This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/drA-qEeuOhXaBIliMFDyRwjzUIs.roa File: drA-qEeuOhXaBIliMFDyRwjzUIs.roa (raw, json) Hash identifier: LRSsWiFp5H7cghjLHXgtjNhMqPss6jgTVs0oIRjr8vo= Subject key identifier: 76:B0:3E:A8:47:AE:3A:15:DA:04:89:62:30:50:F2:47:08:F3:50:8B Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73 Certificate serial: 019B7CED3EE703619E0B8DD03AA0B2624114 Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/drA-qEeuOhXaBIliMFDyRwjzUIs.roa Signing time: Fri 02 Jan 2026 04:18:01 +0000 ROA not before: Fri 02 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204178 IP address blocks: 185.109.0.0/22 maxlen: 22 185.109.0.0/24 maxlen: 24 185.109.1.0/24 maxlen: 24 185.109.2.0/24 maxlen: 24 185.109.3.0/24 maxlen: 24 2a0c:cc0::/29 maxlen: 32 2a0c:cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3e:e7:03:61:9e:0b:8d:d0:3a:a0:b2:62:41:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73 Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76b03ea847ae3a15da0489623050f24708f3508b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:c0:ed:9c:ed:ad:7d:2d:f8:9c:f0:7a:76: 14:58:33:75:9b:3b:ab:ba:95:23:66:be:77:ef:32: 3a:24:7e:af:a1:29:de:dc:47:80:e2:21:b8:fc:bc: db:6d:c2:8e:56:56:b8:b8:75:37:e9:e2:58:4f:05: 69:cd:4b:2a:94:31:06:0d:85:cb:d0:73:14:92:38: 27:8f:6b:8d:e8:51:e0:97:b0:3f:9d:15:da:3b:44: e6:26:15:4f:14:f0:f7:be:ef:31:2c:36:61:11:ad: d1:0b:90:43:a5:b6:dd:6e:af:5b:60:f3:7d:4d:ac: 78:cc:62:75:81:00:e4:d7:dd:9d:88:ef:a1:c2:95: 92:5c:08:eb:c6:b1:6c:ad:26:96:33:fd:c0:73:2c: 44:ed:45:e6:64:b2:56:ef:d2:52:54:5f:e1:ad:9d: f9:c8:01:9a:43:f9:17:b7:06:e8:25:b4:36:8a:e5: 35:79:df:6c:05:46:57:b5:c3:b2:25:77:f4:1f:68: 14:ad:78:c7:14:10:ef:ff:d8:87:41:0a:a0:f1:ff: b5:30:42:12:c7:1e:7c:b3:c6:6d:7e:2a:7a:28:9b: 53:01:9f:ad:1e:dc:84:57:30:fe:f2:6b:3e:dd:ce: 0a:ab:35:5b:40:fd:cb:2c:c4:ee:8a:6c:8d:fa:c7: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B0:3E:A8:47:AE:3A:15:DA:04:89:62:30:50:F2:47:08:F3:50:8B X509v3 Authority Key Identifier: keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/drA-qEeuOhXaBIliMFDyRwjzUIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.0.0/22 IPv6: 2a0c:cc0::/29 Signature Algorithm: sha256WithRSAEncryption 0a:33:84:33:a5:fd:e4:c3:34:a8:9d:de:7f:2b:70:f7:c4:69: 10:e8:b5:dc:77:4b:e0:32:79:78:c1:35:3a:42:6e:75:57:09: c9:27:26:80:8e:6d:63:11:c0:60:69:94:3d:7d:51:9a:30:8f: 87:5b:d1:0d:92:03:11:c7:a1:74:90:49:f1:3b:76:40:f0:4b: 7f:76:8c:d6:2a:b9:e9:cc:05:ea:e6:54:f7:ae:d1:fc:4d:4d: 1e:04:b7:b9:8b:02:5e:16:72:7e:bd:0c:67:0f:4d:3d:64:42: 05:4a:5c:3f:50:77:2d:80:be:d4:78:40:e1:fa:6a:2b:a0:b0: 00:d5:3a:fc:7c:7b:93:59:c9:f0:af:b8:a1:c2:f2:10:72:2b: 60:05:88:68:0b:99:24:38:5c:60:46:8b:6c:cf:da:c4:b4:71: a9:17:66:47:ce:2e:b4:f2:49:89:cf:b8:81:7d:4d:20:6a:8f: 9b:3c:f9:f2:36:49:af:1f:86:99:bc:13:d8:b9:47:9b:58:59: 3c:a1:b6:c6:44:f9:df:66:4c:86:48:8b:71:cc:ba:cd:db:92: 44:d2:17:bc:21:6b:96:cf:37:4f:d3:74:bf:34:3a:6b:6e:27: 39:50:30:a0:76:c4:13:a8:28:c1:ff:3c:a7:8e:69:76:18:ae: 47:0f:f9:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87T7nA2GeC43QOqCyYkEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODQwYWRmODRmYjBiNzU4ZWJhOGE1YTEzNWE5ODAzOTNl OGJmNzMwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmIwM2VhODQ3YWUzYTE1ZGEwNDg5NjIzMDUwZjI0NzA4ZjM1MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtfA7ZztrX0t+JzwenYUWDN1mzur upUjZr537zI6JH6voSne3EeA4iG4/LzbbcKOVla4uHU36eJYTwVpzUsqlDEGDYXL 0HMUkjgnj2uN6FHgl7A/nRXaO0TmJhVPFPD3vu8xLDZhEa3RC5BDpbbdbq9bYPN9 Tax4zGJ1gQDk192diO+hwpWSXAjrxrFsrSaWM/3AcyxE7UXmZLJW79JSVF/hrZ35 yAGaQ/kXtwboJbQ2iuU1ed9sBUZXtcOyJXf0H2gUrXjHFBDv/9iHQQqg8f+1MEIS xx58s8Ztfip6KJtTAZ+tHtyEVzD+8ms+3c4KqzVbQP3LLMTuimyN+seuowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHawPqhHrjoV2gSJYjBQ8kcI81CLMB8GA1UdIwQY MBaAFPWECt+E+wt1jrqKWhNamAOT6L9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGIt NGM1OTYwZGRlYjM3LzEvZHJBLXFFZXVPaFhhQklsaU1GRHlSd2p6VUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGItNGM1OTYwZGRlYjM3 LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuW0AMA0E AgACMAcDBQMqDAzAMA0GCSqGSIb3DQEBCwUAA4IBAQAKM4Qzpf3kwzSond5/K3D3 xGkQ6LXcd0vgMnl4wTU6Qm51VwnJJyaAjm1jEcBgaZQ9fVGaMI+HW9ENkgMRx6F0 kEnxO3ZA8Et/dozWKrnpzAXq5lT3rtH8TU0eBLe5iwJeFnJ+vQxnD009ZEIFSlw/ UHctgL7UeEDh+moroLAA1Tr8fHuTWcnwr7ihwvIQcitgBYhoC5kkOFxgRotsz9rE tHGpF2ZHzi608kmJz7iBfU0gao+bPPnyNkmvH4aZvBPYuUebWFk8obbGRPnfZkyG SItxzLrN25JE0he8IWuWzzdP03S/NDprbic5UDCgdsQTqCjB/zynjml2GK5HD/k/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:26 2026 by rpki-client