This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/dCyoKR5apw3K_fSnvb1rgkMrMws.roa File: dCyoKR5apw3K_fSnvb1rgkMrMws.roa (raw, json) Hash identifier: DGTBczW2NPAlgw2GdKvgzlgm3Sxc4ppIF+D7Dpe6V40= Subject key identifier: 74:2C:A8:29:1E:5A:A7:0D:CA:FD:F4:A7:BD:BD:6B:82:43:2B:33:0B Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a Certificate serial: 019B7BA4DEFDDD6F6DB2BD3C70FB94EC9738 Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/dCyoKR5apw3K_fSnvb1rgkMrMws.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62405 IP address blocks: 185.36.160.0/22 maxlen: 22 2a00:de20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:de:fd:dd:6f:6d:b2:bd:3c:70:fb:94:ec:97:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=742ca8291e5aa70dcafdf4a7bdbd6b82432b330b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9f:b9:aa:5e:c1:41:fb:24:5c:1c:a9:fd:ee: 3d:47:23:97:d1:4f:c9:f3:0d:1a:52:f4:58:93:69: 36:df:42:49:76:43:f9:b2:3e:89:8e:d8:dd:37:c2: 37:60:2f:6e:9c:62:28:b9:20:e6:b7:73:09:a4:8e: d9:2c:96:1c:92:45:ea:14:b6:70:7b:da:c0:4d:63: ba:5f:c2:28:9d:af:68:03:b6:b7:8d:5e:98:8d:b5: 43:03:b0:ed:f7:c9:b2:d1:1e:2d:8f:9d:b5:52:9d: 3a:84:ca:a1:4c:c3:58:ec:c4:b9:ff:12:b5:3e:92: d1:17:4a:83:a8:2a:72:48:1f:5c:fa:d6:65:49:f1: b3:f5:5d:d0:dd:23:e4:e3:65:1e:23:92:6e:b0:67: 87:ee:14:a9:82:f7:d0:4a:f3:3f:a2:a9:e3:16:11: e2:88:5f:71:15:ba:0f:e3:86:5c:d5:ae:d2:7e:64: 51:b0:2b:d6:0d:72:9b:ac:9b:14:0e:83:e8:23:84: ba:11:4b:e7:63:42:68:92:30:85:fa:2c:2f:1a:da: 09:a8:cd:8f:26:3e:bd:00:58:f0:16:cc:5a:5d:ae: 2b:c8:35:06:0f:53:f1:00:35:d4:02:09:49:e4:da: 74:3d:a1:88:70:b3:e1:be:ef:6c:27:47:d8:ce:92: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2C:A8:29:1E:5A:A7:0D:CA:FD:F4:A7:BD:BD:6B:82:43:2B:33:0B X509v3 Authority Key Identifier: keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/dCyoKR5apw3K_fSnvb1rgkMrMws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.160.0/22 IPv6: 2a00:de20::/32 Signature Algorithm: sha256WithRSAEncryption 66:cd:ab:6c:f0:df:18:70:1c:42:9b:d9:49:0d:59:08:d3:3c: 51:d1:0d:69:64:a3:86:87:fa:2b:94:40:66:6e:35:2c:1e:8a: 92:93:0e:0d:37:1a:f0:6b:55:d6:c7:e4:34:bc:e3:b4:ca:a7: 13:97:7f:26:61:6e:43:ac:cd:5f:1d:0a:80:1a:86:a9:97:85: bb:b3:ad:39:31:88:4c:13:a9:37:51:77:eb:66:9f:7d:09:6b: 76:e8:68:ab:15:c0:6f:6a:aa:c8:12:e9:42:c5:d9:c5:e5:59: d2:cf:1b:0b:39:31:c8:3c:3d:7a:e3:d5:9e:61:12:c4:19:82: 8d:26:87:5d:1b:4d:fc:e2:2d:6e:3a:b7:61:14:d9:ef:18:b3: bb:d7:e2:4e:5b:06:47:c5:26:b1:43:cf:e0:6f:5a:1c:13:b6: 55:69:a7:8a:fd:59:a9:ee:7e:07:05:04:e0:0d:7e:0b:54:91: ae:bc:f1:ec:0d:af:0a:c9:a3:b2:41:e3:6e:61:01:6a:95:f7: 37:1d:15:09:a4:37:ec:6a:e9:76:b9:e6:60:dc:4c:85:c0:ce: c8:8b:e6:c4:b0:82:37:8c:0e:62:f7:a0:20:1c:76:72:2b:b6: 05:32:c1:36:d6:83:22:5f:95:c0:aa:a5:6a:f6:ce:14:99:26: 3d:84:90:4a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pN793W9tsr08cPuU7Jc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGJjYjU0MzJhNDVmMjViMDQxMDM5NjdhYjQwM2MyOWQw ZDQzMGEwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDJjYTgyOTFlNWFhNzBkY2FmZGY0YTdiZGJkNmI4MjQzMmIzMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip+5ql7BQfskXByp/e49RyOX0U/J 8w0aUvRYk2k230JJdkP5sj6JjtjdN8I3YC9unGIouSDmt3MJpI7ZLJYckkXqFLZw e9rATWO6X8Iona9oA7a3jV6YjbVDA7Dt98my0R4tj521Up06hMqhTMNY7MS5/xK1 PpLRF0qDqCpySB9c+tZlSfGz9V3Q3SPk42UeI5JusGeH7hSpgvfQSvM/oqnjFhHi iF9xFboP44Zc1a7SfmRRsCvWDXKbrJsUDoPoI4S6EUvnY0JokjCF+iwvGtoJqM2P Jj69AFjwFsxaXa4ryDUGD1PxADXUAglJ5Np0PaGIcLPhvu9sJ0fYzpKJbQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHQsqCkeWqcNyv30p729a4JDKzMLMB8GA1UdIwQY MBaAFHmLy1QypF8lsEEDlnq0A8KdDUMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81ZDBmYmItYWQ3ZC00YTlhLWIxNzQt MTFiMjkwNTI1MjhkLzEvZEN5b0tSNWFwdzNLX2ZTbnZiMXJna01yTXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81ZDBmYmItYWQ3ZC00YTlhLWIxNzQtMTFiMjkwNTI1Mjhk LzEvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSSgMA0E AgACMAcDBQAqAN4gMA0GCSqGSIb3DQEBCwUAA4IBAQBmzats8N8YcBxCm9lJDVkI 0zxR0Q1pZKOGh/orlEBmbjUsHoqSkw4NNxrwa1XWx+Q0vOO0yqcTl38mYW5DrM1f HQqAGoapl4W7s605MYhME6k3UXfrZp99CWt26GirFcBvaqrIEulCxdnF5VnSzxsL OTHIPD1649WeYRLEGYKNJoddG0384i1uOrdhFNnvGLO71+JOWwZHxSaxQ8/gb1oc E7ZVaaeK/Vmp7n4HBQTgDX4LVJGuvPHsDa8KyaOyQeNuYQFqlfc3HRUJpDfsaul2 ueZg3EyFwM7Ii+bEsII3jA5i96AgHHZyK7YFMsE21oMiX5XAqqVq9s4UmSY9hJBK -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:32 2026 by rpki-client