This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/dr_QiPF5RowLmkVtFEqA--mi4Yo.roa File: dr_QiPF5RowLmkVtFEqA--mi4Yo.roa (raw, json) Hash identifier: kdVHR+HAMcUUf+nW4Adtpm5itFV2D+pTwJDkCvYO2eY= Subject key identifier: 76:BF:D0:88:F1:79:46:8C:0B:9A:45:6D:14:4A:80:FB:E9:A2:E1:8A Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce Certificate serial: 019B791126AE53C34751913B7E09AF33519A Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/dr_QiPF5RowLmkVtFEqA--mi4Yo.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 80.210.95.0/24 maxlen: 24 85.194.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:26:ae:53:c3:47:51:91:3b:7e:09:af:33:51:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76bfd088f179468c0b9a456d144a80fbe9a2e18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:43:65:5e:d8:de:4a:c1:61:aa:36:49:2c: 99:9e:cb:c1:0b:0e:2a:23:17:7a:8f:06:43:47:4f: 9b:ca:2b:71:52:5d:fb:4d:87:4e:3f:92:5d:25:19: ea:8f:e4:f8:bb:ac:52:cf:cf:7b:93:fd:a4:fb:4e: ad:b9:a1:12:19:76:1d:a8:4b:70:a7:61:b6:5b:93: 3d:59:db:8d:e8:a5:f8:d4:0f:57:47:86:19:7e:1b: 2b:13:fe:ad:1f:d4:38:e0:b4:51:45:d5:a9:79:ed: 12:2a:59:3d:c9:ca:a2:f0:c0:c6:cf:52:f1:34:55: 87:29:08:3d:56:5c:ec:76:6f:9f:23:55:77:87:3f: 65:2c:80:0e:9e:8b:a3:4f:79:87:4d:99:f7:c0:32: e7:d1:3e:d9:0e:14:e8:89:81:d8:07:24:59:07:61: 53:10:c7:44:10:d4:3a:ee:ac:67:30:92:8f:63:e2: 2d:48:91:79:aa:bb:00:74:ae:28:10:d8:83:f8:eb: df:8e:94:75:4b:c7:2d:86:bd:38:f7:a3:4b:47:dd: 5e:3d:1a:61:b8:5a:52:42:e3:fc:ca:f2:32:d3:48: 6c:52:ac:38:d0:32:99:3f:1c:85:f6:23:3b:8f:a5: 87:22:4c:9e:46:99:fd:0a:51:0e:25:7d:2b:e2:fc: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BF:D0:88:F1:79:46:8C:0B:9A:45:6D:14:4A:80:FB:E9:A2:E1:8A X509v3 Authority Key Identifier: keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/dr_QiPF5RowLmkVtFEqA--mi4Yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.210.95.0/24 85.194.254.0/23 Signature Algorithm: sha256WithRSAEncryption 89:34:e0:a9:09:9b:ff:09:2e:c8:4f:58:f9:a3:85:1f:82:29: a5:a9:da:ff:41:14:e6:18:82:e1:e4:45:bc:dd:d0:0e:aa:de: 4d:44:3e:79:6e:a8:62:26:e5:d2:13:db:1c:dd:66:86:56:9c: 9b:bb:0d:7c:ab:5a:c0:44:57:42:02:e3:98:b0:b9:e0:5c:ab: ab:d0:b9:58:c5:82:6b:9f:9d:f7:eb:0e:8a:80:1d:8a:83:32: b5:93:0e:93:48:22:ec:d8:ba:db:e4:7b:4b:9d:5d:aa:ac:07: c6:ad:b7:17:bc:ed:b3:a3:92:24:c5:71:bf:7b:aa:c2:2c:1a: d8:85:ce:e6:1c:30:2e:ab:0b:d8:0c:5e:0d:38:c6:cc:99:73: 82:d7:b3:97:e7:04:12:24:23:88:41:33:b9:5c:3f:be:8f:76: a3:3b:9b:c1:c5:5c:9c:4d:6f:31:3a:55:ec:71:d3:0f:e0:34: 0c:e8:64:b2:26:e7:af:07:71:c4:88:14:8a:f0:ac:8f:b0:84: 83:f1:17:22:2d:05:b9:00:03:0b:92:8b:e6:f6:40:a0:9c:b2: 1c:5c:82:be:61:ca:9c:a8:61:6f:83:fa:b4:0e:40:42:80:80: 9c:dd:50:70:39:91:70:c0:f9:31:ab:17:bb:74:91:49:16:ca: 9e:7f:3e:11 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ESauU8NHUZE7fgmvM1GaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMjM2YjIxM2Q1NjQ5M2YzYjA3N2U2YjQxZjQyZTRmM2Rm OGNkY2UwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmJmZDA4OGYxNzk0NjhjMGI5YTQ1NmQxNDRhODBmYmU5YTJlMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYNDZV7Y3krBYao2SSyZnsvBCw4q Ixd6jwZDR0+byitxUl37TYdOP5JdJRnqj+T4u6xSz897k/2k+06tuaESGXYdqEtw p2G2W5M9WduN6KX41A9XR4YZfhsrE/6tH9Q44LRRRdWpee0SKlk9ycqi8MDGz1Lx NFWHKQg9Vlzsdm+fI1V3hz9lLIAOnoujT3mHTZn3wDLn0T7ZDhToiYHYByRZB2FT EMdEENQ67qxnMJKPY+ItSJF5qrsAdK4oENiD+OvfjpR1S8cthr0496NLR91ePRph uFpSQuP8yvIy00hsUqw40DKZPxyF9iM7j6WHIkyeRpn9ClEOJX0r4vzlCQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHa/0IjxeUaMC5pFbRRKgPvpouGKMB8GA1UdIwQY MBaAFPsjayE9Vkk/Owd+a0H0Lk89+M3OMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15TnJJVDFXU1Q4N0IzNXJRZlF1VHozNHpjNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2 LTFjODhlZWJlYjI5My8xL2RyX1FpUEY1Um93TG1rVnRGRXFBLS1taTRZby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2LTFjODhlZWJlYjI5 My8xLzEteU5ySVQxV1NUODdCMzVyUWZRdVR6MzR6YzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABQ0l8D BAFVwv4wDQYJKoZIhvcNAQELBQADggEBAIk04KkJm/8JLshPWPmjhR+CKaWp2v9B FOYYguHkRbzd0A6q3k1EPnluqGIm5dIT2xzdZoZWnJu7DXyrWsBEV0IC45iwueBc q6vQuVjFgmufnffrDoqAHYqDMrWTDpNIIuzYutvke0udXaqsB8attxe87bOjkiTF cb97qsIsGtiFzuYcMC6rC9gMXg04xsyZc4LXs5fnBBIkI4hBM7lcP76PdqM7m8HF XJxNbzE6Vexx0w/gNAzoZLIm568HccSIFIrwrI+whIPxFyItBbkAAwuSi+b2QKCc shxcgr5hypyoYW+D+rQOQEKAgJzdUHA5kXDA+TGrF7t0kUkWyp5/PhE= -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:02 2026 by rpki-client