This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/DQXbLwf8Hv29sNGGNmPoPvxEWsE.roa File: DQXbLwf8Hv29sNGGNmPoPvxEWsE.roa (raw, json) Hash identifier: OpQKdQm0BOT+9VwAS/gtpB5DbRTSg/6SCoYKEhyP9DU= Subject key identifier: 0D:05:DB:2F:07:FC:1E:FD:BD:B0:D1:86:36:63:E8:3E:FC:44:5A:C1 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C74EBCF9F48AC8752AE350BFBA0E50 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/DQXbLwf8Hv29sNGGNmPoPvxEWsE.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211936 IP address blocks: 95.178.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4e:bc:f9:f4:8a:c8:75:2a:e3:50:bf:ba:0e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d05db2f07fc1efdbdb0d1863663e83efc445ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:b4:0c:b0:3c:e2:f4:32:9b:2f:fe:52:c3: c4:a7:67:78:a4:0c:35:9c:91:d6:10:75:73:78:73: ee:6f:e0:39:c1:12:1d:db:15:31:4f:8a:3b:76:14: 0f:61:80:57:57:9b:82:61:6e:c7:4b:07:c5:c0:9d: ef:f5:1d:ae:c4:70:53:b3:99:b8:ab:1b:1b:99:0b: 53:3d:88:5d:76:28:5c:c6:a9:ad:5b:81:24:ff:3b: 90:fb:82:ec:b8:9a:b4:7a:fe:61:d7:83:da:7f:e2: 00:4b:13:0c:e3:34:be:fb:6d:74:89:b8:81:14:51: 7a:11:92:7c:ce:42:48:d7:67:d0:d8:06:7a:4d:38: 98:08:bd:d9:d0:80:74:64:f4:34:4b:6b:07:2f:ae: c5:a9:ea:1e:76:81:1a:f3:21:ad:4c:8d:5e:39:69: dd:84:9e:d2:69:2a:8a:93:b6:85:c4:19:eb:61:0b: 37:6f:e5:e7:5b:68:ab:1f:c7:6a:04:7a:06:7e:6c: d0:f0:55:df:cb:ec:ac:ce:f8:fe:97:39:de:10:70: bf:18:77:b1:0d:be:06:af:b8:57:b2:0d:93:3a:a8: ad:b8:9e:29:21:80:71:fc:ff:2f:84:0d:3b:99:b9: da:99:a8:fc:6a:55:16:b2:49:56:a2:43:20:e6:a9: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:05:DB:2F:07:FC:1E:FD:BD:B0:D1:86:36:63:E8:3E:FC:44:5A:C1 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/DQXbLwf8Hv29sNGGNmPoPvxEWsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.178.8.0/21 Signature Algorithm: sha256WithRSAEncryption 14:d4:17:cd:0c:4d:f9:0e:93:09:eb:b5:29:77:93:a1:dd:c7: b9:2a:97:ad:67:93:d0:4f:04:dd:ac:d7:91:c7:37:85:e1:79: 25:ac:05:83:6c:46:08:a1:0d:58:7d:76:79:08:98:85:48:c1: e5:cb:cc:f2:e8:26:21:89:b9:02:1e:b5:ec:e7:56:c6:c3:ca: 4e:77:fc:8e:0f:3d:0b:bb:12:4c:f9:07:67:11:43:e5:3b:2d: 58:39:e0:cf:be:99:40:d1:b6:7c:e0:bd:97:03:fe:b3:6d:0b: c9:14:5a:13:9a:95:8e:e1:ef:d1:05:78:8e:81:ea:8f:bc:32: ea:63:a2:ac:04:17:68:cc:27:2b:dc:a3:ae:7b:fe:16:08:7c: 78:82:7c:ad:fe:32:ba:ff:b5:be:95:9e:ce:10:c6:1c:9c:3d: 40:70:53:10:6a:7e:76:b6:4e:dc:9b:0b:c2:7a:fb:f2:cb:ad: bd:06:70:ef:9e:cb:01:df:77:e4:9d:83:bb:9c:f2:3c:23:49: 1c:5c:fa:68:05:96:a2:87:6a:72:b1:80:7f:6a:9c:d1:ab:67: 0e:a1:a7:d1:27:79:ca:4f:44:6e:c7:43:98:44:24:7d:62:a5: 5e:61:45:24:f7:c0:2b:43:89:91:9b:f1:ca:17:9d:31:7e:a1: be:2b:ec:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x068+fSKyHUq41C/ug5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDA1ZGIyZjA3ZmMxZWZkYmRiMGQxODYzNjYzZTgzZWZjNDQ1YWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKe0DLA84vQymy/+UsPEp2d4pAw1 nJHWEHVzeHPub+A5wRId2xUxT4o7dhQPYYBXV5uCYW7HSwfFwJ3v9R2uxHBTs5m4 qxsbmQtTPYhddihcxqmtW4Ek/zuQ+4LsuJq0ev5h14Paf+IASxMM4zS++210ibiB FFF6EZJ8zkJI12fQ2AZ6TTiYCL3Z0IB0ZPQ0S2sHL67FqeoedoEa8yGtTI1eOWnd hJ7SaSqKk7aFxBnrYQs3b+XnW2irH8dqBHoGfmzQ8FXfy+yszvj+lzneEHC/GHex Db4Gr7hXsg2TOqituJ4pIYBx/P8vhA07mbnamaj8alUWsklWokMg5qmK3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0F2y8H/B79vbDRhjZj6D78RFrBMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvRFFYYkx3ZjhIdjI5c05HR05tUG9QdnhFV3NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX7IIMA0G CSqGSIb3DQEBCwUAA4IBAQAU1BfNDE35DpMJ67Upd5Oh3ce5KpetZ5PQTwTdrNeR xzeF4XklrAWDbEYIoQ1YfXZ5CJiFSMHly8zy6CYhibkCHrXs51bGw8pOd/yODz0L uxJM+QdnEUPlOy1YOeDPvplA0bZ84L2XA/6zbQvJFFoTmpWO4e/RBXiOgeqPvDLq Y6KsBBdozCcr3KOue/4WCHx4gnyt/jK6/7W+lZ7OEMYcnD1AcFMQan52tk7cmwvC evvyy629BnDvnssB33fknYO7nPI8I0kcXPpoBZaih2pysYB/apzRq2cOoafRJ3nK T0Rux0OYRCR9YqVeYUUk98ArQ4mRm/HKF50xfqG+K+zw -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:25 2026 by rpki-client