:a6:20:6c:8c: 2b:2a:4b:dc:b7:ff:d6:ed:7a:9e:4c:45:c7:68:23: 6f:00:bb:3b:9d:ed:b6:13:e7:6d:f4:da:cf:3b:20: 4b:9b:0b:4f:88:d6:ed:8a:d2:47:9f:51:e7:94:c4: ca:03:88:5e:72:9a:84:8a:14:77:b1:ed:8e:9c:97: 57:f7:5e:27:e6:a0:b5:90:5a:d3:4e:6b:eb:59:af: 1d:46:a7:44:0f:79:ec:eb:0d:ab:0a:c8:35:68:f9: fc:ad:93:bb:10:da:ef:fd:df:6c:35:e5:79:97:85: 0f:e2:bd:bc:4b:cf:38:4f:b0:a7:93:cc:89:5f:80: 95:5e:eb:90:50:55:fa:37:42:59:98:bb:fc:a2:b7: 6f:2f:37:cc:1c:2c:df:c0:f2:42:12:71:b1:0c:1e: 37:35:05:34:7c:81:b2:d8:88:48:a7:4c:6d:c6:e6: bc:a8:e9:04:6e:5c:9e:99:bc:e4:7d:4d:2c:54:54: e9:9f:5f:8f:3d:e2:b5:d9:ae:b1:bd:36:f6:0a:c0: ef:2f:f8:63:a9:db:80:b0:b6:a0:c4:22:2f:a1:1e: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BE:36:81:52:0E:73:EA:FA:53:45:DD:90:F1:84:91:A5:10:FC:5F X509v3 Authority Key Identifier: keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.145.176.0/21 IPv6: 2a02:7b80::/32 Signature Algorithm: sha256WithRSAEncryption 71:c1:0d:e3:8d:db:01:1f:a9:97:7c:cf:29:d8:31:f3:32:b4: 89:19:8e:05:74:4d:1c:5f:b4:e1:5d:c3:7d:0e:f5:76:70:15: 51:40:0a:7d:1f:f1:77:3d:fc:cb:9f:ca:62:b2:97:52:60:29: 9e:46:19:5e:a8:bb:b0:48:aa:d1:9f:02:5e:09:c0:94:30:23: ef:15:bb:37:43:10:f8:51:a1:32:53:4e:e0:d1:08:24:a8:d3: f3:82:5a:3d:76:42:c5:db:3f:f5:a5:36:7b:08:76:ae:5f:16: a1:ae:fd:8b:0a:d5:12:6e:3d:20:5f:e8:09:34:8c:d0:57:1e: 7a:84:8e:9b:60:5a:3f:4b:97:b7:d7:42:f9:f4:5a:60:ce:14: 4c:38:25:00:e9:fb:56:dd:9f:9f:c5:b0:0f:9c:11:53:04:94: ea:04:24:85:fb:0a:59:e3:a7:b2:39:75:8d:c9:07:c5:d0:eb: e5:c2:15:77:4f:d8:1a:e3:f3:3c:da:9e:ef:f0:bb:e3:ab:57: d7:aa:e2:78:e1:06:1b:2a:8c:d0:d2:cb:44:d4:6c:a2:9d:77: c8:df:71:b9:2f:79:18:8a:fe:94:e4:e8:ad:c9:e0:40:01:9f: 0c:3c:d9:e5:5c:49:8e:2a:c1:b2:09:15:6f:e7:b3:ec:9d:bc: 81:19:5a:bd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NpDpGDoD/XP8sL7dX55hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWYwYjhlNWJiYWIyOWExMzMwZmEwZTc0OTNmMmExNzk4 NDdiYjIwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGJlMzY4MTUyMGU3M2VhZmE1MzQ1ZGQ5MGYxODQ5MWE1MTBmYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl+pKdBsZ3juzDgJVAR2OtTd+4z8 mFWvaEfo33ft4QxbfzK1a7tvlaYgbIwrKkvct//W7XqeTEXHaCNvALs7ne22E+dt 9NrPOyBLmwtPiNbtitJHn1HnlMTKA4hecpqEihR3se2OnJdX914n5qC1kFrTTmvr Wa8dRqdED3ns6w2rCsg1aPn8rZO7ENrv/d9sNeV5l4UP4r28S884T7Cnk8yJX4CV XuuQUFX6N0JZmLv8ordvLzfMHCzfwPJCEnGxDB43NQU0fIGy2IhIp0xtxua8qOkE blyembzkfU0sVFTpn1+PPeK12a6xvTb2CsDvL/hjqduAsLagxCIvoR6gewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA2+NoFSDnPq+lNF3ZDxhJGlEPxfMB8GA1UdIwQY MBaAFAnvC45burKaEzD6DnST8qF5hHuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQt MzczNzRlMzk2YzdkLzEvRGI0MmdWSU9jLXI2VTBYZGtQR0VrYVVRX0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQtMzczNzRlMzk2Yzdk LzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDWZGwMA0E AgACMAcDBQAqAnuAMA0GCSqGSIb3DQEBCwUAA4IBAQBxwQ3jjdsBH6mXfM8p2DHz MrSJGY4FdE0cX7ThXcN9DvV2cBVRQAp9H/F3PfzLn8pispdSYCmeRhleqLuwSKrR nwJeCcCUMCPvFbs3QxD4UaEyU07g0QgkqNPzglo9dkLF2z/1pTZ7CHauXxahrv2L CtUSbj0gX+gJNIzQVx56hI6bYFo/S5e310L59FpgzhRMOCUA6ftW3Z+fxbAPnBFT BJTqBCSF+wpZ46eyOXWNyQfF0OvlwhV3T9ga4/M82p7v8Lvjq1fXquJ44QYbKozQ 0stE1GyinXfI33G5L3kYiv6U5OityeBAAZ8MPNnlXEmOKsGyCRVv57PsnbyBGVq9 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:25 2026 by rpki-client