This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/dYdu6qoIQ4XCeyHdAC497fGCxxs.roa File: dYdu6qoIQ4XCeyHdAC497fGCxxs.roa (raw, json) Hash identifier: oc3k4EGMJTIdaq924ORNmciOrYjNG46O7CO8iE2EBZI= Subject key identifier: 75:87:6E:EA:AA:08:43:85:C2:7B:21:DD:00:2E:3D:ED:F1:82:C7:1B Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4 Certificate serial: 019B7F15E88C41AB8074EDA21091E97385B1 Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/dYdu6qoIQ4XCeyHdAC497fGCxxs.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205510 IP address blocks: 185.215.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e8:8c:41:ab:80:74:ed:a2:10:91:e9:73:85:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75876eeaaa084385c27b21dd002e3dedf182c71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:88:b3:81:5a:b5:e0:26:e7:6b:1e:95:b3: d6:4e:ab:72:91:9e:75:9c:05:d9:5b:e7:2e:74:6c: 1c:ee:49:e8:6a:b9:92:43:59:15:7d:a0:81:87:40: 36:8c:c1:63:74:27:9e:fa:d3:54:57:d6:ce:33:28: 1d:e6:b6:10:e8:7c:f1:9b:6d:04:49:49:d2:49:e4: 1a:f2:95:44:1b:74:4e:ec:7c:df:2c:ec:d6:d3:56: 1a:45:ae:66:88:15:23:3b:aa:36:06:19:9d:17:c2: 84:84:00:f5:44:00:21:59:27:11:f6:f8:91:bd:63: cf:60:89:9d:ad:4e:67:5a:cc:e4:5c:b1:84:53:ab: 79:f2:9a:95:2d:3c:92:5f:e6:ba:d5:e9:99:84:4b: b5:2b:66:0e:d9:c8:27:c7:e3:fd:f8:33:25:96:96: 48:6f:46:71:67:3f:e9:0d:c3:c1:de:c3:4d:76:24: cf:7c:60:b1:b4:e2:48:0e:88:6e:9a:59:36:ad:ba: ea:a8:1c:36:28:f1:d1:5a:45:cf:56:15:4e:cf:23: 03:d5:8b:b5:df:59:34:ec:ee:8a:10:5e:25:05:41: b3:c9:8b:61:d4:f3:1f:5d:27:37:50:26:76:89:a9: ec:11:97:30:de:85:40:65:4f:cd:96:c6:42:21:3f: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:6E:EA:AA:08:43:85:C2:7B:21:DD:00:2E:3D:ED:F1:82:C7:1B X509v3 Authority Key Identifier: keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/dYdu6qoIQ4XCeyHdAC497fGCxxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.248.0/22 Signature Algorithm: sha256WithRSAEncryption 15:33:e9:14:a1:fa:d7:62:dc:0c:e8:ca:dd:7a:00:57:cc:27: 5a:83:2c:1f:b8:5e:7b:94:2f:64:4f:de:fc:34:8d:df:cc:7b: da:11:40:00:ce:cc:cf:f1:06:e0:c4:f9:99:46:c1:1f:c1:02: 4e:99:90:55:6a:e8:32:5e:b5:50:67:4a:73:2e:95:d2:a0:f7: 3a:b9:28:bb:be:81:d9:c6:18:a5:e4:0a:82:73:2c:b0:fb:14: c4:28:c5:f6:f1:81:1a:8c:5a:40:36:b9:f3:d3:5a:14:a7:92: 62:a5:d1:a8:1c:0d:92:59:8e:7d:2e:d6:9e:50:94:fe:67:a2: 82:80:4a:64:cb:29:6f:b1:82:66:6a:5d:81:c7:09:21:e2:89: b5:b2:c8:51:98:4c:df:4a:5f:9b:0a:88:a7:d0:47:1a:ae:b4: 10:77:fc:cb:8e:71:fd:1f:37:13:a6:82:9f:1e:95:b0:6e:0c: c4:5d:26:9a:51:aa:66:bb:27:dc:e5:5f:be:4f:36:d0:59:56: c7:6b:31:8e:b1:04:df:f1:94:08:97:1a:9e:61:a7:05:18:7d: 14:41:f1:dc:52:64:77:ba:1d:22:6f:f5:bb:55:01:45:1b:a6: 41:2b:05:44:29:7b:7c:99:59:6e:ec:d6:ea:b7:25:78:2f:66: 53:94:8c:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeiMQauAdO2iEJHpc4WxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZGNmMWU4OTdlNTk4ZWMzZjFhYjYwYmQ0NDMzMjg3MjZk ZWRhZTQwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTg3NmVlYWFhMDg0Mzg1YzI3YjIxZGQwMDJlM2RlZGYxODJjNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybSIs4FateAm52selbPWTqtykZ51 nAXZW+cudGwc7knoarmSQ1kVfaCBh0A2jMFjdCee+tNUV9bOMygd5rYQ6Hzxm20E SUnSSeQa8pVEG3RO7HzfLOzW01YaRa5miBUjO6o2BhmdF8KEhAD1RAAhWScR9viR vWPPYImdrU5nWszkXLGEU6t58pqVLTySX+a61emZhEu1K2YO2cgnx+P9+DMllpZI b0ZxZz/pDcPB3sNNdiTPfGCxtOJIDohumlk2rbrqqBw2KPHRWkXPVhVOzyMD1Yu1 31k07O6KEF4lBUGzyYth1PMfXSc3UCZ2iansEZcw3oVAZU/NlsZCIT/OHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWHbuqqCEOFwnsh3QAuPe3xgscbMB8GA1UdIwQY MBaAFAnc8eiX5ZjsPxq2C9RDMocm3trkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUt NjIzZTE5OWZkYmU5LzEvZFlkdTZxb0lRNFhDZXlIZEFDNDk3ZkdDeHhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUtNjIzZTE5OWZkYmU5 LzEvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudf4MA0G CSqGSIb3DQEBCwUAA4IBAQAVM+kUofrXYtwM6MrdegBXzCdagywfuF57lC9kT978 NI3fzHvaEUAAzszP8QbgxPmZRsEfwQJOmZBVaugyXrVQZ0pzLpXSoPc6uSi7voHZ xhil5AqCcyyw+xTEKMX28YEajFpANrnz01oUp5JipdGoHA2SWY59LtaeUJT+Z6KC gEpkyylvsYJmal2Bxwkh4om1sshRmEzfSl+bCoin0EcarrQQd/zLjnH9HzcTpoKf HpWwbgzEXSaaUapmuyfc5V++TzbQWVbHazGOsQTf8ZQIlxqeYacFGH0UQfHcUmR3 uh0ib/W7VQFFG6ZBKwVEKXt8mVlu7NbqtyV4L2ZTlIyI -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:57 2026 by rpki-client