This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa File: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (raw, json) Hash identifier: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c= Subject key identifier: 0E:B0:78:B7:FD:71:92:FA:76:0E:09:BA:3B:4E:D9:EA:FD:85:58:41 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED47B8DD0567FC73637BF229689485 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51044 IP address blocks: 45.148.172.0/22 maxlen: 32 2a0f:600::/29 maxlen: 32 2a0f:600::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:47:b8:dd:05:67:fc:73:63:7b:f2:29:68:94:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eb078b7fd7192fa760e09ba3b4ed9eafd855841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:d4:e2:d2:12:81:a4:e5:ef:87:c3:ba:52: bd:b4:15:8b:e8:e4:42:3e:8c:e3:6e:25:cd:c0:b4: 9a:2e:e2:af:9f:d5:5c:f7:1e:99:81:4d:19:ae:47: ad:cd:e7:83:49:89:07:b0:b4:dd:d0:50:59:79:11: d2:70:90:c8:84:e8:ff:56:05:91:49:bd:b4:a5:79: fa:89:06:cb:d6:04:41:71:f3:53:98:38:bc:bd:28: 1a:7e:cd:9a:b0:19:ba:3a:fd:24:52:0a:66:d3:e0: 79:da:09:ca:f8:70:ea:76:09:a2:e7:a9:2d:2b:b1: 8b:38:4e:c1:49:e6:a5:9f:7d:be:b7:ef:f6:93:92: ee:d1:cb:51:63:a1:be:3d:d0:61:de:47:c3:ca:67: 3f:da:79:67:e7:58:3c:66:02:d9:47:c4:e3:57:87: 2b:35:d2:36:af:ff:69:83:54:cf:9d:d5:ae:4c:d2: 57:85:7e:29:c3:ca:99:f8:7c:26:70:9a:81:b0:57: 85:fb:b2:4a:bc:93:49:c2:54:4f:10:fa:ed:d6:d1: 5a:94:26:f8:57:53:fe:0a:32:a9:ee:5c:86:28:66: 8a:0f:d1:0b:6d:73:6c:18:cf:bc:e8:f3:6f:4e:d2: 92:2c:11:c6:05:ee:e3:88:e2:07:7e:00:84:6e:4d: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B0:78:B7:FD:71:92:FA:76:0E:09:BA:3B:4E:D9:EA:FD:85:58:41 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.172.0/22 IPv6: 2a0f:600::/29 Signature Algorithm: sha256WithRSAEncryption 06:e2:3a:55:1a:49:16:bd:6c:42:a1:4d:c1:6d:f4:ee:9b:23: f6:86:59:14:77:94:5e:58:cf:ff:49:23:80:24:21:d1:e4:d7: fb:48:bf:41:8f:2e:90:7d:20:36:05:e2:ed:51:d1:de:67:c0: 0a:f1:74:03:16:10:1f:fd:d6:f7:71:a2:02:aa:f5:a5:2e:30: 2e:80:b2:b7:ac:11:79:4f:1f:ae:97:5e:c5:e3:97:8d:2c:23: a6:59:27:88:97:72:44:9f:ee:0c:c1:b1:51:4b:5a:d3:11:a1: 52:72:d6:f9:5d:d8:ba:8a:cc:09:3f:b0:5f:5b:5a:b9:6b:a2: 8d:59:43:23:cf:70:0c:2f:b2:87:a2:f8:3b:34:c2:47:9b:22: 03:c3:fc:ec:c4:00:f9:e7:02:2c:fc:d9:45:8b:cc:2b:f0:e7: 89:64:b6:39:fa:b9:85:2a:f0:ff:53:03:c7:c3:e7:c1:c4:00: af:07:cf:8a:37:4a:31:b0:4d:78:9c:f9:bc:04:02:7b:2e:46: c9:46:cc:ed:92:b3:f6:22:90:87:7e:5a:e6:cb:8e:6e:f1:65: 6f:3c:0e:9e:25:da:ad:a7:d4:1a:3d:25:f4:19:e7:b9:75:ec: 31:59:c8:66:74:62:ef:d9:66:56:58:08:7f:7b:28:09:cd:91: f2:e5:e0:9e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Ue43QVn/HNje/IpaJSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWIwNzhiN2ZkNzE5MmZhNzYwZTA5YmEzYjRlZDllYWZkODU1ODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMDU4tISgaTl74fDulK9tBWL6ORC PozjbiXNwLSaLuKvn9Vc9x6ZgU0ZrketzeeDSYkHsLTd0FBZeRHScJDIhOj/VgWR Sb20pXn6iQbL1gRBcfNTmDi8vSgafs2asBm6Ov0kUgpm0+B52gnK+HDqdgmi56kt K7GLOE7BSealn32+t+/2k5Lu0ctRY6G+PdBh3kfDymc/2nln51g8ZgLZR8TjV4cr NdI2r/9pg1TPndWuTNJXhX4pw8qZ+HwmcJqBsFeF+7JKvJNJwlRPEPrt1tFalCb4 V1P+CjKp7lyGKGaKD9ELbXNsGM+86PNvTtKSLBHGBe7jiOIHfgCEbk3lkwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA6weLf9cZL6dg4JujtO2er9hVhBMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRHJCNHRfMXhrdnAyRGdtNk8wN1o2djJGV0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZSsMA0E AgACMAcDBQMqDwYAMA0GCSqGSIb3DQEBCwUAA4IBAQAG4jpVGkkWvWxCoU3BbfTu myP2hlkUd5ReWM//SSOAJCHR5Nf7SL9Bjy6QfSA2BeLtUdHeZ8AK8XQDFhAf/db3 caICqvWlLjAugLK3rBF5Tx+ul17F45eNLCOmWSeIl3JEn+4MwbFRS1rTEaFSctb5 Xdi6iswJP7BfW1q5a6KNWUMjz3AML7KHovg7NMJHmyIDw/zsxAD55wIs/NlFi8wr 8OeJZLY5+rmFKvD/UwPHw+fBxACvB8+KN0oxsE14nPm8BAJ7LkbJRsztkrP2IpCH flrmy45u8WVvPA6eJdqtp9QaPSX0Gee5dewxWchmdGLv2WZWWAh/eygJzZHy5eCe -----END CERTIFICATE-----Generated at Thu Jan 8 00:47:42 2026 by rpki-client