This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DB0ZlHnsACcLi5Ey2Gq8KWpBn9s.roa File: DB0ZlHnsACcLi5Ey2Gq8KWpBn9s.roa (raw, json) Hash identifier: e0Wc33+1bN/xnZygBxZHya5hH28oUUAN4zMMB569AzI= Subject key identifier: 0C:1D:19:94:79:EC:00:27:0B:8B:91:32:D8:6A:BC:29:6A:41:9F:DB Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801B8ED62A4A4433E7304A5045BEE4 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DB0ZlHnsACcLi5Ey2Gq8KWpBn9s.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59538 IP address blocks: 185.0.34.0/24 maxlen: 24 194.180.196.0/24 maxlen: 24 2a0f:7800::/31 maxlen: 48 2a0f:7800:600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1b:8e:d6:2a:4a:44:33:e7:30:4a:50:45:be:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c1d199479ec00270b8b9132d86abc296a419fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a1:52:ca:28:92:24:6f:f0:e6:0e:0c:bb:63: f0:e4:43:ac:db:14:0c:f4:6c:ad:7c:41:53:99:57: 14:b0:d8:2f:1d:77:7f:8e:87:ad:24:f3:35:f1:2a: df:2b:1d:f7:0d:13:a8:8a:41:99:64:57:ce:a0:83: 7d:8a:6e:29:dc:de:80:87:b2:23:6e:07:4d:32:e9: a7:6f:44:44:3a:3c:8e:54:b9:5b:e0:37:41:33:0c: 30:d3:85:4f:ce:c4:97:13:24:ab:07:04:8d:45:f8: e3:e1:c7:3e:54:ee:5a:93:4d:11:4f:48:15:2c:08: d3:e3:98:88:f5:08:ef:00:8b:d9:09:99:89:32:a8: d2:b9:b3:64:33:35:fd:7a:97:f1:c8:68:03:c0:8e: af:9c:c8:b8:cc:5e:46:3a:40:7f:be:78:4d:5d:39: 0d:ac:64:18:bc:04:8f:0e:17:f1:1c:5e:2d:8c:36: 8f:85:41:d0:0e:e5:6d:84:ce:bf:79:08:05:c6:70: 5c:91:ae:d6:74:01:3f:e4:8c:7d:fb:76:78:b7:20: ff:e6:87:db:c7:89:64:4d:e2:ac:92:ea:d6:43:8f: 99:00:ab:81:50:b9:d6:11:19:ff:8a:d9:96:08:a7: ea:e4:29:a8:e2:d6:37:b2:8a:5a:63:03:8d:03:ff: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1D:19:94:79:EC:00:27:0B:8B:91:32:D8:6A:BC:29:6A:41:9F:DB X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DB0ZlHnsACcLi5Ey2Gq8KWpBn9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.0.34.0/24 194.180.196.0/24 IPv6: 2a0f:7800::/31 Signature Algorithm: sha256WithRSAEncryption 37:e4:f0:6a:29:a9:be:d8:5d:b3:69:64:62:c0:b6:48:26:bd: 44:3e:50:98:9d:3c:52:c9:7c:01:e9:48:a5:dc:46:64:e3:c1: 3f:1f:95:6d:66:53:b9:cc:de:2f:16:01:c7:3a:f9:16:ad:b1: 84:55:68:25:33:79:55:a3:3e:55:6a:25:50:03:16:66:eb:bf: d3:4c:52:aa:33:03:16:43:e0:51:7d:7a:a5:10:04:77:9f:c3: 53:b3:94:8d:d0:c8:b3:82:f6:36:77:c7:4f:9e:4a:60:4e:f2: 71:43:72:58:e5:91:d1:37:26:2e:33:28:d3:31:44:41:79:4f: 95:1f:71:47:a6:d4:9d:80:71:39:6e:8a:fc:58:3a:86:88:f5: 69:fa:19:1e:ae:3b:72:19:ae:fa:3f:39:0a:47:9a:9e:4a:03: 95:bb:4f:ae:3e:6c:f0:6f:5f:7a:69:be:42:39:a2:48:e3:7f: 62:3e:e3:4f:45:70:da:87:82:97:6f:44:2d:dc:c2:4a:4f:d4: e0:b7:42:92:e0:f2:ad:3e:98:28:67:4b:6e:0c:b9:de:9b:73: d2:38:92:c7:7d:48:b5:f2:36:39:03:51:84:d5:9e:8f:23:43: 2f:a2:fc:93:e1:d3:7d:c9:bf:fc:38:30:ea:22:a2:90:1a:77: 53:f7:c0:af -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gBuO1ipKRDPnMEpQRb7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzFkMTk5NDc5ZWMwMDI3MGI4YjkxMzJkODZhYmMyOTZhNDE5ZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aFSyiiSJG/w5g4Mu2Pw5EOs2xQM 9GytfEFTmVcUsNgvHXd/joetJPM18SrfKx33DROoikGZZFfOoIN9im4p3N6Ah7Ij bgdNMumnb0REOjyOVLlb4DdBMwww04VPzsSXEySrBwSNRfjj4cc+VO5ak00RT0gV LAjT45iI9QjvAIvZCZmJMqjSubNkMzX9epfxyGgDwI6vnMi4zF5GOkB/vnhNXTkN rGQYvASPDhfxHF4tjDaPhUHQDuVthM6/eQgFxnBcka7WdAE/5Ix9+3Z4tyD/5ofb x4lkTeKskurWQ4+ZAKuBULnWERn/itmWCKfq5Cmo4tY3sopaYwONA/99pwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAwdGZR57AAnC4uRMthqvClqQZ/bMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvREIwWmxIbnNBQ2NMaTVFeTJHcThLV3BCbjlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuQAiAwQA wrTEMA0EAgACMAcDBQEqD3gAMA0GCSqGSIb3DQEBCwUAA4IBAQA35PBqKam+2F2z aWRiwLZIJr1EPlCYnTxSyXwB6Uil3EZk48E/H5VtZlO5zN4vFgHHOvkWrbGEVWgl M3lVoz5VaiVQAxZm67/TTFKqMwMWQ+BRfXqlEAR3n8NTs5SN0MizgvY2d8dPnkpg TvJxQ3JY5ZHRNyYuMyjTMURBeU+VH3FHptSdgHE5bor8WDqGiPVp+hkerjtyGa76 PzkKR5qeSgOVu0+uPmzwb196ab5COaJI439iPuNPRXDah4KXb0Qt3MJKT9Tgt0KS 4PKtPpgoZ0tuDLnem3PSOJLHfUi18jY5A1GE1Z6PI0MvovyT4dN9yb/8ODDqIqKQ GndT98Cv -----END CERTIFICATE-----Generated at Wed Jan 14 09:32:35 2026 by rpki-client