This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/didM-3jgd7ofEKmX_ERLSP1aVGA.roa File: didM-3jgd7ofEKmX_ERLSP1aVGA.roa (raw, json) Hash identifier: yQ/BgUtLZ+iiG5WsJIpBloyOiZlBVP2ErrIVSyedXt0= Subject key identifier: 76:27:4C:FB:78:E0:77:BA:1F:10:A9:97:FC:44:4B:48:FD:5A:54:60 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A419ECE68DB17ECAEDF7F440A217 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/didM-3jgd7ofEKmX_ERLSP1aVGA.roa Signing time: Thu 01 Jan 2026 22:19:06 +0000 ROA not before: Thu 01 Jan 2026 22:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 185.192.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a4:19:ec:e6:8d:b1:7e:ca:ed:f7:f4:40:a2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76274cfb78e077ba1f10a997fc444b48fd5a5460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e7:d9:6c:79:b5:f1:78:ae:f6:0c:f4:64:89: b8:4d:d1:94:4b:82:27:97:6f:0a:59:ae:21:3c:1d: e9:4c:e5:fa:35:08:94:08:be:74:23:04:cc:d5:04: 3a:09:2e:df:b8:6c:ec:0e:46:df:cb:c3:5a:19:4e: ec:13:ca:15:51:92:74:6a:e7:0d:72:58:3c:7c:6d: 31:c7:b9:b2:79:01:1f:b0:22:6d:3f:a6:50:95:a1: 49:b3:6e:fe:44:bf:23:fd:52:a9:a0:7c:24:de:50: 33:8f:0c:81:40:12:c1:d5:b9:4f:80:07:06:15:be: c5:69:8e:65:75:30:a3:55:c3:69:a8:79:63:e7:4b: 07:52:4f:28:7a:a8:5e:f3:a2:e1:ff:37:47:cc:e7: de:ed:db:72:3a:aa:77:3e:fc:58:7b:fa:e7:5b:26: 4c:b8:03:7e:1d:55:57:a4:0f:40:f1:56:ee:b3:a6: 26:32:69:f9:be:be:85:88:c5:08:56:4b:24:bf:f8: c2:f0:7f:c1:7c:57:6e:2a:7d:60:36:fa:d3:48:ec: a0:8c:29:20:75:d0:e6:b7:29:9f:b4:db:43:98:ae: 48:dd:92:b8:4a:ce:76:0c:a9:75:65:8b:a1:59:32: df:dc:51:30:5d:41:e5:23:dd:86:72:5b:57:84:ca: 5d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:27:4C:FB:78:E0:77:BA:1F:10:A9:97:FC:44:4B:48:FD:5A:54:60 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/didM-3jgd7ofEKmX_ERLSP1aVGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.246.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:5d:c8:c6:97:e3:98:68:1b:d2:4c:eb:73:57:d2:78:84:9f: 74:6f:64:a7:2b:31:97:61:83:ab:ac:66:f3:fc:e0:2d:2f:41: e0:b8:5f:6c:c0:a6:9f:60:4d:d7:4d:b6:19:87:7e:28:ed:e8: 89:71:b2:e3:90:c2:d8:b8:e4:3b:ef:bb:55:8c:b6:15:71:7b: e6:a8:59:15:8c:ea:88:91:0a:f7:1e:7b:a3:f8:c1:8c:0a:ce: 93:38:54:81:e5:f8:33:d0:a0:e5:02:47:c1:6e:6f:75:18:a6: 6c:18:68:16:2a:8f:09:f2:85:cd:9e:b8:d8:80:7e:57:22:94: e9:58:ad:d3:e6:a7:46:5d:32:f5:fb:7b:64:54:a5:f6:20:2b: 75:4f:c4:8f:07:45:e8:8e:0e:7c:f4:b6:a3:93:05:18:95:44: 3d:29:10:56:d6:7c:f3:35:30:07:18:8e:58:01:82:69:39:25: 62:47:c9:48:3a:2d:64:52:2e:34:24:31:d8:b2:6c:d4:30:e2: ad:2b:3e:1e:19:85:65:22:0a:d1:32:ca:1a:11:8c:95:8a:99: 51:7b:d2:00:91:a7:e9:91:a9:51:ee:78:4a:1c:92:8c:ad:4a: 0d:ff:18:28:2a:60:31:54:1e:a1:49:b7:d1:11:9f:d5:ec:04: 3a:2c:30:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pKQZ7OaNsX7K7ff0QKIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjI3NGNmYjc4ZTA3N2JhMWYxMGE5OTdmYzQ0NGI0OGZkNWE1NDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjufZbHm18Xiu9gz0ZIm4TdGUS4In l28KWa4hPB3pTOX6NQiUCL50IwTM1QQ6CS7fuGzsDkbfy8NaGU7sE8oVUZJ0aucN clg8fG0xx7myeQEfsCJtP6ZQlaFJs27+RL8j/VKpoHwk3lAzjwyBQBLB1blPgAcG Fb7FaY5ldTCjVcNpqHlj50sHUk8oeqhe86Lh/zdHzOfe7dtyOqp3PvxYe/rnWyZM uAN+HVVXpA9A8Vbus6YmMmn5vr6FiMUIVkskv/jC8H/BfFduKn1gNvrTSOygjCkg ddDmtymftNtDmK5I3ZK4Ss52DKl1ZYuhWTLf3FEwXUHlI92GcltXhMpdVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYnTPt44He6HxCpl/xES0j9WlRgMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvZGlkTS0zamdkN29mRUttWF9FUkxTUDFhVkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucD2MA0G CSqGSIb3DQEBCwUAA4IBAQBcXcjGl+OYaBvSTOtzV9J4hJ90b2SnKzGXYYOrrGbz /OAtL0HguF9swKafYE3XTbYZh34o7eiJcbLjkMLYuOQ777tVjLYVcXvmqFkVjOqI kQr3Hnuj+MGMCs6TOFSB5fgz0KDlAkfBbm91GKZsGGgWKo8J8oXNnrjYgH5XIpTp WK3T5qdGXTL1+3tkVKX2ICt1T8SPB0Xojg589LajkwUYlUQ9KRBW1nzzNTAHGI5Y AYJpOSViR8lIOi1kUi40JDHYsmzUMOKtKz4eGYVlIgrRMsoaEYyViplRe9IAkafp kalR7nhKHJKMrUoN/xgoKmAxVB6hSbfREZ/V7AQ6LDCi -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:59 2026 by rpki-client