This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/D_vjqcKu-RrA1L9-NPBKRQy6u2w.roa File: D_vjqcKu-RrA1L9-NPBKRQy6u2w.roa (raw, json) Hash identifier: +7JpMBrIwFcMPab0ahGtI2QPpD0AvXli50PzvLVY2SU= Subject key identifier: 0F:FB:E3:A9:C2:AE:F9:1A:C0:D4:BF:7E:34:F0:4A:45:0C:BA:BB:6C Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7BA45E67AFC3D4B7AFC99D4559E822D1 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/D_vjqcKu-RrA1L9-NPBKRQy6u2w.roa Signing time: Thu 01 Jan 2026 22:18:48 +0000 ROA not before: Thu 01 Jan 2026 22:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214783 IP address blocks: 45.154.33.0/24 maxlen: 32 86.105.224.0/24 maxlen: 24 146.19.172.0/24 maxlen: 24 185.234.13.0/24 maxlen: 24 2a11:1400:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:5e:67:af:c3:d4:b7:af:c9:9d:45:59:e8:22:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 1 22:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ffbe3a9c2aef91ac0d4bf7e34f04a450cbabb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:76:73:e9:2b:2f:87:87:e6:6e:b4:cc:79: 1b:28:35:4e:4b:ba:a4:e4:a3:c8:96:8d:2c:7e:6d: 6c:4f:05:90:c6:c3:de:d6:11:c9:06:49:e1:73:79: 31:a2:8c:47:b7:2a:ff:a9:56:25:4c:1a:00:e7:00: 6d:cd:34:42:e2:fe:da:0c:b1:ff:b8:60:a9:64:d8: 0d:91:2e:2d:cf:98:de:70:92:f0:6f:c8:47:dc:02: e1:2e:64:7c:f2:40:68:9e:d5:b2:01:f7:b0:d3:c9: 60:d3:e3:0c:11:61:28:fd:4b:0d:34:c5:1e:18:82: d3:79:86:31:9d:7f:ae:b6:6c:3f:2a:39:50:db:0f: f3:df:a9:88:d8:f9:86:58:87:3c:e3:72:ef:73:14: ee:2d:be:16:b5:0d:5d:d4:d2:e4:f5:b1:9a:f3:51: af:38:c8:83:73:8a:c7:76:4e:94:18:f1:22:9f:18: 45:fb:9b:ae:41:34:7d:b9:e7:6b:ab:9e:6a:08:a9: e8:b6:b2:ec:4b:5c:78:e4:6a:f2:3a:d9:19:e6:09: 74:67:a5:5c:ee:23:19:03:59:e3:00:7c:c0:f8:b3: 63:24:71:5c:d7:42:bf:9a:ed:48:6e:4b:b5:79:84: 7e:8f:f4:7e:7c:2b:85:be:91:c8:34:f2:37:9c:90: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FB:E3:A9:C2:AE:F9:1A:C0:D4:BF:7E:34:F0:4A:45:0C:BA:BB:6C X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/D_vjqcKu-RrA1L9-NPBKRQy6u2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.33.0/24 86.105.224.0/24 146.19.172.0/24 185.234.13.0/24 IPv6: 2a11:1400:5000::/44 Signature Algorithm: sha256WithRSAEncryption a1:8c:ed:23:6a:28:e1:f2:b6:bd:e4:2c:52:5b:b1:d3:0f:3b: e7:7a:b1:ad:9a:cf:d4:8a:d9:f0:d8:77:39:0d:c0:30:7a:73: 6f:a2:d5:9b:66:2d:03:8c:86:19:c5:f8:fa:6d:be:3c:3e:da: e1:ed:5e:f1:fd:d8:6e:9e:74:9d:28:f1:e3:ab:f1:c5:dd:ec: cd:50:a7:fe:39:d3:eb:3b:26:0b:fb:74:1f:52:44:73:f8:7f: 33:08:1d:86:14:d7:c0:72:32:bf:bf:5e:9b:90:5b:0b:31:79: a8:3f:b3:04:f8:c4:96:02:68:70:51:9b:96:cd:b8:7c:27:cf: 8c:bf:42:d2:9b:ec:12:73:d1:a2:60:b0:0b:1a:0d:94:5b:eb: bf:de:c7:aa:de:24:2d:20:8c:29:6e:5c:71:18:ec:3c:e0:6b: 38:a4:62:69:ec:d4:6c:7c:6f:ee:b2:1c:ee:37:d8:bf:e2:86: d3:4d:7e:09:18:7e:5b:8e:34:dc:ba:b7:f9:c8:11:eb:09:0e: 16:5d:76:73:27:16:ae:37:ba:dd:9b:11:6d:c5:bf:91:f6:9b: f9:57:76:f0:35:1a:27:fd:41:06:6f:ba:b8:c7:80:58:c0:6c: a9:1c:75:28:32:04:2e:1c:f3:66:59:08:5e:bc:68:1c:4d:b1: 52:74:19:b1 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7pF5nr8PUt6/JnUVZ6CLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAxMjIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmZiZTNhOWMyYWVmOTFhYzBkNGJmN2UzNGYwNGE0NTBjYmFiYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+12c+krL4eH5m60zHkbKDVOS7qk 5KPIlo0sfm1sTwWQxsPe1hHJBknhc3kxooxHtyr/qVYlTBoA5wBtzTRC4v7aDLH/ uGCpZNgNkS4tz5jecJLwb8hH3ALhLmR88kBontWyAfew08lg0+MMEWEo/UsNNMUe GILTeYYxnX+utmw/KjlQ2w/z36mI2PmGWIc843LvcxTuLb4WtQ1d1NLk9bGa81Gv OMiDc4rHdk6UGPEinxhF+5uuQTR9uedrq55qCKnotrLsS1x45GryOtkZ5gl0Z6Vc 7iMZA1njAHzA+LNjJHFc10K/mu1Ibku1eYR+j/R+fCuFvpHINPI3nJDE1QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFA/746nCrvkawNS/fjTwSkUMurtsMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRF92anFjS3UtUnJBMUw5LU5QQktSUXk2dTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALZohAwQA VmngAwQAkhOsAwQAueoNMA8EAgACMAkDBwQqERQAUAAwDQYJKoZIhvcNAQELBQAD ggEBAKGM7SNqKOHytr3kLFJbsdMPO+d6sa2az9SK2fDYdzkNwDB6c2+i1ZtmLQOM hhnF+Pptvjw+2uHtXvH92G6edJ0o8eOr8cXd7M1Qp/450+s7Jgv7dB9SRHP4fzMI HYYU18ByMr+/XpuQWwsxeag/swT4xJYCaHBRm5bNuHwnz4y/QtKb7BJz0aJgsAsa DZRb67/ex6reJC0gjCluXHEY7DzgazikYmns1Gx8b+6yHO432L/ihtNNfgkYfluO NNy6t/nIEesJDhZddnMnFq43ut2bEW3Fv5H2m/lXdvA1Gif9QQZvurjHgFjAbKkc dSgyBC4c82ZZCF68aBxNsVJ0GbE= -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client