This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/DE55FjmHnYMUufPcVQkSgEdNQF0.roa File: DE55FjmHnYMUufPcVQkSgEdNQF0.roa (raw, json) Hash identifier: sZ+5mTZ98nXRCWaNrvUzsUkg+0v1Fty74PKR7nx8ZI0= Subject key identifier: 0C:4E:79:16:39:87:9D:83:14:B9:F3:DC:55:09:12:80:47:4D:40:5D Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Certificate serial: 019B7F80B23CE74356B088155ED469D4E95B Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/DE55FjmHnYMUufPcVQkSgEdNQF0.roa Signing time: Fri 02 Jan 2026 16:18:19 +0000 ROA not before: Fri 02 Jan 2026 16:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207773 IP address blocks: 185.98.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b2:3c:e7:43:56:b0:88:15:5e:d4:69:d4:e9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Validity Not Before: Jan 2 16:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c4e791639879d8314b9f3dc55091280474d405d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:6d:ba:f8:7a:b6:d5:86:12:6f:b4:b9:0e: 2e:ca:7f:e6:88:0c:58:1d:db:4f:ad:4a:ba:1b:a2: 2a:49:da:ab:fd:95:7c:e7:e6:eb:d1:ba:fe:bf:46: 09:ea:8f:b0:93:2f:bf:e7:16:b8:46:8e:dd:6b:22: 2b:9b:9f:b9:8d:ac:63:21:e1:3a:03:28:de:bd:4c: ac:15:ce:c3:af:c2:dc:86:42:00:b2:fd:af:73:bf: d7:d0:d0:cf:ea:b2:24:88:61:1e:3b:ea:e7:0b:1f: fd:05:ae:e1:c0:a0:06:b2:35:b2:19:64:31:d1:54: d4:d3:d5:03:00:c3:90:e9:64:88:57:b7:19:4c:4f: e4:3c:72:aa:c7:06:1d:a7:e8:0b:e7:75:20:e8:4b: 37:b0:54:72:3c:f2:86:62:0c:1f:98:bd:8e:9d:be: b6:1c:37:3f:ed:0b:99:7e:63:84:f5:30:12:3c:63: d6:dd:4d:70:2f:9e:2e:6c:60:75:0c:00:1b:7e:aa: 35:c3:fe:8b:a2:d8:3b:8e:f0:d7:84:8f:a6:97:34: 37:51:1d:69:ed:6e:55:07:02:7c:56:b5:61:43:2b: d7:45:eb:19:ac:73:26:ed:40:82:fd:88:a7:20:6b: d5:0d:f0:18:79:f1:d8:4c:b3:a2:65:c2:f2:c3:dd: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4E:79:16:39:87:9D:83:14:B9:F3:DC:55:09:12:80:47:4D:40:5D X509v3 Authority Key Identifier: keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/DE55FjmHnYMUufPcVQkSgEdNQF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.15.0/24 Signature Algorithm: sha256WithRSAEncryption 19:50:b2:af:0e:72:00:02:11:0a:4e:f5:37:5d:53:d2:aa:60: 60:2a:c9:fd:8c:a8:0b:21:ef:b5:0c:f7:b0:66:bd:c2:a5:c0: f5:18:f4:42:bf:ab:03:72:89:af:03:4c:fc:f6:22:0c:20:47: 11:4e:70:f8:83:22:48:54:9b:03:a2:b0:45:ed:80:82:f1:08: a8:18:4f:aa:e9:4f:68:bf:76:a9:ba:dc:ef:24:c5:9d:e6:43: 37:40:10:50:e0:7a:21:09:bd:03:b8:83:8d:d5:23:b3:03:b2: a7:f3:b0:a7:71:59:f4:f2:fe:04:ff:67:ec:df:a2:ac:69:d4: 1e:0d:df:f4:9e:37:6b:59:e1:96:ae:3f:2b:9f:2c:74:91:51: a5:eb:a9:7f:68:88:38:ff:65:2f:3a:07:5a:51:40:fb:c5:4e: 58:d0:5d:ad:dd:ba:3d:0c:40:9c:d5:29:ca:b5:ac:d1:5d:6b: ee:4a:e1:d1:00:2a:08:b4:c0:75:be:70:cd:b1:84:03:a7:34: d5:99:05:21:7e:08:d4:fd:45:cd:e0:63:bf:79:a6:fc:ee:2e: 84:7b:94:1b:a2:c1:09:a9:ad:f3:8b:68:00:f8:16:1f:72:76: de:29:ac:2e:57:ee:30:e4:41:a2:65:82:e4:ac:3d:33:44:77: 26:2e:45:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gLI850NWsIgVXtRp1OlbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz YTQxZjgwHhcNMjYwMTAyMTYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzRlNzkxNjM5ODc5ZDgzMTRiOWYzZGM1NTA5MTI4MDQ3NGQ0MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryVtuvh6ttWGEm+0uQ4uyn/miAxY HdtPrUq6G6IqSdqr/ZV85+br0br+v0YJ6o+wky+/5xa4Ro7dayIrm5+5jaxjIeE6 AyjevUysFc7Dr8LchkIAsv2vc7/X0NDP6rIkiGEeO+rnCx/9Ba7hwKAGsjWyGWQx 0VTU09UDAMOQ6WSIV7cZTE/kPHKqxwYdp+gL53Ug6Es3sFRyPPKGYgwfmL2Onb62 HDc/7QuZfmOE9TASPGPW3U1wL54ubGB1DAAbfqo1w/6Lotg7jvDXhI+mlzQ3UR1p 7W5VBwJ8VrVhQyvXResZrHMm7UCC/YinIGvVDfAYefHYTLOiZcLyw91I2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAxOeRY5h52DFLnz3FUJEoBHTUBdMB8GA1UdIwQY MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt MjMwZmRhNjZhYmNiLzEvREU1NUZqbUhuWU1VdWZQY1ZRa1NnRWROUUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWIPMA0G CSqGSIb3DQEBCwUAA4IBAQAZULKvDnIAAhEKTvU3XVPSqmBgKsn9jKgLIe+1DPew Zr3CpcD1GPRCv6sDcomvA0z89iIMIEcRTnD4gyJIVJsDorBF7YCC8QioGE+q6U9o v3aputzvJMWd5kM3QBBQ4HohCb0DuION1SOzA7Kn87CncVn08v4E/2fs36KsadQe Dd/0njdrWeGWrj8rnyx0kVGl66l/aIg4/2UvOgdaUUD7xU5Y0F2t3bo9DECc1SnK tazRXWvuSuHRACoItMB1vnDNsYQDpzTVmQUhfgjU/UXN4GO/eab87i6Ee5QbosEJ qa3zi2gA+BYfcnbeKawuV+4w5EGiZYLkrD0zRHcmLkWa -----END CERTIFICATE-----Generated at Fri Jan 9 15:56:28 2026 by rpki-client