This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/dducmgyazTdGY4TmDwS0cEZbyrc.roa File: dducmgyazTdGY4TmDwS0cEZbyrc.roa (raw, json) Hash identifier: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4= Subject key identifier: 75:DB:9C:9A:0C:9A:CD:37:46:63:84:E6:0F:04:B4:70:46:5B:CA:B7 Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Certificate serial: 019B791143674C6BD4133A99CEA63302ADAF Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/dducmgyazTdGY4TmDwS0cEZbyrc.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 185.250.108.0/24 maxlen: 24 185.250.109.0/24 maxlen: 24 185.250.110.0/24 maxlen: 24 185.250.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:43:67:4c:6b:d4:13:3a:99:ce:a6:33:02:ad:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75db9c9a0c9acd37466384e60f04b470465bcab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:28:e6:d9:27:40:d2:0c:96:cb:ec:71:6e: 56:5b:3a:35:50:d6:48:4f:bd:29:4e:39:5b:37:ed: 20:fb:f8:7a:43:d3:72:c1:f5:0f:df:1d:ed:80:cf: 6b:0f:a8:77:76:f3:c4:dc:b9:bb:b1:1c:d9:48:23: 4c:e2:ff:4e:87:2c:0d:ab:47:88:03:34:37:e7:dc: 50:02:e6:11:9f:b7:00:d9:83:c6:7c:78:98:99:35: 30:e1:25:4f:a1:45:86:37:97:e1:64:5b:e8:b4:87: 73:ba:cb:4e:76:06:09:d8:fd:23:76:3b:c3:ad:2b: 7d:d3:ea:b8:22:41:b8:de:d0:24:2e:42:b1:12:c5: 44:4f:67:9f:b8:cd:43:3d:38:54:7e:dc:29:89:0f: ce:9d:18:bf:ed:eb:3d:e4:0a:2e:ce:5a:fa:63:21: d4:ec:3a:15:1d:60:1f:0f:05:07:c6:bf:8a:40:ad: 08:b1:4c:ad:c6:fb:af:8c:f7:bf:76:a4:4e:0c:29: ae:e0:66:ad:36:bb:6b:58:82:bf:a4:22:81:07:e1: 40:e6:b6:e7:d0:22:84:fe:ef:ef:fd:83:87:98:a5: 21:47:6f:56:70:fa:d7:77:e9:59:e0:fe:28:62:3d: ba:e8:77:51:9d:2f:ad:13:d9:2e:16:d1:73:bd:d0: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DB:9C:9A:0C:9A:CD:37:46:63:84:E6:0F:04:B4:70:46:5B:CA:B7 X509v3 Authority Key Identifier: keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/dducmgyazTdGY4TmDwS0cEZbyrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.108.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:bb:05:1b:45:23:29:a0:33:7f:27:6a:b2:09:dc:a5:c0:50: d3:fd:cc:89:7f:bb:f9:19:71:3c:f4:dd:64:cd:46:88:7e:40: 29:55:ce:1b:84:75:74:04:bf:51:81:c2:8f:6f:d4:65:5d:b3: 1c:42:d9:c4:f1:8e:31:b5:d2:93:2a:d0:c9:fd:0c:6a:43:ef: 9f:0d:1b:c5:eb:4f:8e:f9:87:a0:cd:dd:df:3a:ae:ea:4b:4c: e8:d3:19:13:fe:b4:5d:aa:3b:a9:7b:22:b1:5e:ef:71:93:60: 63:34:4c:29:f1:0c:a3:0d:dc:e0:58:49:be:e9:b1:1f:e4:82: 78:08:9a:ba:d6:d2:50:91:3e:30:dd:34:9d:d7:ea:4b:82:e1: 07:86:33:52:4e:42:c3:15:4e:65:4c:a9:c5:5e:33:a5:53:f9: 6b:53:53:6c:3d:0e:a3:6b:49:24:a1:54:da:10:b3:9b:3c:f9: 3f:d4:24:9f:b2:c7:59:ea:03:e4:f5:55:f7:99:df:44:a8:c8: 87:1c:65:f0:95:3b:d1:8e:4e:d0:78:27:ab:9e:36:68:35:93: af:17:a1:06:eb:94:b2:90:d4:79:65:19:21:09:e8:c7:48:9b: 9c:37:dd:fc:5c:54:17:15:26:26:dc:fc:61:4f:3f:7a:ba:f9: 53:73:88:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUNnTGvUEzqZzqYzAq2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0 N2M2MDMwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWRiOWM5YTBjOWFjZDM3NDY2Mzg0ZTYwZjA0YjQ3MDQ2NWJjYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTwo5tknQNIMlsvscW5WWzo1UNZI T70pTjlbN+0g+/h6Q9NywfUP3x3tgM9rD6h3dvPE3Lm7sRzZSCNM4v9OhywNq0eI AzQ359xQAuYRn7cA2YPGfHiYmTUw4SVPoUWGN5fhZFvotIdzustOdgYJ2P0jdjvD rSt90+q4IkG43tAkLkKxEsVET2efuM1DPThUftwpiQ/OnRi/7es95Aouzlr6YyHU 7DoVHWAfDwUHxr+KQK0IsUytxvuvjPe/dqRODCmu4GatNrtrWIK/pCKBB+FA5rbn 0CKE/u/v/YOHmKUhR29WcPrXd+lZ4P4oYj266HdRnS+tE9kuFtFzvdB/nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXbnJoMms03RmOE5g8EtHBGW8q3MB8GA1UdIwQY MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt ZWZjZmJhOTkwN2RjLzEvZGR1Y21neWF6VGRHWTRUbUR3UzBjRVpieXJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufpsMA0G CSqGSIb3DQEBCwUAA4IBAQAbuwUbRSMpoDN/J2qyCdylwFDT/cyJf7v5GXE89N1k zUaIfkApVc4bhHV0BL9RgcKPb9RlXbMcQtnE8Y4xtdKTKtDJ/QxqQ++fDRvF60+O +Yegzd3fOq7qS0zo0xkT/rRdqjupeyKxXu9xk2BjNEwp8QyjDdzgWEm+6bEf5IJ4 CJq61tJQkT4w3TSd1+pLguEHhjNSTkLDFU5lTKnFXjOlU/lrU1NsPQ6ja0kkoVTa ELObPPk/1CSfssdZ6gPk9VX3md9EqMiHHGXwlTvRjk7QeCernjZoNZOvF6EG65Sy kNR5ZRkhCejHSJucN938XFQXFSYm3PxhTz96uvlTc4jg -----END CERTIFICATE-----Generated at Tue Feb 3 03:17:56 2026 by rpki-client