This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/j0K5a5Z0hTedR5qChUo6JzL_b6Q.roa File: j0K5a5Z0hTedR5qChUo6JzL_b6Q.roa (raw, json) Hash identifier: /ijeXiA6vOxG/JGy8aSyn4OKLrNeshDbn0KxzTiZZAM= Subject key identifier: 8F:42:B9:6B:96:74:85:37:9D:47:9A:82:85:4A:3A:27:32:FF:6F:A4 Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703 Certificate serial: 019B78A36568E0C21529FE415B23F87858FE Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/j0K5a5Z0hTedR5qChUo6JzL_b6Q.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32519 IP address blocks: 193.110.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:65:68:e0:c2:15:29:fe:41:5b:23:f8:78:58:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f42b96b967485379d479a82854a3a2732ff6fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:c6:89:6b:67:fe:25:fa:e8:c3:ab:19:e8: 69:c2:1e:cf:97:06:fb:16:89:86:cd:35:64:dc:23: 97:e0:10:06:a5:9c:5e:15:5e:2a:68:09:fd:c4:86: ac:46:a6:79:98:77:52:59:b4:01:0a:e1:56:c6:00: c3:5e:66:cf:d7:60:09:26:9a:06:1d:ee:76:16:10: f9:27:54:93:48:a7:de:76:c7:fa:cd:b2:12:01:b5: c6:ff:9b:86:6e:8f:21:0b:16:46:f6:d2:3a:7a:b9: 60:07:33:4b:1d:54:11:0c:57:5e:38:d1:ad:b1:4e: 79:d8:5a:56:3a:ad:b9:24:b9:36:f6:ac:e6:af:87: 3f:4d:f1:c7:7f:9d:38:92:e9:42:fb:f7:91:d3:4f: 63:29:8f:16:12:14:53:5d:b2:2f:58:20:c5:e4:a4: 6a:61:ff:75:cb:5c:0f:c1:41:39:14:9a:22:f6:9b: bf:dc:c7:ec:ad:e4:cc:30:61:63:e3:9e:dc:5b:19: 7e:0a:e7:6f:5d:24:f8:15:80:dd:5c:15:e1:f3:2c: bb:af:f6:31:37:f2:68:b8:93:90:43:50:2a:0a:de: e2:70:25:23:77:3d:fe:a1:e6:85:f8:62:75:cc:20: 7e:1b:10:c7:72:5f:15:54:49:13:fb:b5:6d:3b:03: 68:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:B9:6B:96:74:85:37:9D:47:9A:82:85:4A:3A:27:32:FF:6F:A4 X509v3 Authority Key Identifier: keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/j0K5a5Z0hTedR5qChUo6JzL_b6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.200.0/22 Signature Algorithm: sha256WithRSAEncryption ad:13:fa:7f:8e:fb:a6:f4:95:9e:64:26:7f:5b:7f:b9:a0:d8: aa:54:6f:09:e5:45:f5:b0:38:b0:e6:5a:ab:ab:b7:85:57:bb: a8:15:c9:f9:d5:73:32:22:5b:e7:b9:49:32:2f:51:c4:57:81: b8:16:01:e7:d5:a0:03:f5:db:22:52:d4:48:36:07:bd:79:e2: 98:9a:26:ab:8b:a2:88:59:ce:1a:bc:8f:f2:d6:3d:7d:59:4d: d9:59:69:93:52:a8:a7:46:15:79:2b:45:af:88:da:92:ad:54: 09:8c:35:91:71:28:d6:10:c3:2e:cc:af:f0:5d:5e:a7:e7:ca: 69:76:e9:29:53:6f:31:fa:9b:88:c6:2a:48:c1:99:c8:cb:d2: 9e:e4:20:8d:b9:7c:84:83:5f:11:47:8f:2c:ca:e9:91:b8:a5: b0:f8:52:35:e7:1f:7c:ee:42:2e:cf:a5:23:a2:85:11:a6:5e: 20:67:03:b7:b5:5c:47:c0:be:ea:5e:e9:67:36:1b:87:2f:d2: 8f:d5:f6:bf:4a:a1:be:71:35:0f:b8:e2:09:cf:db:1f:41:dd: 6a:9d:ec:e8:40:e0:4d:fb:8c:10:1f:21:a4:f0:e7:0c:b1:7b: 62:ba:be:12:e2:e1:4c:5c:5f:2c:e1:47:a5:ba:16:38:38:51: eb:f3:8a:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2Vo4MIVKf5BWyP4eFj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYmZiMDA0OGE4ZGE1NTZmZDlkM2RmMTA3NzQwMmY4NDNm NWQ3MDMwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjQyYjk2Yjk2NzQ4NTM3OWQ0NzlhODI4NTRhM2EyNzMyZmY2ZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4rGiWtn/iX66MOrGehpwh7Plwb7 FomGzTVk3COX4BAGpZxeFV4qaAn9xIasRqZ5mHdSWbQBCuFWxgDDXmbP12AJJpoG He52FhD5J1STSKfedsf6zbISAbXG/5uGbo8hCxZG9tI6erlgBzNLHVQRDFdeONGt sU552FpWOq25JLk29qzmr4c/TfHHf504kulC+/eR009jKY8WEhRTXbIvWCDF5KRq Yf91y1wPwUE5FJoi9pu/3MfsreTMMGFj457cWxl+CudvXST4FYDdXBXh8yy7r/Yx N/JouJOQQ1AqCt7icCUjdz3+oeaF+GJ1zCB+GxDHcl8VVEkT+7VtOwNoRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI9CuWuWdIU3nUeagoVKOicy/2+kMB8GA1UdIwQY MBaAFNy/sASKjaVW/Z098Qd0AvhD9dcDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQt ZTA2MGI0ZmNiY2NiLzEvajBLNWE1WjBoVGVkUjVxQ2hVbzZKekxfYjZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQtZTA2MGI0ZmNiY2Ni LzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW7IMA0G CSqGSIb3DQEBCwUAA4IBAQCtE/p/jvum9JWeZCZ/W3+5oNiqVG8J5UX1sDiw5lqr q7eFV7uoFcn51XMyIlvnuUkyL1HEV4G4FgHn1aAD9dsiUtRINge9eeKYmiari6KI Wc4avI/y1j19WU3ZWWmTUqinRhV5K0WviNqSrVQJjDWRcSjWEMMuzK/wXV6n58pp dukpU28x+puIxipIwZnIy9Ke5CCNuXyEg18RR48syumRuKWw+FI15x987kIuz6Uj ooURpl4gZwO3tVxHwL7qXulnNhuHL9KP1fa/SqG+cTUPuOIJz9sfQd1qnezoQOBN +4wQHyGk8OcMsXtiur4S4uFMXF8s4UeluhY4OFHr84oy -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:43 2026 by rpki-client