This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/dlqROMdfCCOUh5UHb5fE0VDhtw4.roa File: dlqROMdfCCOUh5UHb5fE0VDhtw4.roa (raw, json) Hash identifier: HsyhNJLABKhY0BJRKl4WOTqYOZ/p/2IS1Tc+avRiuXo= Subject key identifier: 76:5A:91:38:C7:5F:08:23:94:87:95:07:6F:97:C4:D1:50:E1:B7:0E Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18 Certificate serial: 019B797E01C9B2FB839BBB925D33973A374C Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/dlqROMdfCCOUh5UHb5fE0VDhtw4.roa Signing time: Thu 01 Jan 2026 12:17:39 +0000 ROA not before: Thu 01 Jan 2026 12:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205310 IP address blocks: 185.220.228.0/22 maxlen: 24 2a11:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:01:c9:b2:fb:83:9b:bb:92:5d:33:97:3a:37:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18 Validity Not Before: Jan 1 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=765a9138c75f0823948795076f97c4d150e1b70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:cf:8d:b1:02:cc:e0:24:d0:23:68:78:5d: bd:5a:38:53:c4:72:0d:4d:f3:27:0e:54:b0:16:ef: 78:95:5c:0c:2e:17:f5:7e:39:3b:71:cc:29:80:b1: b4:d5:d5:88:26:a3:08:5e:4d:80:e2:14:0c:c9:23: 9c:1d:83:fc:0c:55:d8:75:6f:d7:64:0b:20:b6:e4: 96:dd:63:a0:62:e8:be:0b:86:80:73:2c:88:5e:c2: 7a:6d:9c:4d:d4:cb:5a:34:0b:cc:3e:11:50:9f:17: 35:0a:29:47:63:96:a6:19:2c:4b:bd:38:20:6d:36: bd:ce:83:1a:5b:d7:92:7f:aa:0b:f2:d7:c3:45:ba: 8e:f8:97:94:91:dc:33:d5:e5:84:fb:ef:8e:5a:a2: 05:72:6c:30:4b:78:23:1f:20:e3:17:fd:ab:3b:28: 94:68:0b:1d:55:00:66:75:3a:1e:8b:9b:84:1a:02: a8:2c:4f:42:48:ef:10:fb:16:78:98:37:ad:b1:94: 79:c0:d7:ca:80:4c:ba:21:b4:a2:c2:c2:4f:4b:db: ad:e6:12:d5:26:16:85:73:e7:72:a9:e6:ba:48:33: 65:d4:04:52:2d:19:14:3a:07:79:3d:34:06:04:aa: 87:c4:bb:c9:df:4e:c4:e7:28:2d:6c:87:35:6d:76: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5A:91:38:C7:5F:08:23:94:87:95:07:6F:97:C4:D1:50:E1:B7:0E X509v3 Authority Key Identifier: keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/dlqROMdfCCOUh5UHb5fE0VDhtw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.228.0/22 IPv6: 2a11:c840::/48 Signature Algorithm: sha256WithRSAEncryption 36:71:75:05:55:f3:96:bb:a3:a3:6a:48:5a:35:d7:a4:4e:49: 59:80:a3:5a:c0:06:02:25:75:85:d5:a5:ea:6d:92:28:87:62: 0f:3a:dc:8a:11:3b:28:f5:58:fb:d7:e7:68:c1:72:90:c5:ef: b9:a3:c1:cd:6d:6b:c8:71:f9:cf:91:e8:41:1c:3b:e1:06:b8: 52:03:58:54:76:53:36:6d:fd:fd:9d:4f:80:4b:d3:f9:ea:39: 15:a8:0b:2e:0a:34:e8:71:a1:93:a6:32:40:ce:ca:4d:e1:9e: 91:23:78:ed:b0:a5:d5:b2:39:96:83:ce:d4:6a:b9:b0:21:e3: 26:cc:db:29:bd:50:13:81:0f:3d:18:f1:f0:2b:3e:ba:f1:61: d8:09:3a:5e:4d:75:eb:6e:d6:13:35:f6:e2:14:7b:94:bc:32: 78:04:11:e7:ef:94:45:f3:1f:c0:21:d2:54:06:b3:6e:56:f7: 86:04:a9:fb:b0:a9:b2:75:23:9f:7b:35:be:94:f1:6e:00:96: ff:ac:a6:69:a3:37:46:0b:d5:b2:22:d9:95:13:d6:8a:55:89: 72:24:27:9b:6d:24:53:23:2f:f5:0f:ba:f5:0c:db:a0:99:b3: 7d:15:c3:fa:d4:ba:96:0a:14:97:8e:6c:c8:a1:ab:d0:90:cf: 9b:c0:44:09 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fgHJsvuDm7uSXTOXOjdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZWY4YThhZDAwN2FhNGRjODFkNzczNjE4OWExODJiMDI4 MmJjMTgwHhcNMjYwMTAxMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjVhOTEzOGM3NWYwODIzOTQ4Nzk1MDc2Zjk3YzRkMTUwZTFiNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaHPjbECzOAk0CNoeF29WjhTxHIN TfMnDlSwFu94lVwMLhf1fjk7ccwpgLG01dWIJqMIXk2A4hQMySOcHYP8DFXYdW/X ZAsgtuSW3WOgYui+C4aAcyyIXsJ6bZxN1MtaNAvMPhFQnxc1CilHY5amGSxLvTgg bTa9zoMaW9eSf6oL8tfDRbqO+JeUkdwz1eWE+++OWqIFcmwwS3gjHyDjF/2rOyiU aAsdVQBmdToei5uEGgKoLE9CSO8Q+xZ4mDetsZR5wNfKgEy6IbSiwsJPS9ut5hLV JhaFc+dyqea6SDNl1ARSLRkUOgd5PTQGBKqHxLvJ307E5ygtbIc1bXbQXwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHZakTjHXwgjlIeVB2+XxNFQ4bcOMB8GA1UdIwQY MBaAFL3viorQB6pNyB13NhiaGCsCgrwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQt MDFiN2UyNjJlZmYxLzEvZGxxUk9NZGZDQ09VaDVVSGI1ZkUwVkRodHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQtMDFiN2UyNjJlZmYx LzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCudzkMA8E AgACMAkDBwAqEchAAAAwDQYJKoZIhvcNAQELBQADggEBADZxdQVV85a7o6NqSFo1 16ROSVmAo1rABgIldYXVpeptkiiHYg863IoROyj1WPvX52jBcpDF77mjwc1ta8hx +c+R6EEcO+EGuFIDWFR2UzZt/f2dT4BL0/nqORWoCy4KNOhxoZOmMkDOyk3hnpEj eO2wpdWyOZaDztRqubAh4ybM2ym9UBOBDz0Y8fArPrrxYdgJOl5Ndetu1hM19uIU e5S8MngEEefvlEXzH8Ah0lQGs25W94YEqfuwqbJ1I597Nb6U8W4Alv+spmmjN0YL 1bIi2ZUT1opViXIkJ5ttJFMjL/UPuvUM26CZs30Vw/rUupYKFJeObMihq9CQz5vA RAk= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:33 2026 by rpki-client