This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/dAyulPiI2CUkixVHAlwF-dxHMpM.roa File: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (raw, json) Hash identifier: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk= Subject key identifier: 74:0C:AE:94:F8:88:D8:25:24:8B:15:47:02:5C:05:F9:DC:47:32:93 Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Certificate serial: 019B7AC93BA03CCCC16548D85D40E0C3A7EB Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/dAyulPiI2CUkixVHAlwF-dxHMpM.roa Signing time: Thu 01 Jan 2026 18:19:26 +0000 ROA not before: Thu 01 Jan 2026 18:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208257 IP address blocks: 185.185.92.0/23 maxlen: 24 185.251.70.0/24 maxlen: 24 2a0f:6a00::/29 maxlen: 29 2a0f:f200::/29 maxlen: 29 2a10:aec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3b:a0:3c:cc:c1:65:48:d8:5d:40:e0:c3:a7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740cae94f888d825248b1547025c05f9dc473293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:67:02:1a:38:b4:32:84:ca:b0:8f:fa:28: 0d:d5:01:92:dc:68:51:31:63:aa:03:c8:59:b0:76: fb:ce:af:a7:3d:cd:05:d9:35:b3:d9:d4:f1:69:74: 14:13:08:75:1f:f8:9c:ff:72:db:a0:a9:a0:c5:67: e8:7c:03:d3:6c:ea:44:9a:86:2e:7e:61:87:8b:8a: f4:e0:7b:4b:7a:6e:a8:48:40:d2:38:b3:7f:81:22: e4:77:37:11:99:06:c1:f7:33:7a:f3:a6:bf:d7:f1: e0:23:6f:8f:d8:96:2a:f0:d7:c7:e8:dc:6b:c4:fe: fc:83:a5:ab:fb:e4:4b:45:b0:41:bc:cf:8d:0c:63: ca:b1:76:a8:8b:78:33:4b:eb:8d:02:77:43:30:b4: c8:a1:94:bf:b2:1b:68:af:ba:db:c9:2b:48:88:2e: aa:3f:ab:2c:08:d7:58:bb:80:76:33:90:f1:92:aa: 74:66:57:3e:8f:03:c8:5c:77:7b:6e:60:17:d9:34: 1a:43:4d:dc:8c:71:89:53:b1:e5:20:e7:ce:95:d9: 22:c1:95:09:f9:ce:44:c4:74:a2:1a:41:02:05:57: c3:65:09:e9:73:99:ea:1a:5e:7f:5b:65:42:25:9a: 5b:02:7c:8e:b0:b9:c6:77:63:29:db:94:dd:13:e8: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0C:AE:94:F8:88:D8:25:24:8B:15:47:02:5C:05:F9:DC:47:32:93 X509v3 Authority Key Identifier: keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/dAyulPiI2CUkixVHAlwF-dxHMpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.92.0/23 185.251.70.0/24 IPv6: 2a0f:6a00::/29 2a0f:f200::/29 2a10:aec0::/29 Signature Algorithm: sha256WithRSAEncryption 56:e2:64:a1:72:ca:4d:a7:86:2b:29:28:a6:69:d2:61:74:e1: ea:69:da:f1:cc:83:ba:f8:3d:6a:95:6f:b9:b0:67:a7:c0:bc: 1c:74:41:83:ec:45:e3:98:8e:10:98:1a:c3:ec:85:11:18:1b: 99:24:c0:dd:4b:30:c7:67:45:60:15:b7:b4:f9:44:9f:16:83: c9:e0:52:aa:67:b6:98:f9:4f:ac:5f:03:a1:c2:f5:35:fb:12: 03:8e:c4:e2:1d:e6:57:cd:3c:46:43:68:c9:e0:8a:0a:62:ee: 07:4c:f4:45:c3:78:a2:c2:b6:d0:3d:88:f3:bb:3b:02:d2:74: 4f:64:32:9c:b1:51:5d:4c:87:f0:ed:97:8f:01:45:be:12:a1: 1f:fa:fe:25:09:90:bd:87:bb:ca:c7:fc:44:43:88:c0:a1:d4: 7c:c3:08:cc:8b:ee:8b:11:09:07:9e:e3:36:b4:ae:33:1b:58: 8e:ad:6d:26:2e:4b:47:8e:20:19:00:37:68:d2:a7:d9:2c:d6: 97:79:ac:39:d9:95:09:29:bd:d9:af:7b:d9:1b:1c:8d:01:f8: bb:14:4a:2f:67:c8:a3:d9:78:ce:f0:b4:86:3c:a1:c4:fe:09: c6:e8:3f:f7:4b:f0:5c:77:0d:77:a9:bf:09:7d:62:20:3e:77: c7:35:ac:92 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt6yTugPMzBZUjYXUDgw6frMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMTA3ZTA3OTUyYzA2OTM1OGNkM2Y4MmFhZWNlYjRjNjk0 ODNjYTkwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDBjYWU5NGY4ODhkODI1MjQ4YjE1NDcwMjVjMDVmOWRjNDczMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaBnAho4tDKEyrCP+igN1QGS3GhR MWOqA8hZsHb7zq+nPc0F2TWz2dTxaXQUEwh1H/ic/3LboKmgxWfofAPTbOpEmoYu fmGHi4r04HtLem6oSEDSOLN/gSLkdzcRmQbB9zN686a/1/HgI2+P2JYq8NfH6Nxr xP78g6Wr++RLRbBBvM+NDGPKsXaoi3gzS+uNAndDMLTIoZS/shtor7rbyStIiC6q P6ssCNdYu4B2M5Dxkqp0Zlc+jwPIXHd7bmAX2TQaQ03cjHGJU7HlIOfOldkiwZUJ +c5ExHSiGkECBVfDZQnpc5nqGl5/W2VCJZpbAnyOsLnGd2Mp25TdE+gUxQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFHQMrpT4iNglJIsVRwJcBfncRzKTMB8GA1UdIwQY MBaAFL8QfgeVLAaTWM0/gqrs60xpSDypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2It NDg2MzNkNzE4NTkwLzEvZEF5dWxQaUkyQ1VraXhWSEFsd0YtZHhITXBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2ItNDg2MzNkNzE4NTkw LzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQBublcAwQA uftGMBsEAgACMBUDBQMqD2oAAwUDKg/yAAMFAyoQrsAwDQYJKoZIhvcNAQELBQAD ggEBAFbiZKFyyk2nhispKKZp0mF04epp2vHMg7r4PWqVb7mwZ6fAvBx0QYPsReOY jhCYGsPshREYG5kkwN1LMMdnRWAVt7T5RJ8Wg8ngUqpntpj5T6xfA6HC9TX7EgOO xOId5lfNPEZDaMngigpi7gdM9EXDeKLCttA9iPO7OwLSdE9kMpyxUV1Mh/Dtl48B Rb4SoR/6/iUJkL2Hu8rH/ERDiMCh1HzDCMyL7osRCQee4za0rjMbWI6tbSYuS0eO IBkAN2jSp9ks1pd5rDnZlQkpvdmve9kbHI0B+LsUSi9nyKPZeM7wtIY8ocT+Ccbo P/dL8Fx3DXepvwl9YiA+d8c1rJI= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:15 2026 by rpki-client