This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/duSbs1Y82ux4jGzdWzwYO9FVG00.roa File: duSbs1Y82ux4jGzdWzwYO9FVG00.roa (raw, json) Hash identifier: QHGY5HrFdT382Sq+4MEu4KIOluOvbBf/5zNCTvenn7M= Subject key identifier: 76:E4:9B:B3:56:3C:DA:EC:78:8C:6C:DD:5B:3C:18:3B:D1:55:1B:4D Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836 Certificate serial: 019B783432165A0200D296413BCBB974A695 Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/duSbs1Y82ux4jGzdWzwYO9FVG00.roa Signing time: Thu 01 Jan 2026 06:17:25 +0000 ROA not before: Thu 01 Jan 2026 06:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208349 IP address blocks: 5.35.120.0/24 maxlen: 24 31.10.6.0/24 maxlen: 24 31.10.7.0/24 maxlen: 24 45.134.124.0/22 maxlen: 22 45.134.124.0/24 maxlen: 24 45.134.125.0/24 maxlen: 24 45.134.126.0/24 maxlen: 24 45.134.127.0/24 maxlen: 24 77.105.156.0/24 maxlen: 24 77.105.157.0/24 maxlen: 24 77.105.158.0/24 maxlen: 24 77.105.159.0/24 maxlen: 24 185.31.133.0/24 maxlen: 24 2a0e:7e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:32:16:5a:02:00:d2:96:41:3b:cb:b9:74:a6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836 Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76e49bb3563cdaec788c6cdd5b3c183bd1551b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f7:9f:8e:98:cf:3e:7f:3e:81:1e:f4:5f:aa: 52:29:1e:02:a6:cc:f9:b6:df:c3:95:cc:ae:8c:91: 17:2e:59:e5:54:36:4d:25:bf:25:ec:42:39:f4:fc: be:4b:87:f2:b0:79:60:dd:60:27:7b:29:8e:23:92: 54:21:82:49:24:49:f2:52:9c:ad:e2:c1:ad:39:62: 68:c7:07:a4:bc:45:8b:a5:b6:ee:db:ad:18:cb:9a: 02:da:ec:1e:b0:4f:4c:f9:90:28:18:68:32:17:6b: b7:80:b5:dd:78:04:5a:6c:96:a5:09:53:48:85:be: 12:a1:1e:f8:db:25:73:e5:7a:05:ff:56:f0:84:d7: 5f:d2:9b:57:09:11:d3:bd:fb:8f:01:9a:75:06:a1: 8a:67:9a:0f:38:99:10:f0:87:4a:03:a8:22:de:97: 9f:0b:18:36:6a:fc:ff:4a:51:05:dd:be:be:f6:e9: 79:41:5a:91:4c:06:66:56:98:64:4b:d9:d6:d3:cc: 57:98:ae:78:44:25:e9:ff:0c:7c:3e:b3:bd:ff:05: 0c:46:f5:b4:25:0a:7a:75:ca:8b:7b:f6:31:06:6f: 70:19:aa:76:54:39:0e:39:84:b0:36:8b:75:d3:fb: 3b:85:af:f9:0c:b9:4c:77:07:f5:9d:4d:5a:bd:f5: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E4:9B:B3:56:3C:DA:EC:78:8C:6C:DD:5B:3C:18:3B:D1:55:1B:4D X509v3 Authority Key Identifier: keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/duSbs1Y82ux4jGzdWzwYO9FVG00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.120.0/24 31.10.6.0/23 45.134.124.0/22 77.105.156.0/22 185.31.133.0/24 