This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa File: DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa (raw, json) Hash identifier: HGxEJ7LQfFiHhcT+DYcnCzFrTwYKp05D1m1E5DMnD6I= Subject key identifier: 0E:F0:E6:64:7C:6B:EC:D2:D5:0B:64:A1:15:B8:EA:0D:63:15:3D:25 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 019B7758E2E80F3FA7FA145AD99B8FAB1BCB Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211179 IP address blocks: 185.55.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e2:e8:0f:3f:a7:fa:14:5a:d9:9b:8f:ab:1b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ef0e6647c6becd2d50b64a115b8ea0d63153d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:9b:c9:81:84:01:75:e4:56:9f:9b:28:1f: 54:e2:30:d3:ff:84:f8:4d:63:24:7c:52:2e:94:5c: 13:44:87:51:e3:a8:d4:20:1a:fc:9e:32:99:d5:0d: a3:87:d1:58:84:b6:f9:d0:a0:d7:82:78:e6:57:c4: 8f:80:cd:02:b4:eb:13:ad:15:c5:09:02:09:9c:38: e4:47:5c:60:ce:bc:da:80:13:b1:11:5a:2d:0d:79: a8:77:9f:18:a8:8b:64:09:84:a3:29:2f:37:44:6c: b8:aa:e6:80:8e:07:3e:0c:be:5a:7b:b8:08:a3:1b: f7:87:63:c2:07:0a:57:90:7c:91:fe:fa:8e:29:b3: 44:d3:7c:f3:45:72:0d:1c:47:f2:48:07:60:b7:52: c3:b4:44:5a:5f:35:c0:f9:94:0c:96:4c:3a:91:6d: 58:5b:02:8d:06:c6:61:36:6e:94:00:63:19:4e:0e: 7d:b3:a4:ba:9d:85:58:cc:fc:d3:1b:c0:b2:4d:78: 74:94:ea:b0:3c:66:df:6c:ba:4c:bf:04:2f:14:95: 09:3a:3f:0f:0c:28:71:72:c4:a0:f7:6a:47:53:06: d6:db:30:71:48:e0:a9:6f:18:3e:82:fa:e0:97:34: c3:b2:c4:31:c2:c8:c5:ac:5a:39:53:ea:5d:c8:53: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F0:E6:64:7C:6B:EC:D2:D5:0B:64:A1:15:B8:EA:0D:63:15:3D:25 X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.240.0/22 Signature Algorithm: sha256WithRSAEncryption 02:d0:7f:41:cd:0e:57:a2:a2:9f:b5:44:6f:f9:7d:cd:d6:9d: f6:6a:c6:ae:08:a9:79:40:be:43:64:c6:d2:4e:98:c0:e7:3c: f8:bf:41:59:98:80:85:11:b0:18:17:da:66:c4:61:97:31:ed: 83:72:40:28:6c:77:66:db:88:8c:42:ed:17:4f:b5:51:03:4f: a0:b0:a0:ed:17:8a:59:1b:ba:12:dd:85:77:20:fb:42:d8:f9: 42:9b:3b:89:d0:92:a0:f6:59:97:00:6c:4c:1b:0e:1e:ba:b2: da:ed:3f:49:3e:83:7b:96:ab:ca:e3:7c:b6:55:17:68:a8:cd: b7:2d:43:df:3c:b7:39:d8:b3:e6:34:08:d2:b4:ce:ab:67:f0: 3f:58:c9:bf:a3:f7:95:53:fd:0d:b5:16:4d:8c:9c:2b:74:30: a1:e1:4f:71:0f:13:d6:14:f9:92:22:00:a8:99:80:6b:af:bf: 49:55:94:c0:57:02:b1:3f:e7:63:ec:8c:88:d9:59:eb:73:57: bf:2a:bc:7d:3e:59:31:46:24:2a:65:5f:66:5d:8f:b0:25:33: 01:0b:0e:1e:f3:95:b5:b3:15:49:a5:12:33:1a:59:83:4e:4f: bb:29:c9:6c:0c:a1:e0:9d:f0:07:13:3c:d1:81:f1:61:ab:c8: b0:a0:e2:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOLoDz+n+hRa2ZuPqxvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWYwZTY2NDdjNmJlY2QyZDUwYjY0YTExNWI4ZWEwZDYzMTUzZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zebyYGEAXXkVp+bKB9U4jDT/4T4 TWMkfFIulFwTRIdR46jUIBr8njKZ1Q2jh9FYhLb50KDXgnjmV8SPgM0CtOsTrRXF CQIJnDjkR1xgzrzagBOxEVotDXmod58YqItkCYSjKS83RGy4quaAjgc+DL5ae7gI oxv3h2PCBwpXkHyR/vqOKbNE03zzRXINHEfySAdgt1LDtERaXzXA+ZQMlkw6kW1Y WwKNBsZhNm6UAGMZTg59s6S6nYVYzPzTG8CyTXh0lOqwPGbfbLpMvwQvFJUJOj8P DChxcsSg92pHUwbW2zBxSOCpbxg+gvrglzTDssQxwsjFrFo5U+pdyFM+bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7w5mR8a+zS1QtkoRW46g1jFT0lMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvRHZEbVpIeHI3TkxWQzJTaEZianFEV01WUFNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTfwMA0G CSqGSIb3DQEBCwUAA4IBAQAC0H9BzQ5XoqKftURv+X3N1p32asauCKl5QL5DZMbS TpjA5zz4v0FZmICFEbAYF9pmxGGXMe2DckAobHdm24iMQu0XT7VRA0+gsKDtF4pZ G7oS3YV3IPtC2PlCmzuJ0JKg9lmXAGxMGw4eurLa7T9JPoN7lqvK43y2VRdoqM23 LUPfPLc52LPmNAjStM6rZ/A/WMm/o/eVU/0NtRZNjJwrdDCh4U9xDxPWFPmSIgCo mYBrr79JVZTAVwKxP+dj7IyI2Vnrc1e/Krx9PlkxRiQqZV9mXY+wJTMBCw4e85W1 sxVJpRIzGlmDTk+7KclsDKHgnfAHEzzRgfFhq8iwoOJh -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:42 2026 by rpki-client