This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/Duh6SwtMzsKup_Nf-xoOxxIx7Zg.roa File: Duh6SwtMzsKup_Nf-xoOxxIx7Zg.roa (raw, json) Hash identifier: IBv7s5P6POwx8+kL08na/WDUeDlbx9dF9cCZPWWH6T4= Subject key identifier: 0E:E8:7A:4B:0B:4C:CE:C2:AE:A7:F3:5F:FB:1A:0E:C7:12:31:ED:98 Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Certificate serial: 019B77C70FFD7E98970723253A39065CE127 Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/Duh6SwtMzsKup_Nf-xoOxxIx7Zg.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273373 IP address blocks: 185.255.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0f:fd:7e:98:97:07:23:25:3a:39:06:5c:e1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ee87a4b0b4ccec2aea7f35ffb1a0ec71231ed98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:3e:91:bc:e3:78:68:89:ee:69:d8:3f:50: ab:47:25:44:45:eb:14:2b:66:de:89:4f:b7:78:7c: b2:49:67:92:0a:a5:39:1a:1f:51:bf:8a:07:47:a9: 41:13:41:9f:7e:d4:c7:63:9c:00:c1:fd:e7:c3:7e: d9:cd:e1:83:ff:36:82:3c:d2:99:5f:bb:2f:93:46: 0b:95:ce:11:bd:8b:5a:a9:26:42:48:06:04:60:b4: e4:f3:32:5b:8d:ec:15:0d:a5:ab:69:08:af:1f:4e: 67:82:6d:3f:11:7e:4c:c5:82:e9:8d:6b:75:4e:ed: ca:ee:a2:aa:1e:05:34:bb:34:36:81:19:ec:a5:55: e6:9c:a1:e0:98:02:70:4a:1f:ca:11:4e:ed:dd:86: c1:cf:ff:ee:cc:6a:2b:74:76:c7:54:7c:4a:48:c5: e2:35:83:b9:ed:11:a1:60:da:69:cf:a5:21:e0:b7: e8:cd:92:41:c6:e9:e6:f9:82:59:7b:2a:e3:27:a5: c1:33:6d:78:b7:2f:b5:15:a5:c9:70:3e:a9:5d:db: dc:94:e9:63:00:28:de:8f:84:82:89:8b:1d:93:d7: 50:17:d0:8a:bd:9d:de:81:71:3b:ca:61:80:02:21: b1:65:8b:3d:fd:b3:97:29:ea:0e:30:b1:f6:0b:10: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E8:7A:4B:0B:4C:CE:C2:AE:A7:F3:5F:FB:1A:0E:C7:12:31:ED:98 X509v3 Authority Key Identifier: keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/Duh6SwtMzsKup_Nf-xoOxxIx7Zg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.56.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:39:46:0f:5a:7c:84:7e:f5:b6:58:47:df:6c:10:a8:26:6b: 56:43:ba:d0:64:90:cf:95:15:8a:44:b5:7e:55:cc:8e:dd:b9: bb:bc:d5:ec:d0:ce:9b:56:ea:bf:b8:69:d8:43:10:a8:11:3f: ec:f1:35:4d:2f:4a:26:e0:f4:8a:32:f2:e7:6c:e2:ee:64:7e: a9:d4:5d:f9:d3:83:c9:67:b8:c1:d1:34:d4:cd:34:bc:f1:34: fa:4f:36:e9:cf:31:7b:68:43:a7:8c:51:8f:ef:ea:be:14:00: 1a:c5:44:1b:67:26:5c:2c:a5:ac:26:41:2c:4d:e6:6e:85:cd: c7:69:3f:4a:d1:4b:c1:0a:07:e3:0a:8e:02:5f:22:2c:d0:c1: 33:6e:4b:2c:b7:32:7c:3a:c9:07:a0:e7:ea:d9:db:d4:74:d0: f8:fa:a4:2e:2f:15:08:70:f0:9f:09:ac:87:4d:2d:61:55:76: c2:7a:58:8e:b0:23:5f:2e:2d:27:cb:74:8e:d9:48:64:3f:e1: e0:66:e3:12:b5:e4:ad:0e:3f:5c:36:3a:bb:50:0f:42:01:63: 04:e3:0d:c2:2c:c5:fd:5d:6c:6e:81:25:27:c0:b1:fb:06:54: 3d:d1:41:27:6f:db:09:3e:0c:40:b2:ef:46:b0:a5:fe:5b:cf: 46:d7:88:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xw/9fpiXByMlOjkGXOEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz YjI0YjYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWU4N2E0YjBiNGNjZWMyYWVhN2YzNWZmYjFhMGVjNzEyMzFlZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHo+kbzjeGiJ7mnYP1CrRyVEResU K2beiU+3eHyySWeSCqU5Gh9Rv4oHR6lBE0GfftTHY5wAwf3nw37ZzeGD/zaCPNKZ X7svk0YLlc4RvYtaqSZCSAYEYLTk8zJbjewVDaWraQivH05ngm0/EX5MxYLpjWt1 Tu3K7qKqHgU0uzQ2gRnspVXmnKHgmAJwSh/KEU7t3YbBz//uzGordHbHVHxKSMXi NYO57RGhYNppz6Uh4LfozZJBxunm+YJZeyrjJ6XBM214ty+1FaXJcD6pXdvclOlj ACjej4SCiYsdk9dQF9CKvZ3egXE7ymGAAiGxZYs9/bOXKeoOMLH2CxC/DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7oeksLTM7CrqfzX/saDscSMe2YMB8GA1UdIwQY MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt ZGZkZGIxMzY0MzYzLzEvRHVoNlN3dE16c0t1cF9OZi14b094eEl4N1pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuf84MA0G CSqGSIb3DQEBCwUAA4IBAQB7OUYPWnyEfvW2WEffbBCoJmtWQ7rQZJDPlRWKRLV+ VcyO3bm7vNXs0M6bVuq/uGnYQxCoET/s8TVNL0om4PSKMvLnbOLuZH6p1F3504PJ Z7jB0TTUzTS88TT6TzbpzzF7aEOnjFGP7+q+FAAaxUQbZyZcLKWsJkEsTeZuhc3H aT9K0UvBCgfjCo4CXyIs0MEzbksstzJ8OskHoOfq2dvUdND4+qQuLxUIcPCfCayH TS1hVXbCeliOsCNfLi0ny3SO2UhkP+HgZuMSteStDj9cNjq7UA9CAWME4w3CLMX9 XWxugSUnwLH7BlQ90UEnb9sJPgxAsu9GsKX+W89G14hf -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:18 2026 by rpki-client