This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/DVP_0l7-8-BzmTOEfb03crpQz3g.roa File: DVP_0l7-8-BzmTOEfb03crpQz3g.roa (raw, json) Hash identifier: k1kJ0Q7wGodPAMbk3ewT0wyHEIGv0VSXLBiDpwYkrPw= Subject key identifier: 0D:53:FF:D2:5E:FE:F3:E0:73:99:33:84:7D:BD:37:72:BA:50:CF:78 Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Certificate serial: 019B7BA5447552365964D0453369B1D2EE4E Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/DVP_0l7-8-BzmTOEfb03crpQz3g.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 45.82.106.0/24 maxlen: 24 45.82.107.0/24 maxlen: 24 86.104.226.0/24 maxlen: 24 91.235.107.0/24 maxlen: 24 185.16.88.0/24 maxlen: 24 185.16.89.0/24 maxlen: 24 185.16.90.0/24 maxlen: 24 185.16.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:44:75:52:36:59:64:d0:45:33:69:b1:d2:ee:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d53ffd25efef3e0739933847dbd3772ba50cf78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:9a:7a:13:53:4b:80:c4:01:00:1a:08:bd: 22:4c:4e:ba:dd:6d:39:03:5e:61:61:02:0a:2c:0c: 45:a8:b7:ba:96:89:f4:82:44:8e:a1:a1:5b:3e:2f: cb:85:b9:0b:5e:72:7c:cd:8c:13:6d:4c:17:98:16: c8:75:4c:9e:ca:4a:4d:f3:4d:3e:cd:c3:6d:05:20: 27:ad:6a:85:b3:14:9e:df:65:77:c2:6f:82:0e:71: d8:39:fb:13:91:62:92:58:18:60:df:8e:c8:c1:be: d4:19:70:c4:53:50:13:6a:66:ff:31:8e:71:c1:b9: bb:ca:4f:12:79:3f:b8:36:72:66:5b:7f:28:c9:cf: 41:02:bd:1c:8d:70:45:d1:de:0f:b9:68:c9:10:07: 3d:80:1f:3d:f3:de:50:9d:a4:80:9a:d1:95:c3:24: fd:5b:d2:38:a4:e8:1d:1a:f8:8b:d9:b6:a0:2d:f1: 98:9d:8e:b7:09:9f:58:d5:24:ac:a3:63:b6:83:29: 32:61:b8:61:3b:be:05:b5:1f:b6:72:87:0b:89:98: d5:e9:68:f3:bd:30:5f:7a:71:a3:7d:77:83:8d:28: 7f:32:bb:5e:f1:b1:99:aa:60:63:3f:95:b4:b7:2e: c0:71:09:0d:3e:24:ba:63:b4:33:e9:4e:5d:35:01: 0f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:53:FF:D2:5E:FE:F3:E0:73:99:33:84:7D:BD:37:72:BA:50:CF:78 X509v3 Authority Key Identifier: keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/DVP_0l7-8-BzmTOEfb03crpQz3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.106.0/23 86.104.226.0/24 91.235.107.0/24 185.16.88.0/22 Signature Algorithm: sha256WithRSAEncryption 83:58:ba:30:51:a6:28:d6:01:62:7d:cd:66:6b:81:a4:a1:d5: dc:47:18:d4:00:1a:fa:d2:78:0e:8d:39:43:23:38:1f:f5:0f: 81:c5:de:ba:49:2e:18:d6:f9:c7:73:0a:82:47:d1:29:94:04: f5:09:67:e2:90:be:17:cc:a1:eb:02:be:99:69:73:c7:63:84: 90:21:04:1a:c0:53:07:2b:80:7f:15:76:c7:94:75:34:e8:c4: 6d:73:c9:f8:ec:e0:dc:2e:e7:dc:b3:c0:56:bb:4e:45:11:c5: d0:de:69:ab:88:ba:8f:75:9e:f4:3a:2f:26:7d:5b:65:17:a7: 99:db:66:c4:97:bf:d2:e9:b8:36:87:09:4a:9e:d6:a5:b3:23: 32:7c:a2:a4:85:52:e2:ce:b8:ca:57:a1:77:cd:76:cb:2f:0c: 37:5a:70:ec:a1:5f:19:7c:ef:80:87:f1:ae:be:25:ac:92:28: a9:78:d5:c8:67:63:ce:76:1d:28:2a:64:16:b1:79:59:f5:8b: 8a:40:a8:84:79:81:8a:f8:48:ec:88:f5:a1:dc:4e:5a:af:e5: 2a:d9:5f:19:7d:8d:45:25:0b:9d:13:5d:74:71:64:63:8c:46: 19:f6:e2:49:31:7c:be:0b:61:74:1e:3b:37:c5:f1:57:9d:f0: 54:98:d2:84 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pUR1UjZZZNBFM2mx0u5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh MWQwMzQwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDUzZmZkMjVlZmVmM2UwNzM5OTMzODQ3ZGJkMzc3MmJhNTBjZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNuaehNTS4DEAQAaCL0iTE663W05 A15hYQIKLAxFqLe6lon0gkSOoaFbPi/LhbkLXnJ8zYwTbUwXmBbIdUyeykpN800+ zcNtBSAnrWqFsxSe32V3wm+CDnHYOfsTkWKSWBhg347Iwb7UGXDEU1ATamb/MY5x wbm7yk8SeT+4NnJmW38oyc9BAr0cjXBF0d4PuWjJEAc9gB89895QnaSAmtGVwyT9 W9I4pOgdGviL2bagLfGYnY63CZ9Y1SSso2O2gykyYbhhO74FtR+2cocLiZjV6Wjz vTBfenGjfXeDjSh/Mrte8bGZqmBjP5W0ty7AcQkNPiS6Y7Qz6U5dNQEPqwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA1T/9Je/vPgc5kzhH29N3K6UM94MB8GA1UdIwQY MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt ZDRmMDhiZTA1MGQ1LzEvRFZQXzBsNy04LUJ6bVRPRWZiMDNjcnBRejNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1 LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLVJqAwQA VmjiAwQAW+trAwQCuRBYMA0GCSqGSIb3DQEBCwUAA4IBAQCDWLowUaYo1gFifc1m a4GkodXcRxjUABr60ngOjTlDIzgf9Q+Bxd66SS4Y1vnHcwqCR9EplAT1CWfikL4X zKHrAr6ZaXPHY4SQIQQawFMHK4B/FXbHlHU06MRtc8n47ODcLufcs8BWu05FEcXQ 3mmriLqPdZ70Oi8mfVtlF6eZ22bEl7/S6bg2hwlKntalsyMyfKKkhVLizrjKV6F3 zXbLLww3WnDsoV8ZfO+Ah/GuviWskiipeNXIZ2POdh0oKmQWsXlZ9YuKQKiEeYGK +EjsiPWh3E5ar+Uq2V8ZfY1FJQudE110cWRjjEYZ9uJJMXy+C2F0Hjs3xfFXnfBU mNKE -----END CERTIFICATE-----Generated at Tue Jan 20 07:57:11 2026 by rpki-client