This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/DGuA7DOyGXAn98oCAGhbl48323g.roa File: DGuA7DOyGXAn98oCAGhbl48323g.roa (raw, json) Hash identifier: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk= Subject key identifier: 0C:6B:80:EC:33:B2:19:70:27:F7:CA:02:00:68:5B:97:8F:37:DB:78 Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5 Certificate serial: 019B78A23D517C72E96464667E93B9333AB1 Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/DGuA7DOyGXAn98oCAGhbl48323g.roa Signing time: Thu 01 Jan 2026 08:17:37 +0000 ROA not before: Thu 01 Jan 2026 08:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 80.172.222.0/24 maxlen: 24 2001:4cc0:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3d:51:7c:72:e9:64:64:66:7e:93:b9:33:3a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c6b80ec33b2197027f7ca0200685b978f37db78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:69:c1:87:da:31:bf:c8:a4:41:36:b3:9b: b0:07:2a:16:39:09:22:c7:5c:ee:b3:7b:35:b4:e7: 1f:8a:ce:dc:df:b3:3d:74:89:4f:79:79:f9:48:ef: 96:67:93:70:a0:f3:3f:1f:ed:16:47:b4:f1:5c:de: 0a:fc:bd:1f:80:11:ea:03:35:51:60:17:f1:6a:3b: 7f:37:15:cc:26:9a:02:8e:12:15:0d:9f:fa:da:05: 85:1e:24:22:85:94:52:b7:9a:1d:b5:c4:c2:40:0e: 5f:c9:de:51:16:e3:26:28:2e:e7:73:a2:a6:d6:72: 9b:d2:14:29:f5:d5:a0:09:79:50:43:f3:5e:4d:32: 08:72:a5:50:71:7d:87:45:0b:1f:33:c1:0f:43:79: ec:41:c3:66:b6:d2:d4:45:8a:b9:e5:43:92:18:cc: 8e:ad:2c:c8:29:ba:3f:fd:72:5e:b6:37:7a:3a:83: 71:a7:29:6b:48:51:9f:c1:79:06:aa:b1:7b:12:d9: 44:b8:cd:c7:c2:00:ef:32:79:7e:e1:85:d4:9d:69: d3:fd:82:e7:30:bd:e7:65:41:cb:59:74:a9:f3:e2: 62:6c:49:87:3b:9d:e5:4f:fd:c6:07:cd:06:37:b0: 62:b1:36:b2:be:c8:d1:a3:f9:89:c0:43:cb:e7:7f: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6B:80:EC:33:B2:19:70:27:F7:CA:02:00:68:5B:97:8F:37:DB:78 X509v3 Authority Key Identifier: keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/DGuA7DOyGXAn98oCAGhbl48323g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.172.222.0/24 IPv6: 2001:4cc0:8000::/48 Signature Algorithm: sha256WithRSAEncryption 8a:e4:4d:38:04:ed:e3:57:48:3b:cb:e9:f4:db:49:da:20:30: d3:6c:7e:5d:9b:ba:46:60:af:a4:05:09:92:4b:a9:a4:81:d1: 6c:ab:31:2c:0a:3c:37:44:18:2c:92:c9:a5:fa:7c:a6:f0:f7: b1:a2:9f:fd:f1:2a:f2:7e:3f:f7:ad:23:96:97:16:73:40:96: 3f:78:a9:68:e1:09:da:b7:19:38:6b:e0:eb:55:5c:c9:f8:88: 90:28:fe:16:74:fe:17:c6:6f:ac:2f:0f:02:3f:d7:71:e4:d9: 21:34:71:8b:9b:53:11:10:b4:b9:49:e0:ba:5b:99:67:c9:4e: 64:72:c5:38:55:0c:09:a2:f4:89:28:b9:ce:fe:ab:4f:a9:c4: 35:3d:34:e3:b3:e7:3d:a8:f7:41:fa:33:9c:91:65:d8:4b:bb: 1a:0c:2b:66:5c:7a:1c:a1:e1:36:c4:8a:f2:e7:3f:1c:69:8e: 52:bf:be:72:c7:f8:7c:7a:f9:b7:ca:cd:77:00:5a:10:08:53: 3f:4b:cb:c1:3b:27:1e:f5:bb:e3:90:04:ff:b0:e9:93:b2:0d: e9:f6:7a:e3:97:4b:0f:47:50:49:ec:fb:00:c7:17:9f:ef:7c: c4:8c:a9:b4:14:72:15:dc:f6:6b:3c:25:de:de:fa:2e:24:e9: b5:88:5f:36 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oj1RfHLpZGRmfpO5MzqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy NDIyYzUwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzZiODBlYzMzYjIxOTcwMjdmN2NhMDIwMDY4NWI5NzhmMzdkYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqRpwYfaMb/IpEE2s5uwByoWOQki x1zus3s1tOcfis7c37M9dIlPeXn5SO+WZ5NwoPM/H+0WR7TxXN4K/L0fgBHqAzVR YBfxajt/NxXMJpoCjhIVDZ/62gWFHiQihZRSt5odtcTCQA5fyd5RFuMmKC7nc6Km 1nKb0hQp9dWgCXlQQ/NeTTIIcqVQcX2HRQsfM8EPQ3nsQcNmttLURYq55UOSGMyO rSzIKbo//XJetjd6OoNxpylrSFGfwXkGqrF7EtlEuM3HwgDvMnl+4YXUnWnT/YLn ML3nZUHLWXSp8+JibEmHO53lT/3GB80GN7BisTayvsjRo/mJwEPL53/MAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAxrgOwzshlwJ/fKAgBoW5ePN9t4MB8GA1UdIwQY MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt N2ZlZTU5MWEyMDljLzEvREd1QTdET3lHWEFuOThvQ0FHaGJsNDgzMjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUKzeMA8E AgACMAkDBwAgAUzAgAAwDQYJKoZIhvcNAQELBQADggEBAIrkTTgE7eNXSDvL6fTb SdogMNNsfl2bukZgr6QFCZJLqaSB0WyrMSwKPDdEGCySyaX6fKbw97Gin/3xKvJ+ P/etI5aXFnNAlj94qWjhCdq3GThr4OtVXMn4iJAo/hZ0/hfGb6wvDwI/13Hk2SE0 cYubUxEQtLlJ4LpbmWfJTmRyxThVDAmi9Ikouc7+q0+pxDU9NOOz5z2o90H6M5yR ZdhLuxoMK2Zcehyh4TbEivLnPxxpjlK/vnLH+Hx6+bfKzXcAWhAIUz9Ly8E7Jx71 u+OQBP+w6ZOyDen2euOXSw9HUEns+wDHF5/vfMSMqbQUchXc9ms8Jd7e+i4k6bWI XzY= -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:58 2026 by rpki-client