This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/gYAU9kG86HbZ3YtQGu5MLj44xqI.roa File: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (raw, json) Hash identifier: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik= Subject key identifier: 81:80:14:F6:41:BC:E8:76:D9:DD:8B:50:1A:EE:4C:2E:3E:38:C6:A2 Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226 Certificate serial: 019B797DFD9481160DFD1C7BF232BD462B5C Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/gYAU9kG86HbZ3YtQGu5MLj44xqI.roa Signing time: Thu 01 Jan 2026 12:17:38 +0000 ROA not before: Thu 01 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206211 IP address blocks: 185.247.240.0/24 maxlen: 24 185.247.243.0/24 maxlen: 24 2a0d:d180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fd:94:81:16:0d:fd:1c:7b:f2:32:bd:46:2b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226 Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=818014f641bce876d9dd8b501aee4c2e3e38c6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:18:b5:7d:29:66:7f:c0:1f:c1:32:12:cf: 49:5e:92:99:97:2c:f6:06:3f:f3:73:d7:4d:52:2d: cc:59:a7:53:45:39:26:47:5f:9d:cf:59:83:79:e7: a0:e8:a5:48:59:df:90:72:db:61:7d:c8:04:e7:ec: 81:f1:7d:5f:36:c4:49:48:a8:cd:73:6b:9a:90:40: 5f:48:64:f3:4c:cf:8e:7a:93:df:2f:cc:58:ef:12: a7:ce:65:f5:cc:f6:fa:48:0a:8b:62:0e:1b:df:ba: 08:d4:58:f1:64:25:ab:b8:c3:70:ab:7e:03:2e:53: 61:1c:26:49:5c:88:4e:e6:66:e7:bc:56:4a:d3:a5: b3:16:b4:5e:3a:be:d9:aa:2f:98:b9:ba:2f:e6:9a: f7:ed:4a:55:03:21:fd:86:7c:61:cd:4c:21:c7:43: 25:af:40:25:17:dc:68:9f:12:e0:5c:9f:48:b3:3b: 03:2a:2e:f8:bc:b4:63:14:1c:3a:1c:a2:ee:0a:c6: c4:85:65:9c:e7:75:e0:3e:a7:9e:93:b9:c9:4e:29: f3:30:09:2f:2b:18:67:3d:01:02:47:74:a7:85:1e: 42:ca:ae:07:d8:25:9f:f7:90:d9:e9:42:d2:1f:10: cb:3a:58:ca:07:8f:cc:03:d8:42:6d:af:11:22:e1: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:80:14:F6:41:BC:E8:76:D9:DD:8B:50:1A:EE:4C:2E:3E:38:C6:A2 X509v3 Authority Key Identifier: keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/gYAU9kG86HbZ3YtQGu5MLj44xqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.240.0/24 185.247.243.0/24 IPv6: 2a0d:d180::/29 Signature Algorithm: sha256WithRSAEncryption 6c:67:4a:45:ed:6c:b2:c8:b6:c8:64:9b:9b:d2:4c:d6:0c:4c: 6a:b1:45:84:af:6b:7c:ea:40:ad:14:8c:28:2e:e3:46:22:51: a7:15:6d:5c:e5:4e:43:78:5b:c0:5d:52:83:6f:79:91:19:a9: c7:49:99:00:8f:24:8f:c3:2e:75:24:14:57:35:56:50:cc:33: 2c:99:8f:32:6f:e6:77:82:eb:ea:24:de:4d:72:b2:bf:bb:c3: 91:6a:4f:2d:fc:db:8b:58:54:9f:e3:73:8f:a2:cd:02:5d:ed: 6f:93:ce:f6:59:ef:99:81:bf:87:dc:48:c0:68:7f:b9:ec:71: f9:7d:f2:3e:69:95:01:df:68:a3:08:b8:55:54:7f:b4:e1:62: 21:f0:76:69:6a:d3:a2:45:98:98:62:46:f4:0f:8b:b0:7c:db: 89:38:84:b1:e7:97:6b:e3:cc:c8:3d:44:98:2c:83:3e:e8:c3: 62:36:73:6b:d1:91:94:d1:07:28:36:18:d7:67:ad:5d:a7:bb: 58:4d:b3:82:88:7b:21:60:b5:57:3e:28:48:35:e3:b8:ac:7e: 41:68:c4:03:ce:0f:ae:90:31:46:f5:36:29:85:46:09:ca:7f: 86:66:54:95:70:33:1c:58:e8:e0:99:92:4a:7d:63:ee:99:e3: 6a:ff:c5:31 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ff2UgRYN/Rx78jK9RitcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMWU2ZDVlNzJkYWY0MTA4Y2Y2MGJkNDdlOTM2ZGYxYTFl OTcyMjYwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTgwMTRmNjQxYmNlODc2ZDlkZDhiNTAxYWVlNGMyZTNlMzhjNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLgYtX0pZn/AH8EyEs9JXpKZlyz2 Bj/zc9dNUi3MWadTRTkmR1+dz1mDeeeg6KVIWd+QctthfcgE5+yB8X1fNsRJSKjN c2uakEBfSGTzTM+OepPfL8xY7xKnzmX1zPb6SAqLYg4b37oI1FjxZCWruMNwq34D LlNhHCZJXIhO5mbnvFZK06WzFrReOr7Zqi+Yubov5pr37UpVAyH9hnxhzUwhx0Ml r0AlF9xonxLgXJ9IszsDKi74vLRjFBw6HKLuCsbEhWWc53XgPqeek7nJTinzMAkv KxhnPQECR3SnhR5Cyq4H2CWf95DZ6ULSHxDLOljKB4/MA9hCba8RIuGjtQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIGAFPZBvOh22d2LUBruTC4+OMaiMB8GA1UdIwQY MBaAFAwebV5y2vQQjPYL1H6TbfGh6XImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUt YTI5NTgxM2YxZjgyLzEvZ1lBVTlrRzg2SGJaM1l0UUd1NU1MajQ0eHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUtYTI5NTgxM2YxZjgy LzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuffwAwQA uffzMA0EAgACMAcDBQMqDdGAMA0GCSqGSIb3DQEBCwUAA4IBAQBsZ0pF7WyyyLbI ZJub0kzWDExqsUWEr2t86kCtFIwoLuNGIlGnFW1c5U5DeFvAXVKDb3mRGanHSZkA jySPwy51JBRXNVZQzDMsmY8yb+Z3guvqJN5NcrK/u8ORak8t/NuLWFSf43OPos0C Xe1vk872We+Zgb+H3EjAaH+57HH5ffI+aZUB32ijCLhVVH+04WIh8HZpatOiRZiY Ykb0D4uwfNuJOISx55dr48zIPUSYLIM+6MNiNnNr0ZGU0QcoNhjXZ61dp7tYTbOC iHshYLVXPihINeO4rH5BaMQDzg+ukDFG9TYphUYJyn+GZlSVcDMcWOjgmZJKfWPu meNq/8Ux -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:03 2026 by rpki-client