This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DGWFQGVNIZbl_-ESdhlD0g7TtBg.roa File: DGWFQGVNIZbl_-ESdhlD0g7TtBg.roa (raw, json) Hash identifier: 2N0lsKvdz+MFHSE1PxUe6TNoDH+zbUH1Dv2lK6lox50= Subject key identifier: 0C:65:85:40:65:4D:21:96:E5:FF:E1:12:76:19:43:D2:0E:D3:B4:18 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8C2BCC2A10B038090F3D3AFAF877 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DGWFQGVNIZbl_-ESdhlD0g7TtBg.roa Signing time: Fri 02 Jan 2026 08:20:50 +0000 ROA not before: Fri 02 Jan 2026 08:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213186 IP address blocks: 151.242.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8c:2b:cc:2a:10:b0:38:09:0f:3d:3a:fa:f8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c658540654d2196e5ffe112761943d20ed3b418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:63:fe:c5:76:48:a0:6e:60:d2:13:8a:b0: bf:ab:8e:2f:9e:ca:c3:90:2e:ec:83:01:84:8b:28: 83:f2:c8:8e:6f:b8:00:25:aa:13:90:18:ed:94:ac: 1d:ab:be:21:66:79:d1:0f:0f:1b:ea:d5:85:2a:6c: c7:79:6a:b6:21:aa:99:2e:62:77:fa:52:25:ce:a4: 31:02:89:b7:4a:fe:ec:00:7e:d2:0a:bf:20:91:f7: f7:e2:34:90:06:64:74:1a:9e:19:61:4b:3e:cd:33: 38:5a:5a:2d:3d:2b:d7:cc:13:10:74:d8:33:8f:f1: a1:de:3e:1a:10:19:82:52:f8:53:a3:aa:81:91:b0: 04:4d:70:85:2b:86:ea:a1:7d:af:7e:39:fe:e7:1b: 9d:19:ba:44:08:6d:7b:4a:a7:37:d9:ba:f9:f2:f3: a1:20:c8:16:7c:b5:03:75:75:d3:73:c3:e7:de:9a: bf:33:5f:22:52:2a:4c:fd:4e:73:92:5e:64:1e:b4: 7f:43:c7:0d:7c:1b:22:33:f7:d9:f9:df:c4:5b:72: 58:5c:bf:32:a3:59:fc:13:a7:79:9c:c6:79:a6:2f: 4d:89:9c:3b:23:47:db:af:61:41:b6:13:9c:af:5d: 4c:2f:8a:08:77:b2:95:6a:d5:68:c3:0e:cf:ca:2b: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:65:85:40:65:4D:21:96:E5:FF:E1:12:76:19:43:D2:0E:D3:B4:18 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DGWFQGVNIZbl_-ESdhlD0g7TtBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.92.0/24 Signature Algorithm: sha256WithRSAEncryption 63:23:2a:13:8f:6a:ca:42:54:41:4e:bb:0f:d1:18:ce:54:ce: 6b:65:a4:8e:73:dd:90:eb:95:8d:ef:06:63:69:39:a2:ed:ae: 71:59:5d:9e:41:f6:2d:7d:f8:46:8f:f6:c5:0a:b3:8f:c5:0d: ad:d2:c7:d0:0e:21:ac:6f:0d:63:f9:b0:37:c5:30:46:d0:c0: 57:83:c6:e6:2a:cf:42:44:fb:de:35:de:c7:88:78:e4:ae:18: f3:bb:c3:00:b4:64:53:01:4b:cf:c9:20:8f:96:a5:6b:b1:a1: 78:3f:7d:24:4d:3b:3c:7e:10:18:b3:2e:e4:ce:87:9e:82:a9: 4a:53:69:ff:48:6a:c5:64:75:db:ee:e2:12:33:73:6b:8a:b4: 3d:71:ec:c8:e8:5a:22:5c:a0:72:eb:e6:3f:85:ba:a8:19:a6: 93:83:8f:ad:80:26:0e:36:78:43:82:00:5c:2c:b7:f8:8b:33: 23:65:37:02:4d:cc:8c:fc:95:5e:23:a4:d8:3b:27:67:9a:2a: f8:b5:62:bd:6c:b6:8d:f7:2a:38:51:61:39:80:b2:a5:01:aa: 86:ff:ce:77:36:27:55:01:97:59:32:6b:0d:db:93:e3:c9:c7: be:2f:08:28:c1:b6:23:e8:f8:de:47:73:d7:66:dd:28:cb:3d: f5:7f:3f:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4wrzCoQsDgJDz06+vh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzY1ODU0MDY1NGQyMTk2ZTVmZmUxMTI3NjE5NDNkMjBlZDNiNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiRj/sV2SKBuYNITirC/q44vnsrD kC7sgwGEiyiD8siOb7gAJaoTkBjtlKwdq74hZnnRDw8b6tWFKmzHeWq2IaqZLmJ3 +lIlzqQxAom3Sv7sAH7SCr8gkff34jSQBmR0Gp4ZYUs+zTM4WlotPSvXzBMQdNgz j/Gh3j4aEBmCUvhTo6qBkbAETXCFK4bqoX2vfjn+5xudGbpECG17Sqc32br58vOh IMgWfLUDdXXTc8Pn3pq/M18iUipM/U5zkl5kHrR/Q8cNfBsiM/fZ+d/EW3JYXL8y o1n8E6d5nMZ5pi9NiZw7I0fbr2FBthOcr11ML4oId7KVatVoww7PyiunEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAxlhUBlTSGW5f/hEnYZQ9IO07QYMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvREdXRlFHVk5JWmJsXy1FU2RobEQwZzdUdEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/JcMA0G CSqGSIb3DQEBCwUAA4IBAQBjIyoTj2rKQlRBTrsP0RjOVM5rZaSOc92Q65WN7wZj aTmi7a5xWV2eQfYtffhGj/bFCrOPxQ2t0sfQDiGsbw1j+bA3xTBG0MBXg8bmKs9C RPveNd7HiHjkrhjzu8MAtGRTAUvPySCPlqVrsaF4P30kTTs8fhAYsy7kzoeegqlK U2n/SGrFZHXb7uISM3NrirQ9cezI6FoiXKBy6+Y/hbqoGaaTg4+tgCYONnhDggBc LLf4izMjZTcCTcyM/JVeI6TYOydnmir4tWK9bLaN9yo4UWE5gLKlAaqG/853NidV AZdZMmsN25Pjyce+LwgowbYj6PjeR3PXZt0oyz31fz+C -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:44 2026 by rpki-client