This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/Dib_4B7-59g2qlFon4U52XelorA.roa File: Dib_4B7-59g2qlFon4U52XelorA.roa (raw, json) Hash identifier: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY= Subject key identifier: 0E:26:FF:E0:1E:FE:E7:D8:36:AA:51:68:9F:85:39:D9:77:A5:A2:B0 Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019B7EA6A0FE1F3EB0B850B9537EBFAD4FB4 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/Dib_4B7-59g2qlFon4U52XelorA.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14288 IP address blocks: 157.23.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a0:fe:1f:3e:b0:b8:50:b9:53:7e:bf:ad:4f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e26ffe01efee7d836aa51689f8539d977a5a2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:79:5c:8c:e4:56:1c:2b:0c:62:0a:b9:2d: 5d:d3:40:fb:b2:57:fe:00:ce:1a:e0:b0:1d:ca:d2: 93:25:aa:78:58:97:c6:67:cb:f6:a5:3d:a2:3b:81: 50:9b:d3:bf:bc:71:06:f4:08:e8:dc:72:09:54:d1: d5:ca:91:87:ec:83:1a:11:70:da:5d:f7:e4:d9:d9: f5:dc:16:73:46:fa:eb:b2:4b:1c:7a:6d:6b:97:aa: 4f:70:1e:0f:21:75:f7:70:da:4a:8d:25:3e:26:7f: d4:86:53:e0:3e:14:03:c0:f5:2a:ee:74:20:67:6b: 15:6e:e2:cb:e2:d8:cf:d7:d9:05:7f:d7:7b:88:bd: f7:74:4b:10:98:8c:fc:6f:2f:21:01:3d:98:e4:26: 28:69:b5:1a:dc:89:cf:ee:e8:d6:bb:9f:a0:ac:da: 55:2d:ac:18:8f:76:c4:fa:8a:b7:16:5a:a8:c9:3b: 6b:fd:be:19:28:df:ae:0a:27:61:e1:88:81:21:09: bc:7e:67:ff:77:a9:a7:ab:b9:fa:0d:fe:72:d6:ee: d9:bf:e0:65:8b:b0:d5:8a:7e:f5:da:8f:55:42:68: 5e:97:65:90:47:c3:49:1c:84:2c:5f:9b:a4:7c:6e: 2d:68:da:79:cf:7f:b4:57:20:73:d1:4c:a3:8f:25: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:26:FF:E0:1E:FE:E7:D8:36:AA:51:68:9F:85:39:D9:77:A5:A2:B0 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/Dib_4B7-59g2qlFon4U52XelorA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.23.249.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:da:e2:4b:9d:9e:3a:14:0b:f1:13:00:4b:48:ee:c4:4f:5d: 45:56:51:57:48:93:63:eb:c1:98:0c:ad:3e:31:6f:6c:bb:c7: 4e:ea:2b:24:2e:0a:96:45:3a:db:84:ff:97:b3:2a:e7:c8:28: b3:da:16:86:74:ef:27:d1:c7:09:3d:0d:a2:bc:b6:77:3d:c6: b3:f0:6e:7e:1d:d6:64:c4:80:7b:f7:88:63:5a:5e:d3:c2:dd: e7:c0:a8:05:df:17:67:6b:07:9a:fd:e8:fd:e7:63:f4:75:0e: cb:99:d6:6b:b3:ea:41:10:da:7a:95:c9:62:ce:ab:0e:4b:73: 66:2c:12:27:aa:5b:c2:4c:b0:74:53:82:32:c9:dd:5b:7e:1f: 53:84:f2:fa:8b:44:f7:0b:bb:1b:81:bc:ed:26:a6:c8:64:e1: a2:e8:17:b4:e2:e2:ec:fe:fa:ff:74:6c:05:1d:b1:bf:2c:3e: 53:d5:d7:fd:8e:2d:0f:44:a5:e0:56:f3:13:29:77:91:1b:f2: ec:09:f0:90:cc:9f:85:7c:94:f8:cb:60:6b:a2:f6:4f:53:95: fa:31:ec:2b:14:23:db:de:84:97:06:9b:57:01:fc:12:e3:0b: e9:04:c7:e9:cb:3f:2f:34:2e:7f:56:9e:93:63:2b:a3:81:9f: 72:3d:51:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqD+Hz6wuFC5U36/rU+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTI2ZmZlMDFlZmVlN2Q4MzZhYTUxNjg5Zjg1MzlkOTc3YTVhMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zB5XIzkVhwrDGIKuS1d00D7slf+ AM4a4LAdytKTJap4WJfGZ8v2pT2iO4FQm9O/vHEG9Ajo3HIJVNHVypGH7IMaEXDa Xffk2dn13BZzRvrrskscem1rl6pPcB4PIXX3cNpKjSU+Jn/UhlPgPhQDwPUq7nQg Z2sVbuLL4tjP19kFf9d7iL33dEsQmIz8by8hAT2Y5CYoabUa3InP7ujWu5+grNpV LawYj3bE+oq3FlqoyTtr/b4ZKN+uCidh4YiBIQm8fmf/d6mnq7n6Df5y1u7Zv+Bl i7DVin712o9VQmhel2WQR8NJHIQsX5ukfG4taNp5z3+0VyBz0UyjjyXOMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4m/+Ae/ufYNqpRaJ+FOdl3paKwMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvRGliXzRCNy01OWcycWxGb240VTUyWGVsb3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRf5MA0G CSqGSIb3DQEBCwUAA4IBAQAs2uJLnZ46FAvxEwBLSO7ET11FVlFXSJNj68GYDK0+ MW9su8dO6iskLgqWRTrbhP+XsyrnyCiz2haGdO8n0ccJPQ2ivLZ3Pcaz8G5+HdZk xIB794hjWl7Twt3nwKgF3xdnawea/ej952P0dQ7LmdZrs+pBENp6lclizqsOS3Nm LBInqlvCTLB0U4Iyyd1bfh9ThPL6i0T3C7sbgbztJqbIZOGi6Be04uLs/vr/dGwF HbG/LD5T1df9ji0PRKXgVvMTKXeRG/LsCfCQzJ+FfJT4y2BrovZPU5X6MewrFCPb 3oSXBptXAfwS4wvpBMfpyz8vNC5/Vp6TYyujgZ9yPVEz -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:32 2026 by rpki-client