This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/x_DMZGJsbuDtxrP8_5aAtJAHah4.roa File: x_DMZGJsbuDtxrP8_5aAtJAHah4.roa (raw, json) Hash identifier: MEzmMNL5npMBSYbvubxXk2b9wk818GmjUSqjwh512m0= Subject key identifier: C7:F0:CC:64:62:6C:6E:E0:ED:C6:B3:FC:FF:96:80:B4:90:07:6A:1E Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8 Certificate serial: 019B7C127D1A8FFD2B93850BB4C4EB53EE00 Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/x_DMZGJsbuDtxrP8_5aAtJAHah4.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211717 IP address blocks: 185.51.44.0/22 maxlen: 24 185.51.44.0/23 maxlen: 23 185.51.45.0/24 maxlen: 24 185.51.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7d:1a:8f:fd:2b:93:85:0b:b4:c4:eb:53:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8 Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7f0cc64626c6ee0edc6b3fcff9680b490076a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:bb:46:47:bb:36:93:02:19:d4:c9:75:32: 67:fd:12:b3:c3:af:23:da:5b:df:cd:7f:95:88:59: 7c:c7:76:d0:bf:27:a3:1e:81:e0:01:a4:96:ef:dd: 3a:cd:12:75:72:e2:35:a1:6d:a4:eb:af:2c:47:04: b8:30:03:d1:4d:5d:06:67:1d:56:a6:b2:72:7a:d7: e4:7a:ac:c5:a0:64:1e:55:81:58:1c:2a:d1:a7:21: b2:48:8c:69:99:a4:19:19:52:e9:40:c2:6f:43:1b: 1b:14:eb:95:bd:90:23:ad:be:3b:c7:77:81:d9:58: 2d:85:7b:09:20:8d:3b:15:20:e9:85:40:c6:d9:b1: 3b:46:80:a1:3c:cd:03:da:b3:0f:af:0f:b4:46:83: 9c:98:42:33:31:75:f5:78:fa:de:cd:58:bb:6a:dc: 3c:bb:76:dd:fe:88:87:a9:c4:b4:a6:a9:18:f8:73: c0:1c:a1:21:ba:94:dd:fd:59:a7:53:2d:fe:db:8f: 0f:ab:7c:e1:57:e7:d7:cf:8a:8c:8d:48:b4:ff:d0: f5:29:eb:8e:4e:93:72:6f:06:d9:a6:2b:d2:af:37: 08:b8:60:99:2e:bf:2b:11:a6:39:3d:11:2c:67:f1: 06:83:61:01:e9:b1:81:d5:41:bd:9c:9b:5e:59:9b: 23:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F0:CC:64:62:6C:6E:E0:ED:C6:B3:FC:FF:96:80:B4:90:07:6A:1E X509v3 Authority Key Identifier: keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/x_DMZGJsbuDtxrP8_5aAtJAHah4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.44.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:d9:bf:bd:fe:b6:ed:55:2c:5b:ec:57:5d:d0:35:34:ec:e0: d8:3c:cb:05:5b:92:22:7d:5b:89:6c:0f:d3:5b:4b:3d:dc:f5: f6:05:a9:54:21:3f:ec:c0:be:25:6d:ee:b1:f4:29:f5:2f:88: d3:80:be:34:9e:94:97:c5:c4:75:ed:a0:b3:a7:58:7e:5f:f9: c6:e1:71:1e:67:e0:b7:0e:7e:ab:27:c7:3b:25:79:06:bf:2e: 58:59:90:47:aa:3b:44:84:6b:3d:ef:05:9e:c7:cd:3a:4e:0f: a3:9e:a7:6e:e5:93:10:f0:47:81:59:ce:94:94:02:21:22:93: fc:63:0e:25:e4:17:cb:64:e3:a2:07:7f:3b:07:b8:19:09:00: 69:9b:8c:bd:31:da:15:4a:88:8b:46:3d:63:b4:91:4f:dc:4a: 4a:45:52:8f:c6:24:36:23:a0:4c:f8:6e:3f:fb:84:bb:f2:6c: 32:6f:7d:54:3d:4d:8a:c1:1e:40:2f:f2:ce:67:af:ae:77:6d: 31:e2:7a:10:5d:01:ab:71:cf:3e:c6:00:01:10:f9:c6:8b:20: 8b:25:8e:d9:5d:8d:08:e8:dd:9c:06:bf:ac:4c:c4:e8:31:d7: 96:fa:af:53:a2:8a:89:ed:bb:1b:21:db:c5:ee:e7:09:75:2c: 06:11:a7:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8En0aj/0rk4ULtMTrU+4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YjYxMWEwYjdkNDMzNGI3YTIzOTVlOGNjZTdiMGUzYzli ODM4ZTgwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2YwY2M2NDYyNmM2ZWUwZWRjNmIzZmNmZjk2ODBiNDkwMDc2YTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb27Rke7NpMCGdTJdTJn/RKzw68j 2lvfzX+ViFl8x3bQvyejHoHgAaSW7906zRJ1cuI1oW2k668sRwS4MAPRTV0GZx1W prJyetfkeqzFoGQeVYFYHCrRpyGySIxpmaQZGVLpQMJvQxsbFOuVvZAjrb47x3eB 2VgthXsJII07FSDphUDG2bE7RoChPM0D2rMPrw+0RoOcmEIzMXX1ePrezVi7atw8 u3bd/oiHqcS0pqkY+HPAHKEhupTd/VmnUy3+248Pq3zhV+fXz4qMjUi0/9D1KeuO TpNybwbZpivSrzcIuGCZLr8rEaY5PREsZ/EGg2EB6bGB1UG9nJteWZsj5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfwzGRibG7g7caz/P+WgLSQB2oeMB8GA1UdIwQY MBaAFIW2EaC31DNLeiOV6MznsOPJuDjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmIt ODhjYjRlNzEwNmVhLzEveF9ETVpHSnNidUR0eHJQOF81YUF0SkFIYWg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmItODhjYjRlNzEwNmVh LzEvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTMsMA0G CSqGSIb3DQEBCwUAA4IBAQB+2b+9/rbtVSxb7Fdd0DU07ODYPMsFW5IifVuJbA/T W0s93PX2BalUIT/swL4lbe6x9Cn1L4jTgL40npSXxcR17aCzp1h+X/nG4XEeZ+C3 Dn6rJ8c7JXkGvy5YWZBHqjtEhGs97wWex806Tg+jnqdu5ZMQ8EeBWc6UlAIhIpP8 Yw4l5BfLZOOiB387B7gZCQBpm4y9MdoVSoiLRj1jtJFP3EpKRVKPxiQ2I6BM+G4/ +4S78mwyb31UPU2KwR5AL/LOZ6+ud20x4noQXQGrcc8+xgABEPnGiyCLJY7ZXY0I 6N2cBr+sTMToMdeW+q9TooqJ7bsbIdvF7ucJdSwGEacS -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:11 2026 by rpki-client