This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/DrwW4sKSqTZEXvxPzEr4f3uBsog.roa File: DrwW4sKSqTZEXvxPzEr4f3uBsog.roa (raw, json) Hash identifier: GYviIhAWt+rJxTgokFxh6w4GldBuIX4UFW6S+3JXsHk= Subject key identifier: 0E:BC:16:E2:C2:92:A9:36:44:5E:FC:4F:CC:4A:F8:7F:7B:81:B2:88 Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532 Certificate serial: 019B7B368C80F6C927D93E0890C9EDB824CD Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/DrwW4sKSqTZEXvxPzEr4f3uBsog.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49659 IP address blocks: 185.60.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8c:80:f6:c9:27:d9:3e:08:90:c9:ed:b8:24:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ebc16e2c292a936445efc4fcc4af87f7b81b288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:71:e1:7d:6c:04:c1:04:b7:f7:ef:eb:65: 4b:4a:f5:24:cf:a6:09:2d:8c:1d:0c:65:35:0f:6b: a2:49:fa:03:a9:35:b2:98:74:d8:d6:80:03:0e:f2: 4d:82:8a:65:03:eb:e4:b9:2e:88:37:94:0e:81:79: e4:fc:34:0f:ab:05:3e:af:0a:d7:18:9a:7f:e6:fb: d3:9f:8c:c4:7f:00:10:98:20:0a:d4:2f:e6:7a:cd: ed:65:18:48:52:9b:34:3b:68:28:7a:06:5a:8a:85: 6f:73:9a:69:06:d6:d8:f1:a9:0e:c6:d6:be:6c:e3: 19:5d:8c:7e:7a:7c:65:e1:89:c1:8d:e0:06:76:cc: f7:81:dc:4c:ec:33:b5:4e:50:ea:0c:fe:b4:e3:6a: 39:a0:2f:5d:8f:67:38:93:11:5f:c2:38:26:b2:c5: c3:db:49:29:91:c7:a0:80:da:d6:6b:6f:1c:61:07: 91:56:98:86:25:3e:73:99:49:a8:ee:f0:65:52:e9: 21:74:9c:80:82:a8:43:09:2f:2a:ed:97:1c:2b:0a: 6c:75:7e:f7:4e:bd:f4:6c:ca:39:0a:d4:5a:9e:fd: 55:7f:69:ef:9b:aa:b5:38:68:44:57:9f:cb:65:2a: 74:ae:ff:8a:8f:a0:71:e0:33:70:a4:76:c9:98:52: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BC:16:E2:C2:92:A9:36:44:5E:FC:4F:CC:4A:F8:7F:7B:81:B2:88 X509v3 Authority Key Identifier: keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/DrwW4sKSqTZEXvxPzEr4f3uBsog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.119.0/24 Signature Algorithm: sha256WithRSAEncryption b5:14:32:f4:8e:34:69:86:e9:8f:d8:b8:1c:6c:46:fb:50:2a: 7c:a3:db:54:c4:97:6f:19:7b:17:b3:e8:6a:24:78:de:66:74: b8:c2:a3:ae:01:18:ed:92:58:6e:7e:8a:0f:0e:c3:a9:94:04: e8:5f:99:70:82:8b:21:31:2e:ac:b6:47:9e:c0:79:02:da:4f: 4a:60:38:f1:91:fa:0d:94:9d:d9:32:ce:82:f9:6d:88:cb:ab: fb:0e:77:b4:be:eb:32:b8:d7:8f:91:b1:95:ad:9e:68:24:24: 0f:ad:02:cd:92:94:16:a9:26:4a:ab:bb:09:32:bf:cf:b8:d2: 59:32:93:26:9d:4d:78:1d:78:35:82:0c:aa:53:0e:28:73:e5: 16:58:65:c2:bc:b6:ad:b1:70:6c:df:d0:5d:8e:54:da:a9:25: 2d:9a:56:00:e2:82:ea:1b:3e:c5:75:58:33:6d:cc:35:a8:8f: e5:76:6b:11:41:9c:d0:39:af:d5:45:bf:3f:fa:e0:b6:f3:11: 2e:67:6b:0b:63:5e:34:b6:89:a5:c2:bd:1b:e6:6f:13:7f:30: 92:a0:7a:d3:97:69:5c:4d:1c:6d:15:6d:6e:94:07:5a:53:b1: fc:7c:1e:21:da:cf:36:b8:7b:6f:0c:a3:5c:88:44:32:c4:db: 9e:4d:db:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NoyA9skn2T4IkMntuCTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODRjZmE3ODQ0MzQwMjM3ZmU1OWEzODI1YjU0ZjNmNzdl ZDg1MzIwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWJjMTZlMmMyOTJhOTM2NDQ1ZWZjNGZjYzRhZjg3ZjdiODFiMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEhx4X1sBMEEt/fv62VLSvUkz6YJ LYwdDGU1D2uiSfoDqTWymHTY1oADDvJNgoplA+vkuS6IN5QOgXnk/DQPqwU+rwrX GJp/5vvTn4zEfwAQmCAK1C/mes3tZRhIUps0O2goegZaioVvc5ppBtbY8akOxta+ bOMZXYx+enxl4YnBjeAGdsz3gdxM7DO1TlDqDP6042o5oC9dj2c4kxFfwjgmssXD 20kpkceggNrWa28cYQeRVpiGJT5zmUmo7vBlUukhdJyAgqhDCS8q7ZccKwpsdX73 Tr30bMo5CtRanv1Vf2nvm6q1OGhEV5/LZSp0rv+Kj6Bx4DNwpHbJmFLe/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA68FuLCkqk2RF78T8xK+H97gbKIMB8GA1UdIwQY MBaAFGKEz6eEQ0Ajf+WaOCW1Tz937YUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEt ZjM4ZjhmZTc5NGQ0LzEvRHJ3VzRzS1NxVFpFWHZ4UHpFcjRmM3VCc29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEtZjM4ZjhmZTc5NGQ0 LzEvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTx3MA0G CSqGSIb3DQEBCwUAA4IBAQC1FDL0jjRphumP2LgcbEb7UCp8o9tUxJdvGXsXs+hq JHjeZnS4wqOuARjtklhufooPDsOplAToX5lwgoshMS6stkeewHkC2k9KYDjxkfoN lJ3ZMs6C+W2Iy6v7Dne0vusyuNePkbGVrZ5oJCQPrQLNkpQWqSZKq7sJMr/PuNJZ MpMmnU14HXg1ggyqUw4oc+UWWGXCvLatsXBs39BdjlTaqSUtmlYA4oLqGz7FdVgz bcw1qI/ldmsRQZzQOa/VRb8/+uC28xEuZ2sLY140tomlwr0b5m8TfzCSoHrTl2lc TRxtFW1ulAdaU7H8fB4h2s82uHtvDKNciEQyxNueTdtQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:29 2026 by rpki-client