This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/dBrnX8_98iFuWVrHOU52Q1wSEaw.roa File: dBrnX8_98iFuWVrHOU52Q1wSEaw.roa (raw, json) Hash identifier: +3ET58K23eX4vtwsNdX0TYNPsJEkZj/XezMR0jBc+EA= Subject key identifier: 74:1A:E7:5F:CF:FD:F2:21:6E:59:5A:C7:39:4E:76:43:5C:12:11:AC Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019B7EA70C3932E8945FD2BCD4A0B3E93498 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/dBrnX8_98iFuWVrHOU52Q1wSEaw.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213673 IP address blocks: 2a01:ecc0:c0::/42 maxlen: 42 2a01:ecc0:100::/42 maxlen: 42 2a01:ecc0:140::/42 maxlen: 42 2a01:ecc0:180::/42 maxlen: 42 2a01:ecc0:1c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0c:39:32:e8:94:5f:d2:bc:d4:a0:b3:e9:34:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=741ae75fcffdf2216e595ac7394e76435c1211ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:46:f1:a4:1d:97:31:e0:d9:e5:4f:84:5a: 2f:c2:94:ea:4c:94:37:0c:b8:8f:52:40:28:4f:63: e8:b7:b2:44:99:31:af:fa:29:45:c3:c0:88:29:a4: f1:02:57:fe:94:04:06:f0:34:95:76:32:73:91:79: 88:3a:7b:ef:a2:75:5f:0d:e5:94:74:b1:a9:ab:f2: a2:6e:f0:aa:2d:08:3e:bd:22:3e:b5:e9:0e:e4:4e: aa:07:a7:0d:eb:a6:14:5e:08:21:41:b3:22:de:bc: 4f:4a:67:78:f9:23:b0:0c:45:2a:8e:bb:36:e2:41: 7c:2a:bb:e0:26:46:17:71:ff:e7:ca:a9:6f:c3:cb: 12:0d:67:17:9f:8b:cd:75:eb:81:a1:8c:eb:f4:67: c3:c3:04:ba:6d:34:3b:6e:95:49:af:5e:ee:78:78: 99:ff:9d:65:56:a5:c7:8f:e0:26:18:8c:4a:dd:36: 50:68:ac:85:f0:d2:06:17:99:81:7d:7d:93:10:e6: f0:cf:5c:08:22:5f:79:a5:0c:11:d5:80:66:85:b9: 75:34:77:f4:50:ea:ab:6d:c7:d2:44:86:40:8c:c6: 41:20:e4:33:59:6b:2d:9d:16:de:e7:a4:54:c7:e3: f6:cf:02:ee:25:d0:c8:e6:1e:e4:08:e2:e6:21:3e: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1A:E7:5F:CF:FD:F2:21:6E:59:5A:C7:39:4E:76:43:5C:12:11:AC X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/dBrnX8_98iFuWVrHOU52Q1wSEaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:c0::-2a01:ecc0:1ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 33:71:2c:c6:b4:3b:94:17:8f:f7:2e:be:59:11:a5:90:b3:b4: b6:09:cd:26:ee:93:19:26:44:bc:7e:7f:d4:52:23:34:7b:15: ab:62:e0:4d:05:e3:fd:11:99:3a:18:c9:0c:7a:24:d4:49:8e: 8c:fc:58:cb:3b:4c:26:51:c7:0d:9b:4d:f5:e0:67:15:5c:fd: 12:b4:e0:0f:df:79:ac:16:d2:d0:e7:bf:cd:bc:f8:b0:83:11: 82:bf:29:2d:da:c8:67:65:7a:64:30:63:6c:08:01:a2:f6:68: 38:71:1d:14:9f:68:8a:d5:1c:81:5e:c0:7c:ea:b1:4b:c5:44: ee:44:37:73:5b:fd:83:f8:46:d8:17:d9:a3:f5:fb:30:fc:4a: 90:38:61:54:80:c8:ad:c8:8d:af:db:89:55:53:5d:85:81:37: b5:94:74:64:a6:f1:18:03:5b:03:d9:15:46:6f:08:ab:31:93: c4:a1:73:2c:3c:ad:c5:06:f2:2f:13:9f:cf:b1:4c:00:d3:42: 5a:6d:d6:e2:3e:65:6f:62:87:02:ef:86:e4:cf:5d:5d:51:fd: d5:5f:3b:d8:3d:20:c5:10:fe:30:0e:9b:ae:9e:b2:82:13:c3: a4:46:dc:0c:23:da:25:8d:ca:9f:fe:11:d2:06:d8:ee:51:7b: 2b:fc:df:53 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt+pww5MuiUX9K81KCz6TSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDFhZTc1ZmNmZmRmMjIxNmU1OTVhYzczOTRlNzY0MzVjMTIxMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKJG8aQdlzHg2eVPhFovwpTqTJQ3 DLiPUkAoT2Pot7JEmTGv+ilFw8CIKaTxAlf+lAQG8DSVdjJzkXmIOnvvonVfDeWU dLGpq/KibvCqLQg+vSI+tekO5E6qB6cN66YUXgghQbMi3rxPSmd4+SOwDEUqjrs2 4kF8KrvgJkYXcf/nyqlvw8sSDWcXn4vNdeuBoYzr9GfDwwS6bTQ7bpVJr17ueHiZ /51lVqXHj+AmGIxK3TZQaKyF8NIGF5mBfX2TEObwz1wIIl95pQwR1YBmhbl1NHf0 UOqrbcfSRIZAjMZBIOQzWWstnRbe56RUx+P2zwLuJdDI5h7kCOLmIT6qoQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFHQa51/P/fIhbllaxzlOdkNcEhGsMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvZEJyblg4Xzk4aUZ1V1ZySE9VNTJRMXdTRWF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBwYqAezA AMADBgEqAezAADANBgkqhkiG9w0BAQsFAAOCAQEAM3EsxrQ7lBeP9y6+WRGlkLO0 tgnNJu6TGSZEvH5/1FIjNHsVq2LgTQXj/RGZOhjJDHok1EmOjPxYyztMJlHHDZtN 9eBnFVz9ErTgD995rBbS0Oe/zbz4sIMRgr8pLdrIZ2V6ZDBjbAgBovZoOHEdFJ9o itUcgV7AfOqxS8VE7kQ3c1v9g/hG2BfZo/X7MPxKkDhhVIDIrciNr9uJVVNdhYE3 tZR0ZKbxGANbA9kVRm8IqzGTxKFzLDytxQbyLxOfz7FMANNCWm3W4j5lb2KHAu+G 5M9dXVH91V872D0gxRD+MA6brp6yghPDpEbcDCPaJY3Kn/4R0gbY7lF7K/zfUw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:14 2026 by rpki-client