This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/r0DKP13mPB-xssYLayXGx9SRXqU.roa File: r0DKP13mPB-xssYLayXGx9SRXqU.roa (raw, json) Hash identifier: NgBO3Fd7UXEUj0OE/dq4bFMuMpxXZFFmnu/MxIzs/t0= Subject key identifier: AF:40:CA:3F:5D:E6:3C:1F:B1:B2:C6:0B:6B:25:C6:C7:D4:91:5E:A5 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3615E34E3D7198D58F8109D042D1AA Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/r0DKP13mPB-xssYLayXGx9SRXqU.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212929 IP address blocks: 93.115.40.0/24 maxlen: 24 93.115.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:15:e3:4e:3d:71:98:d5:8f:81:09:d0:42:d1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af40ca3f5de63c1fb1b2c60b6b25c6c7d4915ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:f5:02:a3:e6:3c:64:0b:fd:95:22:dd:a0: d9:e8:a0:2d:38:8f:7f:7b:24:c3:61:20:c5:8e:d5: 6b:2d:be:0c:bf:29:9a:c6:94:2e:a1:e4:c2:43:f5: 66:20:69:a9:c9:09:40:b7:55:8b:4e:64:ba:75:63: 1e:b5:b8:8f:a3:1c:c3:3a:06:c8:98:6a:5f:64:44: 9b:7e:d1:4a:fb:3f:a6:cf:49:07:44:a8:5a:c7:57: 6b:00:4e:e2:31:09:cb:58:66:f5:6e:79:c2:7f:d3: d3:9e:92:8b:0b:d1:db:f4:ae:df:32:c7:ec:92:f9: c1:7e:9a:73:fa:9a:4e:b2:d8:83:6c:48:5f:c5:b2: e5:70:ae:a0:ab:96:df:61:22:9f:52:ca:b6:56:17: d0:1f:0b:b0:a8:68:e0:1a:bd:ed:82:11:b5:89:1b: 78:f5:63:03:92:64:7a:60:ad:2c:e1:f9:a5:4a:7e: e3:3a:05:aa:ba:cd:7c:e5:51:20:97:01:98:4e:b5: e9:a1:19:09:6e:34:6c:9c:dd:f6:99:6c:8e:97:06: ff:fa:b7:f3:8e:9d:5e:3e:1d:b5:4a:77:48:48:55: 53:83:59:18:d0:f3:18:d1:f1:34:89:a5:6a:c1:82: cc:9c:d3:74:d9:2f:6f:a4:73:66:7b:e9:91:e3:8e: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:40:CA:3F:5D:E6:3C:1F:B1:B2:C6:0B:6B:25:C6:C7:D4:91:5E:A5 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/r0DKP13mPB-xssYLayXGx9SRXqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.115.40.0/23 Signature Algorithm: sha256WithRSAEncryption 50:cc:3a:f4:21:5a:26:0d:f8:2a:5b:e5:e6:50:ad:a7:26:b7: ed:40:35:9b:29:7f:af:98:77:07:67:68:f9:f0:15:24:f5:38: 78:97:b9:78:2e:54:60:a3:67:a9:6a:7d:7a:81:55:7c:20:29: bf:0b:03:fd:32:ae:d7:10:51:3b:82:90:d6:77:70:69:10:90: b4:62:bf:5d:49:31:a6:e3:e3:ef:78:c5:11:dd:8b:13:40:94: 91:28:b8:c9:da:f5:ca:ed:ce:34:ee:b6:f7:40:76:76:64:e9: 13:00:49:22:62:21:c7:c5:ee:1e:0f:da:7f:9d:61:09:0c:a7: 2a:83:1f:c9:3a:83:f0:e8:b0:9e:51:69:46:7d:3e:45:d4:53: 41:f1:fc:38:54:c5:c8:2a:88:a9:d7:ba:7b:9a:fd:3b:21:b4: 79:fe:c6:db:67:25:3d:ab:32:28:34:f3:3b:c1:73:68:51:06: 69:de:66:ae:f9:d5:32:c9:e9:54:58:dd:90:31:f3:d1:c7:e4: ea:a1:83:5b:31:d9:e6:a4:09:ba:81:86:4d:7d:19:5e:6d:20: e5:52:d4:42:2e:4a:f3:bd:e7:11:5f:a4:02:b7:e3:b5:82:8d: 14:ab:5f:30:41:76:06:65:18:46:3e:ed:70:79:e8:d8:84:e4: 67:70:28:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhXjTj1xmNWPgQnQQtGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjQwY2EzZjVkZTYzYzFmYjFiMmM2MGI2YjI1YzZjN2Q0OTE1ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDD1AqPmPGQL/ZUi3aDZ6KAtOI9/ eyTDYSDFjtVrLb4MvymaxpQuoeTCQ/VmIGmpyQlAt1WLTmS6dWMetbiPoxzDOgbI mGpfZESbftFK+z+mz0kHRKhax1drAE7iMQnLWGb1bnnCf9PTnpKLC9Hb9K7fMsfs kvnBfppz+ppOstiDbEhfxbLlcK6gq5bfYSKfUsq2VhfQHwuwqGjgGr3tghG1iRt4 9WMDkmR6YK0s4fmlSn7jOgWqus185VEglwGYTrXpoRkJbjRsnN32mWyOlwb/+rfz jp1ePh21SndISFVTg1kY0PMY0fE0iaVqwYLMnNN02S9vpHNme+mR445r1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9Ayj9d5jwfsbLGC2slxsfUkV6lMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvcjBES1AxM21QQi14c3NZTGF5WEd4OVNSWHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXXMoMA0G CSqGSIb3DQEBCwUAA4IBAQBQzDr0IVomDfgqW+XmUK2nJrftQDWbKX+vmHcHZ2j5 8BUk9Th4l7l4LlRgo2epan16gVV8ICm/CwP9Mq7XEFE7gpDWd3BpEJC0Yr9dSTGm 4+PveMUR3YsTQJSRKLjJ2vXK7c407rb3QHZ2ZOkTAEkiYiHHxe4eD9p/nWEJDKcq gx/JOoPw6LCeUWlGfT5F1FNB8fw4VMXIKoip17p7mv07IbR5/sbbZyU9qzIoNPM7 wXNoUQZp3mau+dUyyelUWN2QMfPRx+TqoYNbMdnmpAm6gYZNfRlebSDlUtRCLkrz vecRX6QCt+O1go0Uq18wQXYGZRhGPu1weejYhORncCgL -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:36 2026 by rpki-client