This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/DvP3mhZq2qu5x8i_BDUXNsKUhm4.roa File: DvP3mhZq2qu5x8i_BDUXNsKUhm4.roa (raw, json) Hash identifier: pOXeNunBUp7XMmyt7KCLlUiodAtYd49vUDG9ePb2slQ= Subject key identifier: 0E:F3:F7:9A:16:6A:DA:AB:B9:C7:C8:BF:04:35:17:36:C2:94:86:6E Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Certificate serial: 019B77C693819186A80DCE523876E305C493 Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/DvP3mhZq2qu5x8i_BDUXNsKUhm4.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394177 IP address blocks: 185.233.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:93:81:91:86:a8:0d:ce:52:38:76:e3:05:c4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ef3f79a166adaabb9c7c8bf04351736c294866e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:50:fe:25:0b:a4:2e:89:d8:9c:25:e7:1f: bd:c4:69:51:40:7c:ae:9c:77:a4:aa:ff:e0:d5:8c: df:3d:42:8a:22:26:c3:20:e6:3d:4a:3c:c5:9f:5d: aa:e7:52:44:29:3a:7a:44:b9:63:76:62:1e:bb:f7: 67:5f:fd:05:a4:77:a0:9b:59:28:19:22:bc:b2:4d: d4:3d:35:43:97:a9:bb:99:69:fc:5f:9f:0b:59:28: 9d:87:1d:72:9c:a8:91:83:99:56:06:e7:ad:a7:07: 3c:eb:3a:a3:94:95:5b:1a:4c:72:b6:ae:3b:5d:ec: cc:00:55:a6:c4:a2:03:c9:fb:22:5b:99:6e:1c:6c: fb:20:ec:fc:10:98:fd:fb:7c:26:c0:ca:11:c3:b3: b8:86:6f:b2:91:5f:74:0f:57:0c:21:22:c8:14:be: e4:40:3b:aa:2b:d7:ef:31:aa:ec:c5:8f:bd:c8:87: ae:89:48:6f:ba:fe:52:bc:f4:b3:b0:dd:3f:78:6d: f1:d0:ce:a4:43:f8:c9:7e:04:0c:80:c8:34:93:0c: 8a:2d:28:53:0f:87:e8:b5:79:0a:d7:17:05:a5:42: 6c:f4:5d:1c:5d:9a:ba:ef:b2:2c:e0:11:db:6f:c2: fe:aa:89:1b:36:c9:8e:6e:45:b6:4c:c5:c7:6e:fe: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F3:F7:9A:16:6A:DA:AB:B9:C7:C8:BF:04:35:17:36:C2:94:86:6E X509v3 Authority Key Identifier: keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/DvP3mhZq2qu5x8i_BDUXNsKUhm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.166.0/24 Signature Algorithm: sha256WithRSAEncryption 50:ef:33:b4:d8:28:98:30:cd:e7:a1:08:e0:92:9a:1f:69:5e: 96:3b:a4:f6:8c:43:8e:36:eb:0d:15:01:43:af:2d:3f:60:89: ac:2f:a3:ec:b1:ca:41:46:0f:8d:4f:17:7a:a7:d9:c4:44:d7: e8:06:32:13:13:8b:81:a2:be:d5:dc:8f:01:9b:92:0a:2a:ee: 6c:42:47:b9:0f:e3:81:1f:88:b2:68:3a:a0:df:f4:0a:52:19: 02:ca:f3:fc:c0:b6:b6:ba:d8:68:3b:08:ee:7c:34:7c:8a:16: 3e:9f:f7:21:58:56:7a:aa:a9:0d:86:92:5c:0b:40:2c:2c:64: 32:8b:87:e3:73:31:84:b5:f5:d0:1b:04:22:3b:de:c5:82:d9: c8:24:bb:f2:f9:c2:05:f4:4d:7d:91:4a:23:90:5c:51:3f:6c: d1:ae:27:e1:c3:00:23:c4:d6:ea:2b:37:f5:1a:8d:cf:73:f8: ff:2c:d2:f5:ed:77:26:e6:41:3c:dc:77:b0:d2:40:f5:0a:bb: 47:c5:b4:f2:75:24:38:ca:35:57:b8:5e:11:57:a8:1f:5a:1f: a2:03:89:95:c4:78:5f:b1:e6:91:3c:f7:49:56:b8:7f:0f:53: 66:ce:ee:8f:de:a7:2a:d4:86:a6:29:ef:1b:1a:d5:f8:87:4d: 5d:c5:80:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpOBkYaoDc5SOHbjBcSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl NWFlYWEwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWYzZjc5YTE2NmFkYWFiYjljN2M4YmYwNDM1MTczNmMyOTQ4NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nNQ/iULpC6J2Jwl5x+9xGlRQHyu nHekqv/g1YzfPUKKIibDIOY9SjzFn12q51JEKTp6RLljdmIeu/dnX/0FpHegm1ko GSK8sk3UPTVDl6m7mWn8X58LWSidhx1ynKiRg5lWBuetpwc86zqjlJVbGkxytq47 XezMAFWmxKIDyfsiW5luHGz7IOz8EJj9+3wmwMoRw7O4hm+ykV90D1cMISLIFL7k QDuqK9fvMarsxY+9yIeuiUhvuv5SvPSzsN0/eG3x0M6kQ/jJfgQMgMg0kwyKLShT D4fotXkK1xcFpUJs9F0cXZq677Is4BHbb8L+qokbNsmObkW2TMXHbv5YUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7z95oWatqrucfIvwQ1FzbClIZuMB8GA1UdIwQY MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt MzRlNGUwNjc5MzMzLzEvRHZQM21oWnEycXU1eDhpX0JEVVhOc0tVaG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemmMA0G CSqGSIb3DQEBCwUAA4IBAQBQ7zO02CiYMM3noQjgkpofaV6WO6T2jEOONusNFQFD ry0/YImsL6PsscpBRg+NTxd6p9nERNfoBjITE4uBor7V3I8Bm5IKKu5sQke5D+OB H4iyaDqg3/QKUhkCyvP8wLa2uthoOwjufDR8ihY+n/chWFZ6qqkNhpJcC0AsLGQy i4fjczGEtfXQGwQiO97FgtnIJLvy+cIF9E19kUojkFxRP2zRrifhwwAjxNbqKzf1 Go3Pc/j/LNL17Xcm5kE83Hew0kD1CrtHxbTydSQ4yjVXuF4RV6gfWh+iA4mVxHhf seaRPPdJVrh/D1Nmzu6P3qcq1IamKe8bGtX4h01dxYC6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:57 2026 by rpki-client