This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa File: DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa (raw, json) Hash identifier: fLmSqodUAGL/yoED3chUFJFBL41B6P99W79IRZINO/g= Subject key identifier: 0D:1D:C1:CF:B3:9A:9F:78:BA:BE:09:28:F8:6B:C7:84:F6:FE:3F:1D Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B791078A0C419D46094974F7640C9FDB1 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214639 IP address blocks: 5.178.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:78:a0:c4:19:d4:60:94:97:4f:76:40:c9:fd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d1dc1cfb39a9f78babe0928f86bc784f6fe3f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:df:e8:fb:3c:56:2a:8c:80:1e:90:7a:7b:75: 08:c3:0e:ff:f4:3c:56:0c:9d:ad:83:d8:47:71:00: 85:36:f7:87:a7:64:e8:7e:41:ec:2d:da:41:88:dc: 6a:bd:0c:5f:96:04:43:d4:dd:9e:14:e7:a6:29:40: 6b:82:b7:39:b9:d4:1d:c2:f8:4f:ff:f4:14:c5:ab: f8:6d:1f:73:55:ce:c7:93:32:9c:6a:02:ba:2b:21: 03:da:70:b2:7d:45:cb:20:ee:61:e4:d0:72:8d:7a: e5:c6:84:13:53:3a:56:b8:3d:9d:41:a8:f6:99:65: f5:8a:84:8f:a8:61:be:d6:2b:1f:74:1e:36:7a:17: ef:5e:60:ae:6b:d3:92:33:8e:66:c3:bf:13:c6:93: 45:ba:fb:2a:7e:68:90:90:f5:ad:1b:70:78:c2:12: a7:61:ac:f8:72:ca:4b:40:38:98:f4:3c:0e:33:02: a9:d3:4d:18:55:90:ee:77:98:8a:6e:c3:2c:f0:d9: bf:09:24:08:fc:f1:19:04:17:33:7e:71:5d:81:ab: f9:6c:e1:bb:bb:19:27:4e:e3:ad:5f:a3:10:c9:3c: db:c3:db:d3:4d:c2:af:78:f8:cc:81:f9:e9:dd:4a: 44:45:d9:48:9b:84:35:ba:df:fc:75:ed:da:a9:d4: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1D:C1:CF:B3:9A:9F:78:BA:BE:09:28:F8:6B:C7:84:F6:FE:3F:1D X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.101.0/24 Signature Algorithm: sha256WithRSAEncryption 11:e5:3c:03:22:64:00:71:11:39:8b:e2:b1:d1:db:3b:b7:73: 6c:16:ee:9c:ed:a3:d4:a1:a9:5c:a1:2d:de:e9:c1:f1:21:db: 4b:ca:69:23:0b:1f:c8:f5:94:1c:8f:17:2f:8f:a5:d0:4b:54: 7d:53:8d:ff:c1:dc:63:5a:d5:7c:e3:67:a9:67:35:80:21:37: ad:6e:fd:18:0d:8a:2e:22:e0:c6:47:99:c7:fc:85:9a:e0:f0: b5:55:79:d2:88:78:f7:ef:62:0d:78:fd:06:de:e3:a4:00:1d: be:45:64:ef:87:03:b9:2f:de:e4:89:53:93:b1:98:fa:20:14: 7d:89:33:3d:46:ee:52:19:1d:75:be:02:bb:e8:bc:1e:81:48: e9:14:15:4d:4b:2d:0d:9e:ee:f9:98:1d:a6:c2:ac:c0:87:7f: 3a:02:6f:11:38:ac:d4:a6:c2:c0:ea:d2:3d:33:76:fe:be:72: 33:7c:7e:f0:e0:38:19:8f:11:63:b3:2d:0b:8e:6e:0d:56:8c: 0c:32:60:6d:07:75:00:3b:22:b1:c5:05:d6:d5:83:5d:c7:aa: 50:4c:19:8a:ea:50:16:71:9b:b2:fc:4f:ac:25:5c:ec:97:d5: 1e:fd:2d:52:2a:88:fc:6e:9f:f7:51:0f:55:a1:6c:1d:d7:92: 40:aa:7e:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHigxBnUYJSXT3ZAyf2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDFkYzFjZmIzOWE5Zjc4YmFiZTA5MjhmODZiYzc4NGY2ZmUzZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd/o+zxWKoyAHpB6e3UIww7/9DxW DJ2tg9hHcQCFNveHp2TofkHsLdpBiNxqvQxflgRD1N2eFOemKUBrgrc5udQdwvhP //QUxav4bR9zVc7HkzKcagK6KyED2nCyfUXLIO5h5NByjXrlxoQTUzpWuD2dQaj2 mWX1ioSPqGG+1isfdB42ehfvXmCua9OSM45mw78TxpNFuvsqfmiQkPWtG3B4whKn Yaz4cspLQDiY9DwOMwKp000YVZDud5iKbsMs8Nm/CSQI/PEZBBczfnFdgav5bOG7 uxknTuOtX6MQyTzbw9vTTcKvePjMgfnp3UpERdlIm4Q1ut/8de3aqdRtgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0dwc+zmp94ur4JKPhrx4T2/j8dMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvRFIzQno3T2FuM2k2dmdrby1HdkhoUGItUHgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJlMA0G CSqGSIb3DQEBCwUAA4IBAQAR5TwDImQAcRE5i+Kx0ds7t3NsFu6c7aPUoalcoS3e 6cHxIdtLymkjCx/I9ZQcjxcvj6XQS1R9U43/wdxjWtV842epZzWAITetbv0YDYou IuDGR5nH/IWa4PC1VXnSiHj372INeP0G3uOkAB2+RWTvhwO5L97kiVOTsZj6IBR9 iTM9Ru5SGR11vgK76LwegUjpFBVNSy0Nnu75mB2mwqzAh386Am8ROKzUpsLA6tI9 M3b+vnIzfH7w4DgZjxFjsy0Ljm4NVowMMmBtB3UAOyKxxQXW1YNdx6pQTBmK6lAW cZuy/E+sJVzsl9Ue/S1SKoj8bp/3UQ9VoWwd15JAqn7A -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:30 2026 by rpki-client