This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/DrVZDZh6t-NASVfKCJKEMxtwld0.roa File: DrVZDZh6t-NASVfKCJKEMxtwld0.roa (raw, json) Hash identifier: cTJ6lFiko+3ixFYd+6UnWr/LWA37RjzGG0uQnDkQEnw= Subject key identifier: 0E:B5:59:0D:98:7A:B7:E3:40:49:57:CA:08:92:84:33:1B:70:95:DD Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd Certificate serial: 019B797F04019DCE42EBF9B2F8A5F4B931F8 Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/DrVZDZh6t-NASVfKCJKEMxtwld0.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209350 IP address blocks: 78.24.207.0/24 maxlen: 24 2a09:5e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:04:01:9d:ce:42:eb:f9:b2:f8:a5:f4:b9:31:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eb5590d987ab7e3404957ca089284331b7095dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:30:44:06:87:30:3b:3a:62:9c:f9:74:98: 8f:3f:79:8a:dc:5b:97:0a:7c:d5:1f:39:78:24:8f: 32:b1:53:8a:35:7f:e4:64:8d:0c:4b:9b:03:35:c1: b0:40:bd:bb:a5:21:98:cc:1a:da:67:ac:a5:87:7a: 74:62:52:38:48:50:d9:b2:4a:75:0e:c1:d8:4b:87: 17:d8:1f:de:0c:6b:53:3b:8d:92:82:db:06:bf:10: bc:7c:cf:8c:6f:62:e5:34:fc:42:5d:07:45:cc:e9: bd:96:61:31:bc:11:32:01:2e:78:a1:7a:62:fa:a1: cd:ae:3f:9c:da:ef:f1:6c:af:a9:3f:66:0d:af:43: 7a:90:04:78:33:e7:d8:a3:ab:40:d7:67:e1:49:7e: 25:43:c3:8d:98:f6:cc:08:f8:ab:ac:41:f1:fa:1b: a6:b1:db:a0:35:5f:1f:23:01:21:73:64:8a:6c:1a: 95:3e:9f:01:89:e1:24:c4:bf:1e:42:66:51:e3:3d: 88:6b:76:3c:8c:01:89:32:a4:53:4b:41:b3:fc:58: b3:05:d6:66:c5:40:52:7d:01:35:13:ba:d4:3a:cf: 7a:92:65:35:71:6a:91:c2:69:f3:35:33:86:a5:a5: ee:a3:66:68:58:37:c9:53:d7:30:d0:54:0c:3b:6b: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B5:59:0D:98:7A:B7:E3:40:49:57:CA:08:92:84:33:1B:70:95:DD X509v3 Authority Key Identifier: keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/DrVZDZh6t-NASVfKCJKEMxtwld0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.207.0/24 IPv6: 2a09:5e00::/29 Signature Algorithm: sha256WithRSAEncryption 78:90:75:e8:cf:6e:ae:49:38:0e:36:80:65:ca:eb:85:b0:99: d1:c3:32:36:62:27:76:d3:89:03:97:4b:3a:0d:d6:21:fc:0c: a6:2e:6c:ba:16:c4:9e:14:e6:5b:ed:b6:24:75:fd:a7:d5:ec: 15:8c:48:d3:3e:33:27:ef:45:27:bd:0a:8e:4e:1e:66:2b:26: d2:e7:5f:7b:2d:96:b8:7b:71:2d:ba:c0:15:2f:8d:94:26:0f: ed:9c:e6:fe:18:47:dd:34:da:7e:0f:04:f0:61:ab:90:1c:5d: 9e:2f:17:1e:83:56:07:0d:e0:ba:5e:1a:a8:5c:53:e6:93:6e: 44:ed:55:83:89:ae:9b:29:c9:0c:15:ef:74:2c:bc:b3:f9:70: d0:3a:cd:cb:8f:ea:1c:ec:ca:5a:54:88:bf:39:d4:a2:50:80: 8f:f2:bb:81:7c:55:12:88:9d:48:63:da:a5:d5:37:b7:24:ac: 08:7b:28:3a:68:4c:00:cc:6b:c9:f1:48:62:ec:9a:6c:7e:a9: 48:c7:7c:ab:e5:aa:03:94:ba:4f:ab:93:e3:ad:38:a4:bd:c9: 3c:de:e1:4e:a3:8a:0c:8e:b4:b6:ce:48:98:22:7b:ca:14:05: 7f:1d:62:bd:bb:a3:a5:13:f1:2e:c6:62:a0:d7:1b:07:cd:f0: 8c:0d:ef:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fwQBnc5C6/my+KX0uTH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjdmYTdlMTk0NzJlNTgzYjcyMDkzNmMzOWQwZmQyNDI2 NjE5ZmQwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWI1NTkwZDk4N2FiN2UzNDA0OTU3Y2EwODkyODQzMzFiNzA5NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS0wRAaHMDs6Ypz5dJiPP3mK3FuX CnzVHzl4JI8ysVOKNX/kZI0MS5sDNcGwQL27pSGYzBraZ6ylh3p0YlI4SFDZskp1 DsHYS4cX2B/eDGtTO42SgtsGvxC8fM+Mb2LlNPxCXQdFzOm9lmExvBEyAS54oXpi +qHNrj+c2u/xbK+pP2YNr0N6kAR4M+fYo6tA12fhSX4lQ8ONmPbMCPirrEHx+hum sdugNV8fIwEhc2SKbBqVPp8BieEkxL8eQmZR4z2Ia3Y8jAGJMqRTS0Gz/FizBdZm xUBSfQE1E7rUOs96kmU1cWqRwmnzNTOGpaXuo2ZoWDfJU9cw0FQMO2s4VQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA61WQ2YerfjQElXygiShDMbcJXdMB8GA1UdIwQY MBaAFPMn+n4ZRy5YO3IJNsOdD9JCZhn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2Yt MjNjMTYyNjNjZjNiLzEvRHJWWkRaaDZ0LU5BU1ZmS0NKS0VNeHR3bGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2YtMjNjMTYyNjNjZjNi LzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAThjPMA0E AgACMAcDBQMqCV4AMA0GCSqGSIb3DQEBCwUAA4IBAQB4kHXoz26uSTgONoBlyuuF sJnRwzI2Yid204kDl0s6DdYh/AymLmy6FsSeFOZb7bYkdf2n1ewVjEjTPjMn70Un vQqOTh5mKybS5197LZa4e3EtusAVL42UJg/tnOb+GEfdNNp+DwTwYauQHF2eLxce g1YHDeC6XhqoXFPmk25E7VWDia6bKckMFe90LLyz+XDQOs3Lj+oc7MpaVIi/OdSi UICP8ruBfFUSiJ1IY9ql1Te3JKwIeyg6aEwAzGvJ8Uhi7JpsfqlIx3yr5aoDlLpP q5PjrTikvck83uFOo4oMjrS2zkiYInvKFAV/HWK9u6OlE/EuxmKg1xsHzfCMDe9Z -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:19 2026 by rpki-client