This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa File: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (raw, json) Hash identifier: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k= Subject key identifier: 0E:FE:83:CD:85:82:F1:00:FD:07:F3:19:B6:8F:C4:48:D2:B8:8F:A9 Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6 Certificate serial: 019B7C126152BB728761CFDD45C5B24EF008 Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa Signing time: Fri 02 Jan 2026 00:18:57 +0000 ROA not before: Fri 02 Jan 2026 00:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35157 IP address blocks: 85.119.136.0/23 maxlen: 23 85.119.138.0/24 maxlen: 24 85.119.140.0/24 maxlen: 24 85.119.141.0/24 maxlen: 24 85.119.142.0/24 maxlen: 24 2a01:8d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:61:52:bb:72:87:61:cf:dd:45:c5:b2:4e:f0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0efe83cd8582f100fd07f319b68fc448d2b88fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0b:ef:1b:a1:49:e2:92:90:1c:b7:1f:ef:c5: ff:8f:63:7b:09:6e:b7:12:a5:c9:3a:54:24:cd:ce: af:aa:16:b3:d9:9a:fa:66:4c:2d:a7:1e:4a:d0:7b: 5b:54:7f:3d:65:22:b8:d4:3f:76:61:e7:b4:b5:90: 3d:cf:4c:78:76:8a:0a:6d:ca:27:db:fe:9a:a1:ce: d3:09:bc:91:44:23:50:cf:44:40:96:e2:3f:76:24: 54:8a:9a:37:35:16:88:e0:42:3b:2f:d3:02:80:8c: bb:fe:91:66:a2:48:12:a4:ca:42:f1:3b:53:ad:84: bf:35:4f:60:04:47:18:b3:9c:6c:19:4c:49:2e:6d: af:cc:31:30:52:0e:da:d5:11:16:5b:62:ce:eb:e7: ae:d8:15:a8:8d:b4:bf:92:14:6e:a0:0e:14:4d:e6: 2f:db:31:7c:90:d7:53:8a:17:34:31:1a:9d:fe:1b: 87:28:d3:d3:83:00:b8:66:94:e0:05:0e:d0:00:f3: cf:09:aa:b1:65:1e:22:73:db:ca:ff:79:eb:f5:af: c7:28:69:01:1e:c1:6d:4b:c2:19:84:6d:6f:39:89: a8:88:6a:5b:2d:56:6f:b9:4e:e8:85:6d:3d:e5:87: 9e:1e:99:a7:e1:15:f9:a2:eb:6d:7a:44:05:1e:c1: 91:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FE:83:CD:85:82:F1:00:FD:07:F3:19:B6:8F:C4:48:D2:B8:8F:A9 X509v3 Authority Key Identifier: keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.136.0-85.119.138.255 85.119.140.0-85.119.142.255 IPv6: 2a01:8d80::/48 Signature Algorithm: sha256WithRSAEncryption 23:18:65:a0:cf:73:c1:61:c6:e4:33:6c:df:95:b2:74:60:42: b6:3a:ab:95:25:c9:58:a9:e7:f2:35:88:62:46:9b:32:71:36: 4d:07:30:23:86:97:02:5f:dd:55:dd:34:72:65:55:db:cc:aa: 60:54:48:1d:86:e6:51:bd:d3:a8:9b:fd:25:52:ef:d3:6f:4e: b4:d0:c1:49:08:85:bb:e7:68:ce:49:81:68:0f:0c:2d:9f:c5: b9:34:7a:49:28:4a:11:69:00:6a:e5:15:2c:78:4d:8c:6f:89: 83:52:50:2b:d6:af:f1:ac:25:c7:f3:4d:59:b8:60:7a:da:01: 70:c3:2c:87:dd:64:c5:87:3b:8e:e5:29:31:33:37:7b:a4:9e: 9f:ab:f0:fd:c8:33:d0:61:45:e1:7e:98:0d:c7:93:8f:dd:78: bf:b2:81:35:71:f9:7e:dc:b3:6a:e4:ec:a9:77:48:01:fc:22: ad:f6:83:bc:54:d4:13:59:66:b4:35:e4:ae:f7:79:22:14:f9: 73:7c:b1:7a:54:28:52:60:4b:34:de:e4:56:a4:ba:24:83:8d: b8:27:11:99:a7:68:b2:62:58:3e:32:86:de:cc:41:04:be:2e: b6:56:17:15:8c:9c:86:f5:62:9e:d6:f1:71:c3:55:3e:fc:d6: 94:25:03:ad -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8EmFSu3KHYc/dRcWyTvAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZTkyYTc4OGE0MTA1N2QyNzc2NGYxNmYzYjFkMmEzZWY2 MzQ1ZDYwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWZlODNjZDg1ODJmMTAwZmQwN2YzMTliNjhmYzQ0OGQyYjg4ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AvvG6FJ4pKQHLcf78X/j2N7CW63 EqXJOlQkzc6vqhaz2Zr6Zkwtpx5K0HtbVH89ZSK41D92Yee0tZA9z0x4dooKbcon 2/6aoc7TCbyRRCNQz0RAluI/diRUipo3NRaI4EI7L9MCgIy7/pFmokgSpMpC8TtT rYS/NU9gBEcYs5xsGUxJLm2vzDEwUg7a1REWW2LO6+eu2BWojbS/khRuoA4UTeYv 2zF8kNdTihc0MRqd/huHKNPTgwC4ZpTgBQ7QAPPPCaqxZR4ic9vK/3nr9a/HKGkB HsFtS8IZhG1vOYmoiGpbLVZvuU7ohW095YeeHpmn4RX5outtekQFHsGRKwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFA7+g82FgvEA/QfzGbaPxEjSuI+pMB8GA1UdIwQY MBaAFODpKniKQQV9J3ZPFvOx0qPvY0XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgt YmE1OWZiMmM0NjEwLzEvRHY2RHpZV0M4UUQ5Ql9NWnRvX0VTTks0ajZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgtYmE1OWZiMmM0NjEw LzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAiBAIAATAcMAwDBANVd4gD BABVd4owDAMEAlV3jAMEAFV3jjAPBAIAAjAJAwcAKgGNgAAAMA0GCSqGSIb3DQEB CwUAA4IBAQAjGGWgz3PBYcbkM2zflbJ0YEK2OquVJclYqefyNYhiRpsycTZNBzAj hpcCX91V3TRyZVXbzKpgVEgdhuZRvdOom/0lUu/Tb0600MFJCIW752jOSYFoDwwt n8W5NHpJKEoRaQBq5RUseE2Mb4mDUlAr1q/xrCXH801ZuGB62gFwwyyH3WTFhzuO 5SkxMzd7pJ6fq/D9yDPQYUXhfpgNx5OP3Xi/soE1cfl+3LNq5Oypd0gB/CKt9oO8 VNQTWWa0NeSu93kiFPlzfLF6VChSYEs03uRWpLokg424JxGZp2iyYlg+MobezEEE vi62VhcVjJyG9WKe1vFxw1U+/NaUJQOt -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:18 2026 by rpki-client