This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/dkw8BE0MteDejxs-2qVpeffd5cE.roa File: dkw8BE0MteDejxs-2qVpeffd5cE.roa (raw, json) Hash identifier: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q= Subject key identifier: 76:4C:3C:04:4D:0C:B5:E0:DE:8F:1B:3E:DA:A5:69:79:F7:DD:E5:C1 Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d Certificate serial: 019B7758CC42CCC37A2787869EE2C24722DA Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/dkw8BE0MteDejxs-2qVpeffd5cE.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12693 IP address blocks: 185.127.208.0/22 maxlen: 22 2a06:cbc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:42:cc:c3:7a:27:87:86:9e:e2:c2:47:22:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=764c3c044d0cb5e0de8f1b3edaa56979f7dde5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:52:ad:20:1c:e3:50:20:62:7b:1a:3d:a1:bc: 43:18:56:9c:03:c2:d9:b9:41:42:64:c6:e9:c9:62: ab:02:bb:3d:3b:9c:56:a2:cb:05:d1:20:e2:87:ac: d9:2a:4e:54:4e:cd:15:bc:e1:73:39:11:99:4f:87: fa:ed:2b:21:eb:51:5d:6a:61:0b:52:e7:b1:43:d7: ba:bb:b8:61:5c:b8:4b:13:c7:59:92:a9:b9:8a:9c: 4b:ea:2a:b0:f0:22:9c:25:56:b1:13:49:21:9b:54: f3:67:a9:f7:e2:4b:d0:af:c3:97:ad:3b:e2:aa:bf: 7c:f6:dd:63:f6:c3:a8:ad:7f:2b:17:6c:32:1e:01: 53:7a:f0:dc:cd:0d:28:f9:09:09:97:81:34:16:2b: 8b:2b:a8:c8:8e:19:7b:f3:38:b8:6e:4e:e7:f3:41: b2:b1:28:c9:60:12:0b:e7:e5:99:ad:13:6b:f6:e4: af:58:ab:b7:44:00:25:04:a0:94:66:ab:b3:19:41: b4:fd:97:25:b5:e8:3c:b1:dd:51:ea:d6:de:c1:2a: a3:ca:7f:0a:7d:7e:1c:df:27:2a:b7:f7:5a:dd:94: e7:30:34:f8:5b:08:69:ea:2a:d9:57:7b:86:fb:48: d1:dc:7c:12:fd:9e:52:4d:d7:cc:cd:35:7b:3c:f4: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4C:3C:04:4D:0C:B5:E0:DE:8F:1B:3E:DA:A5:69:79:F7:DD:E5:C1 X509v3 Authority Key Identifier: keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/dkw8BE0MteDejxs-2qVpeffd5cE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.208.0/22 IPv6: 2a06:cbc0::/29 Signature Algorithm: sha256WithRSAEncryption 3b:a3:17:ad:54:2d:52:fc:a7:d3:e5:41:6d:bf:c0:1e:a2:b5: 82:33:4e:55:c5:a5:5e:f4:6d:24:94:7c:41:23:1c:10:72:9c: b1:db:a0:39:47:e1:24:72:6c:3a:50:b3:80:4b:b4:d9:7a:2a: 4f:77:07:8b:a0:68:e5:40:bc:36:71:d1:bf:5b:ab:3d:d8:f9: 4c:5c:6f:33:ec:a5:9c:f0:84:4b:da:f0:f3:84:24:f5:1b:a3: dc:6a:b4:b9:84:94:90:1c:2f:74:98:f6:a4:86:43:11:51:fe: d0:51:e5:ca:0b:a0:a4:cb:8d:32:a7:f0:30:d3:75:ba:7e:ff: 1a:91:1c:b1:b6:71:6f:4e:eb:9f:17:8b:af:fe:c7:9f:4e:56: 42:56:a7:ae:81:9c:d9:9b:56:f9:bb:7e:42:1c:b8:8d:80:bb: a7:dd:c2:ae:59:90:37:93:38:b6:f9:ae:d6:3b:6b:74:e0:26: 5a:65:34:a1:cf:fc:92:77:67:be:d8:c6:1f:67:5e:e7:74:b9: ec:0b:b3:fa:fc:37:ec:15:40:8f:e0:4c:26:0c:ff:81:74:7c: 55:80:bf:34:30:87:4d:3c:4b:71:3a:87:bd:0b:23:e8:e8:e9: c4:0e:b0:dc:fc:9d:40:22:41:ae:c0:fc:13:50:39:64:06:81: 40:5d:af:87 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WMxCzMN6J4eGnuLCRyLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjAwNzBhZjg3N2Q2Yjk4NmIzMDdiOWJjMDRlZjE5YzQ0 MDQzM2QwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjRjM2MwNDRkMGNiNWUwZGU4ZjFiM2VkYWE1Njk3OWY3ZGRlNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1KtIBzjUCBiexo9obxDGFacA8LZ uUFCZMbpyWKrArs9O5xWossF0SDih6zZKk5UTs0VvOFzORGZT4f67Ssh61FdamEL UuexQ9e6u7hhXLhLE8dZkqm5ipxL6iqw8CKcJVaxE0khm1TzZ6n34kvQr8OXrTvi qr989t1j9sOorX8rF2wyHgFTevDczQ0o+QkJl4E0FiuLK6jIjhl78zi4bk7n80Gy sSjJYBIL5+WZrRNr9uSvWKu3RAAlBKCUZquzGUG0/Zclteg8sd1R6tbewSqjyn8K fX4c3ycqt/da3ZTnMDT4Wwhp6irZV3uG+0jR3HwS/Z5STdfMzTV7PPS57wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHZMPARNDLXg3o8bPtqlaXn33eXBMB8GA1UdIwQY MBaAFGnwBwr4d9a5hrMHubwE7xnEQEM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZBSEN2aDMxcm1Hc3dlNXZBVHZHY1JBUXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYjlmYTYtYTkwNi00YWM0LWFjMGMt NjM4OTIyMGIyNmM2LzEvZGt3OEJFME10ZURlanhzLTJxVnBlZmZkNWNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hYjlmYTYtYTkwNi00YWM0LWFjMGMtNjM4OTIyMGIyNmM2 LzEvYWZBSEN2aDMxcm1Hc3dlNXZBVHZHY1JBUXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX/QMA0E AgACMAcDBQMqBsvAMA0GCSqGSIb3DQEBCwUAA4IBAQA7oxetVC1S/KfT5UFtv8Ae orWCM05VxaVe9G0klHxBIxwQcpyx26A5R+Ekcmw6ULOAS7TZeipPdweLoGjlQLw2 cdG/W6s92PlMXG8z7KWc8IRL2vDzhCT1G6PcarS5hJSQHC90mPakhkMRUf7QUeXK C6Cky40yp/Aw03W6fv8akRyxtnFvTuufF4uv/sefTlZCVqeugZzZm1b5u35CHLiN gLun3cKuWZA3kzi2+a7WO2t04CZaZTShz/ySd2e+2MYfZ17ndLnsC7P6/DfsFUCP 4EwmDP+BdHxVgL80MIdNPEtxOoe9CyPo6OnEDrDc/J1AIkGuwPwTUDlkBoFAXa+H -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:50 2026 by rpki-client