IPv6: 2a0e:7e40::/29 Signature Algorithm: sha256WithRSAEncryption 3f:d0:4b:eb:85:f7:6b:41:11:ca:b0:bb:19:62:a3:6f:2e:5c: bd:8e:7f:5b:5d:c9:37:26:5f:41:58:ba:ea:45:44:cf:fe:9d: 80:cd:9b:eb:7a:5a:37:39:88:ea:4b:53:7a:62:69:e8:25:aa: f4:97:7a:1d:54:34:79:b5:79:fd:fb:67:c5:93:91:3c:7d:ea: 19:be:62:32:43:2c:f7:6a:cd:e7:98:7a:e0:3a:14:42:c3:07: a6:ca:6f:34:9f:e2:90:c1:79:61:be:d6:5c:ba:3a:59:ae:3b: 2e:f7:af:81:02:95:a6:73:8a:75:ca:0a:ac:a7:20:ad:32:8b: a8:4e:c5:06:3c:1f:13:f8:ee:7e:92:e8:62:5e:33:bc:40:bb: 8e:6b:2d:79:5b:df:f0:ca:31:7e:73:a3:ee:a0:30:40:ed:12: ce:52:39:33:1e:42:96:61:db:96:72:b4:08:43:5b:50:5c:42: 71:ca:dd:10:77:25:e7:12:3a:05:fc:39:da:48:59:2e:5d:37: e2:eb:0f:1b:bf:4f:18:6a:68:e7:da:84:c3:7e:85:7a:10:3d: ef:8b:17:ec:41:8c:b8:14:ed:36:de:d3:9e:0e:fe:b1:ba:c9: 74:8d:e8:a6:dd:6c:d7:74:fe:c3:ce:40:62:0b:5d:eb:85:bc: 4a:b4:48:55 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NDIWWgIA0pZBO8u5dKaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWVlNTc5ZTAxMzIxOGY1NzEzODY0MTNlMmM1YjJiYzI0 NWE4MzYwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmU0OWJiMzU2M2NkYWVjNzg4YzZjZGQ1YjNjMTgzYmQxNTUxYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vefjpjPPn8+gR70X6pSKR4Cpsz5 tt/DlcyujJEXLlnlVDZNJb8l7EI59Py+S4fysHlg3WAneymOI5JUIYJJJEnyUpyt 4sGtOWJoxwekvEWLpbbu260Yy5oC2uwesE9M+ZAoGGgyF2u3gLXdeARabJalCVNI hb4SoR742yVz5XoF/1bwhNdf0ptXCRHTvfuPAZp1BqGKZ5oPOJkQ8IdKA6gi3pef Cxg2avz/SlEF3b6+9ul5QVqRTAZmVphkS9nW08xXmK54RCXp/wx8PrO9/wUMRvW0 JQp6dcqLe/YxBm9wGap2VDkOOYSwNot10/s7ha/5DLlMdwf1nU1avfWQtQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFHbkm7NWPNrseIxs3Vs8GDvRVRtNMB8GA1UdIwQY MBaAFMqu5XngEyGPVxOGQT4sWyvCRag2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQt YTVkMTE0OGYyNWJkLzEvZHVTYnMxWTgydXg0akd6ZFd6d1lPOUZWRzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQtYTVkMTE0OGYyNWJk LzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQABSN4AwQB HwoGAwQCLYZ8AwQCTWmcAwQAuR+FMA0EAgACMAcDBQMqDn5AMA0GCSqGSIb3DQEB CwUAA4IBAQA/0EvrhfdrQRHKsLsZYqNvLly9jn9bXck3Jl9BWLrqRUTP/p2AzZvr elo3OYjqS1N6YmnoJar0l3odVDR5tXn9+2fFk5E8feoZvmIyQyz3as3nmHrgOhRC wwemym80n+KQwXlhvtZcujpZrjsu96+BApWmc4p1ygqspyCtMouoTsUGPB8T+O5+ kuhiXjO8QLuOay15W9/wyjF+c6PuoDBA7RLOUjkzHkKWYduWcrQIQ1tQXEJxyt0Q dyXnEjoF/DnaSFkuXTfi6w8bv08Yamjn2oTDfoV6ED3vixfsQYy4FO023tOeDv6x usl0jeim3WzXdP7DzkBiC13rhbxKtEhV -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:27 2026 by rpki-client