This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Do7W5qGfDMAJEMN6BzBVspjXxYU.roa File: Do7W5qGfDMAJEMN6BzBVspjXxYU.roa (raw, json) Hash identifier: SRYxQrkADeDmRh/1IPI3QXOB27eJYEqHNj2TfVv7whg= Subject key identifier: 0E:8E:D6:E6:A1:9F:0C:C0:09:10:C3:7A:07:30:55:B2:98:D7:C5:85 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019B7FF1E218264E592DE01A201E6B6C60B0 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Do7W5qGfDMAJEMN6BzBVspjXxYU.roa Signing time: Fri 02 Jan 2026 18:21:57 +0000 ROA not before: Fri 02 Jan 2026 18:21:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216106 IP address blocks: 82.206.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e2:18:26:4e:59:2d:e0:1a:20:1e:6b:6c:60:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jan 2 18:21:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e8ed6e6a19f0cc00910c37a073055b298d7c585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:99:48:80:5f:c1:0d:d0:c6:cd:20:23:48: 27:29:6a:9f:78:d2:4c:2d:53:26:ee:f8:d6:77:18: 40:30:1f:a7:a2:6e:1d:6b:ab:7b:d3:c8:e8:f3:57: e8:e6:8e:72:e4:50:cf:65:e9:a0:4a:ac:3c:29:fd: 5c:f6:8d:ab:93:e5:90:0d:6c:76:6a:76:4a:1d:87: 73:97:3b:2d:ac:7e:02:84:2e:93:9a:95:63:2f:a1: ee:6e:fa:0c:77:f7:73:9d:f5:1f:a3:ed:06:92:a9: 22:39:dc:a7:11:75:ce:c4:0f:b5:18:a5:83:87:32: 97:ec:13:65:be:cf:9d:ef:26:b5:0f:25:dd:0a:44: 25:a0:c9:67:36:db:1d:f7:6e:36:16:0f:4c:1a:fd: 99:7c:7b:1d:78:1f:fd:23:07:ee:1b:28:c0:4c:50: d8:7c:ab:51:84:ad:58:66:76:d9:24:cf:d2:02:5e: 6d:87:f9:b6:6f:12:bb:da:4c:60:91:2b:06:53:67: fd:7a:fb:bc:3b:db:ae:5e:57:08:44:16:03:68:a0: 05:5d:b2:5f:a6:40:11:2d:90:cb:43:7d:55:cd:08: f8:33:90:da:9f:95:32:1f:ee:bf:1b:48:e4:24:3e: 56:fd:7e:5f:88:f7:a6:d2:0e:7d:58:32:80:c3:09: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:D6:E6:A1:9F:0C:C0:09:10:C3:7A:07:30:55:B2:98:D7:C5:85 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Do7W5qGfDMAJEMN6BzBVspjXxYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.22.0/23 Signature Algorithm: sha256WithRSAEncryption 87:a5:fb:42:c5:ca:c7:30:a0:42:1b:af:b9:90:e0:10:17:86: 03:a6:dd:52:74:c3:64:2c:cb:ee:4f:cc:31:64:87:2d:40:08: f5:77:50:b8:aa:64:83:ec:82:6d:a9:20:9a:b6:50:88:06:c0: 11:3d:f7:c0:6c:93:fc:4c:2c:2d:80:90:68:cc:e8:4b:43:48: 39:ff:b6:7c:a5:72:c3:41:5c:9b:ba:14:be:47:72:17:ff:ad: fa:73:93:8d:84:5c:5e:f9:f3:79:de:da:88:80:60:71:09:c8: 28:fd:a2:9e:64:d0:a9:40:d3:69:f1:f2:a7:83:14:69:75:4f: 17:15:5d:db:80:1a:8e:4e:d9:f0:01:b7:04:1e:06:52:4c:e0: a7:ce:98:34:02:18:ed:e7:c4:ac:f1:2d:4c:0c:d4:6e:5f:81: 01:db:0a:70:20:8d:70:40:d4:f8:a3:16:8d:16:87:53:fa:c0: 9e:7d:38:1d:ce:ab:f0:8d:ac:d2:44:80:61:b4:c7:05:3e:74: ff:57:69:b7:71:70:b6:67:05:81:69:ec:9e:dc:86:67:9f:c5: 78:0f:4f:2b:2b:7e:ce:40:43:39:6d:72:d8:3d:0b:15:8d:39: 98:67:27:c6:38:b1:83:ff:cc:1f:8c:94:d5:d8:7f:e5:9b:a5: 20:bd:8d:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8eIYJk5ZLeAaIB5rbGCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwMTAyMTgyMTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZThlZDZlNmExOWYwY2MwMDkxMGMzN2EwNzMwNTViMjk4ZDdjNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMSZSIBfwQ3Qxs0gI0gnKWqfeNJM LVMm7vjWdxhAMB+nom4da6t708jo81fo5o5y5FDPZemgSqw8Kf1c9o2rk+WQDWx2 anZKHYdzlzstrH4ChC6TmpVjL6HubvoMd/dznfUfo+0GkqkiOdynEXXOxA+1GKWD hzKX7BNlvs+d7ya1DyXdCkQloMlnNtsd9242Fg9MGv2ZfHsdeB/9IwfuGyjATFDY fKtRhK1YZnbZJM/SAl5th/m2bxK72kxgkSsGU2f9evu8O9uuXlcIRBYDaKAFXbJf pkARLZDLQ31VzQj4M5Dan5UyH+6/G0jkJD5W/X5fiPem0g59WDKAwwldLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6O1uahnwzACRDDegcwVbKY18WFMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvRG83VzVxR2ZETUFKRU1ONkJ6QlZzcGpYeFlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUs4WMA0G CSqGSIb3DQEBCwUAA4IBAQCHpftCxcrHMKBCG6+5kOAQF4YDpt1SdMNkLMvuT8wx ZIctQAj1d1C4qmSD7IJtqSCatlCIBsARPffAbJP8TCwtgJBozOhLQ0g5/7Z8pXLD QVybuhS+R3IX/636c5ONhFxe+fN53tqIgGBxCcgo/aKeZNCpQNNp8fKngxRpdU8X FV3bgBqOTtnwAbcEHgZSTOCnzpg0Ahjt58Ss8S1MDNRuX4EB2wpwII1wQNT4oxaN FodT+sCefTgdzqvwjazSRIBhtMcFPnT/V2m3cXC2ZwWBaeye3IZnn8V4D08rK37O QEM5bXLYPQsVjTmYZyfGOLGD/8wfjJTV2H/lm6UgvY1w -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:07 2026 by rpki-client