This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/DeKuqizCFF-AbYWhXDXOxqoCjF4.roa File: DeKuqizCFF-AbYWhXDXOxqoCjF4.roa (raw, json) Hash identifier: ic9mHLNp4V14NC+w44nD4ClXiGT/GxVQlBA6nqtiyx0= Subject key identifier: 0D:E2:AE:AA:2C:C2:14:5F:80:6D:85:A1:5C:35:CE:C6:AA:02:8C:5E Certificate issuer: /CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f Certificate serial: 019B7DC9965C937C4678490716D7322F779D Authority key identifier: 59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/DeKuqizCFF-AbYWhXDXOxqoCjF4.roa Signing time: Fri 02 Jan 2026 08:18:41 +0000 ROA not before: Fri 02 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213150 IP address blocks: 185.216.11.0/24 maxlen: 24 2a07:e940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:96:5c:93:7c:46:78:49:07:16:d7:32:2f:77:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f Validity Not Before: Jan 2 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0de2aeaa2cc2145f806d85a15c35cec6aa028c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:3d:5d:66:15:d5:88:28:02:ce:69:24:4d: 8c:f5:7f:c5:ad:ff:a4:4e:be:0b:cf:07:bf:4d:5a: 5d:c0:97:79:29:76:a5:ce:a7:e8:66:8c:cd:cc:09: be:11:1e:1a:0f:2a:e2:b2:02:07:b1:50:24:01:61: fe:30:ed:67:56:eb:4d:30:45:20:07:08:e2:53:bf: 83:de:76:dc:18:0b:9f:60:de:2f:05:ac:a3:3b:4f: d0:d0:d0:ac:61:a7:50:18:08:61:ea:e8:2b:22:ae: 6d:31:77:a5:b4:5e:7f:c7:17:bc:5e:30:ba:43:d0: f8:cf:86:f3:7c:64:84:87:7d:2d:5f:4b:b5:0c:db: 7a:87:c3:19:bf:43:82:9d:87:e3:b7:44:bc:9c:74: 62:95:2d:d8:0e:84:91:56:fe:79:b3:f6:82:a1:cb: 31:fa:9b:c8:7a:da:7e:8f:cc:7b:fe:d8:20:48:1b: 41:3b:6e:84:ab:a5:89:83:16:19:36:ee:48:b3:ef: ec:e4:ae:d8:1f:69:ed:3b:99:7a:af:c7:ae:a2:a4: a5:19:34:e3:79:6d:04:a5:d2:65:8b:f4:4f:22:83: b9:09:07:ca:cc:15:b9:57:23:ed:14:35:ce:98:77: da:29:70:e2:27:79:41:6c:36:0f:fa:ac:dd:e5:c2: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E2:AE:AA:2C:C2:14:5F:80:6D:85:A1:5C:35:CE:C6:AA:02:8C:5E X509v3 Authority Key Identifier: keyid:59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/DeKuqizCFF-AbYWhXDXOxqoCjF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.11.0/24 IPv6: 2a07:e940::/29 Signature Algorithm: sha256WithRSAEncryption a8:a9:f5:b1:64:62:97:ce:a9:45:10:73:9c:8d:4b:39:70:6e: 05:e9:a1:a2:cd:73:2d:a4:b7:d2:38:99:39:ea:89:f4:55:35: 16:fd:11:f3:53:96:ba:da:4a:bf:e8:49:8c:4f:fa:ed:bd:14: e2:d6:e6:c3:86:4e:b7:69:f2:0b:50:01:ed:b3:34:09:3e:29: f9:17:0c:91:0b:a9:c3:4e:07:13:5a:4e:6a:41:30:ed:39:0d: 82:e9:cb:bf:b8:2d:09:3b:da:1a:7d:b5:ef:45:18:84:30:f0: 13:d5:77:b9:2c:b3:bb:c5:cb:ec:3b:03:e2:c9:7d:5d:d9:9a: 80:55:e4:74:0d:84:e1:03:88:16:48:96:47:cd:b6:e8:9b:80: 68:36:8b:f5:ea:01:04:f9:8d:e5:6b:b0:20:4b:4e:04:5a:2f: 97:53:80:2d:f7:a0:74:56:a8:cc:e3:09:81:2c:8e:04:76:7d: 9b:44:2e:63:bc:40:46:67:56:33:63:43:38:68:ff:31:54:1b: e0:7f:e1:fb:4c:fb:88:f8:d0:2b:a0:bf:ff:b1:a6:09:99:40: 72:72:bb:ce:38:d4:43:c7:f9:90:1f:44:dd:0d:3a:07:a8:27: 1f:20:fb:59:0d:b9:bb:08:e4:16:1d:b4:6f:85:ea:b5:d0:88: a4:2a:51:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yZZck3xGeEkHFtcyL3edMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDc2YWY5MDkxZGExNTgxYmJhNWVjMTNlNWRiZGI3MzYy ZDlkMGYwHhcNMjYwMTAyMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGUyYWVhYTJjYzIxNDVmODA2ZDg1YTE1YzM1Y2VjNmFhMDI4YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytc9XWYV1YgoAs5pJE2M9X/Frf+k Tr4Lzwe/TVpdwJd5KXalzqfoZozNzAm+ER4aDyrisgIHsVAkAWH+MO1nVutNMEUg BwjiU7+D3nbcGAufYN4vBayjO0/Q0NCsYadQGAhh6ugrIq5tMXeltF5/xxe8XjC6 Q9D4z4bzfGSEh30tX0u1DNt6h8MZv0OCnYfjt0S8nHRilS3YDoSRVv55s/aCocsx +pvIetp+j8x7/tggSBtBO26Eq6WJgxYZNu5Is+/s5K7YH2ntO5l6r8euoqSlGTTj eW0EpdJli/RPIoO5CQfKzBW5VyPtFDXOmHfaKXDiJ3lBbDYP+qzd5cIPWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA3irqoswhRfgG2FoVw1zsaqAoxeMB8GA1UdIwQY MBaAFFnXavkJHaFYG7pewT5dvbc2LZ0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2RkcS1Ra2RvVmdidWw3QlBsMjl0ell0blE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wOGQxY2MtNjM3My00ODQwLWI0OGYt MGFhMDhlZGI5MDYzLzEvRGVLdXFpekNGRi1BYllXaFhEWE94cW9DakY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wOGQxY2MtNjM3My00ODQwLWI0OGYtMGFhMDhlZGI5MDYz LzEvV2RkcS1Ra2RvVmdidWw3QlBsMjl0ell0blE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudgLMA0E AgACMAcDBQMqB+lAMA0GCSqGSIb3DQEBCwUAA4IBAQCoqfWxZGKXzqlFEHOcjUs5 cG4F6aGizXMtpLfSOJk56on0VTUW/RHzU5a62kq/6EmMT/rtvRTi1ubDhk63afIL UAHtszQJPin5FwyRC6nDTgcTWk5qQTDtOQ2C6cu/uC0JO9oafbXvRRiEMPAT1Xe5 LLO7xcvsOwPiyX1d2ZqAVeR0DYThA4gWSJZHzbbom4BoNov16gEE+Y3la7AgS04E Wi+XU4At96B0VqjM4wmBLI4Edn2bRC5jvEBGZ1YzY0M4aP8xVBvgf+H7TPuI+NAr oL//saYJmUBycrvOONRDx/mQH0TdDToHqCcfIPtZDbm7COQWHbRvheq10IikKlEu -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:19 2026 by rpki-client