This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa File: Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa (raw, json) Hash identifier: K3KjeMVe4MzmZ6PY7GfHmSzcgyG6kpzevKCxHtsqWyY= Subject key identifier: 0D:B8:DF:93:FC:7D:E1:79:16:6D:4A:AB:41:18:17:88:1D:88:66:67 Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520 Certificate serial: 019B7BA34F0790AC164214C3493B0279996C Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43212 IP address blocks: 185.11.68.0/22 maxlen: 22 185.11.68.0/24 maxlen: 24 185.11.69.0/24 maxlen: 24 185.11.70.0/24 maxlen: 24 185.11.71.0/24 maxlen: 24 185.59.112.0/23 maxlen: 23 185.59.112.0/24 maxlen: 24 185.59.113.0/24 maxlen: 24 185.83.196.0/22 maxlen: 22 185.83.196.0/24 maxlen: 24 185.83.197.0/24 maxlen: 24 185.83.198.0/24 maxlen: 24 185.83.199.0/24 maxlen: 24 2a03:9080::/32 maxlen: 32 2a05:9e40::/29 maxlen: 29 2a06:e080::/29 maxlen: 29 2a0b:3000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4f:07:90:ac:16:42:14:c3:49:3b:02:79:99:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520 Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0db8df93fc7de179166d4aab411817881d886667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:8e:f5:f1:cc:bb:8c:59:a3:12:e7:53:ba: 06:cd:0f:23:2d:6d:25:35:28:6a:77:92:7d:3b:b5: cc:bc:e3:b0:66:88:0b:99:df:81:be:72:4c:fb:e9: 32:26:cb:0c:3a:ba:57:eb:28:75:62:ae:1c:c4:66: 45:f4:91:32:fe:5b:44:cf:0c:c3:ad:91:10:41:d6: 68:b5:d7:ee:bf:07:5d:4e:ff:9c:b4:56:a5:e8:f4: 24:e5:a7:24:20:2d:b8:92:01:0a:55:19:0b:0e:85: 47:87:f8:aa:85:8c:6d:54:fe:22:61:ed:d3:dc:7a: 94:4e:33:41:93:5f:55:c2:d3:d6:53:28:dd:02:1c: f9:49:6c:5e:4d:c2:19:cf:68:57:6f:a3:53:41:7d: 91:af:e3:cf:b5:69:99:55:f6:b6:62:2b:fd:c9:f2: 00:4e:5b:a1:43:c3:03:8e:0a:ad:2a:09:55:2c:1c: c5:cd:b8:91:32:c5:75:4d:c3:13:dc:23:77:65:c6: 95:48:f2:bd:d6:aa:c9:c3:0c:9d:fe:94:79:1e:59: 04:2d:b0:58:54:0d:5d:43:66:f3:68:4c:5f:8d:08: 33:5c:83:0c:d3:6a:93:fc:a6:36:8c:b4:6c:65:a2: 32:39:80:9a:12:ed:82:3f:12:ce:44:0e:5d:0a:f0: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B8:DF:93:FC:7D:E1:79:16:6D:4A:AB:41:18:17:88:1D:88:66:67 X509v3 Authority Key Identifier: keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.68.0/22 185.59.112.0/23 185.83.196.0/22 IPv6: 2a03:9080::/32 2a05:9e40::/29 2a06:e080::/29 2a0b:3000::/29 Signature Algorithm: sha256WithRSAEncryption 