This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/DvkdV1ExA2552HGIzRMhCZK-OFE.roa File: DvkdV1ExA2552HGIzRMhCZK-OFE.roa (raw, json) Hash identifier: qyrvDF/4Y9K7iv9NFa3njXZ6qQZMH2yHwSx8qwfZey8= Subject key identifier: 0E:F9:1D:57:51:31:03:6E:79:D8:71:88:CD:13:21:09:92:BE:38:51 Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Certificate serial: 019B7D5ABF63DB51BF303E614501FABEBE14 Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/DvkdV1ExA2552HGIzRMhCZK-OFE.roa Signing time: Fri 02 Jan 2026 06:17:37 +0000 ROA not before: Fri 02 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 185.211.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:bf:63:db:51:bf:30:3e:61:45:01:fa:be:be:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Validity Not Before: Jan 2 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ef91d575131036e79d87188cd13210992be3851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:5e:9c:57:85:66:08:15:71:90:b8:84:3f: d1:63:36:24:9a:f3:7f:71:46:ff:10:31:18:70:2c: d7:cb:b0:a0:1e:cc:25:ba:c0:f0:34:12:39:f9:1b: 32:e4:93:1a:73:5c:0f:29:d5:e0:22:00:39:30:11: 77:ad:83:81:99:b9:29:c3:d8:0f:2e:a9:80:d8:cc: c0:b1:bf:51:1e:70:c5:2a:4f:fe:48:46:5b:47:91: cd:5a:48:16:ab:c4:c6:f4:13:61:7c:d2:38:27:2b: ca:40:fd:9b:3e:52:d8:2a:74:72:cc:ab:de:4f:90: 6a:94:8a:d5:4e:d4:17:3a:bf:b1:17:3a:a7:91:99: 62:4a:71:69:da:d1:06:8d:90:9b:19:36:a5:e8:75: cc:02:76:22:85:16:36:ed:55:5a:cc:99:da:c0:9f: 20:6d:3a:29:5c:1a:de:79:4c:e3:66:cc:9f:ef:6c: 80:2b:fa:f9:a0:82:de:be:26:21:65:cf:77:37:48: d7:60:fd:90:0b:c3:80:b5:ce:3d:af:7f:df:d3:df: 97:a9:9c:52:42:ce:f8:7b:9c:19:89:ba:5c:41:ac: 21:6c:66:e5:0b:95:63:ed:34:60:01:d3:07:93:b1: 58:92:f1:ca:a0:9e:07:75:c9:7c:65:9e:74:40:06: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F9:1D:57:51:31:03:6E:79:D8:71:88:CD:13:21:09:92:BE:38:51 X509v3 Authority Key Identifier: keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/DvkdV1ExA2552HGIzRMhCZK-OFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.12.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:6b:0e:38:6a:a8:3f:32:3a:33:86:68:da:eb:dd:b6:53:a7: ed:4b:6d:f4:f9:3c:f7:28:9c:13:f4:15:f7:ca:1a:3d:fd:58: 68:85:29:63:8a:b0:8a:e3:31:64:bf:4e:ee:06:2b:5e:b5:14: 84:4d:01:18:d0:2b:fa:83:61:6c:41:26:74:fe:f1:68:79:73: 61:8e:8d:2c:0d:a0:aa:d7:10:4e:21:5e:55:55:4d:95:e8:e7: b3:34:96:5d:9a:23:9d:b3:db:a6:ef:a8:7a:6f:3b:02:00:dc: 59:1f:68:ed:4f:92:eb:b1:f0:58:3f:ce:b7:f8:bc:77:a3:b5: 49:db:10:19:6a:f2:3d:7d:a8:66:24:3d:66:32:bc:0c:b0:1c: e7:ef:f8:e9:37:fd:18:c5:2b:7a:e6:16:4d:e6:78:1a:76:bc: 26:4e:bf:fa:00:04:a1:56:1c:0b:91:7f:44:18:ea:ba:6f:b6: d9:0b:20:e7:f2:35:b1:e0:9c:a5:e6:b4:fc:1a:4a:a7:9c:8d: 0e:f8:87:9f:1f:df:7b:42:16:73:8a:0b:27:86:b5:b0:04:82: fa:dc:7b:cd:23:b4:1f:d5:18:92:9c:27:44:38:b9:7d:44:4e: 7f:ef:e6:85:b2:c6:53:97:ef:28:39:f7:b3:e0:04:32:e5:f9: 39:45:7b:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wr9j21G/MD5hRQH6vr4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz ZmRlNWMwHhcNMjYwMTAyMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWY5MWQ1NzUxMzEwMzZlNzlkODcxODhjZDEzMjEwOTkyYmUzODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrRenFeFZggVcZC4hD/RYzYkmvN/ cUb/EDEYcCzXy7CgHswlusDwNBI5+Rsy5JMac1wPKdXgIgA5MBF3rYOBmbkpw9gP LqmA2MzAsb9RHnDFKk/+SEZbR5HNWkgWq8TG9BNhfNI4JyvKQP2bPlLYKnRyzKve T5BqlIrVTtQXOr+xFzqnkZliSnFp2tEGjZCbGTal6HXMAnYihRY27VVazJnawJ8g bTopXBreeUzjZsyf72yAK/r5oILeviYhZc93N0jXYP2QC8OAtc49r3/f09+XqZxS Qs74e5wZibpcQawhbGblC5Vj7TRgAdMHk7FYkvHKoJ4Hdcl8ZZ50QAYvmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA75HVdRMQNuedhxiM0TIQmSvjhRMB8GA1UdIwQY MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt NWJhNDNiMTE4Zjc1LzEvRHZrZFYxRXhBMjU1MkhHSXpSTWhDWkstT0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1 LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudMMMA0G CSqGSIb3DQEBCwUAA4IBAQB7aw44aqg/Mjozhmja6922U6ftS230+Tz3KJwT9BX3 yho9/VhohSljirCK4zFkv07uBitetRSETQEY0Cv6g2FsQSZ0/vFoeXNhjo0sDaCq 1xBOIV5VVU2V6OezNJZdmiOds9um76h6bzsCANxZH2jtT5LrsfBYP863+Lx3o7VJ 2xAZavI9fahmJD1mMrwMsBzn7/jpN/0YxSt65hZN5ngadrwmTr/6AAShVhwLkX9E GOq6b7bZCyDn8jWx4Jyl5rT8GkqnnI0O+IefH997QhZzigsnhrWwBIL63HvNI7Qf 1RiSnCdEOLl9RE5/7+aFssZTl+8oOfez4AQy5fk5RXtq -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:20 2026 by rpki-client