This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Dz_xAtS_XW35D61yLERn3HqqTl4.roa File: Dz_xAtS_XW35D61yLERn3HqqTl4.roa (raw, json) Hash identifier: tE44UbfHA1S8bb6yZPuiKFoXcbPWrwD3Vwt3MEGtAV8= Subject key identifier: 0F:3F:F1:02:D4:BF:5D:6D:F9:0F:AD:72:2C:44:67:DC:7A:AA:4E:5E Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE400A6DA1D528ACA0136B695500C5 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Dz_xAtS_XW35D61yLERn3HqqTl4.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 185.106.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:40:0a:6d:a1:d5:28:ac:a0:13:6b:69:55:00:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f3ff102d4bf5d6df90fad722c4467dc7aaa4e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:a5:3d:8d:f2:19:ab:23:36:c1:b9:8f:fb: 1c:4f:e7:04:f7:14:0c:71:bc:a2:c4:0b:42:a3:4c: 9b:58:31:b0:dd:c3:a5:a9:5f:0c:7f:55:e6:63:21: e5:bd:e7:af:11:3d:91:31:0e:b9:fd:f4:22:63:bc: 45:ec:b9:5d:8e:a5:1e:26:f6:c2:c4:5b:86:10:fe: 6a:2c:5e:4f:e2:3e:4a:0c:72:e1:a4:12:94:fd:8e: 38:1f:e4:bc:ec:37:85:10:46:32:09:96:1a:e9:b2: 36:f4:47:5d:a2:73:73:ec:a8:b9:8f:17:14:5f:31: 9d:c0:d0:74:db:54:d2:ab:af:7d:f4:89:12:bf:a4: d4:41:b0:7e:3c:14:ef:7e:c3:3a:81:be:1b:f4:eb: 11:75:97:35:52:e0:cd:76:f1:67:ba:cd:aa:47:d2: 30:eb:a1:01:ef:09:ba:79:64:26:69:09:86:39:79: f5:00:f5:61:04:c4:75:15:71:68:a8:bf:f4:fe:43: 39:3a:ce:f7:de:07:a2:ec:38:e4:94:22:c7:1c:f3: e2:7b:f4:87:64:56:2b:67:ba:92:f9:ef:7b:1a:44: b8:01:06:38:71:ba:22:7c:fd:f7:07:d5:4c:86:38: f5:41:dd:f8:ae:3c:26:d9:8c:95:37:93:6e:8e:cc: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3F:F1:02:D4:BF:5D:6D:F9:0F:AD:72:2C:44:67:DC:7A:AA:4E:5E X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Dz_xAtS_XW35D61yLERn3HqqTl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.194.0/23 Signature Algorithm: sha256WithRSAEncryption 39:5c:f6:51:d8:d5:ce:80:0a:9f:c2:f5:fb:7c:cb:3a:3a:e4: 52:a4:a3:2f:e9:be:df:f2:dc:58:ed:a6:03:be:d3:27:0f:ef: 46:90:c0:55:be:59:56:9c:89:bf:29:75:0e:77:bb:33:a0:b4: b7:e3:52:e2:c1:42:c8:cd:8c:0e:26:ff:43:87:10:93:ea:d1: 55:b3:74:b4:77:30:a7:a0:6c:2d:b3:8f:1f:a9:57:f3:4b:26: d4:24:6e:92:23:06:05:c6:15:f6:1e:e8:cb:9d:9b:38:a8:8d: 9a:95:f9:67:87:1b:8b:af:f3:b8:c8:1b:79:8e:46:6b:93:fa: de:be:3b:f2:c3:d4:f2:c5:42:c5:ee:e3:1c:0f:7b:86:df:ef: 05:13:99:b1:f2:0e:d1:31:08:8c:48:86:9b:4b:d3:92:52:58: 29:f3:03:9d:b7:0f:8e:3d:9c:7b:1d:a9:15:9d:26:3a:ea:74: f3:bd:1c:87:47:1c:66:ee:f7:22:5c:41:9b:31:03:a2:b7:f4: d5:30:60:bb:0a:2c:7e:9c:29:6b:d2:f2:af:5e:9c:a2:f4:9b: 32:83:61:1d:8c:43:6f:43:e6:94:dd:72:f9:21:da:a0:a3:de: 25:bb:ac:a1:18:4d:80:25:d3:74:dc:b7:3b:aa:f3:ef:7b:cb: 2f:ad:65:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kAKbaHVKKygE2tpVQDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjNmZjEwMmQ0YmY1ZDZkZjkwZmFkNzIyYzQ0NjdkYzdhYWE0ZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHOlPY3yGasjNsG5j/scT+cE9xQM cbyixAtCo0ybWDGw3cOlqV8Mf1XmYyHlveevET2RMQ65/fQiY7xF7LldjqUeJvbC xFuGEP5qLF5P4j5KDHLhpBKU/Y44H+S87DeFEEYyCZYa6bI29EddonNz7Ki5jxcU XzGdwNB021TSq6999IkSv6TUQbB+PBTvfsM6gb4b9OsRdZc1UuDNdvFnus2qR9Iw 66EB7wm6eWQmaQmGOXn1APVhBMR1FXFoqL/0/kM5Os733gei7DjklCLHHPPie/SH ZFYrZ7qS+e97GkS4AQY4cboifP33B9VMhjj1Qd34rjwm2YyVN5NujsyCqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8/8QLUv11t+Q+tcixEZ9x6qk5eMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvRHpfeEF0U19YVzM1RDYxeUxFUm4zSHFxVGw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWrCMA0G CSqGSIb3DQEBCwUAA4IBAQA5XPZR2NXOgAqfwvX7fMs6OuRSpKMv6b7f8txY7aYD vtMnD+9GkMBVvllWnIm/KXUOd7szoLS341LiwULIzYwOJv9DhxCT6tFVs3S0dzCn oGwts48fqVfzSybUJG6SIwYFxhX2HujLnZs4qI2alflnhxuLr/O4yBt5jkZrk/re vjvyw9TyxULF7uMcD3uG3+8FE5mx8g7RMQiMSIabS9OSUlgp8wOdtw+OPZx7HakV nSY66nTzvRyHRxxm7vciXEGbMQOit/TVMGC7Cix+nClr0vKvXpyi9Jsyg2EdjENv Q+aU3XL5Idqgo94lu6yhGE2AJdN03Lc7qvPve8svrWVj -----END CERTIFICATE-----Generated at Fri Jan 2 14:45:39 2026 by rpki-client