This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/1-DKuT0Y95446hJar0aywH5NXXto.roa File: 1-DKuT0Y95446hJar0aywH5NXXto.roa (raw, json) Hash identifier: 4mgppEdu742P8IDESBHDFQTYQI/R8xwD+SJ+IXCYWM8= Subject key identifier: F8:32:AE:4F:46:3D:E7:8E:3A:84:96:AB:D1:AC:B0:1F:93:57:5E:DA Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc Certificate serial: 019B7C8045C8FC870667DDC0B92BD91EE798 Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/1-DKuT0Y95446hJar0aywH5NXXto.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47581 IP address blocks: 185.146.127.0/24 maxlen: 24 212.58.157.0/24 maxlen: 24 212.58.158.0/24 maxlen: 24 212.58.159.0/24 maxlen: 24 2a07:7b80:106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:45:c8:fc:87:06:67:dd:c0:b9:2b:d9:1e:e7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f832ae4f463de78e3a8496abd1acb01f93575eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:f3:76:95:c2:10:71:df:5f:73:2c:17:78: b9:40:48:40:4a:cc:ea:31:f5:8d:9d:1d:08:ba:2e: 54:64:00:dd:dd:be:e3:0f:08:66:26:28:11:5c:af: 89:7a:0a:f5:d8:ab:d5:14:fb:dd:9d:f0:e5:88:83: 20:08:66:ed:8e:ce:0c:1b:1a:4a:dd:8e:dd:18:a0: c1:3f:b6:2f:b0:df:b1:a1:d8:64:41:89:46:6e:e7: 3f:5f:ab:ab:d0:03:ee:43:40:18:34:79:3d:e6:4a: d0:19:68:89:d9:c6:21:c2:e5:7f:d4:8b:50:77:58: c8:8e:82:f2:c6:08:76:23:8d:a6:56:b0:52:12:ad: 2b:9c:3e:c7:7c:ef:60:b0:10:12:f8:d7:fa:7a:63: c5:8e:9d:98:23:c3:82:d1:21:5a:56:95:71:d7:de: 15:13:06:18:ca:2f:87:97:94:ee:22:d2:05:ec:c5: 84:45:94:a4:47:c6:d8:3b:9b:70:45:f7:dd:a2:08: 4d:2b:6d:da:3a:36:12:1d:3c:a8:7d:d5:05:f7:9b: f7:6e:41:a2:a5:8e:e7:e7:da:ba:a8:59:0c:60:71: ab:58:9f:6f:fc:57:09:0d:a1:6c:85:5d:40:6c:58: 20:8a:7f:93:80:52:23:6b:b7:12:4b:d1:c4:d9:f4: e1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:32:AE:4F:46:3D:E7:8E:3A:84:96:AB:D1:AC:B0:1F:93:57:5E:DA X509v3 Authority Key Identifier: keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/1-DKuT0Y95446hJar0aywH5NXXto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.127.0/24 212.58.157.0-212.58.159.255 IPv6: 2a07:7b80:106::/48 Signature Algorithm: sha256WithRSAEncryption 74:a9:32:08:47:5a:d6:86:3d:f2:9f:ff:33:26:25:47:b2:88: 4b:51:79:fe:46:1f:7e:f8:69:8a:17:b8:ab:81:e6:d9:22:b2: cb:fd:da:37:e5:a9:8f:2a:2c:0e:7a:77:e1:ef:f3:2f:a2:f9: 5e:5a:c8:65:eb:97:80:aa:42:af:42:76:c0:54:5e:c8:b8:10: a4:5f:4f:d4:6a:76:fd:70:65:89:e6:69:a1:6b:08:4d:0c:0f: 08:ef:f7:18:67:02:ae:da:67:03:57:a5:5e:48:9d:8d:e6:f1: 5b:e9:bf:ff:06:7c:e5:e9:33:11:bf:d6:5d:02:a0:91:8b:1a: eb:6c:e7:45:65:fa:6c:2f:3a:98:53:12:02:f0:2e:f5:c8:6f: a2:19:ef:ce:1a:a5:66:b4:bf:0c:b9:a6:17:90:21:a2:37:f8: 4f:39:74:de:46:ff:e0:e7:41:6c:03:62:92:7b:8f:58:bb:d2: 02:f8:a0:1b:7d:90:da:77:da:b5:60:80:79:c0:04:e9:3d:33: e2:fb:da:ab:71:99:d2:9f:04:db:0c:4f:fc:03:4e:95:83:5e: f2:8a:8c:9b:53:3b:5c:0a:25:06:06:55:bc:ee:bc:21:68:ff: 5f:0b:dc:fe:8c:5c:1b:5f:ab:e6:de:d4:97:f6:e9:9e:fc:fa: 7f:d5:a5:84 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8gEXI/IcGZ93AuSvZHueYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNzNhM2YyMWExOTQ0NDIxYjRkZGJhN2VjYmM4MzYwY2Nh NWU2ZmMwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODMyYWU0ZjQ2M2RlNzhlM2E4NDk2YWJkMWFjYjAxZjkzNTc1ZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/3zdpXCEHHfX3MsF3i5QEhASszq MfWNnR0Iui5UZADd3b7jDwhmJigRXK+Jegr12KvVFPvdnfDliIMgCGbtjs4MGxpK 3Y7dGKDBP7YvsN+xodhkQYlGbuc/X6ur0APuQ0AYNHk95krQGWiJ2cYhwuV/1ItQ d1jIjoLyxgh2I42mVrBSEq0rnD7HfO9gsBAS+Nf6emPFjp2YI8OC0SFaVpVx194V EwYYyi+Hl5TuItIF7MWERZSkR8bYO5twRffdoghNK23aOjYSHTyofdUF95v3bkGi pY7n59q6qFkMYHGrWJ9v/FcJDaFshV1AbFggin+TgFIja7cSS9HE2fThuQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFPgyrk9GPeeOOoSWq9GssB+TV17aMB8GA1UdIwQY MBaAFL9zo/IaGURCG03bp+y8g2DMpeb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEt MDAwNDQ3NTdmZThhLzEvMS1ES3VUMFk5NTQ0NmhKYXIwYXl3SDVOWFh0by5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzEvNDAwNjg2LThjNzUtNDJkMC04YmQxLTAwMDQ0NzU3ZmU4 YS8xL3YzT2o4aG9aUkVJYlRkdW43THlEWU15bDV2dy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA+BggrBgEFBQcBBwEB/wQvMC0wGgQCAAEwFAMEALmSfzAM AwQA1DqdAwQF1DqAMA8EAgACMAkDBwAqB3uAAQYwDQYJKoZIhvcNAQELBQADggEB AHSpMghHWtaGPfKf/zMmJUeyiEtRef5GH374aYoXuKuB5tkissv92jflqY8qLA56 d+Hv8y+i+V5ayGXrl4CqQq9CdsBUXsi4EKRfT9Rqdv1wZYnmaaFrCE0MDwjv9xhn Aq7aZwNXpV5InY3m8Vvpv/8GfOXpMxG/1l0CoJGLGuts50Vl+mwvOphTEgLwLvXI b6IZ784apWa0vwy5pheQIaI3+E85dN5G/+DnQWwDYpJ7j1i70gL4oBt9kNp32rVg gHnABOk9M+L72qtxmdKfBNsMT/wDTpWDXvKKjJtTO1wKJQYGVbzuvCFo/18L3P6M XBtfq+be1Jf26Z78+n/VpYQ= -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:04 2026 by rpki-client