This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DrDFeKp2qG9SlXDACsXMCAU84as.roa File: DrDFeKp2qG9SlXDACsXMCAU84as.roa (raw, json) Hash identifier: Do7o7R+1N6kB3RpoLPuwEJZtxffiOWL+hLqzP1gx2vY= Subject key identifier: 0E:B0:C5:78:AA:76:A8:6F:52:95:70:C0:0A:C5:CC:08:05:3C:E1:AB Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775964B9BF54C6322B5B872815FFAF1E Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DrDFeKp2qG9SlXDACsXMCAU84as.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61115 IP address blocks: 86.107.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:64:b9:bf:54:c6:32:2b:5b:87:28:15:ff:af:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eb0c578aa76a86f529570c00ac5cc08053ce1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:c5:e1:2b:5e:38:60:58:e9:5a:e6:66:f7: 84:84:95:46:fc:ce:36:63:c2:8d:9b:32:5a:38:4d: 78:8b:07:f1:db:2f:06:52:4f:6f:2f:6f:5f:ed:94: 53:eb:f3:a2:5b:1c:e0:47:e7:a3:ea:5f:48:07:58: ca:be:50:63:5f:c5:bc:4f:ca:bd:ac:49:aa:cc:28: a4:3c:57:a0:6e:ac:0e:5c:3c:ad:e7:9c:c6:98:ae: 5b:5e:c5:a7:7b:ff:00:e6:d4:92:f4:5b:35:ae:f0: 45:18:21:30:d6:df:e1:5f:93:de:a4:85:db:00:ce: e6:04:a5:d2:9b:ea:79:5b:83:f6:0b:1f:23:de:30: c3:5b:2a:88:fd:5b:59:ee:00:a9:73:7f:c8:6d:66: 17:97:0f:97:04:69:9f:b7:cd:a4:29:c9:98:a0:69: a2:d6:f9:b5:3c:21:2e:4a:8e:e9:48:86:b5:99:ca: 1d:ae:14:21:8b:7c:32:80:fa:69:3a:b5:c4:d1:33: da:5f:ab:ef:4b:30:4e:db:ec:97:cb:6e:a5:e7:06: ac:62:25:9a:01:19:61:27:0b:87:66:36:0d:36:fa: af:cd:fd:d3:ab:17:bc:3e:5e:e4:7c:8d:cd:02:1c: 89:0d:23:e8:e5:63:f0:df:79:34:5f:81:43:09:28: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B0:C5:78:AA:76:A8:6F:52:95:70:C0:0A:C5:CC:08:05:3C:E1:AB X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DrDFeKp2qG9SlXDACsXMCAU84as.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.106.0/24 Signature Algorithm: sha256WithRSAEncryption 56:4f:ba:26:7d:e7:e6:65:45:5d:74:3e:f5:75:33:7b:f3:80: 02:db:bc:9b:5b:be:ec:96:20:11:1b:88:ab:42:22:f6:52:2f: f8:69:1e:33:28:37:f6:73:ed:02:ce:26:5c:4a:dc:f8:66:f3: fa:88:92:6d:0a:3e:83:8b:57:99:d6:6b:6b:18:71:24:7c:5e: ac:87:ee:43:34:b8:81:dd:16:eb:bb:1e:2c:d0:64:77:ff:72: 38:d3:84:cc:d9:62:9c:d5:29:7c:41:3e:60:b6:e0:72:d9:ed: 3f:80:fd:e9:4c:0a:1e:1e:32:4d:63:cd:ca:32:82:a9:e2:d6: 7c:9d:d3:fc:4d:32:61:79:75:77:ec:ef:fc:f1:1e:7f:e9:d2: 69:b9:6a:61:0b:9b:a6:9d:ac:f5:bc:d2:ea:a2:a8:a7:39:70: e8:73:f4:24:6e:0f:b5:a8:93:c8:8a:a0:f7:de:e1:6f:cf:97: cb:ff:fe:86:af:12:d1:d3:11:3f:35:c5:b2:7f:1b:eb:eb:24: 32:e3:7e:54:3a:8e:54:2c:61:48:a0:50:83:36:44:6c:1e:fb: 69:e1:2e:83:70:48:4c:89:d3:17:51:ad:43:1b:79:d6:dc:d5: 30:5e:3c:46:43:68:19:01:9d:6c:db:28:4e:0c:34:39:8e:38: 39:d9:ab:a2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWS5v1TGMitbhygV/68eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWIwYzU3OGFhNzZhODZmNTI5NTcwYzAwYWM1Y2MwODA1M2NlMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCjF4SteOGBY6VrmZveEhJVG/M42 Y8KNmzJaOE14iwfx2y8GUk9vL29f7ZRT6/OiWxzgR+ej6l9IB1jKvlBjX8W8T8q9 rEmqzCikPFegbqwOXDyt55zGmK5bXsWne/8A5tSS9Fs1rvBFGCEw1t/hX5PepIXb AM7mBKXSm+p5W4P2Cx8j3jDDWyqI/VtZ7gCpc3/IbWYXlw+XBGmft82kKcmYoGmi 1vm1PCEuSo7pSIa1mcodrhQhi3wygPppOrXE0TPaX6vvSzBO2+yXy26l5wasYiWa ARlhJwuHZjYNNvqvzf3Tqxe8Pl7kfI3NAhyJDSPo5WPw33k0X4FDCSiiNwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFA6wxXiqdqhvUpVwwArFzAgFPOGrMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0RyREZlS3AycUc5U2xYREFDc1hNQ0FVODRhcy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWa2ow DQYJKoZIhvcNAQELBQADggEBAFZPuiZ95+ZlRV10PvV1M3vzgALbvJtbvuyWIBEb iKtCIvZSL/hpHjMoN/Zz7QLOJlxK3Phm8/qIkm0KPoOLV5nWa2sYcSR8XqyH7kM0 uIHdFuu7HizQZHf/cjjThMzZYpzVKXxBPmC24HLZ7T+A/elMCh4eMk1jzcoygqni 1nyd0/xNMmF5dXfs7/zxHn/p0mm5amELm6adrPW80uqiqKc5cOhz9CRuD7Wok8iK oPfe4W/Pl8v//oavEtHTET81xbJ/G+vrJDLjflQ6jlQsYUigUIM2RGwe+2nhLoNw SEyJ0xdRrUMbedbc1TBePEZDaBkBnWzbKE4MNDmOODnZq6I= -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:52 2026 by rpki-client