This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/DUskNcIQZwjTb7DZ-freME2oNjk.roa File: DUskNcIQZwjTb7DZ-freME2oNjk.roa (raw, json) Hash identifier: nDcT9LCMb7BQTYuDE4O/4AXMPAGpOTpeKPOxcFIo824= Subject key identifier: 0D:4B:24:35:C2:10:67:08:D3:6F:B0:D9:F9:FA:DE:30:4D:A8:36:39 Certificate issuer: /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8 Certificate serial: 019B7C7FDF334D0240AC168C387EC325D973 Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/DUskNcIQZwjTb7DZ-freME2oNjk.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208446 IP address blocks: 185.137.99.0/24 maxlen: 24 2a12:7c40::/29 maxlen: 48 2a12:7c40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:df:33:4d:02:40:ac:16:8c:38:7e:c3:25:d9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d4b2435c2106708d36fb0d9f9fade304da83639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:28:df:02:64:f6:9f:49:d5:94:7f:ad:4d: 8d:be:e5:0d:a9:d5:59:7f:32:d2:95:41:0f:e3:78: 81:62:d4:eb:24:de:4e:6f:dc:0f:ae:39:32:9a:5d: 47:bb:04:ba:91:20:aa:2d:e2:45:07:cb:ae:cb:19: a7:3b:6f:c6:2a:fc:0f:c8:c1:5d:ec:0d:e6:e9:68: 6d:2f:67:5d:ed:78:f0:58:0e:44:d7:46:e0:5e:9a: 3d:18:82:ca:10:dd:dc:e8:c1:97:44:e1:7f:53:07: 27:c2:d4:7a:af:b5:84:c7:fb:68:a3:53:90:8f:ed: e7:1c:9c:cb:2e:7a:85:79:9e:6b:55:d0:68:5a:11: 5a:36:5b:5b:95:95:61:97:8a:1d:1e:f8:fa:90:e9: f3:b7:8d:7a:e2:ed:68:58:3d:ed:66:8b:d3:16:98: 21:3e:fd:86:32:37:d8:84:43:3f:55:19:d2:9b:fc: e2:29:15:a2:6e:d5:31:f3:ac:11:ef:45:18:27:46: d7:fd:a1:6c:92:4f:3e:b1:82:82:85:8a:c4:04:7f: a2:37:97:8e:ef:fd:bb:53:11:11:cb:60:8b:2a:b7: ec:ec:f6:35:bb:22:a9:25:27:3d:a5:b3:7c:e1:25: 31:7c:f9:42:c2:1f:17:63:42:a1:63:5a:63:0d:a6: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4B:24:35:C2:10:67:08:D3:6F:B0:D9:F9:FA:DE:30:4D:A8:36:39 X509v3 Authority Key Identifier: keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/DUskNcIQZwjTb7DZ-freME2oNjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.99.0/24 IPv6: 2a12:7c40::/29 Signature Algorithm: sha256WithRSAEncryption 1e:4c:5f:a5:77:98:e6:0a:f3:4a:97:80:7a:a5:59:f3:fe:1a: c8:e8:70:7f:2b:72:7c:63:44:9b:c4:08:c0:82:05:1a:2d:7c: 7c:77:13:94:47:69:6e:9e:af:3d:d6:53:1c:f3:de:89:a0:95: e9:09:a6:c2:61:98:87:9b:ec:b9:78:a1:71:fe:ff:a4:5a:47: 86:e4:35:56:60:71:15:72:11:fd:b5:fb:b6:05:ac:ca:9d:58: 2e:49:cf:4d:82:e9:70:07:8a:48:51:6e:20:fc:d0:2a:6e:57: 18:40:cd:fc:bd:bd:e2:98:60:0c:10:10:3a:2e:d5:43:fd:01: 1a:13:d3:34:36:b4:d0:53:f1:8d:80:f2:eb:01:0e:40:53:51: 66:a2:1c:30:d2:f0:66:46:dc:7b:4a:b8:12:fc:13:6b:77:00: 84:70:80:c1:86:c8:01:87:8b:d7:85:e4:f6:d6:ac:23:f3:65: ef:f6:26:a9:8b:c0:2c:30:f4:54:f3:34:65:72:03:c7:d5:87: 69:54:44:ee:fa:dd:4d:69:36:96:c9:20:5a:44:50:de:d3:a0: 7b:14:58:1a:e1:1c:8b:30:31:f0:72:de:a8:2f:0f:66:89:ce: df:be:64:68:7e:b3:ec:8f:56:01:ca:9e:bf:80:55:cb:5f:53: bb:13:45:a8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f98zTQJArBaMOH7DJdlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OTRlOTVmYTU5YjUyYjU5OWRiYTQwNmQ3Yjc2ZjM4M2Nh OTBmYTgwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDRiMjQzNWMyMTA2NzA4ZDM2ZmIwZDlmOWZhZGUzMDRkYTgzNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywko3wJk9p9J1ZR/rU2NvuUNqdVZ fzLSlUEP43iBYtTrJN5Ob9wPrjkyml1HuwS6kSCqLeJFB8uuyxmnO2/GKvwPyMFd 7A3m6WhtL2dd7XjwWA5E10bgXpo9GILKEN3c6MGXROF/UwcnwtR6r7WEx/too1OQ j+3nHJzLLnqFeZ5rVdBoWhFaNltblZVhl4odHvj6kOnzt4164u1oWD3tZovTFpgh Pv2GMjfYhEM/VRnSm/ziKRWibtUx86wR70UYJ0bX/aFskk8+sYKChYrEBH+iN5eO 7/27UxERy2CLKrfs7PY1uyKpJSc9pbN84SUxfPlCwh8XY0KhY1pjDaYeKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA1LJDXCEGcI02+w2fn63jBNqDY5MB8GA1UdIwQY MBaAFNWU6V+lm1K1mdukBte3bzg8qQ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQt ZTNiMGI0MWUyNWM1LzEvRFVza05jSVFad2pUYjdEWi1mcmVNRTJvTmprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQtZTNiMGI0MWUyNWM1 LzEvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYljMA0E AgACMAcDBQMqEnxAMA0GCSqGSIb3DQEBCwUAA4IBAQAeTF+ld5jmCvNKl4B6pVnz /hrI6HB/K3J8Y0SbxAjAggUaLXx8dxOUR2lunq891lMc896JoJXpCabCYZiHm+y5 eKFx/v+kWkeG5DVWYHEVchH9tfu2BazKnVguSc9NgulwB4pIUW4g/NAqblcYQM38 vb3imGAMEBA6LtVD/QEaE9M0NrTQU/GNgPLrAQ5AU1Fmohww0vBmRtx7SrgS/BNr dwCEcIDBhsgBh4vXheT21qwj82Xv9iapi8AsMPRU8zRlcgPH1YdpVETu+t1NaTaW ySBaRFDe06B7FFga4RyLMDHwct6oLw9mic7fvmRofrPsj1YByp6/gFXLX1O7E0Wo -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:03 2026 by rpki-client