This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/DfbASphlahLNrwts99_6lIeg5es.roa File: DfbASphlahLNrwts99_6lIeg5es.roa (raw, json) Hash identifier: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE= Subject key identifier: 0D:F6:C0:4A:98:65:6A:12:CD:AF:0B:6C:F7:DF:FA:94:87:A0:E5:EB Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F84297C48BA16E88F2A4C7D059B0E64 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/DfbASphlahLNrwts99_6lIeg5es.roa Signing time: Fri 02 Jan 2026 16:22:06 +0000 ROA not before: Fri 02 Jan 2026 16:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211717 IP address blocks: 188.85.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:29:7c:48:ba:16:e8:8f:2a:4c:7d:05:9b:0e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0df6c04a98656a12cdaf0b6cf7dffa9487a0e5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:84:fe:6b:62:c5:bb:95:32:37:31:56:4f: 8d:e7:84:3a:62:59:ff:18:4f:d1:99:69:4a:45:98: e1:63:6c:f2:10:15:57:2a:9e:5e:2b:55:56:85:4d: 29:3f:75:16:2b:79:5c:b4:4a:86:e4:87:2a:fc:09: bc:44:3d:36:06:0e:8a:82:73:cd:a1:ee:a7:e2:cc: 97:af:c8:1a:60:19:b6:84:28:fa:d8:64:1e:4e:75: 65:8e:f5:87:74:3e:4b:80:0d:9a:40:f0:e2:7f:60: 34:2b:7e:96:d7:91:2f:a0:e6:9a:c5:6e:ee:3e:9d: af:69:44:8a:75:56:c3:db:e1:07:23:2c:eb:a0:e0: e7:d4:51:72:f5:af:d4:ad:73:ba:f5:7a:c4:ac:83: c3:b0:7f:a6:a5:31:7f:24:46:0e:bb:80:fd:76:8e: 97:23:11:99:f0:6d:0d:e4:f2:0e:8a:d6:28:9b:bd: d1:05:27:0f:37:29:f1:7f:ed:9a:ea:b2:d0:34:17: ca:e7:a8:d8:19:c1:00:1e:8f:a4:9d:9f:5d:c4:2c: f2:40:2e:19:35:2d:ed:55:f1:fa:31:a2:ea:9b:e2: 94:b0:1a:ed:df:2b:26:00:1f:24:c3:92:c5:71:59: 84:bb:ac:f9:1f:90:7a:8b:69:00:a2:6b:6e:8f:db: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F6:C0:4A:98:65:6A:12:CD:AF:0B:6C:F7:DF:FA:94:87:A0:E5:EB X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/DfbASphlahLNrwts99_6lIeg5es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.85.153.0/24 Signature Algorithm: sha256WithRSAEncryption b4:7e:99:91:90:fc:58:ef:17:40:fa:d1:9c:0e:ec:54:7f:cd: 22:b9:1b:dd:ce:a1:78:af:8f:b0:24:ed:68:45:b3:a8:ab:f1: 37:c2:1b:c4:5d:c5:70:1e:3e:57:c2:3c:fb:be:71:5b:85:fb: 74:a9:84:18:a1:fb:9f:9b:ec:bf:8a:f8:d1:3d:f3:5b:2e:5a: 02:97:17:3b:e1:c2:65:98:d5:60:e4:f1:95:fb:3d:70:ef:7a: a4:87:78:e8:08:5b:e2:1d:2f:a8:2f:2a:b9:96:6b:3b:a3:85: 91:ad:f3:f2:f9:2c:b9:53:00:a8:5d:53:a1:14:af:e8:7e:51: c6:90:0a:be:5e:33:b1:72:46:71:dc:e5:7c:ce:8d:e1:bb:de: e3:43:69:f0:b7:8d:fc:c4:97:3d:bf:ef:8e:cf:aa:b6:3f:2d: 57:33:bf:28:1b:bc:84:40:e3:98:7e:d5:a5:05:76:a9:6a:bf: 09:5a:19:7d:df:71:d3:8f:8d:d7:b2:d7:5d:9c:7e:14:f3:69: 9f:06:73:c6:6e:ce:35:d8:36:9c:bd:58:18:a5:f0:97:87:d3: e4:75:e4:a5:97:1f:6b:3d:d1:d8:d1:f3:fa:f2:86:74:af:28: c3:a2:a8:ed:74:b1:f1:69:73:5a:68:cb:e8:0b:6b:15:ff:fb: 87:f4:15:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCl8SLoW6I8qTH0Fmw5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGY2YzA0YTk4NjU2YTEyY2RhZjBiNmNmN2RmZmE5NDg3YTBlNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhaE/mtixbuVMjcxVk+N54Q6Yln/ GE/RmWlKRZjhY2zyEBVXKp5eK1VWhU0pP3UWK3lctEqG5Icq/Am8RD02Bg6KgnPN oe6n4syXr8gaYBm2hCj62GQeTnVljvWHdD5LgA2aQPDif2A0K36W15EvoOaaxW7u Pp2vaUSKdVbD2+EHIyzroODn1FFy9a/UrXO69XrErIPDsH+mpTF/JEYOu4D9do6X IxGZ8G0N5PIOitYom73RBScPNynxf+2a6rLQNBfK56jYGcEAHo+knZ9dxCzyQC4Z NS3tVfH6MaLqm+KUsBrt3ysmAB8kw5LFcVmEu6z5H5B6i2kAomtuj9s0PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA32wEqYZWoSza8LbPff+pSHoOXrMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvRGZiQVNwaGxhaExOcnd0czk5XzZsSWVnNWVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvFWZMA0G CSqGSIb3DQEBCwUAA4IBAQC0fpmRkPxY7xdA+tGcDuxUf80iuRvdzqF4r4+wJO1o RbOoq/E3whvEXcVwHj5Xwjz7vnFbhft0qYQYofufm+y/ivjRPfNbLloClxc74cJl mNVg5PGV+z1w73qkh3joCFviHS+oLyq5lms7o4WRrfPy+Sy5UwCoXVOhFK/oflHG kAq+XjOxckZx3OV8zo3hu97jQ2nwt438xJc9v++Oz6q2Py1XM78oG7yEQOOYftWl BXapar8JWhl933HTj43XstddnH4U82mfBnPGbs412DacvVgYpfCXh9PkdeSllx9r PdHY0fP68oZ0ryjDoqjtdLHxaXNaaMvoC2sV//uH9BUc -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:29 2026 by rpki-client