This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/DNPB7L1gjavjhiX4IdgkuencdVo.roa File: DNPB7L1gjavjhiX4IdgkuencdVo.roa (raw, json) Hash identifier: Ak2Mijqk6LpAh0/fChLnWhopf3Ex4RUgat42f1/E/Hc= Subject key identifier: 0C:D3:C1:EC:BD:60:8D:AB:E3:86:25:F8:21:D8:24:B9:E9:DC:75:5A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019B35F0A31B8F3FFA420BF0BA8334ACDC76 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/DNPB7L1gjavjhiX4IdgkuencdVo.roa Signing time: Fri 19 Dec 2025 09:28:41 +0000 ROA not before: Fri 19 Dec 2025 09:28:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42083 IP address blocks: 31.169.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:f0:a3:1b:8f:3f:fa:42:0b:f0:ba:83:34:ac:dc:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Dec 19 09:28:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0cd3c1ecbd608dabe38625f821d824b9e9dc755a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:ef:fa:5c:88:43:55:3f:17:7d:2b:ac:4a: 67:43:aa:c3:b6:a8:3c:2b:ca:f9:1e:f4:0d:6d:71: 5c:76:a5:12:62:12:65:f3:96:ea:f6:d7:8f:ff:58: 0f:88:ca:fe:3e:b2:6b:38:21:0b:81:1c:e0:65:e0: c3:49:c4:c7:35:63:55:ec:19:26:0f:8d:3a:23:6c: fc:65:4b:d3:d9:77:29:5c:22:ef:06:7a:eb:47:09: 5e:b6:93:a6:92:55:60:3d:e0:69:da:75:cf:18:ef: 18:f6:ad:c0:28:f0:1a:45:28:bd:7b:f8:ff:4a:0d: cf:28:53:13:84:5a:7d:10:5e:b3:4e:98:b2:2a:b8: ae:8e:11:fb:6e:bd:6a:0b:0f:1f:41:77:b0:0d:ec: 7b:df:7e:57:cd:8a:34:59:a8:67:3f:f8:62:e3:73: e5:c9:04:33:f0:bc:2a:44:04:0b:de:c6:87:52:e7: d6:64:87:44:71:e6:7f:21:d6:d8:1f:9f:65:bf:3a: e4:50:1d:f1:03:fb:cf:e1:d4:3e:30:70:61:ab:1f: 0f:f2:d0:e7:7a:93:3c:78:ca:ac:37:50:c0:ee:d5: 6b:b0:15:08:9d:5a:bf:c5:db:0a:7e:38:af:6b:77: ed:a9:f2:13:24:df:46:c3:9f:e2:85:34:26:cf:e9: 7a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D3:C1:EC:BD:60:8D:AB:E3:86:25:F8:21:D8:24:B9:E9:DC:75:5A X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/DNPB7L1gjavjhiX4IdgkuencdVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.86.0/24 Signature Algorithm: sha256WithRSAEncryption 14:07:26:25:c3:50:65:2f:2b:fa:fb:b7:65:21:65:62:60:21: 34:08:c0:9c:fc:a9:66:c5:52:df:b0:ad:a0:9a:fa:d8:2b:d8: 09:5c:2a:6f:bf:4f:19:9e:cb:4a:9c:8a:f5:c3:d3:74:47:e9: ff:68:38:c0:51:a5:ab:4f:80:36:d9:b5:05:c2:17:f9:83:e9: 41:a4:e8:7e:95:8e:3b:6b:da:cd:e8:75:f9:24:02:2c:9a:22: 6c:0a:bb:07:99:49:01:0e:a9:ad:75:ae:0c:59:b2:ed:fd:ba: 05:68:d6:35:eb:72:c1:d5:36:95:92:b3:f5:f9:d4:d4:96:9c: ff:5c:80:b0:9b:f5:02:bd:73:71:d0:72:3f:d0:0a:a4:94:60: a0:04:0c:bd:e9:41:41:e0:31:4d:05:bf:b0:d5:83:52:00:25: 2d:fa:a2:07:81:7f:e9:ca:78:0a:3f:c5:6f:7c:a1:18:7f:df: 4e:6c:c1:95:b7:ca:05:5e:86:0a:cc:81:7a:fa:87:65:d2:39: 46:09:2b:f9:f1:74:f2:dd:8a:7e:de:93:7a:1d:36:fa:3b:6d: 24:28:6d:8b:47:fc:f4:00:d0:51:29:ec:fe:8a:ee:3d:3d:c0: 05:fd:ec:88:bc:37:c5:84:67:4a:22:38:57:85:1a:5d:dd:a2: 02:7e:85:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs18KMbjz/6QgvwuoM0rNx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjUxMjE5MDkyODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2QzYzFlY2JkNjA4ZGFiZTM4NjI1ZjgyMWQ4MjRiOWU5ZGM3NTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLzv+lyIQ1U/F30rrEpnQ6rDtqg8 K8r5HvQNbXFcdqUSYhJl85bq9teP/1gPiMr+PrJrOCELgRzgZeDDScTHNWNV7Bkm D406I2z8ZUvT2XcpXCLvBnrrRwletpOmklVgPeBp2nXPGO8Y9q3AKPAaRSi9e/j/ Sg3PKFMThFp9EF6zTpiyKriujhH7br1qCw8fQXewDex7335XzYo0WahnP/hi43Pl yQQz8LwqRAQL3saHUufWZIdEceZ/IdbYH59lvzrkUB3xA/vP4dQ+MHBhqx8P8tDn epM8eMqsN1DA7tVrsBUInVq/xdsKfjiva3ftqfITJN9Gw5/ihTQmz+l64wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzTwey9YI2r44Yl+CHYJLnp3HVaMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvRE5QQjdMMWdqYXZqaGlYNElkZ2t1ZW5jZFZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6lWMA0G CSqGSIb3DQEBCwUAA4IBAQAUByYlw1BlLyv6+7dlIWViYCE0CMCc/KlmxVLfsK2g mvrYK9gJXCpvv08ZnstKnIr1w9N0R+n/aDjAUaWrT4A22bUFwhf5g+lBpOh+lY47 a9rN6HX5JAIsmiJsCrsHmUkBDqmtda4MWbLt/boFaNY163LB1TaVkrP1+dTUlpz/ XICwm/UCvXNx0HI/0AqklGCgBAy96UFB4DFNBb+w1YNSACUt+qIHgX/pyngKP8Vv fKEYf99ObMGVt8oFXoYKzIF6+odl0jlGCSv58XTy3Yp+3pN6HTb6O20kKG2LR/z0 ANBRKez+iu49PcAF/eyIvDfFhGdKIjhXhRpd3aICfoWY -----END CERTIFICATE-----Generated at Sat Dec 20 15:38:23 2025 by rpki-client