This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DRsqB6qOC4-icEJB5mDRh3jgVIA.roa File: DRsqB6qOC4-icEJB5mDRh3jgVIA.roa (raw, json) Hash identifier: 06ZaV7d3CbkBywvNzvswa9iGMDsKNMKdGJ8YQsfeTRE= Subject key identifier: 0D:1B:2A:07:AA:8E:0B:8F:A2:70:42:41:E6:60:D1:87:78:E0:54:80 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C69484A0C2C3E2064A1C49821A3D12 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DRsqB6qOC4-icEJB5mDRh3jgVIA.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202813 IP address blocks: 5.154.6.0/24 maxlen: 24 5.154.69.0/24 maxlen: 24 5.154.83.0/24 maxlen: 24 89.43.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:94:84:a0:c2:c3:e2:06:4a:1c:49:82:1a:3d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d1b2a07aa8e0b8fa2704241e660d18778e05480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:1a:fa:04:91:56:a3:8b:e3:e5:cf:d7:e1: d2:47:e8:36:c5:b8:15:9c:e6:9e:fa:0d:ac:c1:73: 42:2e:41:f2:0e:b3:8c:db:74:09:9b:ab:56:8c:a3: 02:14:29:b6:70:db:4c:51:09:99:ea:ab:62:e0:fe: 3b:d5:60:ff:9e:7c:41:84:a2:f8:a7:ff:da:90:7b: f4:c8:c3:18:ed:82:be:b9:40:8d:4b:8f:cb:c7:05: 1a:dc:75:27:8f:b3:4c:ce:23:d2:60:15:b8:74:c9: 12:86:62:fb:44:95:26:2b:e6:2c:1d:28:37:29:32: 95:b8:2e:6c:6c:76:b8:91:f9:38:21:2f:a4:07:27: a8:38:d4:74:b5:13:02:43:1b:d0:1b:69:77:29:e7: 50:c6:c1:fc:6a:27:8d:97:92:b3:59:b4:fa:fe:66: c3:fe:f1:da:6d:0b:d7:b9:32:6a:2d:70:c0:b4:da: 88:cc:8a:d3:aa:9b:e5:e2:66:c5:90:dc:e7:e2:86: 5c:f8:fc:54:8d:7f:60:d0:82:72:90:ee:92:8e:c2: 01:04:57:67:f1:74:5f:b1:c0:be:5b:00:61:87:3d: da:65:39:d3:47:d4:19:7d:50:a2:ca:91:6b:f2:04: f6:e3:30:42:bd:e1:72:45:4e:5c:e4:24:51:25:5e: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1B:2A:07:AA:8E:0B:8F:A2:70:42:41:E6:60:D1:87:78:E0:54:80 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DRsqB6qOC4-icEJB5mDRh3jgVIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.6.0/24 5.154.69.0/24 5.154.83.0/24 89.43.85.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:48:c6:58:3a:14:26:7e:0e:59:6b:3b:1c:20:df:12:36:03: d7:a6:28:84:55:af:b3:9b:86:c9:9e:45:48:aa:eb:2d:18:de: e6:06:2b:e0:bd:0b:b8:e0:c9:c0:d4:ca:e4:dd:2f:35:fa:22: d5:ed:e7:ef:4c:3f:3a:1f:86:f9:0b:8f:67:2a:ec:6c:a9:63: 24:7a:5f:a3:3f:ab:1a:69:7a:ad:11:49:9e:8e:2f:96:fd:e5: 40:2c:82:5b:64:ea:23:a7:bc:4a:78:b3:ef:59:99:d7:ee:83: da:fe:a0:71:b1:a4:0d:fd:92:72:c6:4f:06:36:c6:25:e5:d5: f1:24:81:8b:3c:f1:6f:cb:cc:6a:19:80:de:cc:57:54:9d:f1: 36:a0:e0:99:24:27:92:0f:45:71:62:9b:00:e6:d8:ea:54:d0: 24:00:31:88:ff:05:90:6f:1b:d2:1f:e0:c2:f9:66:79:fb:f7: 27:b7:b9:a3:e9:0e:e3:42:55:2f:9e:69:f4:a2:e3:f1:8f:d4: b6:0a:ca:76:d5:39:84:8a:77:39:82:50:36:e0:b2:d8:1f:a2: 71:cf:c7:f9:1d:8b:9a:0f:ad:56:0d:14:01:3a:e9:07:35:30: 30:ba:02:c8:d9:94:8c:28:fa:9c:1e:7b:24:87:ad:68:8d:3c: 27:a9:0b:00 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xpSEoMLD4gZKHEmCGj0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDFiMmEwN2FhOGUwYjhmYTI3MDQyNDFlNjYwZDE4Nzc4ZTA1NDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHQa+gSRVqOL4+XP1+HSR+g2xbgV nOae+g2swXNCLkHyDrOM23QJm6tWjKMCFCm2cNtMUQmZ6qti4P471WD/nnxBhKL4 p//akHv0yMMY7YK+uUCNS4/LxwUa3HUnj7NMziPSYBW4dMkShmL7RJUmK+YsHSg3 KTKVuC5sbHa4kfk4IS+kByeoONR0tRMCQxvQG2l3KedQxsH8aieNl5KzWbT6/mbD /vHabQvXuTJqLXDAtNqIzIrTqpvl4mbFkNzn4oZc+PxUjX9g0IJykO6SjsIBBFdn 8XRfscC+WwBhhz3aZTnTR9QZfVCiypFr8gT24zBCveFyRU5c5CRRJV4ehwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA0bKgeqjguPonBCQeZg0Yd44FSAMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvRFJzcUI2cU9DNC1pY0VKQjVtRFJoM2pnVklBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZoGAwQA BZpFAwQABZpTAwQAWStVMA0GCSqGSIb3DQEBCwUAA4IBAQAqSMZYOhQmfg5Zazsc IN8SNgPXpiiEVa+zm4bJnkVIqustGN7mBivgvQu44MnA1Mrk3S81+iLV7efvTD86 H4b5C49nKuxsqWMkel+jP6saaXqtEUmeji+W/eVALIJbZOojp7xKeLPvWZnX7oPa /qBxsaQN/ZJyxk8GNsYl5dXxJIGLPPFvy8xqGYDezFdUnfE2oOCZJCeSD0VxYpsA 5tjqVNAkADGI/wWQbxvSH+DC+WZ5+/cnt7mj6Q7jQlUvnmn0ouPxj9S2Csp21TmE inc5glA24LLYH6Jxz8f5HYuaD61WDRQBOukHNTAwugLI2ZSMKPqcHnskh61ojTwn qQsA -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:39 2026 by rpki-client