54:71:1c:cb:2d:ae:66:17:2e:0f:34:3a:1b:0e:b5:60:72:38: 00:26:75:2e:91:7f:72:0e:c2:b4:84:e5:b0:5c:8d:60:94:08: 0d:b8:b2:0b:53:7d:b0:81:58:ea:5c:67:9e:84:41:67:06:a6: 23:00:1c:57:41:0f:68:60:2a:26:5f:8a:84:de:3e:61:6b:9b: d6:ae:63:3d:b4:0f:2e:da:53:31:69:64:cc:76:bb:8b:cc:15: 27:fc:98:b5:c5:94:f1:e9:e3:f7:bc:5c:2c:71:7b:7e:84:5e: fc:f2:ff:c9:23:0f:72:32:5d:79:b7:12:60:ae:59:0c:64:ce: fc:63:94:7d:d9:98:51:dc:ac:2d:83:38:32:86:8f:50:95:51: 2d:2d:23:3c:c7:3b:11:da:1b:d6:53:a5:e5:f6:fe:14:f6:7b: 56:cd:ff:0a:10:db:86:c1:b3:a7:48:87:60:00:2b:e0:2d:43: 3d:bb:13:33:43:d7:49:90:79:3c:0a:9c:aa:c3:c9:ed:6c:b3: 97:97:5a:29:8e:93:b8:df:9b:06:fd:01:4b:7e:00:88:3d:32: 13:2c:a7:b6:d5:0f:cc:1e:75:9c:b0:31:76:20:2e:07:af:13: 94:6a:6d:46:b2:2e:7d:33:67:97:44:a2:b6:f1:5b:cd:29:08: ee:ce:7b:c9 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7o08HkKwWQhTDSTsCeZlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MTg0Y2U5MTkwMjM2NDBiYjkyNTZjMmQ4ZDFhMDQ5ZmEx MDI1MjAwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGI4ZGY5M2ZjN2RlMTc5MTY2ZDRhYWI0MTE4MTc4ODFkODg2NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRyO9fHMu4xZoxLnU7oGzQ8jLW0l NShqd5J9O7XMvOOwZogLmd+BvnJM++kyJssMOrpX6yh1Yq4cxGZF9JEy/ltEzwzD rZEQQdZotdfuvwddTv+ctFal6PQk5ackIC24kgEKVRkLDoVHh/iqhYxtVP4iYe3T 3HqUTjNBk19VwtPWUyjdAhz5SWxeTcIZz2hXb6NTQX2Rr+PPtWmZVfa2Yiv9yfIA TluhQ8MDjgqtKglVLBzFzbiRMsV1TcMT3CN3ZcaVSPK91qrJwwyd/pR5HlkELbBY VA1dQ2bzaExfjQgzXIMM02qT/KY2jLRsZaIyOYCaEu2CPxLORA5dCvCxYwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFA2435P8feF5Fm1Kq0EYF4gdiGZnMB8GA1UdIwQY MBaAFIQYTOkZAjZAu5JWwtjRoEn6ECUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEt MGE3OWQ1NDk2NWE5LzEvRGJqZmtfeDk0WGtXYlVxclFSZ1hpQjJJWm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEtMGE3OWQ1NDk2NWE5 LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAYBAIAATASAwQCuQtEAwQB uTtwAwQCuVPEMCIEAgACMBwDBQAqA5CAAwUDKgWeQAMFAyoG4IADBQMqCzAAMA0G CSqGSIb3DQEBCwUAA4IBAQBUcRzLLa5mFy4PNDobDrVgcjgAJnUukX9yDsK0hOWw XI1glAgNuLILU32wgVjqXGeehEFnBqYjABxXQQ9oYComX4qE3j5ha5vWrmM9tA8u 2lMxaWTMdruLzBUn/Ji1xZTx6eP3vFwscXt+hF788v/JIw9yMl15txJgrlkMZM78 Y5R92ZhR3Kwtgzgyho9QlVEtLSM8xzsR2hvWU6Xl9v4U9ntWzf8KENuGwbOnSIdg ACvgLUM9uxMzQ9dJkHk8Cpyqw8ntbLOXl1opjpO435sG/QFLfgCIPTITLKe21Q/M HnWcsDF2IC4HrxOUam1Gsi59M2eXRKK28VvNKQjuznvJ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:58 2026 by rpki-client