This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/dEbHBpx-Qlw4LJgcmplwQSKp84s.roa File: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (raw, json) Hash identifier: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k= Subject key identifier: 74:46:C7:06:9C:7E:42:5C:38:2C:98:1C:9A:99:70:41:22:A9:F3:8B Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Certificate serial: 019B79ED011A7EDF1BFE6E8D2C0C27D031BA Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/dEbHBpx-Qlw4LJgcmplwQSKp84s.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206993 IP address blocks: 185.169.172.0/24 maxlen: 24 185.169.173.0/24 maxlen: 24 185.169.174.0/24 maxlen: 24 185.169.175.0/24 maxlen: 24 193.160.34.0/24 maxlen: 24 193.160.35.0/24 maxlen: 24 193.160.36.0/24 maxlen: 24 193.160.37.0/24 maxlen: 24 193.160.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:01:1a:7e:df:1b:fe:6e:8d:2c:0c:27:d0:31:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7446c7069c7e425c382c981c9a99704122a9f38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:b0:46:af:63:92:83:ec:1e:2e:c6:d1:4c: 84:e4:bf:7a:d7:cf:d5:01:08:2f:fe:22:65:2b:e7: 49:f5:7d:2e:bc:30:e7:a1:ca:bd:46:89:c3:4c:2b: 53:32:f1:6e:a0:ee:5c:b8:be:7b:2f:a5:39:48:39: 1a:7d:c0:39:1a:0b:56:13:86:4c:3c:62:c4:2a:81: f8:f8:64:7a:12:de:a1:bf:de:b7:9f:a8:4f:46:3e: 44:9c:2e:81:e6:9c:56:01:e1:ef:c6:b9:9e:ac:8c: d6:8f:a2:ee:23:78:4b:60:5e:66:40:5e:b4:a3:3d: cf:a1:27:43:c1:8d:3f:7a:0f:79:de:53:30:10:e1: 09:9f:35:8a:d3:f2:dd:ab:3a:e5:9b:a7:11:4e:46: f3:c4:cd:bc:5b:a5:1a:bc:74:f5:38:fe:8a:0f:56: 89:5a:a5:72:b0:b8:c9:f4:72:4b:25:9f:e6:58:74: 3c:1a:ac:c7:27:5c:37:c9:a0:67:f9:d6:16:e5:71: 5b:f9:f3:bf:d7:c4:be:a7:a9:db:40:14:89:2d:c9: 34:33:44:cb:48:21:bb:c9:ab:2a:ab:49:cc:99:77: d7:b9:3b:25:fe:28:ff:0c:19:63:dd:ce:66:a7:16: 27:9d:a3:73:41:ca:77:d2:92:38:9c:26:c8:c6:04: ff:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:C7:06:9C:7E:42:5C:38:2C:98:1C:9A:99:70:41:22:A9:F3:8B X509v3 Authority Key Identifier: keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/dEbHBpx-Qlw4LJgcmplwQSKp84s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.172.0/22 193.160.34.0-193.160.38.255 Signature Algorithm: sha256WithRSAEncryption bf:23:d9:ff:ba:39:6b:77:93:ae:82:5a:e0:d5:c7:ac:d6:b2: 1d:02:d6:a0:33:8a:7f:41:43:6e:a7:8d:e9:c4:bb:b6:83:13: d5:ee:1f:29:de:2a:8f:56:57:e5:7e:39:e1:17:0b:e4:62:2d: ea:00:29:96:be:35:ed:a3:aa:66:f0:0f:09:63:42:fd:e9:00: 6f:33:8c:83:f5:41:48:71:b2:11:7b:b3:e0:97:c2:9f:4e:2f: da:95:29:ec:7a:df:0d:c0:07:cf:aa:8a:c3:45:fa:3d:f4:00: d0:11:86:30:7e:7f:98:8f:8a:2d:94:e2:08:af:4d:15:eb:dd: b9:ce:4e:15:b5:8e:1f:1b:e6:0a:f5:f6:6f:e2:a0:af:d3:03: 1f:ba:d6:6c:66:ff:2f:a3:51:da:90:1e:64:bc:79:e3:47:6a: 1a:a6:5e:13:17:5d:ce:0d:92:ff:17:8d:1b:24:e2:6f:78:cd: 97:d2:f2:2c:9f:f9:71:f8:53:9a:c3:98:68:c4:fe:e0:25:06: 66:37:04:aa:43:0b:46:b1:93:e4:3a:e5:e4:6b:33:e2:8e:51: e8:b3:e5:24:83:de:a3:5e:b4:af:54:28:1c:47:13:0e:bd:05: d3:8e:55:6d:c1:98:d3:e8:6f:88:40:22:8b:51:b0:b8:56:8a: 20:2f:06:73 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57QEaft8b/m6NLAwn0DG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4 YTFjYTkwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQ2YzcwNjljN2U0MjVjMzgyYzk4MWM5YTk5NzA0MTIyYTlmMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a6wRq9jkoPsHi7G0UyE5L9618/V AQgv/iJlK+dJ9X0uvDDnocq9RonDTCtTMvFuoO5cuL57L6U5SDkafcA5GgtWE4ZM PGLEKoH4+GR6Et6hv963n6hPRj5EnC6B5pxWAeHvxrmerIzWj6LuI3hLYF5mQF60 oz3PoSdDwY0/eg953lMwEOEJnzWK0/Ldqzrlm6cRTkbzxM28W6UavHT1OP6KD1aJ WqVysLjJ9HJLJZ/mWHQ8GqzHJ1w3yaBn+dYW5XFb+fO/18S+p6nbQBSJLck0M0TL SCG7yasqq0nMmXfXuTsl/ij/DBlj3c5mpxYnnaNzQcp30pI4nCbIxgT/XQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHRGxwacfkJcOCyYHJqZcEEiqfOLMB8GA1UdIwQY MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt ZjQ0Mjk5ODY1YTI4LzEvZEViSEJweC1RbHc0TEpnY21wbHdRU0twODRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4 LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCuamsMAwD BAHBoCIDBADBoCYwDQYJKoZIhvcNAQELBQADggEBAL8j2f+6OWt3k66CWuDVx6zW sh0C1qAzin9BQ26njenEu7aDE9XuHyneKo9WV+V+OeEXC+RiLeoAKZa+Ne2jqmbw DwljQv3pAG8zjIP1QUhxshF7s+CXwp9OL9qVKex63w3AB8+qisNF+j30ANARhjB+ f5iPii2U4givTRXr3bnOThW1jh8b5gr19m/ioK/TAx+61mxm/y+jUdqQHmS8eeNH ahqmXhMXXc4Nkv8XjRsk4m94zZfS8iyf+XH4U5rDmGjE/uAlBmY3BKpDC0axk+Q6 5eRrM+KOUeiz5SSD3qNetK9UKBxHEw69BdOOVW3BmNPob4hAIotRsLhWiiAvBnM= -----END CERTIFICATE-----Generated at Mon Jan 26 14:22:53 2026 by rpki-client