This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DKZYOGWc7p7UFV3muvl9WdfKRxQ.roa File: DKZYOGWc7p7UFV3muvl9WdfKRxQ.roa (raw, json) Hash identifier: DaUT/fT+NICYQVuOaDW47znt7KgZgGkTskJWTkPJpw0= Subject key identifier: 0C:A6:58:38:65:9C:EE:9E:D4:15:5D:E6:BA:F9:7D:59:D7:CA:47:14 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED906C43EB0A0E4C85EFE5426A1074 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DKZYOGWc7p7UFV3muvl9WdfKRxQ.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207691 IP address blocks: 85.187.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:90:6c:43:eb:0a:0e:4c:85:ef:e5:42:6a:10:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ca65838659cee9ed4155de6baf97d59d7ca4714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:66:50:af:e6:25:76:65:4b:2c:b7:78:aa:65: 24:b0:d8:94:c0:d2:8a:89:45:d6:a3:a2:71:6d:d2: d9:24:c9:fc:10:17:10:98:37:79:7c:20:7b:3f:af: 28:c9:f4:7f:08:59:f3:f1:1c:7a:d9:c4:a0:1b:09: 00:8d:7e:6c:06:a8:50:64:27:06:83:1a:7e:33:01: e1:a3:d8:8c:3b:e5:46:96:27:87:49:e4:bb:08:e3: 22:e2:57:26:8a:fe:b9:b7:0a:ea:6e:41:2a:4d:9d: b1:6c:71:48:89:c7:99:43:cf:37:ab:28:08:2d:da: f2:60:66:2c:8e:e1:c8:71:2c:96:86:2b:2a:9a:03: e3:73:6d:03:30:14:c6:2a:44:25:2f:5a:82:52:b4: 6a:b0:a8:13:78:a1:48:73:9c:d1:fc:5a:df:52:17: 17:1f:7c:7c:ba:71:08:1a:02:51:98:e6:77:a5:53: 53:70:5f:ea:f8:4c:6e:a3:f2:72:34:10:e3:4e:e2: 7b:d1:ac:c5:26:35:8e:cb:78:83:95:7d:f8:34:ca: d6:cc:19:50:3c:8e:2a:91:32:b4:67:f1:8e:1b:20: d9:58:28:e8:4b:5e:3e:40:19:23:3e:44:c4:92:b4: 06:9c:ee:13:b5:f6:8a:26:48:af:b1:c3:51:fc:12: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A6:58:38:65:9C:EE:9E:D4:15:5D:E6:BA:F9:7D:59:D7:CA:47:14 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DKZYOGWc7p7UFV3muvl9WdfKRxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.51.0/24 Signature Algorithm: sha256WithRSAEncryption 78:72:fd:7b:4c:d9:cc:0e:1a:24:c9:b5:7b:91:49:8c:f4:9e: 67:2d:02:a0:bb:5d:f7:08:d7:6a:01:43:fb:c7:2e:07:83:54: d4:66:77:ce:cf:93:cb:b8:8c:13:27:bc:f1:4a:ad:ed:83:9a: d2:ec:f4:0a:de:cc:3a:72:85:bf:63:6a:3a:6e:02:f5:c1:63: 53:fc:17:2c:50:32:85:40:13:28:02:c9:87:8e:60:32:82:e2: d7:ab:ef:69:be:ef:30:e2:f1:ad:06:6e:da:f7:6d:61:15:95: 86:0c:a7:f3:ae:99:37:c9:be:dc:15:40:1b:cb:c0:ed:56:24: 35:30:75:4a:fc:c3:e2:ef:a7:c6:6c:6b:f9:89:27:0e:01:1f: f7:27:15:06:0b:cc:81:35:07:ca:6f:38:8a:d3:e5:46:57:9b: 92:4a:fa:e6:25:11:81:5b:ef:90:18:49:72:a0:f8:7c:f0:07: 36:bb:9e:89:c1:0f:a6:c8:bd:f0:a9:78:51:d9:4c:81:fe:32: aa:97:21:2c:3a:58:eb:3e:88:6f:b9:7b:f4:ac:5e:9f:22:54: fd:66:0a:f3:e4:d8:35:9c:26:c6:e6:4a:cd:22:a7:b1:65:98: 34:60:ca:9e:f2:ca:33:4c:2c:aa:12:d0:2b:c1:73:6a:c3:4c: a2:f2:7e:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ZBsQ+sKDkyF7+VCahB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2E2NTgzODY1OWNlZTllZDQxNTVkZTZiYWY5N2Q1OWQ3Y2E0NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymZQr+YldmVLLLd4qmUksNiUwNKK iUXWo6JxbdLZJMn8EBcQmDd5fCB7P68oyfR/CFnz8Rx62cSgGwkAjX5sBqhQZCcG gxp+MwHho9iMO+VGlieHSeS7COMi4lcmiv65twrqbkEqTZ2xbHFIiceZQ883qygI LdryYGYsjuHIcSyWhisqmgPjc20DMBTGKkQlL1qCUrRqsKgTeKFIc5zR/FrfUhcX H3x8unEIGgJRmOZ3pVNTcF/q+Exuo/JyNBDjTuJ70azFJjWOy3iDlX34NMrWzBlQ PI4qkTK0Z/GOGyDZWCjoS14+QBkjPkTEkrQGnO4TtfaKJkivscNR/BKcEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAymWDhlnO6e1BVd5rr5fVnXykcUMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvREtaWU9HV2M3cDdVRlYzbXV2bDlXZGZLUnhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbszMA0G CSqGSIb3DQEBCwUAA4IBAQB4cv17TNnMDhokybV7kUmM9J5nLQKgu133CNdqAUP7 xy4Hg1TUZnfOz5PLuIwTJ7zxSq3tg5rS7PQK3sw6coW/Y2o6bgL1wWNT/BcsUDKF QBMoAsmHjmAyguLXq+9pvu8w4vGtBm7a921hFZWGDKfzrpk3yb7cFUAby8DtViQ1 MHVK/MPi76fGbGv5iScOAR/3JxUGC8yBNQfKbziK0+VGV5uSSvrmJRGBW++QGEly oPh88Ac2u56JwQ+myL3wqXhR2UyB/jKqlyEsOljrPohvuXv0rF6fIlT9Zgrz5Ng1 nCbG5krNIqexZZg0YMqe8sozTCyqEtArwXNqw0yi8n7B -----END CERTIFICATE-----Generated at Fri Jan 23 21:14:37 2026 by rpki-client