This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/dvctdBFXyTQ3GsPQe09UsYZkhEM.roa File: dvctdBFXyTQ3GsPQe09UsYZkhEM.roa (raw, json) Hash identifier: 8FXh/KvzmfTfePPIquy+QqyiQhPiGH4uvMecaH2SOzc= Subject key identifier: 76:F7:2D:74:11:57:C9:34:37:1A:C3:D0:7B:4F:54:B1:86:64:84:43 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C9FECDB33CF2FE10D4438433A414 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/dvctdBFXyTQ3GsPQe09UsYZkhEM.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34549 IP address blocks: 85.254.76.0/22 maxlen: 22 85.254.80.0/22 maxlen: 22 85.254.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c9:fe:cd:b3:3c:f2:fe:10:d4:43:84:33:a4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76f72d741157c934371ac3d07b4f54b186648443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:fb:bc:d8:5c:7d:87:4d:ba:fa:e3:eb:80: 74:c8:44:6d:cd:b1:99:42:81:9e:b2:53:dc:49:e7: 7e:11:34:20:51:26:6e:bb:d3:f0:fe:d3:d2:11:18: da:6d:f0:00:f8:2d:35:88:6d:57:41:3d:30:7d:c1: 8e:73:8a:6d:71:c8:0e:54:c7:ff:8a:a2:21:f7:b6: f8:dd:d3:fe:fa:15:99:bd:92:e0:03:21:da:af:02: bc:a2:ab:9c:ae:15:4b:54:7f:22:65:cb:fa:fd:69: e3:8a:9c:3b:1e:6a:c8:90:80:0a:a4:f9:ed:8b:94: a6:e4:af:07:a2:09:f2:ca:78:10:1b:a2:a9:a9:e3: f6:05:93:a3:59:a5:5b:c2:66:33:33:4d:1c:8a:7e: 61:eb:01:da:bf:32:91:fe:16:fb:59:73:11:d3:69: 6d:32:8b:c1:e4:f1:b8:e4:af:85:7f:bd:cf:27:1e: fd:ac:55:93:12:42:e7:14:5d:ee:ce:df:94:93:f3: 17:c3:a2:f2:c7:f7:71:13:cb:cc:40:d8:19:ff:38: ae:6c:cd:fc:c8:78:69:01:c5:ab:2c:a3:f6:b3:2e: ef:da:39:30:32:ca:e1:a4:0f:49:f2:5a:3b:91:99: 7d:5b:ca:5f:54:08:a7:56:4a:4b:e1:50:3a:9c:a9: 68:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F7:2D:74:11:57:C9:34:37:1A:C3:D0:7B:4F:54:B1:86:64:84:43 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/dvctdBFXyTQ3GsPQe09UsYZkhEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.76.0-85.254.83.255 85.254.180.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:09:aa:99:b4:50:ca:8b:69:5f:8a:fe:c7:3f:45:da:49:36: c6:9a:e9:93:ea:7e:53:07:25:76:0a:29:cb:0e:8f:aa:75:9b: 73:f2:39:17:aa:4f:55:ff:97:e7:53:1c:db:6c:1c:f9:70:1e: e7:09:13:71:0e:6f:d0:ed:64:8e:f6:e0:57:ee:28:93:92:8e: 9e:a4:98:2b:d0:07:f2:92:70:aa:ca:95:d8:da:4d:2b:f5:9d: 61:62:79:1a:0a:83:59:9b:f7:59:15:27:1f:32:fb:e0:be:f7: d4:36:84:7f:59:e0:c0:0f:f7:8c:f8:95:ac:67:8a:ae:56:c5: db:a3:06:d4:f1:43:65:f7:91:55:2b:65:2c:e7:f0:11:72:68: ef:08:77:23:0c:5b:51:1e:21:bc:01:6c:e5:7f:a0:55:fb:f0: 98:c6:d6:48:49:3a:85:22:ff:4c:cb:2c:84:7c:7f:85:fa:0f: 09:44:f3:ae:ed:b1:bf:cd:bb:96:ad:fa:27:fc:90:15:e3:46: c4:d3:3c:71:e5:92:d7:3f:02:71:86:9d:5a:4c:ab:e5:13:a6: 48:05:4d:b9:e3:2b:5d:87:c9:c8:fb:89:b9:50:cc:25:32:1b: bd:9a:1f:c2:fb:d2:af:1a:0f:84:a9:db:7b:36:79:7d:57:81: 4e:39:33:8a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6x8n+zbM88v4Q1EOEM6QUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmY3MmQ3NDExNTdjOTM0MzcxYWMzZDA3YjRmNTRiMTg2NjQ4NDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1f7vNhcfYdNuvrj64B0yERtzbGZ QoGeslPcSed+ETQgUSZuu9Pw/tPSERjabfAA+C01iG1XQT0wfcGOc4ptccgOVMf/ iqIh97b43dP++hWZvZLgAyHarwK8oqucrhVLVH8iZcv6/Wnjipw7HmrIkIAKpPnt i5Sm5K8HognyyngQG6KpqeP2BZOjWaVbwmYzM00cin5h6wHavzKR/hb7WXMR02lt MovB5PG45K+Ff73PJx79rFWTEkLnFF3uzt+Uk/MXw6Lyx/dxE8vMQNgZ/ziubM38 yHhpAcWrLKP2sy7v2jkwMsrhpA9J8lo7kZl9W8pfVAinVkpL4VA6nKlo6wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHb3LXQRV8k0NxrD0HtPVLGGZIRDMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvZHZjdGRCRlh5VFEzR3NQUWUwOVVzWVpraEVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJV/kwD BAJV/lADBAFV/rQwDQYJKoZIhvcNAQELBQADggEBAC4Jqpm0UMqLaV+K/sc/RdpJ Nsaa6ZPqflMHJXYKKcsOj6p1m3PyOReqT1X/l+dTHNtsHPlwHucJE3EOb9DtZI72 4FfuKJOSjp6kmCvQB/KScKrKldjaTSv1nWFieRoKg1mb91kVJx8y++C+99Q2hH9Z 4MAP94z4laxniq5WxdujBtTxQ2X3kVUrZSzn8BFyaO8IdyMMW1EeIbwBbOV/oFX7 8JjG1khJOoUi/0zLLIR8f4X6DwlE867tsb/Nu5at+if8kBXjRsTTPHHlktc/AnGG nVpMq+UTpkgFTbnjK12Hycj7iblQzCUyG72aH8L70q8aD4Sp23s2eX1XgU45M4o= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:01 2026 by rpki-client