This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa File: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (raw, json) Hash identifier: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og= Subject key identifier: 0D:B6:09:C7:B2:57:28:9F:70:76:10:D0:3F:21:F5:BC:9F:28:17:29 Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e Certificate serial: 019B7F15A73DB88C20A1E590823F7272B753 Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201981 IP address blocks: 185.55.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a7:3d:b8:8c:20:a1:e5:90:82:3f:72:72:b7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0db609c7b257289f707610d03f21f5bc9f281729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:51:13:76:4f:c2:1a:0f:91:1c:28:29:b7: 92:59:0f:23:33:10:14:50:60:d9:7f:be:40:f6:20: 05:ac:1a:68:81:cc:1d:bb:b5:02:c3:b3:61:f3:d1: fc:9d:f5:5f:23:78:c2:e6:91:25:49:c4:90:5d:a1: e9:41:ed:45:e7:8d:30:3f:e3:28:87:a0:2b:bd:ed: e3:b7:ed:c2:26:b8:b0:e5:a7:7c:0b:21:c2:b0:b8: fc:fe:c6:7b:8a:14:30:4e:3c:57:67:7e:41:ea:cb: 1b:31:5c:dd:b8:83:8a:59:4a:94:5c:b7:60:c0:45: 79:ea:26:c3:b1:fe:65:47:7b:f7:9e:d6:fa:f1:60: b3:f9:68:a5:f0:2d:2f:c7:d8:65:a0:bd:32:5a:ca: 5d:49:41:b4:71:6a:c0:1c:8e:e8:81:55:01:83:1d: 97:5d:b4:a5:b5:cd:b7:f6:25:db:1d:12:2e:85:42: ad:89:d0:8c:bb:a2:f7:34:44:8c:02:37:de:01:03: 72:38:69:f6:0c:d0:02:88:aa:2d:6f:d0:cd:9a:31: 4b:5c:4b:da:a0:98:86:a8:e0:f8:4e:41:28:ec:2c: 20:4f:e0:4e:56:52:ce:72:e3:a2:a3:ed:24:f3:07: c3:43:20:bd:9f:09:0a:cd:ee:17:fa:f2:a1:ec:84: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B6:09:C7:B2:57:28:9F:70:76:10:D0:3F:21:F5:BC:9F:28:17:29 X509v3 Authority Key Identifier: keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.236.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:2d:45:ff:81:21:e9:d1:84:b0:46:4a:12:c8:df:08:4d:60: bc:92:94:11:74:74:c7:06:89:42:e8:2e:62:d7:b4:e9:67:2b: 49:48:3b:b9:f6:95:6d:4f:67:03:1e:be:26:28:cd:3b:48:be: 03:d6:31:a2:e0:9c:05:48:99:ab:dd:7d:4e:db:dd:07:30:17: 41:3b:89:2d:ba:b0:4a:60:33:9e:8d:3a:6f:67:27:19:7b:0e: 3c:38:e0:3a:3b:73:89:9b:5e:e6:e0:7d:a4:bf:53:f9:c1:28: ae:5f:65:70:21:f4:37:29:f8:d6:b9:f2:b3:74:ad:e0:55:40: 73:ba:a3:4f:a8:b5:50:a8:17:c2:e4:19:cb:bc:72:4b:69:bc: d2:b5:89:e8:a6:07:2d:ef:7d:3c:7d:4c:ae:f5:07:48:08:61: 28:a5:2a:31:da:2a:58:06:4e:fc:dc:76:b3:50:f4:e5:31:c3: ee:a0:cc:76:2b:2f:11:6f:9c:84:b2:6c:0c:68:6f:89:ac:31: 22:04:2d:66:0b:05:9d:46:48:33:f6:78:29:00:66:4e:50:19: f8:2a:af:06:74:55:a5:3b:45:f6:2a:e1:99:0d:b3:00:48:4c: b5:ab:79:3b:9e:04:68:c8:8b:95:aa:9d:d0:a2:ad:e4:5c:41: 38:05:9c:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fac9uIwgoeWQgj9ycrdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhN2JiY2RlNTdkODViM2ZiMWFhZGNiYTljOTk3NzVlMTll ZWVmM2UwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGI2MDljN2IyNTcyODlmNzA3NjEwZDAzZjIxZjViYzlmMjgxNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF1RE3ZPwhoPkRwoKbeSWQ8jMxAU UGDZf75A9iAFrBpogcwdu7UCw7Nh89H8nfVfI3jC5pElScSQXaHpQe1F540wP+Mo h6Arve3jt+3CJriw5ad8CyHCsLj8/sZ7ihQwTjxXZ35B6ssbMVzduIOKWUqUXLdg wEV56ibDsf5lR3v3ntb68WCz+Wil8C0vx9hloL0yWspdSUG0cWrAHI7ogVUBgx2X XbSltc239iXbHRIuhUKtidCMu6L3NESMAjfeAQNyOGn2DNACiKotb9DNmjFLXEva oJiGqOD4TkEo7CwgT+BOVlLOcuOio+0k8wfDQyC9nwkKze4X+vKh7ISPmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA22CceyVyifcHYQ0D8h9byfKBcpMB8GA1UdIwQY MBaAFAp7vN5X2Fs/sarcupyZd14Z7u8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ251ODNsZllXei14cXR5Nm5KbDNYaG51N3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yNjg0ZmItMWVkYi00MTQyLWIyYjYt ZjA5MGQ5MWRjYmY4LzEvRGJZSng3SlhLSjl3ZGhEUVB5SDF2SjhvRnlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yNjg0ZmItMWVkYi00MTQyLWIyYjYtZjA5MGQ5MWRjYmY4 LzEvQ251ODNsZllXei14cXR5Nm5KbDNYaG51N3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTfsMA0G CSqGSIb3DQEBCwUAA4IBAQA6LUX/gSHp0YSwRkoSyN8ITWC8kpQRdHTHBolC6C5i 17TpZytJSDu59pVtT2cDHr4mKM07SL4D1jGi4JwFSJmr3X1O290HMBdBO4kturBK YDOejTpvZycZew48OOA6O3OJm17m4H2kv1P5wSiuX2VwIfQ3KfjWufKzdK3gVUBz uqNPqLVQqBfC5BnLvHJLabzStYnopgct7308fUyu9QdICGEopSox2ipYBk783Haz UPTlMcPuoMx2Ky8Rb5yEsmwMaG+JrDEiBC1mCwWdRkgz9ngpAGZOUBn4Kq8GdFWl O0X2KuGZDbMASEy1q3k7ngRoyIuVqp3Qoq3kXEE4BZxc -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:02 2026 by rpki-client