This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa File: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (raw, json) Hash identifier: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg= Subject key identifier: 0D:B6:DC:34:FB:43:7C:BE:FE:81:A8:2D:27:56:B4:13:27:35:67:F0 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3E1262A7C4A081637669839A164A4 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 178.17.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e1:26:2a:7c:4a:08:16:37:66:98:39:a1:64:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0db6dc34fb437cbefe81a82d2756b413273567f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:0c:fc:9e:04:a4:4b:93:6f:0e:3d:ab:22: 04:21:a4:da:12:fd:39:26:31:33:34:77:c7:73:f5: e6:20:04:dd:db:97:ad:df:11:71:52:81:ef:76:50: 0a:6f:0e:88:d1:82:fe:da:56:c3:96:db:31:f1:55: 6f:85:8d:b8:c1:a8:59:46:e9:70:e7:8c:2e:ea:be: a5:de:d5:aa:41:b1:1c:2a:03:a4:ca:43:d7:f7:9b: 8f:1d:e9:f7:b0:b1:8b:b8:71:22:4b:a4:20:71:71: f2:64:1f:19:f0:d1:81:87:b2:43:cf:ad:4e:22:1e: b6:86:55:dc:58:8b:94:0b:1e:5e:16:18:bd:c2:04: 45:d0:34:9f:08:08:6d:37:21:4a:2a:06:b4:16:96: 00:ae:db:be:f5:ae:45:ec:b1:46:af:6f:c7:38:7c: 59:33:c0:14:6b:20:3c:16:d0:fe:9c:63:de:0a:41: 9a:60:7e:75:0b:3f:9b:aa:f1:40:f5:e1:3b:ba:22: 60:2e:51:ab:66:b0:42:30:ba:a7:8b:01:bf:6c:5a: 9c:41:96:7d:1a:48:3e:42:c8:26:a9:38:9e:b5:f9: 11:60:cf:d1:cb:fd:c5:eb:f0:92:e6:2d:56:8c:f3: e2:b2:b2:e2:7c:50:f8:04:44:ba:8a:c2:22:0e:f8: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B6:DC:34:FB:43:7C:BE:FE:81:A8:2D:27:56:B4:13:27:35:67:F0 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.17.62.0/24 Signature Algorithm: sha256WithRSAEncryption 46:77:3d:4a:01:65:8d:75:2a:a9:c8:5e:a9:0f:3d:c0:81:5f: f1:d3:26:e3:1c:ac:c3:02:0a:54:df:19:f1:2d:d4:b7:6e:f3: 78:84:fe:61:2e:d3:52:b1:f3:c6:1a:ac:3e:f7:eb:2b:0d:7d: e2:5c:9b:ca:05:bd:e6:fa:64:fe:34:47:2a:f8:28:75:58:b2: 0b:b7:e9:fd:12:d1:09:36:82:e7:1c:6a:98:25:9c:3a:7e:a7: 0b:9d:25:79:34:82:ca:a2:2c:7d:be:9b:2b:cc:9d:7f:05:8c: 6f:8c:75:d7:a8:f9:e1:70:24:1f:f6:2d:01:51:08:0c:3d:18: 82:57:7b:0b:bb:2b:5d:af:5c:08:2c:86:d3:f5:38:ce:27:bb: 21:ce:da:f6:13:82:34:3f:8e:bd:db:e8:00:9d:81:b4:38:7c: f7:54:62:db:92:91:02:c9:f1:72:1d:19:0b:b7:cd:44:0e:e4: 4d:8c:99:25:86:57:59:35:c2:26:61:a7:30:a2:fd:83:06:ba: 72:a3:21:85:31:7b:ae:d7:23:33:b3:7b:4c:e3:c4:2c:35:93: e6:c8:22:c4:6f:97:fc:99:0d:91:d8:c8:95:56:9e:4e:12:3f: 1c:f6:d0:55:4a:b9:82:e6:8b:c2:be:59:51:11:b7:86:4e:cc: a0:8d:19:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+EmKnxKCBY3Zpg5oWSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGI2ZGMzNGZiNDM3Y2JlZmU4MWE4MmQyNzU2YjQxMzI3MzU2N2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVAM/J4EpEuTbw49qyIEIaTaEv05 JjEzNHfHc/XmIATd25et3xFxUoHvdlAKbw6I0YL+2lbDltsx8VVvhY24wahZRulw 54wu6r6l3tWqQbEcKgOkykPX95uPHen3sLGLuHEiS6QgcXHyZB8Z8NGBh7JDz61O Ih62hlXcWIuUCx5eFhi9wgRF0DSfCAhtNyFKKga0FpYArtu+9a5F7LFGr2/HOHxZ M8AUayA8FtD+nGPeCkGaYH51Cz+bqvFA9eE7uiJgLlGrZrBCMLqniwG/bFqcQZZ9 Gkg+QsgmqTietfkRYM/Ry/3F6/CS5i1WjPPisrLifFD4BES6isIiDviXswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA223DT7Q3y+/oGoLSdWtBMnNWfwMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvRGJiY05QdERmTDctZ2FndEoxYTBFeWMxWl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshE+MA0G CSqGSIb3DQEBCwUAA4IBAQBGdz1KAWWNdSqpyF6pDz3AgV/x0ybjHKzDAgpU3xnx LdS3bvN4hP5hLtNSsfPGGqw+9+srDX3iXJvKBb3m+mT+NEcq+Ch1WLILt+n9EtEJ NoLnHGqYJZw6fqcLnSV5NILKoix9vpsrzJ1/BYxvjHXXqPnhcCQf9i0BUQgMPRiC V3sLuytdr1wILIbT9TjOJ7shztr2E4I0P4692+gAnYG0OHz3VGLbkpECyfFyHRkL t81EDuRNjJklhldZNcImYacwov2DBrpyoyGFMXuu1yMzs3tM48QsNZPmyCLEb5f8 mQ2R2MiVVp5OEj8c9tBVSrmC5ovCvllREbeGTsygjRki -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:41 2026 by rpki-client