This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/davP__FvqtFRD-X_NqiEFhhBbv0.roa File: davP__FvqtFRD-X_NqiEFhhBbv0.roa (raw, json) Hash identifier: 4RXC3pzMOtisG7APBmg+7ubBijArd9IpJUc7sUhKN2U= Subject key identifier: 75:AB:CF:FF:F1:6F:AA:D1:51:0F:E5:FF:36:A8:84:16:18:41:6E:FD Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019B7EA6B52B6FB174CD94E9C1DB0A9E40A5 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/davP__FvqtFRD-X_NqiEFhhBbv0.roa Signing time: Fri 02 Jan 2026 12:20:13 +0000 ROA not before: Fri 02 Jan 2026 12:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201917 IP address blocks: 37.25.128.0/17 maxlen: 24 45.144.96.0/22 maxlen: 24 46.108.0.0/16 maxlen: 24 46.190.128.0/17 maxlen: 24 47.73.0.0/16 maxlen: 24 47.73.25.0/24 maxlen: 24 47.73.31.0/24 maxlen: 24 47.73.81.0/24 maxlen: 24 47.73.85.0/24 maxlen: 24 47.73.86.0/24 maxlen: 24 47.73.114.0/24 maxlen: 24 47.73.146.0/24 maxlen: 24 47.73.214.0/24 maxlen: 24 47.73.250.0/24 maxlen: 24 139.47.192.0/18 maxlen: 24 195.232.128.0/17 maxlen: 24 195.233.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b5:2b:6f:b1:74:cd:94:e9:c1:db:0a:9e:40:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75abcffff16faad1510fe5ff36a8841618416efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9e:32:09:3d:f2:bc:fb:a1:c4:0f:54:d6:48: bd:e3:31:25:06:43:d2:d7:80:28:a4:6f:20:7f:db: ce:41:19:22:9b:65:f6:0f:b8:bf:7b:28:6a:af:a3: 78:ec:8f:fb:ed:5e:0c:d4:bc:63:e7:74:06:6e:56: 0b:29:ea:aa:a8:26:9f:30:60:87:98:ae:b0:78:25: 28:28:ca:ac:1a:fd:15:8d:94:2e:02:b5:4a:be:26: 72:ab:65:45:30:b8:8d:b3:54:b6:41:fe:3a:27:7c: 46:5d:aa:b6:96:4d:39:7a:7d:fb:5c:3e:92:d5:88: 2a:62:be:e6:30:e7:c4:fe:60:f9:f6:27:26:14:4a: ff:70:43:0b:2d:55:d0:c3:e5:87:a4:83:ac:eb:89: a9:76:94:e0:4d:85:43:d8:c0:e7:54:c2:a0:8f:17: b2:bb:34:7b:07:58:8f:4b:f6:b7:3a:37:77:89:f4: 47:50:41:82:be:c8:7a:50:d1:95:88:d0:db:a2:ab: d4:f5:29:67:5c:95:5e:10:a6:ca:81:ad:fe:e6:3a: 0c:a3:df:37:5f:d9:fc:92:8e:08:0a:3c:ae:30:66: df:fd:81:34:0f:b9:e4:50:1d:7c:a3:a9:ac:b2:52: 11:e6:73:70:89:0e:f8:98:de:42:49:e8:eb:7f:47: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AB:CF:FF:F1:6F:AA:D1:51:0F:E5:FF:36:A8:84:16:18:41:6E:FD X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/davP__FvqtFRD-X_NqiEFhhBbv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.25.128.0/17 45.144.96.0/22 46.108.0.0/16 46.190.128.0/17 47.73.0.0/16 139.47.192.0/18 195.232.128.0-195.233.255.255 Signature Algorithm: sha256WithRSAEncryption 39:d1:2c:5a:12:08:cd:8e:90:24:75:05:30:9a:eb:74:70:c6: a5:d7:91:31:13:f6:15:8c:c3:d7:0b:2f:48:21:f6:5b:a3:1c: 51:2c:09:a9:dc:af:57:fc:55:f8:b0:08:fc:e4:d7:49:1c:91: 0d:53:36:d5:d4:6f:dd:1c:70:09:89:89:fb:10:a9:51:52:b1: 64:99:55:a1:b6:ee:f4:dd:e9:2d:50:21:2f:e7:f6:91:d8:c8: 70:54:8e:a2:b0:8c:c8:94:9b:cf:72:64:88:fb:9e:1c:0b:30: 16:83:58:e2:c3:32:9d:dd:07:46:71:32:88:ac:44:dd:db:ec: 5b:5b:44:b9:38:20:01:af:50:bb:2d:6d:9d:4d:a5:2c:a1:23: fc:69:56:ca:38:84:ad:2f:35:0d:5b:b9:df:a1:f2:c0:4e:c9: 95:19:bc:49:5d:1c:00:9a:c4:21:09:e2:c4:f8:13:21:b4:f4: dd:5f:a6:4e:18:d1:2a:1e:aa:ba:02:87:3b:a2:eb:a3:65:e9: dd:f4:45:4d:05:af:70:0c:96:db:79:4d:66:5f:1e:89:41:53: 59:fa:c3:b9:c5:e0:e2:0c:6c:d4:8a:2f:b7:11:f7:e5:6c:1f: d7:ba:65:8e:89:68:aa:b3:97:8d:cd:fd:b5:cf:d9:72:4b:58: 59:68:7f:3a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt+prUrb7F0zZTpwdsKnkClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWFiY2ZmZmYxNmZhYWQxNTEwZmU1ZmYzNmE4ODQxNjE4NDE2ZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl54yCT3yvPuhxA9U1ki94zElBkPS 14AopG8gf9vOQRkim2X2D7i/eyhqr6N47I/77V4M1Lxj53QGblYLKeqqqCafMGCH mK6weCUoKMqsGv0VjZQuArVKviZyq2VFMLiNs1S2Qf46J3xGXaq2lk05en37XD6S 1YgqYr7mMOfE/mD59icmFEr/cEMLLVXQw+WHpIOs64mpdpTgTYVD2MDnVMKgjxey uzR7B1iPS/a3Ojd3ifRHUEGCvsh6UNGViNDboqvU9SlnXJVeEKbKga3+5joMo983 X9n8ko4ICjyuMGbf/YE0D7nkUB18o6msslIR5nNwiQ74mN5CSejrf0dW+wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFHWrz//xb6rRUQ/l/zaohBYYQW79MB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvZGF2UF9fRnZxdEZSRC1YX05xaUVGaGhCYnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAATAvAwQHJRmAAwQC LZBgAwMALmwDBAcuvoADAwAvSQMEBosvwDALAwQHw+iAAwMBw+gwDQYJKoZIhvcN AQELBQADggEBADnRLFoSCM2OkCR1BTCa63RwxqXXkTET9hWMw9cLL0gh9lujHFEs Cancr1f8VfiwCPzk10kckQ1TNtXUb90ccAmJifsQqVFSsWSZVaG27vTd6S1QIS/n 9pHYyHBUjqKwjMiUm89yZIj7nhwLMBaDWOLDMp3dB0ZxMoisRN3b7FtbRLk4IAGv ULstbZ1NpSyhI/xpVso4hK0vNQ1bud+h8sBOyZUZvEldHACaxCEJ4sT4EyG09N1f pk4Y0SoeqroChzui66Nl6d30RU0Fr3AMltt5TWZfHolBU1n6w7nF4OIMbNSKL7cR 9+VsH9e6ZY6JaKqzl43N/bXP2XJLWFlofzo= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:07 2026 by rpki-client