This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/DYzQZ3HML1kOQM74C8pKJfSz8O8.roa File: DYzQZ3HML1kOQM74C8pKJfSz8O8.roa (raw, json) Hash identifier: a+eEVaBY7KRUOOfQI2kBrcwN4nVpCqX6qQedal9y39E= Subject key identifier: 0D:8C:D0:67:71:CC:2F:59:0E:40:CE:F8:0B:CA:4A:25:F4:B3:F0:EF Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Certificate serial: 019B7E375735A3DB9C07EF9FAC8926B7651E Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/DYzQZ3HML1kOQM74C8pKJfSz8O8.roa Signing time: Fri 02 Jan 2026 10:18:34 +0000 ROA not before: Fri 02 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44706 IP address blocks: 185.135.128.0/24 maxlen: 24 195.191.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:57:35:a3:db:9c:07:ef:9f:ac:89:26:b7:65:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d8cd06771cc2f590e40cef80bca4a25f4b3f0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:22:ce:03:88:df:52:37:49:e2:31:d6:1c: ca:be:70:a9:82:52:70:99:d9:5a:96:e9:c5:7b:aa: d0:ab:e0:85:9e:d0:22:8b:3c:cf:bd:99:8a:6b:d2: 4b:4e:19:0a:0c:6c:65:36:4d:6d:a3:85:23:64:15: e4:48:96:7f:60:02:3f:6c:96:b6:bf:40:57:8a:39: a1:81:45:0e:b6:d9:a7:bc:83:4a:41:14:6c:c8:e4: ab:a1:16:85:05:f7:e7:08:12:fd:b3:05:f0:8a:f6: fd:bc:d3:5b:c0:92:db:19:e8:5f:a9:16:a5:d7:ed: 92:19:19:1e:a0:bb:cc:69:c5:2b:bc:fc:67:d0:7c: 80:d9:5b:1f:67:df:b3:b2:b7:26:16:43:07:02:77: e2:3c:41:ee:e6:9a:c2:39:4a:04:be:b6:c7:a4:74: df:d2:82:1b:31:c4:92:cd:a2:1f:c9:30:38:76:81: 3a:8b:c8:ba:f5:96:6f:58:6c:a9:a0:6e:8b:cb:e5: 9d:2f:d1:4f:d0:9a:8c:99:60:43:15:8c:48:b2:12: 81:07:bf:9f:ab:84:4b:b9:7e:84:df:1e:6c:76:1d: c7:db:22:12:d6:ec:f7:01:e1:e9:6d:14:f4:6c:a2: 4c:06:9f:65:7d:9e:2b:8a:10:ac:5f:91:14:bc:43: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8C:D0:67:71:CC:2F:59:0E:40:CE:F8:0B:CA:4A:25:F4:B3:F0:EF X509v3 Authority Key Identifier: keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/DYzQZ3HML1kOQM74C8pKJfSz8O8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.128.0/24 195.191.165.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:eb:b7:ad:5e:d4:dd:78:a4:21:0f:62:d6:06:5e:30:a3:ec: 90:66:93:90:3a:09:6e:2b:60:95:e2:a5:2b:04:ee:6e:d6:00: eb:28:f4:ba:e7:81:ed:58:7e:2e:bf:47:58:2c:43:e6:2a:db: 22:24:d0:65:9d:b4:5f:bd:16:eb:51:7c:61:7e:e9:15:6d:da: 82:a7:eb:bf:e8:63:15:32:6e:d1:34:e0:60:bd:b4:7b:03:2b: 01:7c:41:36:61:da:78:95:8a:93:d0:5f:26:cb:53:b8:9e:d9: 18:cb:e0:63:f0:6b:af:66:4c:4c:37:20:56:69:57:c6:04:36: c0:18:8a:e8:b8:d6:42:e6:e1:c4:f7:c2:09:88:02:8a:a1:70: db:24:82:87:40:d6:12:c4:54:f1:bc:22:cd:f4:b2:62:d8:da: ed:e5:d7:10:3d:20:f2:3a:77:42:a1:72:76:e8:57:88:da:2f: 84:7e:8d:07:da:92:41:94:c5:99:71:bb:47:7c:22:31:84:5e: 8a:1d:91:11:75:12:80:1b:bf:16:69:da:1a:6b:a7:be:be:db: 0a:30:b5:f6:16:6d:6b:98:cd:29:4b:ab:85:ce:e6:d7:19:24: e2:96:a2:97:ad:7e:35:72:0e:7f:b7:7a:80:f7:23:61:a3:d3: 14:92:51:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N1c1o9ucB++frIkmt2UeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjE0Mzk5NmRmZWZmNWY0OWNkMmIwOWI5NDFkMGQ1ZTU3 OGIzZmYwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDhjZDA2NzcxY2MyZjU5MGU0MGNlZjgwYmNhNGEyNWY0YjNmMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArroizgOI31I3SeIx1hzKvnCpglJw mdlalunFe6rQq+CFntAiizzPvZmKa9JLThkKDGxlNk1to4UjZBXkSJZ/YAI/bJa2 v0BXijmhgUUOttmnvINKQRRsyOSroRaFBffnCBL9swXwivb9vNNbwJLbGehfqRal 1+2SGRkeoLvMacUrvPxn0HyA2VsfZ9+zsrcmFkMHAnfiPEHu5prCOUoEvrbHpHTf 0oIbMcSSzaIfyTA4doE6i8i69ZZvWGypoG6Ly+WdL9FP0JqMmWBDFYxIshKBB7+f q4RLuX6E3x5sdh3H2yIS1uz3AeHpbRT0bKJMBp9lfZ4rihCsX5EUvEMWkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA2M0GdxzC9ZDkDO+AvKSiX0s/DvMB8GA1UdIwQY MBaAFL2xQ5lt/v9fSc0rCblB0NXleLP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTkt ZmMyOWNhYTVkYjdhLzEvRFl6UVozSE1MMWtPUU03NEM4cEtKZlN6OE84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTktZmMyOWNhYTVkYjdh LzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYeAAwQA w7+lMA0GCSqGSIb3DQEBCwUAA4IBAQCK67etXtTdeKQhD2LWBl4wo+yQZpOQOglu K2CV4qUrBO5u1gDrKPS654HtWH4uv0dYLEPmKtsiJNBlnbRfvRbrUXxhfukVbdqC p+u/6GMVMm7RNOBgvbR7AysBfEE2Ydp4lYqT0F8my1O4ntkYy+Bj8GuvZkxMNyBW aVfGBDbAGIrouNZC5uHE98IJiAKKoXDbJIKHQNYSxFTxvCLN9LJi2Nrt5dcQPSDy OndCoXJ26FeI2i+Efo0H2pJBlMWZcbtHfCIxhF6KHZERdRKAG78Wadoaa6e+vtsK MLX2Fm1rmM0pS6uFzubXGSTilqKXrX41cg5/t3qA9yNho9MUklHP -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:49 2026 by rpki-client