This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/Dtb5L2i3F4bloLJfx5uawZqIkls.roa File: Dtb5L2i3F4bloLJfx5uawZqIkls.roa (raw, json) Hash identifier: gjTGNWMLVvyGT9SUilWAhMd6bQfNZN+VjF9bv+zIY+Q= Subject key identifier: 0E:D6:F9:2F:68:B7:17:86:E5:A0:B2:5F:C7:9B:9A:C1:9A:88:92:5B Certificate issuer: /CN=aba10057bcd00762eef43823c030e7e32d572241 Certificate serial: 019B797E85D856C9C1C461C7BBF4AFA712BC Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/Dtb5L2i3F4bloLJfx5uawZqIkls.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 160.202.20.0/24 maxlen: 24 160.202.21.0/24 maxlen: 24 160.202.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:85:d8:56:c9:c1:c4:61:c7:bb:f4:af:a7:12:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ed6f92f68b71786e5a0b25fc79b9ac19a88925b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:80:79:4f:4e:a7:e3:39:59:96:a5:db:90:87: 9d:93:bb:c1:71:65:e1:f0:2e:f2:64:27:76:49:82: c6:c8:57:27:d6:dc:48:90:7d:00:ff:92:9e:e1:e5: 60:e0:d9:30:c0:ca:d4:f2:af:79:71:cb:d6:d3:48: d7:51:3c:00:ad:67:6b:34:c9:8a:19:34:ce:65:c2: df:01:fc:cc:52:16:59:c0:f1:e8:7d:67:8b:58:2a: 9b:01:f7:8c:92:01:d4:b1:a6:4d:d1:33:b8:9c:db: 76:cb:9b:9b:10:ed:a1:bb:0b:90:10:20:57:a9:b9: 62:aa:1f:79:25:75:64:ad:82:85:ce:3d:76:d9:97: 18:64:22:08:d7:f7:fa:52:b8:6f:7d:1c:9f:9e:2b: 23:90:36:5f:e6:86:1b:e4:ed:c4:7f:bf:2e:56:ad: df:87:32:7a:43:1e:5b:e1:11:00:66:b8:aa:ee:a5: 3c:86:e8:dc:a9:37:10:52:f5:5a:2d:ce:5b:29:5a: d3:25:b2:65:f4:b9:b6:af:1a:7e:4d:f6:d4:d8:ac: c3:6e:18:8c:e2:c8:6c:e1:d5:99:58:70:a8:35:99: 2d:65:bd:b7:d8:91:4d:90:78:8b:8e:a6:fe:80:d6: 84:d3:06:ed:b0:70:4b:28:d1:6a:91:71:05:0b:56: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D6:F9:2F:68:B7:17:86:E5:A0:B2:5F:C7:9B:9A:C1:9A:88:92:5B X509v3 Authority Key Identifier: keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/Dtb5L2i3F4bloLJfx5uawZqIkls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.202.20.0-160.202.22.255 Signature Algorithm: sha256WithRSAEncryption 51:7e:26:7d:3c:e3:80:49:2d:c8:aa:dc:22:5c:3f:d5:54:a5: 3b:5a:31:4b:8f:3c:d9:9e:12:e4:48:96:90:15:59:ab:8a:95: 33:eb:0f:b2:10:88:73:99:70:cf:54:9c:bc:3f:28:81:33:52: c9:e7:82:69:72:e3:c0:82:65:d3:cd:84:97:39:a8:2b:01:f4: 3c:5e:63:05:d6:84:f7:a1:52:0c:20:62:2b:66:6f:72:2e:b7: 21:cb:85:cc:ee:44:6d:e1:db:99:d4:49:d3:f8:a7:93:80:10: b8:57:bf:98:b7:01:1b:0c:6a:5b:a8:bb:9a:ae:88:c3:9f:d0: c8:4f:ee:f2:c6:de:c3:c2:cd:a3:43:aa:87:df:97:f3:a5:73: 27:09:42:6c:f7:dc:be:81:3a:70:17:a6:9e:f4:d5:45:3f:55: 5f:e3:4a:ae:d9:06:c5:e5:f0:d4:ff:b6:f9:a4:c0:57:f9:1e: 2a:dc:b4:ec:c2:bb:52:3f:18:ea:7a:e6:3b:ad:d7:55:a9:5f: 5b:10:76:0b:29:8c:f8:86:d0:e6:7b:67:5e:d4:9f:87:bd:a5: a8:33:72:55:8e:6a:38:3f:88:ec:3f:40:60:bc:bf:a9:88:b4: e1:48:31:c8:15:eb:d8:96:db:95:13:dd:de:e4:86:bf:1d:fb: f1:84:b7:8e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5foXYVsnBxGHHu/SvpxK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYTEwMDU3YmNkMDA3NjJlZWY0MzgyM2MwMzBlN2UzMmQ1 NzIyNDEwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWQ2ZjkyZjY4YjcxNzg2ZTVhMGIyNWZjNzliOWFjMTlhODg5MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74B5T06n4zlZlqXbkIedk7vBcWXh 8C7yZCd2SYLGyFcn1txIkH0A/5Ke4eVg4NkwwMrU8q95ccvW00jXUTwArWdrNMmK GTTOZcLfAfzMUhZZwPHofWeLWCqbAfeMkgHUsaZN0TO4nNt2y5ubEO2huwuQECBX qbliqh95JXVkrYKFzj122ZcYZCII1/f6UrhvfRyfnisjkDZf5oYb5O3Ef78uVq3f hzJ6Qx5b4REAZriq7qU8hujcqTcQUvVaLc5bKVrTJbJl9Lm2rxp+TfbU2KzDbhiM 4shs4dWZWHCoNZktZb232JFNkHiLjqb+gNaE0wbtsHBLKNFqkXEFC1YaowIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFA7W+S9otxeG5aCyX8ebmsGaiJJbMB8GA1UdIwQY MBaAFKuhAFe80Adi7vQ4I8Aw5+MtVyJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZFQVY3elFCMkx1OURnandERG40eTFYSWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84MDM1M2QtNGYyMi00ZDk0LWJlYWQt ZGQyMGUyOTk0Y2QwLzEvRHRiNUwyaTNGNGJsb0xKZng1dWF3WnFJa2xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84MDM1M2QtNGYyMi00ZDk0LWJlYWQtZGQyMGUyOTk0Y2Qw LzEvcTZFQVY3elFCMkx1OURnandERG40eTFYSWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKgyhQD BACgyhYwDQYJKoZIhvcNAQELBQADggEBAFF+Jn0844BJLciq3CJcP9VUpTtaMUuP PNmeEuRIlpAVWauKlTPrD7IQiHOZcM9UnLw/KIEzUsnngmly48CCZdPNhJc5qCsB 9DxeYwXWhPehUgwgYitmb3IutyHLhczuRG3h25nUSdP4p5OAELhXv5i3ARsMaluo u5quiMOf0MhP7vLG3sPCzaNDqoffl/OlcycJQmz33L6BOnAXpp701UU/VV/jSq7Z BsXl8NT/tvmkwFf5HirctOzCu1I/GOp65jut11WpX1sQdgspjPiG0OZ7Z17Un4e9 pagzclWOajg/iOw/QGC8v6mItOFIMcgV69iW25UT3d7khr8d+/GEt44= -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:43 2026 by rpki-client