This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DviO0_n_3oq99wzjffb0sjj-GE4.roa File: DviO0_n_3oq99wzjffb0sjj-GE4.roa (raw, json) Hash identifier: DjaDe0aU0GjOmt0uz/EFiXWOUO1GKTgIgdTMKZWmLj0= Subject key identifier: 0E:F8:8E:D3:F9:FF:DE:8A:BD:F7:0C:E3:7D:F6:F4:B2:38:FE:18:4E Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2596894C3CD2EFD53E8F6ED964E2D Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DviO0_n_3oq99wzjffb0sjj-GE4.roa Signing time: Thu 01 Jan 2026 08:17:44 +0000 ROA not before: Thu 01 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 212.135.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:59:68:94:c3:cd:2e:fd:53:e8:f6:ed:96:4e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ef88ed3f9ffde8abdf70ce37df6f4b238fe184e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:bc:f6:f2:c4:57:0d:be:ec:c0:cc:07:97: 3e:51:41:aa:44:a4:2d:b1:f8:24:ad:06:88:36:b2: 9c:83:b6:87:99:8c:73:fa:85:e0:8a:09:36:01:9a: e0:00:41:45:49:9d:bf:9a:36:cc:d0:9d:ed:56:a1: e8:6c:e4:f2:02:9e:2c:1c:b6:ff:03:a7:08:95:ab: df:2f:06:fa:b0:69:e7:ba:26:34:ac:4a:e4:81:08: cf:a4:72:be:6d:e5:78:03:e2:4e:6c:b0:c2:07:87: bb:09:01:25:6e:8f:33:e4:bf:95:53:9f:3e:57:b2: a0:fb:3d:df:3d:89:7a:14:c0:a6:6b:f5:a0:ee:05: 65:dd:92:8b:1e:67:12:9d:7c:f4:71:9b:8a:03:4c: 22:04:b0:22:7d:46:ab:cb:74:2f:ad:8d:e1:51:7f: eb:0d:c8:cf:77:b4:a3:bc:0a:af:cf:0e:36:36:30: f3:72:81:12:30:b0:0b:59:14:cb:a2:82:b5:2c:73: ab:1f:b8:b9:f9:66:d8:cf:39:4b:a1:49:41:f6:bb: 92:8b:1f:30:ed:de:81:66:1d:d3:2b:c3:21:94:cc: fc:bf:9c:1c:81:9a:f5:71:5a:2e:d8:92:ee:99:1a: 07:67:e2:25:5b:6c:1b:11:da:a2:56:97:cc:8d:fe: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F8:8E:D3:F9:FF:DE:8A:BD:F7:0C:E3:7D:F6:F4:B2:38:FE:18:4E X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DviO0_n_3oq99wzjffb0sjj-GE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.100.0/22 Signature Algorithm: sha256WithRSAEncryption 91:49:d2:22:06:6d:8a:c6:57:a6:da:de:50:d0:bf:0f:1f:22: a2:78:c3:aa:63:e2:5b:a0:03:9f:4a:c3:71:49:81:67:54:33: 0d:c7:28:e0:33:03:5a:7a:52:92:af:d9:2e:ad:57:e7:fd:9a: 3c:18:c0:2e:e3:20:75:74:43:51:96:cb:81:94:9d:dd:8f:bf: 23:d4:79:ff:5b:0b:f6:00:f1:8d:44:da:4e:3a:12:e9:08:96: 55:9e:27:31:25:10:85:96:66:1a:76:57:fa:6c:7e:84:3e:bc: 27:19:e1:7c:0e:cf:cd:15:da:61:9d:4d:d4:4c:4e:47:6e:f7: 6c:96:8f:19:48:44:b1:3e:ef:57:1f:fc:42:9f:9a:ec:82:9d: 63:88:2f:00:08:13:47:d2:21:8b:c4:bf:fc:9b:5c:8a:b8:1b: 6a:71:99:1a:d9:91:19:66:c5:e5:86:e5:ac:69:b1:98:22:15: 9a:42:16:e0:61:4b:7b:39:22:12:39:d9:e8:c6:59:ee:78:24: 44:59:67:ca:f3:5f:ab:75:ed:95:76:68:f2:b9:db:2a:d1:b7: df:34:21:60:c6:e2:9f:f6:3e:d1:6c:f4:22:a2:c1:92:9c:cf: d5:1e:b2:33:98:22:7d:13:db:52:c3:44:74:57:2e:c2:5e:66: e4:f4:35:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ollolMPNLv1T6Pbtlk4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWY4OGVkM2Y5ZmZkZThhYmRmNzBjZTM3ZGY2ZjRiMjM4ZmUxODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtni89vLEVw2+7MDMB5c+UUGqRKQt sfgkrQaINrKcg7aHmYxz+oXgigk2AZrgAEFFSZ2/mjbM0J3tVqHobOTyAp4sHLb/ A6cIlavfLwb6sGnnuiY0rErkgQjPpHK+beV4A+JObLDCB4e7CQElbo8z5L+VU58+ V7Kg+z3fPYl6FMCma/Wg7gVl3ZKLHmcSnXz0cZuKA0wiBLAifUary3QvrY3hUX/r DcjPd7SjvAqvzw42NjDzcoESMLALWRTLooK1LHOrH7i5+WbYzzlLoUlB9ruSix8w 7d6BZh3TK8MhlMz8v5wcgZr1cVou2JLumRoHZ+IlW2wbEdqiVpfMjf7V6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA74jtP5/96KvfcM43329LI4/hhOMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvRHZpTzBfbl8zb3E5OXd6amZmYjBzamotR0U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1IdkMA0G CSqGSIb3DQEBCwUAA4IBAQCRSdIiBm2Kxlem2t5Q0L8PHyKieMOqY+JboAOfSsNx SYFnVDMNxyjgMwNaelKSr9kurVfn/Zo8GMAu4yB1dENRlsuBlJ3dj78j1Hn/Wwv2 APGNRNpOOhLpCJZVnicxJRCFlmYadlf6bH6EPrwnGeF8Ds/NFdphnU3UTE5Hbvds lo8ZSESxPu9XH/xCn5rsgp1jiC8ACBNH0iGLxL/8m1yKuBtqcZka2ZEZZsXlhuWs abGYIhWaQhbgYUt7OSISOdnoxlnueCREWWfK81+rde2Vdmjyudsq0bffNCFgxuKf 9j7RbPQiosGSnM/VHrIzmCJ9E9tSw0R0Vy7CXmbk9DVl -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:36 2026 by rpki-client