This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/DBzsUU7BGHocClctL1mvbSIgvxQ.roa File: DBzsUU7BGHocClctL1mvbSIgvxQ.roa (raw, json) Hash identifier: tB5Bok9ukggl6ccJHOzcEVQMglS5kVaS/x4d71htp3M= Subject key identifier: 0C:1C:EC:51:4E:C1:18:7A:1C:0A:57:2D:2F:59:AF:6D:22:20:BF:14 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B791075D35B886D95C56C1BE2A5F82C61 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/DBzsUU7BGHocClctL1mvbSIgvxQ.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205463 IP address blocks: 5.178.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:75:d3:5b:88:6d:95:c5:6c:1b:e2:a5:f8:2c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c1cec514ec1187a1c0a572d2f59af6d2220bf14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:38:d6:77:8d:86:ab:73:59:78:1a:0b:ac: 56:34:7b:f7:b8:f6:1c:b6:ce:54:4d:40:e5:6a:e5: d5:a9:50:e9:2a:3a:a0:07:5e:f7:ed:fb:4b:7e:db: 0a:0c:f8:f4:c4:54:92:36:1c:7f:87:be:d8:b8:dc: ff:7a:51:5f:cc:a6:13:d8:7e:bf:bf:d3:4f:61:9d: f2:4e:6e:92:7c:b6:47:cc:97:ea:e5:44:b3:c8:5f: ac:f9:25:e1:cb:b8:d0:18:26:0c:ad:c2:08:0b:70: 53:4d:4b:3b:e2:31:69:67:1c:50:9f:69:72:a1:ce: bb:c3:dc:84:af:5f:79:be:ab:10:33:26:e2:8a:6e: a2:b8:00:76:d2:9c:7d:c5:3f:59:23:c4:cb:cf:6b: 3f:af:dc:58:b3:f1:ce:b9:96:a1:85:7b:03:1e:3f: 25:0a:f9:54:fa:62:0a:d3:5f:61:5c:2d:1f:d9:ed: bf:0a:e7:8c:94:cc:0d:96:1a:40:d5:4c:84:dd:49: f8:88:70:3b:73:37:a7:92:9b:b0:77:ba:c6:e6:6c: 0d:57:92:13:61:e0:ef:cb:64:a4:12:d5:99:39:28: 9c:5d:ec:81:64:45:34:e5:b4:45:42:39:37:c0:8e: a9:fd:81:9f:f0:dc:a4:a7:10:2e:9e:ae:b9:f1:a8: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1C:EC:51:4E:C1:18:7A:1C:0A:57:2D:2F:59:AF:6D:22:20:BF:14 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/DBzsUU7BGHocClctL1mvbSIgvxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.103.0/24 Signature Algorithm: sha256WithRSAEncryption c0:10:7f:4e:cf:cb:b5:c7:b0:be:9f:5c:54:18:58:ba:35:fe: c2:73:40:6c:b4:84:e1:e9:66:fb:12:c8:8c:92:16:ea:cd:9f: 50:83:20:07:5d:38:80:3e:ae:58:df:ba:f5:23:44:29:2a:d8: 70:fc:4d:84:1c:b1:28:19:62:97:02:cb:ae:6a:76:23:e1:02: c5:0b:ee:7e:91:81:be:2f:e1:11:ec:25:2f:e9:a7:2d:b0:c1: a1:73:bf:96:26:e2:7b:fd:29:d9:d3:a7:77:64:72:6d:f0:5a: e9:f1:12:2b:9c:e9:e2:6e:97:23:bd:d3:b1:7e:ce:5e:b6:76: e8:0a:68:53:fd:47:6e:0c:f1:9f:14:0e:81:49:53:8a:2d:91: 3f:11:3d:73:d0:0b:5a:6f:75:08:ca:48:87:7d:0e:32:0d:f6: 8d:53:7d:6a:68:54:1c:b1:94:b2:62:c7:d3:38:88:1d:74:9a: 3f:fe:a3:88:b3:a1:39:8c:19:43:f5:a5:27:d8:3c:2a:0d:0b: b4:56:d1:b2:76:73:e5:b6:4f:42:14:a1:1a:8d:0c:7c:28:22: 14:22:72:58:fa:24:bc:dc:16:2a:34:0b:41:c9:b3:ab:a3:8c: ac:84:9b:94:7f:27:72:25:20:be:eb:23:ea:74:b3:1c:fa:4b: e7:df:be:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHXTW4htlcVsG+Kl+CxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzFjZWM1MTRlYzExODdhMWMwYTU3MmQyZjU5YWY2ZDIyMjBiZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXM41neNhqtzWXgaC6xWNHv3uPYc ts5UTUDlauXVqVDpKjqgB1737ftLftsKDPj0xFSSNhx/h77YuNz/elFfzKYT2H6/ v9NPYZ3yTm6SfLZHzJfq5USzyF+s+SXhy7jQGCYMrcIIC3BTTUs74jFpZxxQn2ly oc67w9yEr195vqsQMybiim6iuAB20px9xT9ZI8TLz2s/r9xYs/HOuZahhXsDHj8l CvlU+mIK019hXC0f2e2/CueMlMwNlhpA1UyE3Un4iHA7czenkpuwd7rG5mwNV5IT YeDvy2SkEtWZOSicXeyBZEU05bRFQjk3wI6p/YGf8NykpxAunq658aiZPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwc7FFOwRh6HApXLS9Zr20iIL8UMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvREJ6c1VVN0JHSG9jQ2xjdEwxbXZiU0lndnhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJnMA0G CSqGSIb3DQEBCwUAA4IBAQDAEH9Oz8u1x7C+n1xUGFi6Nf7Cc0BstITh6Wb7EsiM khbqzZ9QgyAHXTiAPq5Y37r1I0QpKthw/E2EHLEoGWKXAsuuanYj4QLFC+5+kYG+ L+ER7CUv6actsMGhc7+WJuJ7/SnZ06d3ZHJt8Frp8RIrnOnibpcjvdOxfs5etnbo CmhT/UduDPGfFA6BSVOKLZE/ET1z0Atab3UIykiHfQ4yDfaNU31qaFQcsZSyYsfT OIgddJo//qOIs6E5jBlD9aUn2DwqDQu0VtGydnPltk9CFKEajQx8KCIUInJY+iS8 3BYqNAtBybOro4yshJuUfydyJSC+6yPqdLMc+kvn374z -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:22 2026 by rpki-client