This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/0dC4r-_GYoQ6ya9DJPoU2aoMd4k.roa File: 0dC4r-_GYoQ6ya9DJPoU2aoMd4k.roa (raw, json) Hash identifier: 8JZ2nYpbU9wzayV2maNMxpbZwQJ8oUlvvk4sDKPfND4= Subject key identifier: D1:D0:B8:AF:EF:C6:62:84:3A:C9:AF:43:24:FA:14:D9:AA:0C:77:89 Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Certificate serial: 019B7E38871CE745D41C2F8E76CA7FA1CA53 Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/0dC4r-_GYoQ6ya9DJPoU2aoMd4k.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60750 IP address blocks: 185.26.108.0/22 maxlen: 24 185.26.108.0/24 maxlen: 24 185.26.109.0/24 maxlen: 24 2a00:8760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:87:1c:e7:45:d4:1c:2f:8e:76:ca:7f:a1:ca:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1d0b8afefc662843ac9af4324fa14d9aa0c7789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:20:89:26:6a:a2:47:c4:58:b9:76:6f:13: 20:4e:24:fe:58:06:76:2d:af:bf:01:0d:bc:03:01: da:1e:23:75:ab:19:75:e9:7a:91:6d:b2:47:6c:43: ae:f9:0d:f3:f5:6e:8f:73:65:67:ff:ff:b6:8a:16: 12:58:14:94:c9:b0:8f:d3:ce:bc:d2:ce:37:db:23: ff:b9:73:e9:35:0f:05:69:cd:a4:43:5d:36:16:fd: 50:d7:68:b1:d3:87:7f:01:dd:34:52:05:55:fd:57: 37:e2:af:a7:00:83:e5:fb:f0:42:62:f3:1c:e8:e6: 28:54:bc:0c:cb:d3:d6:75:d6:86:44:19:b3:03:b5: ce:0b:97:e4:3f:9b:86:27:0f:dc:ae:6c:0d:3b:6e: 04:f8:9f:6d:70:e2:61:d0:71:f7:23:ef:fd:45:d2: 78:94:ef:4a:4a:c9:2f:a0:44:25:26:e4:8c:94:ad: db:a0:f1:d3:0d:8b:58:ce:42:f7:db:da:39:fd:af: 89:50:42:7b:2c:11:4c:b1:cf:19:66:ce:50:76:d4: 36:30:b3:b4:f8:02:f1:b3:0e:18:56:87:a5:ab:bb: bb:1e:79:bd:99:40:30:f7:11:91:de:ec:d0:c8:bf: e0:1e:59:a1:03:00:85:83:bc:b2:97:15:9e:1b:2f: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D0:B8:AF:EF:C6:62:84:3A:C9:AF:43:24:FA:14:D9:AA:0C:77:89 X509v3 Authority Key Identifier: keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/0dC4r-_GYoQ6ya9DJPoU2aoMd4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.108.0/22 IPv6: 2a00:8760::/32 Signature Algorithm: sha256WithRSAEncryption 3c:e5:b4:df:85:25:59:bb:e3:c4:c6:b2:89:26:c0:6b:0f:99: a5:f4:01:a3:7e:76:48:c1:6f:26:6d:70:31:55:32:f4:88:e6: 7e:dd:08:72:e4:98:22:4a:88:af:ee:85:14:b4:7c:d8:b2:0c: 25:7e:87:e0:6a:57:53:96:83:ab:99:dd:db:cc:b7:a1:ca:8f: 96:45:be:83:b9:f4:33:91:2f:35:60:bf:73:7e:90:c2:f1:3d: 86:f9:9d:08:cd:09:02:03:3e:69:f8:76:82:da:06:bd:d7:2f: 02:1b:21:45:c0:c1:9d:a5:36:4f:ca:5b:ba:b4:00:c9:c1:fe: 82:47:56:18:29:fe:63:17:be:bb:75:d9:3f:5b:12:16:80:c9: db:8d:c0:78:4f:a1:97:33:00:ab:f0:14:3c:af:6f:64:b4:b3: 2e:21:58:c5:b5:f8:40:29:67:66:3e:11:72:1d:a9:0a:0d:9c: 79:91:e5:79:b0:6e:f2:cb:93:04:3b:ab:af:9b:a8:9e:96:28: d3:0c:cf:29:70:61:d1:59:73:f2:93:22:3a:ea:c7:53:50:0f: 37:e8:f2:da:ee:bc:87:08:06:c9:1d:69:16:50:02:48:75:bc: 13:04:d0:41:43:2e:9f:01:87:24:cd:42:6a:72:c2:ab:8e:30: a2:06:0b:2f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OIcc50XUHC+Odsp/ocpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy YmI5YzEwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWQwYjhhZmVmYzY2Mjg0M2FjOWFmNDMyNGZhMTRkOWFhMGM3Nzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXQgiSZqokfEWLl2bxMgTiT+WAZ2 La+/AQ28AwHaHiN1qxl16XqRbbJHbEOu+Q3z9W6Pc2Vn//+2ihYSWBSUybCP0868 0s432yP/uXPpNQ8Fac2kQ102Fv1Q12ix04d/Ad00UgVV/Vc34q+nAIPl+/BCYvMc 6OYoVLwMy9PWddaGRBmzA7XOC5fkP5uGJw/crmwNO24E+J9tcOJh0HH3I+/9RdJ4 lO9KSskvoEQlJuSMlK3boPHTDYtYzkL329o5/a+JUEJ7LBFMsc8ZZs5QdtQ2MLO0 +ALxsw4YVoelq7u7Hnm9mUAw9xGR3uzQyL/gHlmhAwCFg7yylxWeGy+U9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNHQuK/vxmKEOsmvQyT6FNmqDHeJMB8GA1UdIwQY MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt ZTljMzY0OWMxMjE4LzEvMGRDNHItX0dZb1E2eWE5REpQb1UyYW9NZDRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4 LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRpsMA0E AgACMAcDBQAqAIdgMA0GCSqGSIb3DQEBCwUAA4IBAQA85bTfhSVZu+PExrKJJsBr D5ml9AGjfnZIwW8mbXAxVTL0iOZ+3Qhy5JgiSoiv7oUUtHzYsgwlfofgaldTloOr md3bzLehyo+WRb6DufQzkS81YL9zfpDC8T2G+Z0IzQkCAz5p+HaC2ga91y8CGyFF wMGdpTZPylu6tADJwf6CR1YYKf5jF767ddk/WxIWgMnbjcB4T6GXMwCr8BQ8r29k tLMuIVjFtfhAKWdmPhFyHakKDZx5keV5sG7yy5MEO6uvm6ielijTDM8pcGHRWXPy kyI66sdTUA836PLa7ryHCAbJHWkWUAJIdbwTBNBBQy6fAYckzUJqcsKrjjCiBgsv -----END CERTIFICATE-----Generated at Wed Jan 21 14:40:54 2026 by rpki-client