This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa File: DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa (raw, json) Hash identifier: jGqjs9xozz6rpTqRrKhgcskeRFoVeCtnOBzJB/wnJHI= Subject key identifier: 0C:FD:99:54:5E:57:32:D2:25:6F:C3:D2:31:A3:AA:6F:DA:41:9E:96 Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8 Certificate serial: 019B7CEDF046FD0FFB2CDFDC50037CD9363F Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47702 IP address blocks: 93.175.192.0/20 maxlen: 20 93.175.192.0/21 maxlen: 21 93.175.192.0/22 maxlen: 22 93.175.196.0/22 maxlen: 22 93.175.200.0/21 maxlen: 21 93.175.200.0/22 maxlen: 22 93.175.200.0/24 maxlen: 24 93.175.201.0/24 maxlen: 24 93.175.204.0/22 maxlen: 22 213.109.224.0/20 maxlen: 20 213.109.224.0/21 maxlen: 21 213.109.224.0/22 maxlen: 22 213.109.224.0/24 maxlen: 24 213.109.225.0/24 maxlen: 24 213.109.228.0/22 maxlen: 22 213.109.232.0/21 maxlen: 21 213.109.232.0/22 maxlen: 22 213.109.232.0/24 maxlen: 24 213.109.233.0/24 maxlen: 24 213.109.236.0/22 maxlen: 22 2001:67c:11d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f0:46:fd:0f:fb:2c:df:dc:50:03:7c:d9:36:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cfd99545e5732d2256fc3d231a3aa6fda419e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:74:71:98:63:7c:dd:12:3f:74:d6:ca:15: ab:29:cd:40:cb:65:44:aa:06:27:c8:a3:6c:53:ac: 74:ea:db:2f:77:92:22:7f:d9:05:fa:65:92:51:a8: 08:f1:38:a3:9a:8b:61:c6:c7:45:63:b7:aa:be:16: 9f:5c:3f:60:21:79:e1:10:9a:32:0a:29:92:dd:7a: e4:f0:cb:8c:45:20:3e:85:6e:21:99:23:e0:37:89: cf:84:8a:96:dd:28:2f:81:d1:45:79:ca:89:18:02: c6:f9:68:20:0c:2b:29:8e:28:31:df:9a:de:95:9d: 21:e6:82:99:0d:24:cc:7d:f0:7e:e7:62:14:43:45: 2f:4b:c8:12:45:ec:73:ff:fa:f3:8a:ec:b0:38:1b: 7f:96:5b:6f:19:67:49:13:cd:73:8f:40:2e:c7:eb: 39:ea:1c:a3:64:c7:40:f9:1d:18:b4:03:9f:21:57: 61:90:e6:73:dc:34:ce:3c:b7:0e:f6:04:a6:63:a4: 69:6c:1c:10:99:19:05:d5:24:4f:dc:60:99:49:60: 88:f7:06:d3:05:89:6b:56:b7:f3:9b:54:5e:cb:f6: 9a:92:1b:47:1e:13:9b:61:46:b5:94:44:d6:9b:64: 21:d9:42:e4:ac:08:01:90:ea:93:82:6a:a9:e3:14: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FD:99:54:5E:57:32:D2:25:6F:C3:D2:31:A3:AA:6F:DA:41:9E:96 X509v3 Authority Key Identifier: keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.175.192.0/20 213.109.224.0/20 IPv6: 2001:67c:11d4::/48 Signature Algorithm: sha256WithRSAEncryption 00:8c:38:80:cf:33:14:b5:2d:1e:0f:8d:dd:48:99:c4:72:09: ce:e3:42:db:f8:b4:cc:0c:d6:97:e6:20:0f:8a:0f:dd:d6:ac: a6:45:9e:f5:44:35:bb:aa:01:a5:73:62:f3:4b:83:e0:38:eb: 06:28:d4:91:04:25:10:4d:12:f6:00:46:7b:8f:e6:1c:86:1b: 91:5f:bd:1d:98:8f:48:64:28:53:02:93:d3:0d:9a:71:96:fa: f6:27:e6:6e:7f:aa:81:7c:8e:d4:3e:84:7f:ec:f2:18:79:d2: 6e:7b:db:7e:20:ed:9f:78:a1:04:a8:98:9c:3a:8e:b3:1d:1a: c2:14:22:48:58:1c:e8:92:ba:94:7d:23:9f:2e:76:d1:94:71: 4b:9d:db:de:09:8a:86:ac:40:30:b8:8e:c0:31:7c:dc:83:b7: 72:43:99:d5:ca:df:bc:bd:f2:a6:41:e7:bc:ae:ce:80:5f:49: dc:21:3b:10:d7:6a:e7:38:9e:75:3a:56:ab:61:aa:25:5c:22: 80:0e:12:ed:16:2d:86:96:99:60:02:34:77:71:1b:39:c5:87: 35:e7:10:d1:a8:37:43:b6:19:6f:20:1b:12:61:85:32:01:89: 04:65:30:f8:84:d0:0b:6d:e8:96:b0:c7:aa:11:f7:9a:29:b1: 09:c6:21:e6 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87fBG/Q/7LN/cUAN82TY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3 MzZhZTgwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2ZkOTk1NDVlNTczMmQyMjU2ZmMzZDIzMWEzYWE2ZmRhNDE5ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRB0cZhjfN0SP3TWyhWrKc1Ay2VE qgYnyKNsU6x06tsvd5Iif9kF+mWSUagI8TijmothxsdFY7eqvhafXD9gIXnhEJoy CimS3Xrk8MuMRSA+hW4hmSPgN4nPhIqW3SgvgdFFecqJGALG+WggDCspjigx35re lZ0h5oKZDSTMffB+52IUQ0UvS8gSRexz//rziuywOBt/lltvGWdJE81zj0Aux+s5 6hyjZMdA+R0YtAOfIVdhkOZz3DTOPLcO9gSmY6RpbBwQmRkF1SRP3GCZSWCI9wbT BYlrVrfzm1Rey/aakhtHHhObYUa1lETWm2Qh2ULkrAgBkOqTgmqp4xSGQwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAz9mVReVzLSJW/D0jGjqm/aQZ6WMB8GA1UdIwQY MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt Mzk2OWVjYTdiN2Q0LzEvRFAyWlZGNVhNdElsYjhQU01hT3FiOXBCbnBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0 LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQEXa/AAwQE 1W3gMA8EAgACMAkDBwAgAQZ8EdQwDQYJKoZIhvcNAQELBQADggEBAACMOIDPMxS1 LR4Pjd1ImcRyCc7jQtv4tMwM1pfmIA+KD93WrKZFnvVENbuqAaVzYvNLg+A46wYo 1JEEJRBNEvYARnuP5hyGG5FfvR2Yj0hkKFMCk9MNmnGW+vYn5m5/qoF8jtQ+hH/s 8hh50m57234g7Z94oQSomJw6jrMdGsIUIkhYHOiSupR9I58udtGUcUud294Jioas QDC4jsAxfNyDt3JDmdXK37y98qZB57yuzoBfSdwhOxDXauc4nnU6VqthqiVcIoAO Eu0WLYaWmWACNHdxGznFhzXnENGoN0O2GW8gGxJhhTIBiQRlMPiE0Att6Jawx6oR 95opsQnGIeY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:43 2026 by rpki-client