This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DSqGWzszktx5ge8TMN_q6dqEmCw.roa File: DSqGWzszktx5ge8TMN_q6dqEmCw.roa (raw, json) Hash identifier: 7Izh9q+sMQpLbqQcevT8vpW4w1d0hd5Vm2zovm1QFww= Subject key identifier: 0D:2A:86:5B:3B:33:92:DC:79:81:EF:13:30:DF:EA:E9:DA:84:98:2C Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E27BB7C7D110D023EAAB2B1D972E7 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DSqGWzszktx5ge8TMN_q6dqEmCw.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41653 IP address blocks: 185.119.254.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:27:bb:7c:7d:11:0d:02:3e:aa:b2:b1:d9:72:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d2a865b3b3392dc7981ef1330dfeae9da84982c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:9f:af:df:55:da:91:00:df:d0:2d:3e:5f: 5a:ce:94:1f:54:af:13:90:e7:95:0b:27:b8:53:50: 5b:d3:ae:02:6c:9c:90:26:36:fb:26:37:1f:dc:24: 67:09:19:1d:46:48:9f:ac:e2:20:5f:aa:d4:06:a0: 98:97:83:e9:42:f0:4d:52:50:0e:ac:02:fb:57:51: 20:f0:8f:3f:3e:08:b9:59:4c:83:08:d1:bb:a3:cd: e6:67:04:bc:b8:c5:cc:f5:fc:d4:78:f1:f0:f6:22: 99:ac:c2:0e:0d:4c:46:c9:1d:21:d8:dd:88:d6:fe: e9:65:fe:85:07:99:27:2d:95:7e:e0:89:b8:33:18: 60:77:fd:d8:59:ef:30:3f:48:53:ae:87:a6:56:d1: 70:87:ff:b4:d6:cd:0b:06:14:fa:c7:d6:82:c5:1d: 19:5a:4c:46:92:31:54:bd:5e:8b:69:b0:d7:10:c4: 2c:b6:eb:bb:ad:79:b8:27:32:00:dd:f7:b7:31:ce: da:72:fb:36:6e:c0:70:5c:ef:b9:2a:66:dc:85:2e: 14:6b:09:49:85:49:8c:9e:ca:7c:19:66:71:f7:96: 01:80:53:12:3e:2a:a6:f1:ba:0b:37:a4:ee:7c:0e: 96:ab:e0:af:dc:e4:1d:f3:36:86:dd:fa:fb:d1:07: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2A:86:5B:3B:33:92:DC:79:81:EF:13:30:DF:EA:E9:DA:84:98:2C X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DSqGWzszktx5ge8TMN_q6dqEmCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.254.0/24 Signature Algorithm: sha256WithRSAEncryption aa:b1:26:2e:15:df:c8:b4:3f:01:f3:ff:fe:a4:30:ac:4b:2c: 9d:3e:0d:3b:7a:36:b2:80:da:8b:5a:91:74:7a:d3:28:2a:da: 21:b8:d3:58:2e:a6:19:35:dd:82:53:6e:c8:87:f6:05:e8:78: 59:6f:8c:bc:8e:44:78:93:86:08:0a:f1:e4:37:85:2c:59:76: b9:63:87:80:8c:6d:0b:38:7d:d9:b0:0a:e7:38:09:8d:81:cc: c1:eb:8f:a6:35:0c:e4:d4:e0:eb:85:02:a7:88:8a:59:2d:24: 13:e0:8b:2d:6b:62:5c:57:56:7d:82:1f:54:69:d2:7f:7c:11: 06:ee:b3:34:04:72:51:39:71:d2:7f:38:a3:d5:a8:ed:fa:e3: 6f:06:c2:81:01:d0:2b:0c:0d:9d:d0:ff:2c:65:95:60:07:4f: c7:fc:45:e6:ff:e3:c2:06:fe:7e:5d:56:3b:15:e1:ca:2a:2f: 6e:3d:24:c0:b8:92:ff:86:d5:8e:62:72:0c:7c:f7:43:61:a1: c1:29:be:e0:6b:e7:52:dc:06:12:f2:7b:3b:97:4e:e9:73:59: 45:36:62:e8:8e:d0:ef:be:2d:89:09:4e:73:9e:6a:ed:ff:97: c2:15:94:ec:fa:65:4e:bf:52:ca:59:8d:26:fe:cd:1d:3f:ab: 84:ae:f4:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fie7fH0RDQI+qrKx2XLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDJhODY1YjNiMzM5MmRjNzk4MWVmMTMzMGRmZWFlOWRhODQ5ODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Omfr99V2pEA39AtPl9azpQfVK8T kOeVCye4U1Bb064CbJyQJjb7Jjcf3CRnCRkdRkifrOIgX6rUBqCYl4PpQvBNUlAO rAL7V1Eg8I8/Pgi5WUyDCNG7o83mZwS8uMXM9fzUePHw9iKZrMIODUxGyR0h2N2I 1v7pZf6FB5knLZV+4Im4Mxhgd/3YWe8wP0hTroemVtFwh/+01s0LBhT6x9aCxR0Z WkxGkjFUvV6LabDXEMQstuu7rXm4JzIA3fe3Mc7acvs2bsBwXO+5KmbchS4UawlJ hUmMnsp8GWZx95YBgFMSPiqm8boLN6TufA6Wq+Cv3OQd8zaG3fr70QeFXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0qhls7M5LceYHvEzDf6unahJgsMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvRFNxR1d6c3prdHg1Z2U4VE1OX3E2ZHFFbUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXf+MA0G CSqGSIb3DQEBCwUAA4IBAQCqsSYuFd/ItD8B8//+pDCsSyydPg07ejaygNqLWpF0 etMoKtohuNNYLqYZNd2CU27Ih/YF6HhZb4y8jkR4k4YICvHkN4UsWXa5Y4eAjG0L OH3ZsArnOAmNgczB64+mNQzk1ODrhQKniIpZLSQT4Ista2JcV1Z9gh9UadJ/fBEG 7rM0BHJROXHSfzij1ajt+uNvBsKBAdArDA2d0P8sZZVgB0/H/EXm/+PCBv5+XVY7 FeHKKi9uPSTAuJL/htWOYnIMfPdDYaHBKb7ga+dS3AYS8ns7l07pc1lFNmLojtDv vi2JCU5znmrt/5fCFZTs+mVOv1LKWY0m/s0dP6uErvTQ -----END CERTIFICATE-----Generated at Mon Jan 19 20:27:37 2026 by rpki-client