This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/DV_1PU5sghttOAyD5Fk0auja6M4.roa File: DV_1PU5sghttOAyD5Fk0auja6M4.roa (raw, json) Hash identifier: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU= Subject key identifier: 0D:5F:F5:3D:4E:6C:82:1B:6D:38:0C:83:E4:59:34:6A:E8:DA:E8:CE Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b Certificate serial: 019B79ECC702E44F2597EC5474AD58E015AD Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/DV_1PU5sghttOAyD5Fk0auja6M4.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 185.227.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c7:02:e4:4f:25:97:ec:54:74:ad:58:e0:15:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d5ff53d4e6c821b6d380c83e459346ae8dae8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:be:b4:10:46:82:7e:12:da:b1:8c:bb:68: cb:b2:a3:9b:f2:fe:2e:a3:f0:79:b1:9b:62:a8:d8: 92:9a:c5:5c:63:f1:f4:18:ab:5c:ae:1e:b3:9f:dd: 45:31:6f:ff:eb:a0:28:64:25:51:1b:49:56:52:a3: fe:7a:50:5e:0d:f9:2c:a0:fc:88:36:4d:80:4b:6c: 7f:72:d4:42:c1:72:91:29:fd:52:32:73:b2:7c:e0: 64:2d:12:b1:cb:50:1f:a4:68:15:ba:9b:8a:32:ad: 95:2e:fd:12:32:2f:c8:ee:15:62:4b:c6:71:82:7f: 70:f7:45:09:97:00:f2:cc:49:ce:c0:9d:6b:d0:43: fa:5e:9e:26:c1:34:28:c3:11:75:71:64:00:85:fe: d6:8c:f5:22:07:c4:95:09:41:d8:63:2c:32:8d:8b: 50:19:b4:f0:b1:17:da:78:d4:5d:f4:b6:0a:be:e1: d0:2f:ad:1e:a4:1a:42:f1:ab:fc:7c:83:5c:92:ad: 24:ec:1a:bc:cb:63:8b:d5:97:65:ca:3f:58:49:90: b3:86:5d:1b:1b:5b:c4:cb:ac:60:8f:5a:26:e0:87: 81:3c:f6:59:45:ff:dc:6d:61:38:01:d9:79:99:8f: b1:6f:1a:7f:ea:d1:51:36:81:a7:89:72:6e:f3:33: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5F:F5:3D:4E:6C:82:1B:6D:38:0C:83:E4:59:34:6A:E8:DA:E8:CE X509v3 Authority Key Identifier: keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/DV_1PU5sghttOAyD5Fk0auja6M4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.79.0/24 Signature Algorithm: sha256WithRSAEncryption 18:32:90:79:f8:24:e9:cb:28:bc:b5:2a:19:85:e5:5c:0b:e9: 74:9a:94:07:d0:ee:76:49:ee:e3:f4:67:09:e4:6f:b6:86:bd: a2:49:e0:aa:ae:20:1b:91:b0:4c:04:fb:34:2e:26:7d:5a:1b: ee:94:25:bb:fa:c6:e4:fe:aa:e5:1b:85:5e:9b:a5:65:0d:2c: ce:34:59:f2:10:b7:1c:7e:dd:43:bf:76:a4:d2:01:05:70:6f: 6e:15:e2:9e:81:e7:fc:d2:5c:84:bc:5e:3a:cf:bc:ed:54:ec: 4c:9b:99:c7:7a:09:69:c6:af:23:f7:8b:d9:4e:a2:18:19:b5: be:09:9d:7e:13:6f:28:2f:f0:17:2f:55:f3:92:5c:12:82:2f: 7c:35:0c:e5:6a:01:4b:bc:b9:b9:1c:78:92:66:e7:41:80:f1: 1b:0b:22:dd:21:e2:a1:b8:41:be:f5:44:52:ff:96:2b:f3:74: 5c:bf:13:29:37:70:d0:59:3e:cb:de:23:62:db:ef:4b:37:e6: 11:fb:16:87:b1:84:fd:61:bd:44:bd:49:9f:d3:80:46:82:4f: 7a:d6:12:1e:c9:52:ad:aa:ae:18:2b:c5:fe:c7:51:ca:0e:f6: 2f:ab:a8:50:ff:19:98:3f:43:0b:e6:ec:80:00:26:40:d9:2e: 3b:86:eb:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57McC5E8ll+xUdK1Y4BWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDNkMTNkZDI2ZjAwNDRhMjgzZmM2YTExZTc1NmEyYTJi NTY5MWIwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDVmZjUzZDRlNmM4MjFiNmQzODBjODNlNDU5MzQ2YWU4ZGFlOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCy+tBBGgn4S2rGMu2jLsqOb8v4u o/B5sZtiqNiSmsVcY/H0GKtcrh6zn91FMW//66AoZCVRG0lWUqP+elBeDfksoPyI Nk2AS2x/ctRCwXKRKf1SMnOyfOBkLRKxy1AfpGgVupuKMq2VLv0SMi/I7hViS8Zx gn9w90UJlwDyzEnOwJ1r0EP6Xp4mwTQowxF1cWQAhf7WjPUiB8SVCUHYYywyjYtQ GbTwsRfaeNRd9LYKvuHQL60epBpC8av8fINckq0k7Bq8y2OL1Zdlyj9YSZCzhl0b G1vEy6xgj1om4IeBPPZZRf/cbWE4Adl5mY+xbxp/6tFRNoGniXJu8zMw9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1f9T1ObIIbbTgMg+RZNGro2ujOMB8GA1UdIwQY MBaAFM0D0T3SbwBEooP8ahHnVqKitWkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUt MWEzZmY1MzJiYzIwLzEvRFZfMVBVNXNnaHR0T0F5RDVGazBhdWphNk00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUtMWEzZmY1MzJiYzIw LzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueNPMA0G CSqGSIb3DQEBCwUAA4IBAQAYMpB5+CTpyyi8tSoZheVcC+l0mpQH0O52Se7j9GcJ 5G+2hr2iSeCqriAbkbBMBPs0LiZ9WhvulCW7+sbk/qrlG4Vem6VlDSzONFnyELcc ft1Dv3ak0gEFcG9uFeKegef80lyEvF46z7ztVOxMm5nHeglpxq8j94vZTqIYGbW+ CZ1+E28oL/AXL1XzklwSgi98NQzlagFLvLm5HHiSZudBgPEbCyLdIeKhuEG+9URS /5Yr83RcvxMpN3DQWT7L3iNi2+9LN+YR+xaHsYT9Yb1EvUmf04BGgk961hIeyVKt qq4YK8X+x1HKDvYvq6hQ/xmYP0ML5uyAACZA2S47huuC -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:06 2026 by rpki-client