This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DRb-ZMS5J0Q_TTx4eis7-2HtcTw.roa File: DRb-ZMS5J0Q_TTx4eis7-2HtcTw.roa (raw, json) Hash identifier: qm8EdMZTEmvHrteBaIxSGsnLqly9d6WL4tM5m5uTTAY= Subject key identifier: 0D:16:FE:64:C4:B9:27:44:3F:4D:3C:78:7A:2B:3B:FB:61:ED:71:3C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D64528492437784DB15833E607502 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DRb-ZMS5J0Q_TTx4eis7-2HtcTw.roa Signing time: Fri 02 Jan 2026 06:20:31 +0000 ROA not before: Fri 02 Jan 2026 06:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213539 IP address blocks: 93.88.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:64:52:84:92:43:77:84:db:15:83:3e:60:75:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d16fe64c4b927443f4d3c787a2b3bfb61ed713c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:23:9d:55:12:3b:3c:24:50:f8:91:1e:85: 10:58:b4:ad:95:80:9e:60:e2:b0:3b:9f:db:69:00: e1:04:a6:46:fe:63:94:c3:43:18:34:00:27:85:84: 3b:ff:f3:b9:be:ae:27:c6:97:50:e8:9e:9e:3a:6e: dd:8a:0f:8a:29:7d:92:f6:9a:a2:43:d7:1b:de:5e: c7:b8:f2:79:2b:ba:4d:86:12:fc:4a:c0:31:7e:fc: 98:b1:7b:5f:13:68:a6:a0:6e:61:7e:b6:3e:ed:e4: 6f:e0:bb:9f:14:46:f4:1e:55:71:36:3e:e3:30:64: 61:b0:88:b7:0f:bb:17:b3:81:14:c4:8c:02:8a:0a: e6:39:ce:1a:9b:02:ed:74:9c:47:74:7d:1b:ab:f2: f9:f3:10:3b:36:c6:ea:df:3e:9c:60:67:ee:eb:eb: ec:b3:25:55:43:b3:45:2f:43:65:5f:3c:6f:a7:d2: 35:c9:57:0e:d7:a9:67:e1:15:8f:69:44:2c:ba:fb: 2e:79:4e:cb:b2:0d:34:fb:3d:48:b5:9d:49:68:75: 37:6f:2f:9d:f8:9c:d1:ff:6a:bf:f0:96:88:9d:6b: 59:04:c3:9f:3e:14:ed:35:d5:19:f5:26:a7:e7:ee: 39:43:41:05:45:90:94:5c:5c:e4:47:17:ef:95:50: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:16:FE:64:C4:B9:27:44:3F:4D:3C:78:7A:2B:3B:FB:61:ED:71:3C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DRb-ZMS5J0Q_TTx4eis7-2HtcTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.202.0/24 Signature Algorithm: sha256WithRSAEncryption 58:1d:86:44:1e:c2:89:9e:7b:dd:0c:e1:a9:5c:fb:c5:95:08: c0:67:cc:f9:a3:a7:f4:e6:2e:de:8a:c5:62:02:ff:e1:58:0b: 17:80:3f:27:10:97:8e:97:6c:90:bb:7a:83:27:16:e4:70:d2: d4:9b:92:4d:2c:de:13:f7:be:5d:9b:21:b3:f5:19:17:0f:99: 6c:b0:6b:24:d7:bd:da:88:2a:be:e8:ae:ed:61:16:ec:be:9e: 32:bb:c9:97:d4:8c:1f:39:76:6a:f1:86:8f:bc:8d:7f:62:a7: 7e:29:49:df:d4:b9:a8:8d:f6:1d:84:9d:ce:0b:81:0f:af:15: cc:81:8e:6e:9a:99:86:c8:94:19:31:7b:cc:c2:27:ae:05:77: 66:cf:cc:5c:33:79:e8:fe:1e:2c:34:4f:04:8a:28:ea:54:60: 47:f7:d6:f7:27:42:0d:78:ad:b1:ce:c9:9e:64:b5:20:2b:f9: a8:aa:bf:31:2b:3a:a0:cb:f1:d2:02:4f:66:22:14:f6:db:c9: 32:c2:f6:9a:db:14:e7:91:6e:c1:e6:b3:83:8a:4c:d9:b0:e4: 71:1e:57:86:ea:c1:54:89:86:20:eb:af:ad:e6:8e:d3:c6:88: 83:b4:db:d7:33:e0:d5:ff:98:53:60:58:77:dc:d3:f2:e6:d6: b7:37:1e:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XWRShJJDd4TbFYM+YHUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDE2ZmU2NGM0YjkyNzQ0M2Y0ZDNjNzg3YTJiM2JmYjYxZWQ3MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsawjnVUSOzwkUPiRHoUQWLStlYCe YOKwO5/baQDhBKZG/mOUw0MYNAAnhYQ7//O5vq4nxpdQ6J6eOm7dig+KKX2S9pqi Q9cb3l7HuPJ5K7pNhhL8SsAxfvyYsXtfE2imoG5hfrY+7eRv4LufFEb0HlVxNj7j MGRhsIi3D7sXs4EUxIwCigrmOc4amwLtdJxHdH0bq/L58xA7Nsbq3z6cYGfu6+vs syVVQ7NFL0NlXzxvp9I1yVcO16ln4RWPaUQsuvsueU7Lsg00+z1ItZ1JaHU3by+d +JzR/2q/8JaInWtZBMOfPhTtNdUZ9San5+45Q0EFRZCUXFzkRxfvlVDkHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0W/mTEuSdEP008eHorO/th7XE8MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRFJiLVpNUzVKMFFfVFR4NGVpczctMkh0Y1R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVjKMA0G CSqGSIb3DQEBCwUAA4IBAQBYHYZEHsKJnnvdDOGpXPvFlQjAZ8z5o6f05i7eisVi Av/hWAsXgD8nEJeOl2yQu3qDJxbkcNLUm5JNLN4T975dmyGz9RkXD5lssGsk173a iCq+6K7tYRbsvp4yu8mX1IwfOXZq8YaPvI1/Yqd+KUnf1LmojfYdhJ3OC4EPrxXM gY5umpmGyJQZMXvMwieuBXdmz8xcM3no/h4sNE8EiijqVGBH99b3J0INeK2xzsme ZLUgK/moqr8xKzqgy/HSAk9mIhT228kywvaa2xTnkW7B5rODikzZsORxHleG6sFU iYYg66+t5o7TxoiDtNvXM+DV/5hTYFh33NPy5ta3Nx40 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:55 2026 by rpki-client