This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/dEBO9P2rTzMGj8WCAwefx9LMEiY.roa File: dEBO9P2rTzMGj8WCAwefx9LMEiY.roa (raw, json) Hash identifier: KzSq8awg8N2A2yqoLCZBBx9w+DQcNParU+eeSoLEIgc= Subject key identifier: 74:40:4E:F4:FD:AB:4F:33:06:8F:C5:82:03:07:9F:C7:D2:CC:12:26 Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83 Certificate serial: 019B76EB66FFA077C3A90A567CFE93C62967 Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/dEBO9P2rTzMGj8WCAwefx9LMEiY.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6696 IP address blocks: 194.1.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:66:ff:a0:77:c3:a9:0a:56:7c:fe:93:c6:29:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74404ef4fdab4f33068fc58203079fc7d2cc1226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:3a:b4:de:29:f9:47:a4:2b:b0:b3:fe:7e: f4:ee:66:ae:de:a8:9a:17:7e:1a:58:b0:7d:3a:5f: f9:31:f4:a5:5b:65:b5:43:8c:f2:bd:f0:07:74:2c: 1a:07:93:3f:11:0a:af:46:ec:4f:03:1a:7c:7e:88: 3e:37:39:27:8c:bb:77:c3:0c:e1:67:41:cb:5b:24: 4d:f7:72:4a:ec:50:bc:84:89:ff:f0:b6:be:37:0a: 82:fa:6e:5b:d3:e4:4c:bb:23:be:26:06:50:d1:3b: 33:a2:14:2d:2a:b3:01:a6:1e:0e:51:1d:7c:3a:f5: 7d:84:a6:4d:00:18:c9:61:c7:47:1b:96:f9:6c:09: bc:f2:5d:9e:7a:86:49:c6:02:67:b3:e1:5d:ee:07: 2f:46:89:60:2f:6b:69:05:cd:a1:86:50:40:aa:c8: 75:1d:55:f2:48:93:50:9f:2a:dc:e5:88:38:6a:c9: a7:92:13:cd:88:84:90:44:c5:76:46:b6:c0:e0:e4: 6f:8c:ba:24:dd:23:64:16:36:6e:89:fd:ea:8c:47: 94:d8:c2:0b:76:b5:83:6b:e1:76:1c:5b:f8:75:a4: ae:16:bb:14:de:ba:ca:44:38:f3:ea:77:df:bc:3a: 71:f6:ec:23:15:d4:2f:43:78:b6:85:db:8d:82:18: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:40:4E:F4:FD:AB:4F:33:06:8F:C5:82:03:07:9F:C7:D2:CC:12:26 X509v3 Authority Key Identifier: keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/dEBO9P2rTzMGj8WCAwefx9LMEiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.205.0/24 Signature Algorithm: sha256WithRSAEncryption 38:f3:e9:af:b4:10:b8:3d:9f:f3:54:c1:18:82:44:9f:00:43: 78:b0:70:14:89:31:a1:72:a8:b4:c4:b5:95:a3:91:e4:a5:10: 92:ae:1f:9f:04:ab:4d:1a:81:a9:39:7a:90:d8:52:ff:a6:3c: 7b:b4:9b:49:3f:af:d1:d3:17:c6:43:0f:38:b9:dd:5e:31:80: 60:5f:a5:36:2a:20:b6:f8:57:5b:e7:3d:59:85:d0:64:07:9c: 16:73:95:bf:d1:c8:e7:23:f9:64:58:b4:67:94:07:86:18:b5: d4:e6:8a:20:14:2d:4e:93:f4:2e:56:cc:d1:0b:6b:ed:5b:f4: 77:1f:93:ff:09:7a:d9:1b:40:49:64:75:6f:c0:bb:45:e6:9d: d0:77:9a:44:53:76:5e:ba:4e:94:9c:37:72:65:aa:c8:eb:5b: d3:90:ce:e6:74:23:90:0f:c2:57:99:b8:1d:3d:2b:46:0e:71: 1c:37:5b:ba:cd:cb:0c:f3:0b:6d:81:86:b8:5b:5b:61:a1:4f: b9:3d:00:80:00:0f:d7:3f:1f:31:cd:da:3b:dd:93:8f:ca:0e: 53:58:d4:48:2a:ae:a4:a7:75:e2:74:ba:ed:0e:18:4f:4d:f7: 2a:77:e6:85:00:56:99:70:1e:dc:7d:a1:0e:d1:2c:6d:98:80: 3d:65:1f:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262b/oHfDqQpWfP6TxilnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzUzZDE4NWZjMWViNGQwNzA0YTRiNGE4OTBmOThiOGI0 ZmVmODMwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQwNGVmNGZkYWI0ZjMzMDY4ZmM1ODIwMzA3OWZjN2QyY2MxMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k46tN4p+UekK7Cz/n707mau3qia F34aWLB9Ol/5MfSlW2W1Q4zyvfAHdCwaB5M/EQqvRuxPAxp8fog+NzknjLt3wwzh Z0HLWyRN93JK7FC8hIn/8La+NwqC+m5b0+RMuyO+JgZQ0TszohQtKrMBph4OUR18 OvV9hKZNABjJYcdHG5b5bAm88l2eeoZJxgJns+Fd7gcvRolgL2tpBc2hhlBAqsh1 HVXySJNQnyrc5Yg4asmnkhPNiISQRMV2RrbA4ORvjLok3SNkFjZuif3qjEeU2MIL drWDa+F2HFv4daSuFrsU3rrKRDjz6nffvDpx9uwjFdQvQ3i2hduNghjpFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHRATvT9q08zBo/FggMHn8fSzBImMB8GA1UdIwQY MBaAFG81PRhfwetNBwSktKiQ+YuLT++DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpVOUdGX0I2MDBIQktTMHFKRDVpNHRQNzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hMDZhNjctZDRkYy00NThlLWFiZTYt NGJiMWZkMDM3NWYyLzEvZEVCTzlQMnJUek1HajhXQ0F3ZWZ4OUxNRWlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hMDZhNjctZDRkYy00NThlLWFiZTYtNGJiMWZkMDM3NWYy LzEvYnpVOUdGX0I2MDBIQktTMHFKRDVpNHRQNzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgHNMA0G CSqGSIb3DQEBCwUAA4IBAQA48+mvtBC4PZ/zVMEYgkSfAEN4sHAUiTGhcqi0xLWV o5HkpRCSrh+fBKtNGoGpOXqQ2FL/pjx7tJtJP6/R0xfGQw84ud1eMYBgX6U2KiC2 +Fdb5z1ZhdBkB5wWc5W/0cjnI/lkWLRnlAeGGLXU5oogFC1Ok/QuVszRC2vtW/R3 H5P/CXrZG0BJZHVvwLtF5p3Qd5pEU3Zeuk6UnDdyZarI61vTkM7mdCOQD8JXmbgd PStGDnEcN1u6zcsM8wttgYa4W1thoU+5PQCAAA/XPx8xzdo73ZOPyg5TWNRIKq6k p3XidLrtDhhPTfcqd+aFAFaZcB7cfaEO0SxtmIA9ZR/l -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:22 2026 by rpki-client