This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/s0DKTB-WwsVhzWKoi8hN1rh2N-c.roa File: s0DKTB-WwsVhzWKoi8hN1rh2N-c.roa (raw, json) Hash identifier: 07d3h4sls+mebkuKMOSsHuF9QXCiDOJiXihhE6GwphY= Subject key identifier: B3:40:CA:4C:1F:96:C2:C5:61:CD:62:A8:8B:C8:4D:D6:B8:76:37:E7 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A328D26D893F3E2408824786035898 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/s0DKTB-WwsVhzWKoi8hN1rh2N-c.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214354 IP address blocks: 109.205.193.0/24 maxlen: 24 158.94.220.0/23 maxlen: 24 158.94.220.0/24 maxlen: 24 158.94.221.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb02:8000::/34 maxlen: 34 2a01:fb05:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:28:d2:6d:89:3f:3e:24:08:82:47:86:03:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b340ca4c1f96c2c561cd62a88bc84dd6b87637e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:0e:3f:f7:07:21:98:d9:c6:0d:86:2e:58: f7:32:c6:45:21:fe:8e:7c:67:ba:eb:ef:bb:16:d7: c9:35:60:07:a6:0a:f2:03:94:70:8e:22:ca:46:2a: 0a:2e:51:d2:75:9a:bf:7e:f7:5c:57:06:75:5c:8c: 61:16:b1:4c:f3:39:b0:cc:48:39:4c:d3:e6:b6:cf: 92:ac:3f:70:41:e2:9d:9c:c0:01:b0:75:48:63:e8: d7:fc:b8:28:2b:ef:4d:05:d0:98:24:23:24:10:6f: 86:2d:bd:15:3e:39:d7:8e:6d:cf:b7:4d:25:14:5d: 34:ba:ce:05:9f:0b:70:1d:f9:56:06:69:38:93:aa: 6e:05:7f:0f:65:1d:30:91:c3:29:f6:4e:33:25:a8: 19:6f:6b:09:90:f2:6b:b1:8f:82:95:87:13:bd:eb: f9:80:a6:98:31:98:5d:50:cf:b2:6a:89:e3:f0:a9: 2b:c6:ff:e7:0c:f5:d2:dd:21:ec:d8:da:6b:d6:75: 2d:37:47:3a:0e:3c:3e:b3:61:09:d7:81:6e:f1:a5: 1a:9d:c1:8c:02:f8:0b:9c:b9:9e:e1:f0:92:5e:73: 76:69:3b:87:2f:da:b8:cc:20:db:b2:7a:b4:91:f2: 26:30:45:4d:31:92:76:bb:fc:5a:2a:3f:42:ed:e4: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:40:CA:4C:1F:96:C2:C5:61:CD:62:A8:8B:C8:4D:D6:B8:76:37:E7 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/s0DKTB-WwsVhzWKoi8hN1rh2N-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 158.94.220.0/23 IPv6: 2a01:fb01::/32 2a01:fb02:8000::/34 2a01:fb05:6000::/36 Signature Algorithm: sha256WithRSAEncryption 4b:14:fe:f9:cf:0b:e4:6b:f6:23:44:2b:f4:36:2d:92:04:e5: 1f:e1:af:df:35:42:1f:a9:1a:2b:8d:30:a7:06:d3:54:33:1d: a8:aa:ea:a4:c5:18:7e:ad:d5:7b:64:61:d7:ad:0e:b3:91:6f: e3:99:cf:67:f4:9a:8f:a7:fa:ad:2b:f4:e2:12:4a:8c:7e:79: 11:76:38:68:d9:e4:c7:50:b4:4f:8e:94:69:31:a7:21:0d:a7: d2:56:d5:4f:d2:7c:c6:91:bb:6e:22:f6:ba:95:e3:df:74:96: 32:fe:09:4e:8e:22:b5:71:24:e3:c0:da:e4:ab:11:26:99:0d: 07:49:32:f8:3e:fc:00:20:09:99:fc:b7:18:1f:ec:22:e5:1e: 2b:6b:d7:8d:1a:e3:05:ef:41:14:20:2c:52:31:47:90:86:68: e3:45:12:f9:93:cf:68:77:ce:11:6e:4b:6c:80:ed:4c:4e:be: bd:b9:46:68:90:45:b3:ef:11:c8:f8:e8:c5:45:dc:01:b2:b4: 49:39:fe:4c:97:2b:a1:4e:f1:6b:da:99:94:2c:85:fd:56:3a: 92:61:00:7d:af:be:79:4f:52:1a:4e:36:a4:ad:d2:8c:ab:34: bc:74:18:b2:ad:08:94:56:49:6c:77:76:7e:d9:ce:d1:48:fd: 2f:71:be:ff -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt4oyjSbYk/PiQIgkeGA1iYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzQwY2E0YzFmOTZjMmM1NjFjZDYyYTg4YmM4NGRkNmI4NzYzN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD0OP/cHIZjZxg2GLlj3MsZFIf6O fGe66++7FtfJNWAHpgryA5RwjiLKRioKLlHSdZq/fvdcVwZ1XIxhFrFM8zmwzEg5 TNPmts+SrD9wQeKdnMABsHVIY+jX/LgoK+9NBdCYJCMkEG+GLb0VPjnXjm3Pt00l FF00us4FnwtwHflWBmk4k6puBX8PZR0wkcMp9k4zJagZb2sJkPJrsY+ClYcTvev5 gKaYMZhdUM+yaonj8Kkrxv/nDPXS3SHs2Npr1nUtN0c6Djw+s2EJ14Fu8aUancGM AvgLnLme4fCSXnN2aTuHL9q4zCDbsnq0kfImMEVNMZJ2u/xaKj9C7eQXZQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFLNAykwflsLFYc1iqIvITda4djfnMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvczBES1RCLVd3c1ZoeldLb2k4aE4xcmgyTi1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzASBAIAATAMAwQAbc3BAwQB nl7cMB0EAgACMBcDBQAqAfsBAwYGKgH7AoADBgQqAfsFYDANBgkqhkiG9w0BAQsF AAOCAQEASxT++c8L5Gv2I0Qr9DYtkgTlH+Gv3zVCH6kaK40wpwbTVDMdqKrqpMUY fq3Ve2Rh160Os5Fv45nPZ/Saj6f6rSv04hJKjH55EXY4aNnkx1C0T46UaTGnIQ2n 0lbVT9J8xpG7biL2upXj33SWMv4JTo4itXEk48Da5KsRJpkNB0ky+D78ACAJmfy3 GB/sIuUeK2vXjRrjBe9BFCAsUjFHkIZo40US+ZPPaHfOEW5LbIDtTE6+vblGaJBF s+8RyPjoxUXcAbK0STn+TJcroU7xa9qZlCyF/VY6kmEAfa++eU9SGk42pK3SjKs0 vHQYsq0IlFZJbHd2ftnO0Uj9L3G+/w== -----END CERTIFICATE-----Generated at Mon Jan 19 14:41:00 2026 by rpki-client