This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/DgrTVtP0jXJ4OGfuPKYULY4Onk4.roa File: DgrTVtP0jXJ4OGfuPKYULY4Onk4.roa (raw, json) Hash identifier: 8Lr7Jf5noSRWbE2rMCrFS+5F3tinLkNtJ9p8Cr6DKmI= Subject key identifier: 0E:0A:D3:56:D3:F4:8D:72:78:38:67:EE:3C:A6:14:2D:8E:0E:9E:4E Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64 Certificate serial: 019B76EBA6A607981CCB568D7635A5DE19D5 Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/DgrTVtP0jXJ4OGfuPKYULY4Onk4.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50553 IP address blocks: 178.219.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a6:a6:07:98:1c:cb:56:8d:76:35:a5:de:19:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e0ad356d3f48d72783867ee3ca6142d8e0e9e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:04:4d:0b:62:d1:de:1e:98:a9:9c:a3:2e: bc:ba:d7:f0:56:3e:a6:a6:66:c9:4e:e7:b3:6e:a5: b7:ba:3d:8c:19:c6:df:a5:b7:60:78:24:30:ce:e4: 5f:ad:98:cc:21:37:c2:53:da:77:14:14:53:20:9e: 0a:2b:81:39:2f:84:02:5a:24:d2:24:bf:db:66:8f: 5b:f5:26:f1:28:42:70:fd:ca:42:fc:90:9f:7d:b0: 98:6f:6d:5a:54:78:ec:5a:fb:4d:83:29:69:00:54: fe:a3:d8:d7:ba:94:65:19:1f:f7:36:d8:ef:3f:bf: 05:19:d1:e6:45:88:47:46:c7:e2:51:c6:42:25:56: 16:ab:5f:34:08:7f:7f:bd:0b:4d:f0:38:62:91:b1: cf:da:6c:43:e8:84:b0:8e:e4:d5:ea:bd:e6:ae:27: 1e:17:e8:b5:b8:cd:67:51:1b:77:93:b2:41:8d:3e: 87:8c:6d:eb:71:30:1b:75:0b:04:67:de:da:14:42: 80:62:52:9f:dd:74:d4:23:13:3b:31:4e:2b:3b:fe: e5:1d:26:df:5e:2a:35:8b:cd:5f:7a:30:34:90:5f: 53:17:87:16:2a:d8:13:4e:5a:f7:cf:2d:df:94:a9: f8:25:9a:ae:f7:17:7d:f1:26:5f:56:a5:51:1a:2a: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0A:D3:56:D3:F4:8D:72:78:38:67:EE:3C:A6:14:2D:8E:0E:9E:4E X509v3 Authority Key Identifier: keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/DgrTVtP0jXJ4OGfuPKYULY4Onk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.219.176.0/21 Signature Algorithm: sha256WithRSAEncryption 64:27:00:85:6c:59:86:a0:67:b5:ce:af:37:eb:41:27:4c:5b: d0:99:d9:e6:55:67:d7:38:0c:33:23:9a:34:27:44:f2:ab:62: 59:cf:97:be:d4:90:50:e3:90:31:a5:50:61:f2:51:79:e7:4a: 43:82:69:e0:d3:19:e2:a0:9f:6d:c5:1c:eb:2f:55:99:9c:eb: 7b:19:3a:59:d1:ef:86:bc:89:6f:3c:74:9f:07:70:85:b3:3a: 4e:3c:ca:25:c0:33:a0:4e:36:3e:53:a1:77:ac:7a:b8:72:b2: f6:cc:28:dc:79:8e:36:6a:b6:e6:67:1d:fc:62:35:e3:78:1c: 64:c2:32:e9:a2:1d:fa:2b:b0:de:7e:7a:62:c5:ec:d1:fa:d8: 8f:0f:b9:73:1f:ae:ee:9a:35:f1:f8:42:e0:91:d7:ea:b5:99: dc:73:82:43:54:c4:5a:65:65:ef:ec:73:78:7d:72:26:33:79: b5:b5:a0:64:f2:b7:ba:f6:c0:72:ae:4c:87:35:52:83:53:9f: 2e:82:04:1c:bc:e4:50:dd:4a:83:01:03:85:6a:2f:9d:f0:1b: f0:b3:e4:ec:57:78:fc:fb:84:49:da:61:03:35:b1:b6:f5:ed: 25:59:75:b3:ff:a2:1e:8d:84:73:73:96:e2:65:4a:f4:5c:e2: 83:c1:78:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266amB5gcy1aNdjWl3hnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzMxNjc5MTNhZjczZTRmNjM3NDE3MGM0Zjk0NWY4YjBk ZDdkNjQwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTBhZDM1NmQzZjQ4ZDcyNzgzODY3ZWUzY2E2MTQyZDhlMGU5ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD4ETQti0d4emKmcoy68utfwVj6m pmbJTuezbqW3uj2MGcbfpbdgeCQwzuRfrZjMITfCU9p3FBRTIJ4KK4E5L4QCWiTS JL/bZo9b9SbxKEJw/cpC/JCffbCYb21aVHjsWvtNgylpAFT+o9jXupRlGR/3Ntjv P78FGdHmRYhHRsfiUcZCJVYWq180CH9/vQtN8DhikbHP2mxD6ISwjuTV6r3mrice F+i1uM1nURt3k7JBjT6HjG3rcTAbdQsEZ97aFEKAYlKf3XTUIxM7MU4rO/7lHSbf Xio1i81fejA0kF9TF4cWKtgTTlr3zy3flKn4JZqu9xd98SZfVqVRGiqLmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4K01bT9I1yeDhn7jymFC2ODp5OMB8GA1UdIwQY MBaAFLRzFnkTr3Pk9jdBcMT5Rfiw3X1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAt Zjg2ZGNhYWQ4YzQ5LzEvRGdyVFZ0UDBqWEo0T0dmdVBLWVVMWTRPbms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAtZjg2ZGNhYWQ4YzQ5 LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstuwMA0G CSqGSIb3DQEBCwUAA4IBAQBkJwCFbFmGoGe1zq8360EnTFvQmdnmVWfXOAwzI5o0 J0Tyq2JZz5e+1JBQ45AxpVBh8lF550pDgmng0xnioJ9txRzrL1WZnOt7GTpZ0e+G vIlvPHSfB3CFszpOPMolwDOgTjY+U6F3rHq4crL2zCjceY42arbmZx38YjXjeBxk wjLpoh36K7DefnpixezR+tiPD7lzH67umjXx+ELgkdfqtZncc4JDVMRaZWXv7HN4 fXImM3m1taBk8re69sByrkyHNVKDU58uggQcvORQ3UqDAQOFai+d8Bvws+TsV3j8 +4RJ2mEDNbG29e0lWXWz/6IejYRzc5biZUr0XOKDwXjG -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:10 2026 by rpki-client