This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/Db8si0kRaxTnvBotY5xlGgXYCEY.roa File: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (raw, json) Hash identifier: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4= Subject key identifier: 0D:BF:2C:8B:49:11:6B:14:E7:BC:1A:2D:63:9C:65:1A:05:D8:08:46 Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Certificate serial: 019B7D5CCEFE304EF45057A1FBBD90B46AA7 Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/Db8si0kRaxTnvBotY5xlGgXYCEY.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13099 IP address blocks: 213.172.64.0/19 maxlen: 19 213.172.65.0/24 maxlen: 24 213.172.70.0/24 maxlen: 24 213.172.71.0/24 maxlen: 24 213.172.83.0/24 maxlen: 24 213.172.84.0/24 maxlen: 24 213.172.92.0/24 maxlen: 24 213.172.94.0/24 maxlen: 24 213.172.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ce:fe:30:4e:f4:50:57:a1:fb:bd:90:b4:6a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dbf2c8b49116b14e7bc1a2d639c651a05d80846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:6b:95:a3:a9:83:84:9d:4d:63:bb:d4:87: d8:28:3b:02:cc:2b:af:e3:6d:69:c9:25:74:51:c6: 7e:a0:08:24:d2:51:7f:cc:08:98:58:5c:b4:23:19: 5f:e4:55:3a:d3:2a:d0:1c:4d:11:8a:30:19:85:31: ef:48:80:c3:d8:f3:c8:aa:2d:1c:43:74:3c:c3:d8: 9f:07:9f:03:bf:34:17:a4:33:50:39:fc:26:ed:f0: ad:c7:e8:87:49:8d:91:a5:94:41:f6:80:df:48:0b: b3:24:d5:b8:8e:30:f9:76:6a:8c:6a:98:9e:48:7d: 36:e2:e4:49:88:d6:c6:d5:67:d0:76:0e:71:9c:0b: b0:01:06:50:5d:dc:f4:32:96:68:2d:02:69:56:70: 7c:a9:2b:5e:22:af:b7:1d:99:99:c8:74:bd:ca:8e: 2e:0f:53:fb:ee:d4:9b:d9:79:a1:16:30:2b:05:fd: 8f:7a:eb:02:2b:f8:9c:95:cd:42:5d:e4:89:b3:6e: 7f:3d:25:a3:97:3d:ea:34:40:74:fb:af:59:9a:df: ee:8c:2a:a6:5a:e5:d2:bb:6a:b6:a6:1d:4f:dc:e7: 64:41:f1:9d:d6:c3:3e:4c:e8:09:9c:2f:24:86:23: d0:e8:4e:a5:0f:7c:db:4c:09:93:90:0d:a0:57:40: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BF:2C:8B:49:11:6B:14:E7:BC:1A:2D:63:9C:65:1A:05:D8:08:46 X509v3 Authority Key Identifier: keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/Db8si0kRaxTnvBotY5xlGgXYCEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.172.64.0/19 Signature Algorithm: sha256WithRSAEncryption 51:ea:8a:e4:da:69:7d:3a:6f:40:a7:db:ef:de:d2:31:3b:21: 45:ec:af:dd:9c:d7:67:a9:c0:d6:c5:ba:96:78:83:45:5c:66: 29:4d:15:0c:36:2b:a1:38:71:c9:eb:31:b4:75:4e:b3:16:dc: 0b:5a:95:9e:73:37:6a:e7:d4:91:9f:e3:8f:20:9b:2f:05:6c: 82:fd:ee:f2:3c:10:92:1e:36:d3:0f:40:41:58:1b:87:42:bb: dc:d6:41:2e:cd:be:b5:a9:67:60:42:17:64:7e:9b:37:99:b2: ce:ee:fc:2d:bc:04:ae:b3:60:7c:88:cd:c1:40:95:62:eb:62: a6:22:e2:b7:a3:75:0b:d5:9e:d1:51:6a:1b:55:10:d1:07:72: ad:a1:16:10:b2:3e:a4:85:8c:0b:61:f2:19:4c:fb:bc:ab:dc: 65:2e:ea:bc:2b:9d:4e:dd:ff:d4:24:ee:58:13:0b:c9:34:e5: e1:82:2c:c6:34:63:df:b0:58:25:77:f5:d9:22:f1:9a:94:9d: c4:b3:05:da:40:36:32:50:dd:c5:da:d7:73:70:54:51:9a:e9: 65:7a:a0:3b:95:f6:ef:c2:84:e6:59:15:27:f9:53:fe:6a:37: 10:d5:8f:c3:c1:d2:91:14:5d:c7:9a:76:93:bb:7f:cd:e6:93: 21:6a:77:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XM7+ME70UFeh+72QtGqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0 YjRmZTUwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGJmMmM4YjQ5MTE2YjE0ZTdiYzFhMmQ2MzljNjUxYTA1ZDgwODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FFrlaOpg4SdTWO71IfYKDsCzCuv 421pySV0UcZ+oAgk0lF/zAiYWFy0Ixlf5FU60yrQHE0RijAZhTHvSIDD2PPIqi0c Q3Q8w9ifB58DvzQXpDNQOfwm7fCtx+iHSY2RpZRB9oDfSAuzJNW4jjD5dmqMapie SH024uRJiNbG1WfQdg5xnAuwAQZQXdz0MpZoLQJpVnB8qSteIq+3HZmZyHS9yo4u D1P77tSb2XmhFjArBf2PeusCK/iclc1CXeSJs25/PSWjlz3qNEB0+69Zmt/ujCqm WuXSu2q2ph1P3OdkQfGd1sM+TOgJnC8khiPQ6E6lD3zbTAmTkA2gV0CFGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2/LItJEWsU57waLWOcZRoF2AhGMB8GA1UdIwQY MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt YTI4YmNlNWQ1ZGE1LzEvRGI4c2kwa1JheFRudkJvdFk1eGxHZ1hZQ0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1 LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1axAMA0G CSqGSIb3DQEBCwUAA4IBAQBR6ork2ml9Om9Ap9vv3tIxOyFF7K/dnNdnqcDWxbqW eINFXGYpTRUMNiuhOHHJ6zG0dU6zFtwLWpWeczdq59SRn+OPIJsvBWyC/e7yPBCS HjbTD0BBWBuHQrvc1kEuzb61qWdgQhdkfps3mbLO7vwtvASus2B8iM3BQJVi62Km IuK3o3UL1Z7RUWobVRDRB3KtoRYQsj6khYwLYfIZTPu8q9xlLuq8K51O3f/UJO5Y EwvJNOXhgizGNGPfsFgld/XZIvGalJ3EswXaQDYyUN3F2tdzcFRRmulleqA7lfbv woTmWRUn+VP+ajcQ1Y/DwdKRFF3HmnaTu3/N5pMhance -----END CERTIFICATE-----Generated at Mon Jan 26 14:53:23 2026 by rpki-client