This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/DVvD_nIdWonKGKDuPNKbYgIrW78.roa File: DVvD_nIdWonKGKDuPNKbYgIrW78.roa (raw, json) Hash identifier: YZFzDhAy5Xw83t613FF8pNf2WPX1WIAufYoC4Qsq/IU= Subject key identifier: 0D:5B:C3:FE:72:1D:5A:89:CA:18:A0:EE:3C:D2:9B:62:02:2B:5B:BF Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749 Certificate serial: 019B79ED63CAE53E761545FB0F665DBE031E Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/DVvD_nIdWonKGKDuPNKbYgIrW78.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24638 IP address blocks: 81.19.64.0/19 maxlen: 24 91.220.133.0/24 maxlen: 24 185.110.56.0/22 maxlen: 24 2a02:6b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:ca:e5:3e:76:15:45:fb:0f:66:5d:be:03:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d5bc3fe721d5a89ca18a0ee3cd29b62022b5bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:a9:1f:6c:ce:86:57:39:50:79:a6:17:f2: 04:9e:01:41:21:ee:48:48:0e:5b:8f:c5:38:c5:10: af:d2:12:2c:0b:ed:54:9b:4b:95:4e:01:3d:4c:1d: 5b:1d:e5:2f:c1:5f:83:38:73:e8:ab:2a:dc:d0:8f: c2:6b:0d:bb:e0:45:3c:19:e0:df:17:c2:f3:c8:03: f2:3e:ff:a4:e0:16:e3:30:7e:52:23:9e:3d:10:a4: e9:e3:ae:a0:27:5a:2e:8a:93:16:f0:70:0e:e0:e7: 8d:ee:f4:25:95:1c:a9:f1:b5:c6:33:d6:93:87:a1: e0:c3:9b:85:cc:89:6e:69:37:1a:17:7c:54:bf:bf: a2:db:f6:8f:14:c7:df:0b:a2:b4:9c:ab:06:2e:ff: bd:c8:8a:80:3e:7b:bb:f8:21:aa:fb:d6:8b:f5:29: f2:74:c1:5e:92:65:74:a0:de:1f:07:96:d1:36:af: a4:15:39:d2:d5:41:51:69:8d:32:11:47:1f:ab:bc: 59:2e:e3:06:cf:16:36:5e:fd:98:d3:e3:36:b0:d4: e8:89:3c:2e:d2:11:58:97:5e:70:4a:0e:f8:0d:69: 2e:6e:b8:9b:02:d3:08:5c:23:ac:e4:11:b6:0f:fa: 4f:69:56:44:91:d5:b7:02:63:13:d6:d6:fc:4d:8f: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5B:C3:FE:72:1D:5A:89:CA:18:A0:EE:3C:D2:9B:62:02:2B:5B:BF X509v3 Authority Key Identifier: keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/DVvD_nIdWonKGKDuPNKbYgIrW78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.64.0/19 91.220.133.0/24 185.110.56.0/22 IPv6: 2a02:6b0::/32 Signature Algorithm: sha256WithRSAEncryption a5:2c:77:64:9e:d9:4f:99:d7:8a:b4:be:69:b4:58:79:17:f6: a8:04:0b:8f:ef:03:fd:60:f1:c6:e2:f1:65:e3:80:bf:44:d0: 92:4d:fc:e3:67:fa:cb:b9:59:eb:b9:80:4a:11:ed:99:68:8e: df:03:f6:8c:0b:29:ca:f0:b1:02:f5:e0:a9:61:5d:7b:1a:4a: 87:1f:19:e5:a5:2a:69:db:18:2b:f3:cd:7e:46:58:8a:37:8f: 30:03:e4:76:2c:05:99:91:0f:88:21:b5:d6:80:f8:e8:9e:bf: db:83:dd:ad:a7:ee:c3:09:ae:6b:ee:53:54:aa:8c:a5:69:57: b9:42:5a:d9:4f:6e:fa:f5:e5:c2:4d:9d:c3:43:ac:fc:d4:31: 89:5c:99:4f:99:f8:5c:8a:a0:a9:54:6d:1b:ca:b7:90:d8:db: d7:fd:e5:6b:4e:bd:2b:ce:71:31:93:80:1a:e8:28:51:4c:d2: 85:54:0f:5b:9d:55:1b:9c:c3:51:ad:6a:00:6b:e0:85:7c:00: 69:c9:b8:02:40:c3:69:2d:83:7a:fe:fe:03:a8:55:7f:23:21: 2e:8b:80:fb:f5:8a:41:32:f6:c1:94:38:e1:9d:26:11:41:20: bc:f1:2d:79:37:89:69:ee:6c:18:f0:9f:a3:8f:6e:a6:71:56: 35:b9:45:e3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57WPK5T52FUX7D2ZdvgMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2I5YThjZDgxOWY0YTkyMDMzNGQ3ZTcyZWMyMzQwODcw ZDc3NDkwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDViYzNmZTcyMWQ1YTg5Y2ExOGEwZWUzY2QyOWI2MjAyMmI1YmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpKpH2zOhlc5UHmmF/IEngFBIe5I SA5bj8U4xRCv0hIsC+1Um0uVTgE9TB1bHeUvwV+DOHPoqyrc0I/Caw274EU8GeDf F8LzyAPyPv+k4BbjMH5SI549EKTp466gJ1ouipMW8HAO4OeN7vQllRyp8bXGM9aT h6Hgw5uFzIluaTcaF3xUv7+i2/aPFMffC6K0nKsGLv+9yIqAPnu7+CGq+9aL9Sny dMFekmV0oN4fB5bRNq+kFTnS1UFRaY0yEUcfq7xZLuMGzxY2Xv2Y0+M2sNToiTwu 0hFYl15wSg74DWkubribAtMIXCOs5BG2D/pPaVZEkdW3AmMT1tb8TY8ZVQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFA1bw/5yHVqJyhig7jzSm2ICK1u/MB8GA1UdIwQY MBaAFJp7mozYGfSpIDNNfnLsI0CHDXdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYt MjFmYWYxNDRjYjYyLzEvRFZ2RF9uSWRXb25LR0tEdVBOS2JZZ0lyVzc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYtMjFmYWYxNDRjYjYy LzEvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFURNAAwQA W9yFAwQCuW44MA0EAgACMAcDBQAqAgawMA0GCSqGSIb3DQEBCwUAA4IBAQClLHdk ntlPmdeKtL5ptFh5F/aoBAuP7wP9YPHG4vFl44C/RNCSTfzjZ/rLuVnruYBKEe2Z aI7fA/aMCynK8LEC9eCpYV17GkqHHxnlpSpp2xgr881+RliKN48wA+R2LAWZkQ+I IbXWgPjonr/bg92tp+7DCa5r7lNUqoylaVe5QlrZT2769eXCTZ3DQ6z81DGJXJlP mfhciqCpVG0byreQ2NvX/eVrTr0rznExk4Aa6ChRTNKFVA9bnVUbnMNRrWoAa+CF fABpybgCQMNpLYN6/v4DqFV/IyEui4D79YpBMvbBlDjhnSYRQSC88S15N4lp7mwY 8J+jj26mcVY1uUXj -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:40 2026 by rpki-client