This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/0-DUuatym4EjrLpEXcW6I4MvGuM.roa File: 0-DUuatym4EjrLpEXcW6I4MvGuM.roa (raw, json) Hash identifier: uxv6/KY05jYuEsZLZV3EP7utj37no6k0dC74Q/DN0po= Subject key identifier: D3:E0:D4:B9:AB:72:9B:81:23:AC:BA:44:5D:C5:BA:23:83:2F:1A:E3 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B77C70AFEF649121678294BC13A3E441D Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/0-DUuatym4EjrLpEXcW6I4MvGuM.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57536 IP address blocks: 185.107.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 17:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0a:fe:f6:49:12:16:78:29:4b:c1:3a:3e:44:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3e0d4b9ab729b8123acba445dc5ba23832f1ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:e8:1a:a5:c0:69:df:5a:2f:61:38:d2:66: 5c:59:05:b9:b1:d4:1e:94:b7:ec:a2:48:5a:0b:03: 17:f2:8f:f1:01:09:95:2d:56:0f:ea:08:81:e4:ee: 13:36:d1:28:d5:02:a0:f9:95:6d:45:05:ac:40:d9: 65:3b:6f:5a:55:10:50:1f:5c:b7:9b:1b:f8:f6:aa: 3c:bd:45:fd:b6:36:64:70:af:dc:07:b7:3e:f3:32: 55:54:32:e7:d8:33:d4:31:81:5d:9a:95:36:94:fd: da:48:85:a3:4d:ea:b7:12:00:e4:26:c8:6e:ce:e9: 54:c3:8d:b2:bb:42:ef:a5:59:29:98:9b:aa:86:f3: 6f:55:fc:2e:85:ba:ee:e0:2d:bf:de:3d:b1:16:80: 06:57:d2:6a:9c:bc:5b:39:f7:e3:82:41:c3:c2:27: 7c:58:a0:f6:a7:96:8a:bf:66:28:eb:a6:d8:e0:5a: 54:5d:08:ff:0e:ef:0e:b3:17:47:27:4f:99:df:41: 86:8b:ca:78:97:b1:b0:fe:86:a0:bb:86:a1:9d:40: 20:43:3e:c0:b5:a2:84:03:87:b2:95:7c:2b:b4:c9: 6a:4d:e1:24:0e:87:bf:e0:47:af:f5:23:96:49:e5: fa:57:70:ad:8b:3c:19:05:60:49:14:1f:73:69:18: c4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E0:D4:B9:AB:72:9B:81:23:AC:BA:44:5D:C5:BA:23:83:2F:1A:E3 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/0-DUuatym4EjrLpEXcW6I4MvGuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.65.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:73:1b:17:2f:58:b9:42:eb:a8:22:d6:95:4b:a7:73:b8:c8: d2:17:a8:23:2e:18:19:cf:d2:20:96:95:e4:13:8c:1e:87:af: 85:26:48:e0:35:42:4b:a8:03:5a:dc:72:57:35:84:6c:d8:cd: f7:11:4d:3a:3d:81:be:5a:c7:cd:19:7d:10:89:03:36:b9:90: 46:13:bf:2a:82:04:a7:81:0e:75:a6:48:54:0d:ed:47:0c:e6: a8:df:48:ee:94:2b:81:ed:6c:4d:e5:d0:b9:09:80:ed:1b:2b: e5:96:7b:3a:05:93:6b:da:c8:cb:8e:8f:ca:3c:b3:85:ed:6b: 1b:cc:af:21:48:95:cb:9f:59:91:aa:54:cb:b6:be:24:9c:ab: a0:74:f8:a1:ff:65:97:b8:23:2f:e2:d5:52:83:18:94:bd:3e: 4a:a8:25:45:4b:47:7f:c8:25:6c:8c:29:f4:5f:6c:eb:b1:fe: d2:97:48:8b:e7:e1:bd:18:f1:c7:2c:5c:42:c4:99:b7:6f:53: 83:a5:d4:62:90:03:88:15:06:ec:39:fd:c1:88:5f:fc:35:5a: 5b:a0:b4:81:cb:64:5d:83:1d:de:60:b4:85:ab:bd:7e:e5:45: ea:c7:78:2e:d3:ae:97:6a:c2:ec:1a:40:93:90:40:b0:20:3d: 82:cd:d9:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwr+9kkSFngpS8E6PkQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2UwZDRiOWFiNzI5YjgxMjNhY2JhNDQ1ZGM1YmEyMzgzMmYxYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR7oGqXAad9aL2E40mZcWQW5sdQe lLfsokhaCwMX8o/xAQmVLVYP6giB5O4TNtEo1QKg+ZVtRQWsQNllO29aVRBQH1y3 mxv49qo8vUX9tjZkcK/cB7c+8zJVVDLn2DPUMYFdmpU2lP3aSIWjTeq3EgDkJshu zulUw42yu0LvpVkpmJuqhvNvVfwuhbru4C2/3j2xFoAGV9JqnLxbOffjgkHDwid8 WKD2p5aKv2Yo66bY4FpUXQj/Du8OsxdHJ0+Z30GGi8p4l7Gw/oagu4ahnUAgQz7A taKEA4eylXwrtMlqTeEkDoe/4Eev9SOWSeX6V3CtizwZBWBJFB9zaRjEKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPg1LmrcpuBI6y6RF3FuiODLxrjMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvMC1EVXVhdHltNEVqckxwRVhjVzZJNE12R3VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWtBMA0G CSqGSIb3DQEBCwUAA4IBAQAfcxsXL1i5QuuoItaVS6dzuMjSF6gjLhgZz9IglpXk E4weh6+FJkjgNUJLqANa3HJXNYRs2M33EU06PYG+WsfNGX0QiQM2uZBGE78qggSn gQ51pkhUDe1HDOao30julCuB7WxN5dC5CYDtGyvllns6BZNr2sjLjo/KPLOF7Wsb zK8hSJXLn1mRqlTLtr4knKugdPih/2WXuCMv4tVSgxiUvT5KqCVFS0d/yCVsjCn0 X2zrsf7Sl0iL5+G9GPHHLFxCxJm3b1ODpdRikAOIFQbsOf3BiF/8NVpboLSBy2Rd gx3eYLSFq71+5UXqx3gu066XasLsGkCTkECwID2Czdnv -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:28 2026 by rpki-client