This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dvtbQFp5nerdg4d59i_4VuXSdKs.roa File: dvtbQFp5nerdg4d59i_4VuXSdKs.roa (raw, json) Hash identifier: I/w9nnfBjBVF3TWMFfMIucBX2qfPmaNuqa6J6mNKYUc= Subject key identifier: 76:FB:5B:40:5A:79:9D:EA:DD:83:87:79:F6:2F:F8:56:E5:D2:74:AB Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C2567458E3844FAF18DF8AD4EB035FED6 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dvtbQFp5nerdg4d59i_4VuXSdKs.roa Signing time: Tue 03 Feb 2026 21:27:30 +0000 ROA not before: Tue 03 Feb 2026 21:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.90.17.0/24 maxlen: 24 185.222.30.0/24 maxlen: 24 185.223.82.0/24 maxlen: 24 185.226.105.0/24 maxlen: 24 185.228.72.0/24 maxlen: 24 194.76.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:67:45:8e:38:44:fa:f1:8d:f8:ad:4e:b0:35:fe:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Feb 3 21:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76fb5b405a799deadd838779f62ff856e5d274ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:e0:be:25:2f:60:48:8d:b4:5b:84:5c:ce: e7:09:e9:3e:41:1d:3a:0b:68:83:5e:91:71:23:46: dc:9b:d7:7b:14:52:9b:41:e2:8b:b7:b1:22:ce:66: be:d3:1c:e9:11:ef:77:14:ec:8f:fb:22:ae:67:ab: 32:e2:ac:4e:76:46:9c:f7:d6:18:4c:93:85:f2:36: d9:4e:5d:ef:9c:a1:8d:ed:1b:fb:90:6e:bb:c3:a3: c6:91:28:a6:ee:3c:6f:c9:6e:9f:fa:e5:9e:f2:69: 69:f3:7d:58:7c:43:8e:e2:94:b9:fb:3e:55:60:65: 74:1c:cc:2b:ec:30:9a:27:62:17:d8:5a:7e:77:6e: 49:61:98:c7:82:3d:62:da:51:40:93:07:6d:ed:80: 99:f2:3c:c2:5d:25:d7:7b:7d:26:1b:ba:e3:b8:72: 2c:90:1e:e8:c3:eb:06:af:e7:ec:5f:bf:57:17:e7: d8:93:67:25:f7:c6:7a:ba:d4:76:01:7f:52:84:98: 69:a2:02:1d:9b:4a:e3:dd:4a:18:f1:8f:79:2c:19: 4e:46:dd:3d:f9:ea:20:7f:ff:b6:d5:1c:3f:fa:79: 4a:cf:5a:52:ad:d7:82:7a:07:c2:46:78:f4:d0:3a: 2d:b9:5b:57:53:bd:1a:69:e0:c8:4c:0f:4a:03:de: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:5B:40:5A:79:9D:EA:DD:83:87:79:F6:2F:F8:56:E5:D2:74:AB X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dvtbQFp5nerdg4d59i_4VuXSdKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.17.0/24 185.222.30.0/24 185.223.82.0/24 185.226.105.0/24 185.228.72.0/24 194.76.172.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:b6:ca:c3:f3:5c:0a:4b:c6:a2:bf:18:64:0c:dc:b4:46:d6: 1c:1c:12:18:e8:85:78:53:d8:65:2f:43:84:df:ab:1d:70:f4: ca:bd:16:d2:a5:c7:15:c0:4e:34:60:04:bc:63:ba:cc:0c:fa: d1:36:76:d0:19:ab:d5:38:6b:a7:a3:33:5e:f3:8c:bf:6f:62: 3f:f7:0c:a3:8c:2e:be:a5:2f:1c:cd:92:db:3a:cb:5d:cb:db: 56:5b:81:7f:b1:c0:21:b2:24:95:7d:87:86:f8:91:4a:1d:40: 0a:72:1d:93:e1:d4:28:98:0d:fe:a1:39:b7:22:46:cf:95:41: ba:40:96:bf:4c:be:3c:a3:35:a7:d8:76:88:14:c0:14:ae:f6: c5:80:42:2b:c8:b4:1a:f9:65:52:df:08:e3:a7:a7:30:d8:bf: ac:5b:91:6b:16:30:ad:03:56:2f:ef:36:42:a0:69:01:8c:c0: fe:3d:7f:a7:0a:e2:20:ac:31:f3:4b:50:9d:e0:71:35:7f:31: 48:bd:3a:78:c7:42:7b:a1:42:24:6e:66:f9:6c:46:5f:85:a8: 1a:b1:ea:45:df:8c:0d:ea:ed:f8:91:93:c1:5f:25:66:60:42: 4e:91:85:30:b1:2e:20:1c:51:37:10:26:97:45:b2:d9:77:3a: 96:a4:e0:5e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZwlZ0WOOET68Y34rU6wNf7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMjAzMjEyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmZiNWI0MDVhNzk5ZGVhZGQ4Mzg3NzlmNjJmZjg1NmU1ZDI3NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSLgviUvYEiNtFuEXM7nCek+QR06 C2iDXpFxI0bcm9d7FFKbQeKLt7Eizma+0xzpEe93FOyP+yKuZ6sy4qxOdkac99YY TJOF8jbZTl3vnKGN7Rv7kG67w6PGkSim7jxvyW6f+uWe8mlp831YfEOO4pS5+z5V YGV0HMwr7DCaJ2IX2Fp+d25JYZjHgj1i2lFAkwdt7YCZ8jzCXSXXe30mG7rjuHIs kB7ow+sGr+fsX79XF+fYk2cl98Z6utR2AX9ShJhpogIdm0rj3UoY8Y95LBlORt09 +eogf/+21Rw/+nlKz1pSrdeCegfCRnj00DotuVtXU70aaeDITA9KA94GXwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHb7W0BaeZ3q3YOHefYv+Fbl0nSrMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvZHZ0YlFGcDVuZXJkZzRkNTlpXzRWdVhTZEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVoRAwQA ud4eAwQAud9SAwQAueJpAwQAueRIAwQAwkysMA0GCSqGSIb3DQEBCwUAA4IBAQAf tsrD81wKS8aivxhkDNy0RtYcHBIY6IV4U9hlL0OE36sdcPTKvRbSpccVwE40YAS8 Y7rMDPrRNnbQGavVOGunozNe84y/b2I/9wyjjC6+pS8czZLbOstdy9tWW4F/scAh siSVfYeG+JFKHUAKch2T4dQomA3+oTm3IkbPlUG6QJa/TL48ozWn2HaIFMAUrvbF gEIryLQa+WVS3wjjp6cw2L+sW5FrFjCtA1Yv7zZCoGkBjMD+PX+nCuIgrDHzS1Cd 4HE1fzFIvTp4x0J7oUIkbmb5bEZfhagasepF34wN6u34kZPBXyVmYEJOkYUwsS4g HFE3ECaXRbLZdzqWpOBe -----END CERTIFICATE-----Generated at Thu Feb 5 02:39:38 2026 by rpki-client