This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Db8mCIGfJVU0oHlWlgmVI5YkWiM.roa File: Db8mCIGfJVU0oHlWlgmVI5YkWiM.roa (raw, json) Hash identifier: UUMtDrWLZuUOVch14S+v8tau5+e/fVW5DmdRag7fXjU= Subject key identifier: 0D:BF:26:08:81:9F:25:55:34:A0:79:56:96:09:95:23:96:24:5A:23 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B361A0163CF0C385994A1A70C79FAE4 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Db8mCIGfJVU0oHlWlgmVI5YkWiM.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215973 IP address blocks: 93.119.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1a:01:63:cf:0c:38:59:94:a1:a7:0c:79:fa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dbf2608819f255534a079569609952396245a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a6:79:2e:0d:4f:74:bb:da:8d:59:88:8c:45: 0d:a6:2c:3b:1e:7d:e1:9a:52:35:24:b2:bb:8f:62: 3f:34:6b:d3:81:fb:d1:07:5a:4e:b5:17:c8:96:fa: b0:52:9a:32:b0:ca:a0:63:54:a1:96:68:3f:76:b2: 5d:1b:14:cf:da:71:db:53:b3:63:47:8f:e7:8c:21: 45:c1:87:b1:01:ce:e5:d1:3d:0e:e2:e6:f9:35:3a: 47:2d:c1:99:47:af:c5:05:3e:e1:ee:c7:38:f6:50: 09:7f:51:68:0b:79:78:83:e4:72:d1:0b:bd:85:62: 9e:12:fd:9a:d6:35:7f:c0:29:c7:0f:46:df:c9:b6: 54:db:80:79:14:2a:7b:11:99:c0:d6:58:5a:24:8f: 46:d4:02:f9:26:db:2a:3d:f2:39:04:02:e8:9e:c6: d9:72:7d:7a:38:7e:fd:d4:55:f8:c2:04:3e:f7:2c: 94:f2:75:f4:62:aa:13:22:b9:cf:36:d2:7e:6c:c9: 90:87:b8:2a:0d:8e:dc:26:3f:a6:ac:0d:96:9f:1c: 9c:08:04:82:68:1f:f1:fa:c4:0f:62:28:fd:d8:57: d2:56:7f:4a:f7:ca:72:94:64:e1:2c:5e:4c:6c:c3: d9:58:cb:45:00:0f:83:c1:a4:63:58:1d:a8:93:21: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BF:26:08:81:9F:25:55:34:A0:79:56:96:09:95:23:96:24:5A:23 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Db8mCIGfJVU0oHlWlgmVI5YkWiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.119.171.0/24 Signature Algorithm: sha256WithRSAEncryption 48:25:66:b5:e0:4b:7a:be:8b:e4:47:8e:e4:c8:be:61:cc:41: ee:9a:e7:da:82:2b:67:27:52:fe:ab:11:56:6c:be:58:6f:e4: 23:e5:7d:cc:81:53:85:89:2f:d3:bf:ab:48:e0:08:dd:13:ed: f8:a8:9f:86:dc:11:05:c4:46:b6:e2:e4:d9:fe:ad:99:9d:be: 3c:62:d8:37:e9:7a:0c:a3:bc:21:b9:e6:ee:a3:e1:52:94:8a: 6f:bc:4a:0b:e2:ee:39:28:eb:65:e1:52:61:db:fc:09:b3:59: b2:d1:4b:a1:6e:ad:3c:e2:86:85:b7:27:ae:e2:09:df:df:b5: 32:cb:80:98:a7:1e:a2:4a:70:ce:ba:6a:b4:d6:f6:36:bb:5c: 74:f0:f0:b5:35:35:00:d1:61:3f:d6:78:70:23:8a:b0:98:04: 4e:59:49:f6:95:79:1b:09:e5:b0:20:6a:8b:c7:2a:a5:bd:0f: eb:5e:0a:fc:8f:58:6b:27:cb:42:82:7a:34:6d:56:43:c8:4d: f2:c5:4e:ac:39:8a:d7:f7:b0:ee:df:a0:3a:d2:f7:c8:4a:21: b3:97:a8:08:f3:0e:61:7a:3d:78:d1:8b:e2:b2:ee:57:96:2b: 56:a7:52:51:2b:c5:2b:52:35:cd:1d:75:71:de:3a:d4:4c:0b: e7:f2:c2:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhoBY88MOFmUoacMefrkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGJmMjYwODgxOWYyNTU1MzRhMDc5NTY5NjA5OTUyMzk2MjQ1YTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aZ5Lg1PdLvajVmIjEUNpiw7Hn3h mlI1JLK7j2I/NGvTgfvRB1pOtRfIlvqwUpoysMqgY1Shlmg/drJdGxTP2nHbU7Nj R4/njCFFwYexAc7l0T0O4ub5NTpHLcGZR6/FBT7h7sc49lAJf1FoC3l4g+Ry0Qu9 hWKeEv2a1jV/wCnHD0bfybZU24B5FCp7EZnA1lhaJI9G1AL5JtsqPfI5BALonsbZ cn16OH791FX4wgQ+9yyU8nX0YqoTIrnPNtJ+bMmQh7gqDY7cJj+mrA2WnxycCASC aB/x+sQPYij92FfSVn9K98pylGThLF5MbMPZWMtFAA+DwaRjWB2okyHG3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2/JgiBnyVVNKB5VpYJlSOWJFojMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvRGI4bUNJR2ZKVlUwb0hsV2xnbVZJNVlrV2lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXerMA0G CSqGSIb3DQEBCwUAA4IBAQBIJWa14Et6vovkR47kyL5hzEHumufagitnJ1L+qxFW bL5Yb+Qj5X3MgVOFiS/Tv6tI4AjdE+34qJ+G3BEFxEa24uTZ/q2Znb48Ytg36XoM o7whuebuo+FSlIpvvEoL4u45KOtl4VJh2/wJs1my0Uuhbq084oaFtyeu4gnf37Uy y4CYpx6iSnDOumq01vY2u1x08PC1NTUA0WE/1nhwI4qwmAROWUn2lXkbCeWwIGqL xyqlvQ/rXgr8j1hrJ8tCgno0bVZDyE3yxU6sOYrX97Du36A60vfISiGzl6gI8w5h ej140Yvisu5XlitWp1JRK8UrUjXNHXVx3jrUTAvn8sIu -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:38 2026 by rpki-client