This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa File: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (raw, json) Hash identifier: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU= Subject key identifier: 76:F7:51:F4:97:09:D5:A7:44:2A:10:D0:1C:FE:89:A9:B0:E7:37:66 Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535 Certificate serial: 019B7DCB66A4F7C29723FD2B08CE218A2302 Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208614 IP address blocks: 194.145.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:a4:f7:c2:97:23:fd:2b:08:ce:21:8a:23:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76f751f49709d5a7442a10d01cfe89a9b0e73766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:40:c6:60:44:38:db:ad:4a:33:a7:03:29: 66:ee:58:58:0e:5a:a4:5d:5c:e2:9a:7e:db:ba:7e: 8d:7f:76:7d:a4:88:0d:28:f3:be:03:f3:ce:27:9a: 4b:de:f2:16:9e:9f:cb:ab:58:e3:1c:a0:e5:b4:0b: 6e:5a:ff:53:15:54:64:b9:6a:a8:07:88:45:fa:7f: 15:71:0e:d4:88:0b:3f:ab:20:ca:88:c1:92:a6:78: f3:45:7a:93:48:c0:83:5f:9c:97:c2:58:7c:ca:6e: dd:aa:39:7d:95:a7:86:04:ed:9b:6d:fd:00:9a:cd: 7a:c6:03:9c:4c:d3:b3:68:93:e8:cd:40:b2:d0:e8: 46:86:50:30:c3:75:23:4d:d0:bf:8f:fe:ea:f4:35: 66:34:f1:35:04:e5:d2:09:df:f0:28:cc:8c:16:0f: c1:f1:b1:cd:52:67:f1:d1:88:4c:15:93:e0:57:fb: 1c:d0:8e:e2:74:54:06:82:03:95:84:d3:ce:b5:3c: 32:cf:6b:2a:de:db:fe:6a:c7:fe:80:df:0f:18:9e: 64:ff:58:6f:0c:6e:e8:d0:57:a5:e3:4e:03:7b:36: 0d:0b:ac:af:5c:71:ff:38:b1:fb:d0:37:4d:2b:ab: 79:35:5f:48:7a:58:fb:a9:d0:b7:1b:d3:d9:65:62: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F7:51:F4:97:09:D5:A7:44:2A:10:D0:1C:FE:89:A9:B0:E7:37:66 X509v3 Authority Key Identifier: keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.230.0/24 Signature Algorithm: sha256WithRSAEncryption b1:17:93:e2:d5:b5:16:33:a7:f0:b1:f8:af:da:49:09:ed:4e: d7:5c:64:17:66:41:01:52:51:ec:2f:b0:25:7f:8b:64:20:71: f5:c0:73:a2:c5:1c:92:de:84:28:16:1e:05:83:f6:04:8e:7e: 3a:9d:a3:5a:89:f1:1f:0c:a2:2f:28:cd:11:fb:6d:87:08:dc: f1:2c:5b:79:92:11:3d:78:46:94:fe:2c:5c:c1:7c:9f:73:23: 07:49:be:56:bb:c4:7f:d9:f6:1b:b0:19:35:11:d8:35:ed:d4: 8f:bb:e7:d7:5a:be:5d:b5:22:ec:ea:a1:2c:56:7b:79:17:32: 66:be:3b:ba:c6:03:94:b5:07:6c:47:0c:9f:ba:7a:92:d8:96: 4f:fb:2c:dc:5d:d9:c4:ad:cd:65:39:68:a2:b5:94:a5:d0:6a: 83:83:92:fe:d1:64:16:3d:c5:39:c7:f5:76:e2:36:d2:37:81: 84:7b:d5:e2:d8:49:35:f3:a7:fd:85:ed:85:2c:f8:2e:b0:2a: 21:c7:1b:ca:87:37:ba:a6:f8:28:fc:f8:b0:b4:71:9e:d1:a4: 12:76:ff:fc:21:a5:c3:7a:70:5b:db:d1:7c:20:e0:e3:16:1d: 59:d7:f3:5d:45:9e:39:02:e9:79:cd:3e:26:fa:6f:f9:96:47: 74:35:32:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2ak98KXI/0rCM4hiiMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYzU2NDQxZDgzZGY5NGJiZDBlNjAxNDRhNTU0NjM5ZTQw ZTA1MzUwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmY3NTFmNDk3MDlkNWE3NDQyYTEwZDAxY2ZlODlhOWIwZTczNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYxAxmBEONutSjOnAylm7lhYDlqk XVzimn7bun6Nf3Z9pIgNKPO+A/POJ5pL3vIWnp/Lq1jjHKDltAtuWv9TFVRkuWqo B4hF+n8VcQ7UiAs/qyDKiMGSpnjzRXqTSMCDX5yXwlh8ym7dqjl9laeGBO2bbf0A ms16xgOcTNOzaJPozUCy0OhGhlAww3UjTdC/j/7q9DVmNPE1BOXSCd/wKMyMFg/B 8bHNUmfx0YhMFZPgV/sc0I7idFQGggOVhNPOtTwyz2sq3tv+asf+gN8PGJ5k/1hv DG7o0Fel404DezYNC6yvXHH/OLH70DdNK6t5NV9Ielj7qdC3G9PZZWJURQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHb3UfSXCdWnRCoQ0Bz+iamw5zdmMB8GA1UdIwQY MBaAFKLFZEHYPflLvQ5gFEpVRjnkDgU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82MjExYzQtNWE5Yy00NDFlLWI4MDAt ZjY1ZGRkZmEwZTFkLzEvZHZkUjlKY0oxYWRFS2hEUUhQNkpxYkRuTjJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82MjExYzQtNWE5Yy00NDFlLWI4MDAtZjY1ZGRkZmEwZTFk LzEvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpHmMA0G CSqGSIb3DQEBCwUAA4IBAQCxF5Pi1bUWM6fwsfiv2kkJ7U7XXGQXZkEBUlHsL7Al f4tkIHH1wHOixRyS3oQoFh4Fg/YEjn46naNaifEfDKIvKM0R+22HCNzxLFt5khE9 eEaU/ixcwXyfcyMHSb5Wu8R/2fYbsBk1Edg17dSPu+fXWr5dtSLs6qEsVnt5FzJm vju6xgOUtQdsRwyfunqS2JZP+yzcXdnErc1lOWiitZSl0GqDg5L+0WQWPcU5x/V2 4jbSN4GEe9Xi2Ek186f9he2FLPgusCohxxvKhze6pvgo/PiwtHGe0aQSdv/8IaXD enBb29F8IODjFh1Z1/NdRZ45Aul5zT4m+m/5lkd0NTK/ -----END CERTIFICATE-----Generated at Tue Feb 10 01:33:54 2026 by rpki-client