This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/dbyOSE-wTH2fGLKJxvpBhJv0YXU.roa File: dbyOSE-wTH2fGLKJxvpBhJv0YXU.roa (raw, json) Hash identifier: CYXROxFZlVd66XJE6TB2oJ6LkB6INZxHT0LXhNwwxOQ= Subject key identifier: 75:BC:8E:48:4F:B0:4C:7D:9F:18:B2:89:C6:FA:41:84:9B:F4:61:75 Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Certificate serial: 019B7F84B82968D5D75C16F015377B20B4DF Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/dbyOSE-wTH2fGLKJxvpBhJv0YXU.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42637 IP address blocks: 86.106.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b8:29:68:d5:d7:5c:16:f0:15:37:7b:20:b4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75bc8e484fb04c7d9f18b289c6fa41849bf46175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:2a:18:bd:53:e5:db:b9:a8:21:75:24:68: ec:a4:c0:6e:e6:7a:3b:bb:08:72:ad:9f:e8:56:c2: 7a:d0:31:b4:c3:9a:cb:f9:e0:25:52:88:74:0d:20: 52:c1:f8:e6:2d:e8:ce:bb:7c:4b:48:70:93:3e:41: 6d:1b:c0:79:2b:02:0d:3a:51:ae:68:10:7f:1e:74: 00:04:c3:e9:6b:c1:15:99:70:7a:00:9b:be:fb:50: 7c:99:8d:a9:56:86:27:71:18:a8:ba:ba:19:19:31: b4:73:0e:00:d6:0f:82:d0:06:7f:41:e6:c2:0a:91: f9:16:c5:03:13:05:6f:15:c4:dd:f7:95:2a:95:2f: e5:3f:ea:7f:72:60:43:d8:bf:25:28:6f:c5:d1:6d: 00:9a:05:93:22:41:80:13:7f:f1:20:5e:b3:84:64: bf:60:f8:2b:1a:60:f5:ff:6b:19:20:fe:db:0a:9f: 05:6c:4a:ef:1e:6c:f2:c6:d8:3e:74:62:43:83:a8: 4b:1b:74:0b:6c:9c:d2:cf:e9:88:09:de:de:8e:5b: 59:98:af:56:07:b8:22:18:39:a0:f1:ab:44:da:73: 11:63:36:a6:29:8f:2f:39:3c:36:e2:03:8f:e1:2f: 36:58:11:41:65:a5:fd:55:43:05:3a:a8:7e:14:a2: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BC:8E:48:4F:B0:4C:7D:9F:18:B2:89:C6:FA:41:84:9B:F4:61:75 X509v3 Authority Key Identifier: keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/dbyOSE-wTH2fGLKJxvpBhJv0YXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.133.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:88:de:2e:6d:86:a0:ca:ec:44:91:ce:25:45:64:66:2c:d7: 3a:98:97:c5:be:c8:dc:2d:05:e5:00:06:b8:07:38:3d:56:6f: 5e:65:64:bd:59:3e:d7:05:fc:62:94:8e:ce:33:7b:90:85:e7: 69:c3:8a:25:65:5e:35:4d:64:39:37:0d:0e:37:b4:31:87:06: cb:1c:c9:0b:2c:88:55:b3:3e:a3:a8:79:09:6c:53:d7:70:51: 10:55:63:5b:0e:d4:db:96:fc:00:a5:a0:86:0f:a4:6e:29:94: 96:93:16:34:e6:0c:09:72:16:47:84:d2:09:6c:d8:42:51:32: c9:3f:50:d9:11:40:ff:83:b3:6a:1b:2a:58:5b:ca:20:1c:50: a3:d2:67:bf:7c:55:9f:f3:aa:49:e1:fb:57:43:93:15:43:a6: e4:95:c7:78:89:bb:c5:00:f5:44:e5:76:15:d6:47:7e:11:1d: 9f:e5:64:b2:ae:63:16:2e:84:3e:a7:14:3d:bf:77:a7:e1:4c: d9:3b:66:0d:e9:97:52:cd:46:27:91:16:2c:d8:27:42:b2:3f: df:60:61:2a:df:68:69:f0:e6:73:21:ab:e0:f5:2f:96:6b:dc: 05:86:72:1f:e2:29:d8:a7:6b:09:a4:a1:84:66:4c:0f:85:bb: 86:3b:a6:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLgpaNXXXBbwFTd7ILTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZWYwNjllN2UzZWQ1YmY3MGY2ODJjZTQwYzU4MTBmZjNl NWUzNzgwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWJjOGU0ODRmYjA0YzdkOWYxOGIyODljNmZhNDE4NDliZjQ2MTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnMqGL1T5du5qCF1JGjspMBu5no7 uwhyrZ/oVsJ60DG0w5rL+eAlUoh0DSBSwfjmLejOu3xLSHCTPkFtG8B5KwINOlGu aBB/HnQABMPpa8EVmXB6AJu++1B8mY2pVoYncRiouroZGTG0cw4A1g+C0AZ/QebC CpH5FsUDEwVvFcTd95UqlS/lP+p/cmBD2L8lKG/F0W0AmgWTIkGAE3/xIF6zhGS/ YPgrGmD1/2sZIP7bCp8FbErvHmzyxtg+dGJDg6hLG3QLbJzSz+mICd7ejltZmK9W B7giGDmg8atE2nMRYzamKY8vOTw24gOP4S82WBFBZaX9VUMFOqh+FKK5jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHW8jkhPsEx9nxiyicb6QYSb9GF1MB8GA1UdIwQY MBaAFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmIt OTAwMDM0ZjAwZDllLzEvZGJ5T1NFLXdUSDJmR0xLSnh2cEJoSnYwWVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmItOTAwMDM0ZjAwZDll LzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmqFMA0G CSqGSIb3DQEBCwUAA4IBAQBNiN4ubYagyuxEkc4lRWRmLNc6mJfFvsjcLQXlAAa4 Bzg9Vm9eZWS9WT7XBfxilI7OM3uQhedpw4olZV41TWQ5Nw0ON7QxhwbLHMkLLIhV sz6jqHkJbFPXcFEQVWNbDtTblvwApaCGD6RuKZSWkxY05gwJchZHhNIJbNhCUTLJ P1DZEUD/g7NqGypYW8ogHFCj0me/fFWf86pJ4ftXQ5MVQ6bklcd4ibvFAPVE5XYV 1kd+ER2f5WSyrmMWLoQ+pxQ9v3en4UzZO2YN6ZdSzUYnkRYs2CdCsj/fYGEq32hp 8OZzIavg9S+Wa9wFhnIf4inYp2sJpKGEZkwPhbuGO6aY -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:13 2026 by rpki-client