This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/DhX1AL3YLB9SdItGYNcjsUvsOGE.roa File: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (raw, json) Hash identifier: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g= Subject key identifier: 0E:15:F5:00:BD:D8:2C:1F:52:74:8B:46:60:D7:23:B1:4B:EC:38:61 Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49 Certificate serial: 019B7C12E058E4692CF1361F7546360FC164 Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/DhX1AL3YLB9SdItGYNcjsUvsOGE.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203412 IP address blocks: 79.142.36.0/24 maxlen: 24 79.142.44.0/22 maxlen: 22 185.125.172.0/22 maxlen: 22 2a07:f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e0:58:e4:69:2c:f1:36:1f:75:46:36:0f:c1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e15f500bdd82c1f52748b4660d723b14bec3861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:c3:43:78:ef:7a:e7:67:09:d1:d3:02:4e: fc:c3:39:0d:19:d6:5a:3e:ab:0c:2d:43:1a:6a:aa: 96:a5:75:16:70:62:0f:1d:d8:3c:a6:65:d3:a6:5c: 57:87:17:1d:60:3f:a2:6d:80:38:34:a1:9d:a0:87: 1c:36:05:62:df:79:0b:d8:59:71:97:84:9c:24:dd: ba:65:e1:41:72:a7:e8:24:32:98:93:08:e3:1c:f1: 44:b1:66:19:43:c9:09:cf:2b:82:3f:fe:1b:62:a6: 82:61:9b:dd:f0:0c:60:61:a8:5d:1b:b6:3a:9b:05: 15:0c:d7:16:fa:6f:49:9c:69:8f:7b:da:94:d8:80: 55:17:a8:8e:ec:cf:96:c1:fd:ce:7f:62:32:fe:32: 18:67:75:fc:ee:83:2b:02:4b:cb:c1:0e:d3:98:c7: 05:5c:93:6b:42:da:8a:66:f7:90:6a:d8:d4:0e:40: e4:a1:31:59:74:57:0c:57:4e:23:e6:1d:94:e5:d0: 05:f4:25:0c:77:83:2a:ff:91:4a:24:2a:eb:f7:01: cc:d0:83:01:8e:64:f3:73:e3:63:ac:15:3e:7f:5d: 22:ba:52:fd:db:ba:aa:8f:c9:b9:05:01:06:2b:85: 7d:3c:e9:e3:69:b9:23:8f:b9:68:57:fe:41:39:a9: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:15:F5:00:BD:D8:2C:1F:52:74:8B:46:60:D7:23:B1:4B:EC:38:61 X509v3 Authority Key Identifier: keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/DhX1AL3YLB9SdItGYNcjsUvsOGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.142.36.0/24 79.142.44.0/22 185.125.172.0/22 IPv6: 2a07:f00::/29 Signature Algorithm: sha256WithRSAEncryption 77:f3:1e:be:fc:41:45:a5:d5:d0:34:33:63:10:5a:5b:7a:bf: df:24:e6:a9:85:66:f6:8b:d0:3d:a7:7d:28:2f:71:2a:2c:af: 19:c2:ac:a8:c0:32:d9:95:0d:1c:6f:bd:8c:4d:c5:a8:41:82: 72:17:c7:8b:33:26:9d:c8:86:c2:7c:d3:33:07:40:50:4d:97: 5d:71:b1:b6:35:63:18:1b:7c:46:30:3a:60:66:9a:45:b5:ff: 2e:d3:76:1c:12:d6:cc:47:1e:8a:de:ab:e3:6d:4e:bd:ba:2a: e2:ec:68:a4:78:77:25:77:60:9e:12:c9:dd:dd:27:93:76:b3: a9:55:48:73:b8:56:4d:c5:f5:81:49:80:3b:db:04:6d:dc:86: 5a:67:f2:ac:b6:ac:c6:f5:fa:86:44:a2:4f:fa:b1:46:ef:af: ca:b3:4e:d2:a9:10:c3:6f:62:d7:2b:dd:a3:0b:ac:ed:69:f2: f3:85:33:55:83:4d:64:8b:3a:16:e5:1a:f4:e6:df:76:fd:a8: cb:4a:34:00:04:dd:02:b7:80:b2:d7:f1:ce:1c:6a:d2:79:d0: ca:10:07:ac:c6:e6:95:74:dd:75:0b:8a:6a:6d:d9:25:36:27: 3b:8e:ab:2e:50:61:c4:61:d5:a8:03:e8:a5:c9:11:d4:64:07: 98:f0:28:0c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8EuBY5Gks8TYfdUY2D8FkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmJkODg4N2RhODQ0NzEzMThkODM4ODRhYzAwNWYwMWI0 NGZkNDkwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE1ZjUwMGJkZDgyYzFmNTI3NDhiNDY2MGQ3MjNiMTRiZWMzODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwfDQ3jveudnCdHTAk78wzkNGdZa PqsMLUMaaqqWpXUWcGIPHdg8pmXTplxXhxcdYD+ibYA4NKGdoIccNgVi33kL2Flx l4ScJN26ZeFBcqfoJDKYkwjjHPFEsWYZQ8kJzyuCP/4bYqaCYZvd8AxgYahdG7Y6 mwUVDNcW+m9JnGmPe9qU2IBVF6iO7M+Wwf3Of2Iy/jIYZ3X87oMrAkvLwQ7TmMcF XJNrQtqKZveQatjUDkDkoTFZdFcMV04j5h2U5dAF9CUMd4Mq/5FKJCrr9wHM0IMB jmTzc+NjrBU+f10iulL927qqj8m5BQEGK4V9POnjabkjj7loV/5BOalZmQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFA4V9QC92CwfUnSLRmDXI7FL7DhhMB8GA1UdIwQY MBaAFGH72Ih9qERxMY2DiErABfAbRP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEt Y2VjOWUxN2Y1MDRiLzEvRGhYMUFMM1lMQjlTZEl0R1lOY2pzVXZzT0dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEtY2VjOWUxN2Y1MDRi LzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAT44kAwQC T44sAwQCuX2sMA0EAgACMAcDBQMqBw8AMA0GCSqGSIb3DQEBCwUAA4IBAQB38x6+ /EFFpdXQNDNjEFpber/fJOaphWb2i9A9p30oL3EqLK8ZwqyowDLZlQ0cb72MTcWo QYJyF8eLMyadyIbCfNMzB0BQTZddcbG2NWMYG3xGMDpgZppFtf8u03YcEtbMRx6K 3qvjbU69uiri7GikeHcld2CeEsnd3SeTdrOpVUhzuFZNxfWBSYA72wRt3IZaZ/Ks tqzG9fqGRKJP+rFG76/Ks07SqRDDb2LXK92jC6ztafLzhTNVg01kizoW5Rr05t92 /ajLSjQABN0Ct4Cy1/HOHGrSedDKEAesxuaVdN11C4pqbdklNic7jqsuUGHEYdWo A+ilyRHUZAeY8CgM -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:29 2026 by rpki-client