This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/d1oY-rePzrEhSHN4TgD8ubZR5-k.roa File: d1oY-rePzrEhSHN4TgD8ubZR5-k.roa (raw, json) Hash identifier: jS9ynsZdE/EEvcdn5+RIkD8jADjtptlW575sCzvdXBM= Subject key identifier: 77:5A:18:FA:B7:8F:CE:B1:21:48:73:78:4E:00:FC:B9:B6:51:E7:E9 Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f Certificate serial: 019B76EB6CCFDFFDE3F73F03088E8F7C93E5 Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/d1oY-rePzrEhSHN4TgD8ubZR5-k.roa Signing time: Thu 01 Jan 2026 00:18:18 +0000 ROA not before: Thu 01 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24892 IP address blocks: 185.107.48.0/22 maxlen: 22 185.107.48.0/24 maxlen: 24 185.107.49.0/24 maxlen: 24 185.107.50.0/24 maxlen: 24 185.107.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6c:cf:df:fd:e3:f7:3f:03:08:8e:8f:7c:93:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=775a18fab78fceb1214873784e00fcb9b651e7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:06:7d:ab:48:fc:cb:1b:da:fe:76:46:f0: 0f:86:02:34:38:18:91:d0:64:70:dc:02:85:97:9a: ca:a7:c0:b5:26:6e:40:8c:61:28:0f:d8:68:2e:25: 78:15:2c:01:6f:6f:08:0f:e8:b2:c3:86:b5:7e:ed: be:e5:aa:2c:8d:64:c4:24:74:f0:1b:16:8b:31:55: 72:30:12:71:9a:f6:e0:a2:7b:ce:a5:b2:68:c6:de: 67:5b:8b:f5:6f:1d:e6:d1:e5:a8:5e:0f:ae:43:e9: 49:6e:b1:2f:33:db:94:60:08:89:c7:62:74:15:df: ee:2c:5b:85:b1:b0:37:e0:3d:f4:9b:54:15:34:82: 72:ab:18:83:92:cb:58:65:d2:fe:32:56:f2:61:5b: fb:4e:b0:d7:ec:f4:cb:33:7b:a2:06:39:6f:1d:49: 87:75:16:c3:68:7c:fb:a6:f0:99:7b:c8:57:3a:f7: b1:b6:75:e1:f9:bc:7b:81:6b:9a:8f:69:d3:3b:1b: 36:fb:80:de:4f:3d:e8:1d:78:97:c6:3d:34:d4:9e: e6:28:26:db:fe:0b:fe:3f:b1:38:7f:33:25:93:b1: 7d:48:3f:c0:d4:6e:f8:88:dc:0f:28:c4:36:28:ed: 57:4a:88:7f:a6:c0:c6:ed:00:05:24:f4:ee:51:6d: 3f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5A:18:FA:B7:8F:CE:B1:21:48:73:78:4E:00:FC:B9:B6:51:E7:E9 X509v3 Authority Key Identifier: keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/d1oY-rePzrEhSHN4TgD8ubZR5-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.48.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:84:7e:bc:4f:9b:6f:54:d1:6b:be:af:fb:db:d7:54:16:38: b1:32:00:7b:0e:36:6b:26:5e:d2:d6:f7:52:9b:f2:a1:76:ba: c3:9f:00:33:26:36:f9:5f:b3:2e:81:aa:1b:62:cf:b7:c1:db: 5e:e5:99:1d:24:25:43:14:dd:ca:bc:bf:fa:ef:6b:eb:92:be: e3:4b:c7:aa:08:ba:19:05:71:89:e6:81:8a:69:3d:3d:ac:93: d3:c8:6e:e5:9f:0b:57:d2:77:d7:c1:5c:e2:fb:de:26:55:c8: d6:2a:3e:43:05:00:f4:2d:5e:f4:a1:f0:f1:0a:da:23:7e:d6: 0e:4a:13:e7:a2:7f:76:c1:3d:86:4b:63:4f:dc:46:d4:bd:f1: c0:1d:61:04:18:2e:35:bc:a5:0e:c7:76:7a:9a:c2:59:02:eb: a8:35:dd:1f:d5:1d:ba:5c:b3:2d:77:e3:ae:e4:6d:86:33:05: e0:e1:32:ba:e0:e1:9a:12:be:e0:df:9b:42:54:ed:57:75:de: d9:d5:4b:fe:1f:95:ec:a0:21:e9:ab:09:2c:1f:8c:65:0b:28: 56:9f:4e:2c:b9:7d:7d:74:9d:e4:86:13:ab:c0:0b:f7:89:1f: 4d:21:f3:a2:0c:d3:08:ef:92:32:1e:ab:b5:ac:e5:5f:8d:f5: 12:65:7f:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262zP3/3j9z8DCI6PfJPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh N2IzMGYwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzVhMThmYWI3OGZjZWIxMjE0ODczNzg0ZTAwZmNiOWI2NTFlN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMYGfatI/Msb2v52RvAPhgI0OBiR 0GRw3AKFl5rKp8C1Jm5AjGEoD9hoLiV4FSwBb28ID+iyw4a1fu2+5aosjWTEJHTw GxaLMVVyMBJxmvbgonvOpbJoxt5nW4v1bx3m0eWoXg+uQ+lJbrEvM9uUYAiJx2J0 Fd/uLFuFsbA34D30m1QVNIJyqxiDkstYZdL+MlbyYVv7TrDX7PTLM3uiBjlvHUmH dRbDaHz7pvCZe8hXOvextnXh+bx7gWuaj2nTOxs2+4DeTz3oHXiXxj001J7mKCbb /gv+P7E4fzMlk7F9SD/A1G74iNwPKMQ2KO1XSoh/psDG7QAFJPTuUW0/iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHdaGPq3j86xIUhzeE4A/Lm2UefpMB8GA1UdIwQY MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt YTBhNzJhNzMzYzAyLzEvZDFvWS1yZVB6ckVoU0hONFRnRDh1YlpSNS1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWswMA0G CSqGSIb3DQEBCwUAA4IBAQCLhH68T5tvVNFrvq/729dUFjixMgB7DjZrJl7S1vdS m/KhdrrDnwAzJjb5X7MugaobYs+3wdte5ZkdJCVDFN3KvL/672vrkr7jS8eqCLoZ BXGJ5oGKaT09rJPTyG7lnwtX0nfXwVzi+94mVcjWKj5DBQD0LV70ofDxCtojftYO ShPnon92wT2GS2NP3EbUvfHAHWEEGC41vKUOx3Z6msJZAuuoNd0f1R26XLMtd+Ou 5G2GMwXg4TK64OGaEr7g35tCVO1Xdd7Z1Uv+H5XsoCHpqwksH4xlCyhWn04suX19 dJ3khhOrwAv3iR9NIfOiDNMI75IyHqu1rOVfjfUSZX8U -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:51 2026 by rpki-client