This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/dvl1qc6F1GgOMamGgtlUjjsOAmg.roa File: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (raw, json) Hash identifier: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E= Subject key identifier: 76:F9:75:A9:CE:85:D4:68:0E:31:A9:86:82:D9:54:8E:3B:0E:02:68 Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019B77C6E49E447E19EBB97D9E0062D3CB3F Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/dvl1qc6F1GgOMamGgtlUjjsOAmg.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15511 IP address blocks: 185.38.28.0/22 maxlen: 24 185.95.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e4:9e:44:7e:19:eb:b9:7d:9e:00:62:d3:cb:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76f975a9ce85d4680e31a98682d9548e3b0e0268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:c6:c5:64:92:77:03:24:aa:83:3c:1b:30: a4:57:47:3b:50:9c:25:b7:27:0a:1f:15:3f:da:f1: c6:78:eb:9c:21:96:b2:45:e4:c8:2a:82:fb:b6:f4: ad:d9:34:f6:c2:c9:9f:1b:e0:4f:fd:6b:a4:33:ec: ef:be:fc:8f:3c:a8:b5:d2:43:18:9e:56:14:8d:58: 90:85:f1:43:b8:4f:6d:16:93:f2:14:84:2c:62:69: 60:e2:90:6a:18:f9:66:54:8b:ab:92:37:70:f1:ac: e4:0c:65:b6:64:bc:e4:43:c3:b2:4d:a9:e2:43:42: 5d:e7:a9:20:6a:46:04:da:88:99:6d:ed:1c:e1:9a: 81:c7:07:e3:59:48:cb:8b:bc:2f:b3:af:84:ea:22: 66:b3:87:80:fb:1f:41:c1:e4:6b:eb:8f:58:12:e9: 1b:82:c9:4e:03:0e:a1:37:40:27:bf:cf:62:61:fb: 36:af:32:57:d4:4d:cb:97:ac:71:17:bc:cb:64:d5: 62:a3:fe:7f:ad:1c:70:81:ff:0a:24:3c:c7:72:9a: 1e:5b:ce:2a:9a:3c:d0:bf:0c:13:f7:44:86:77:4c: 00:2b:31:fb:91:65:04:fc:6f:60:57:3f:48:7d:bd: 6f:69:c5:19:40:54:ef:f8:cd:f1:5e:bd:25:b8:e4: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F9:75:A9:CE:85:D4:68:0E:31:A9:86:82:D9:54:8E:3B:0E:02:68 X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/dvl1qc6F1GgOMamGgtlUjjsOAmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.28.0/22 185.95.252.0/22 Signature Algorithm: sha256WithRSAEncryption 99:92:7d:3e:58:3b:ef:4e:78:ee:d6:69:c6:ff:93:9f:c0:57: 03:1d:30:be:0b:51:0e:20:70:58:66:78:c9:c8:ff:b3:28:fc: 2c:c6:67:db:aa:19:ea:f0:ca:72:f6:e8:82:3f:fa:79:12:c9: b4:be:a4:22:02:58:92:00:b4:8e:0b:07:59:33:5c:e0:38:73: c1:3d:97:e3:86:b6:aa:ec:f0:80:86:1c:87:77:99:28:bf:20: 2b:56:f4:f1:15:e7:60:6f:3e:73:6c:a2:84:5d:1e:37:c2:39: 5f:ea:ec:bf:0e:fc:df:f3:06:d5:bd:72:ff:3a:68:82:bb:de: 89:b3:1b:61:f9:85:fe:4e:b2:68:28:b9:2f:30:05:64:b9:df: 41:8d:6c:ff:36:e3:9c:5f:39:80:dd:80:ca:45:51:fa:dc:2c: cd:50:b5:27:35:55:c1:cc:80:1d:ba:87:6f:45:c5:56:e9:38: 4f:a5:0d:63:bc:36:76:99:d1:11:ca:b1:ca:b4:fb:f6:cf:70: 51:2a:57:1d:00:03:38:b7:e7:53:ac:30:8d:d0:d2:bf:26:9b: 96:bb:56:b3:a1:82:78:35:c0:f1:bd:e4:b2:99:b8:88:82:54: a8:54:e3:de:f1:5f:da:ed:55:b5:20:b3:35:dd:e4:ba:9b:79: d0:1e:e9:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuSeRH4Z67l9ngBi08s/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmY5NzVhOWNlODVkNDY4MGUzMWE5ODY4MmQ5NTQ4ZTNiMGUwMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wXGxWSSdwMkqoM8GzCkV0c7UJwl tycKHxU/2vHGeOucIZayReTIKoL7tvSt2TT2wsmfG+BP/WukM+zvvvyPPKi10kMY nlYUjViQhfFDuE9tFpPyFIQsYmlg4pBqGPlmVIurkjdw8azkDGW2ZLzkQ8OyTani Q0Jd56kgakYE2oiZbe0c4ZqBxwfjWUjLi7wvs6+E6iJms4eA+x9BweRr649YEukb gslOAw6hN0Anv89iYfs2rzJX1E3Ll6xxF7zLZNVio/5/rRxwgf8KJDzHcpoeW84q mjzQvwwT90SGd0wAKzH7kWUE/G9gVz9Ifb1vacUZQFTv+M3xXr0luOR9WwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHb5danOhdRoDjGphoLZVI47DgJoMB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvZHZsMXFjNkYxR2dPTWFtR2d0bFVqanNPQW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSYcAwQC uV/8MA0GCSqGSIb3DQEBCwUAA4IBAQCZkn0+WDvvTnju1mnG/5OfwFcDHTC+C1EO IHBYZnjJyP+zKPwsxmfbqhnq8Mpy9uiCP/p5Esm0vqQiAliSALSOCwdZM1zgOHPB PZfjhraq7PCAhhyHd5kovyArVvTxFedgbz5zbKKEXR43wjlf6uy/Dvzf8wbVvXL/ OmiCu96Jsxth+YX+TrJoKLkvMAVkud9BjWz/NuOcXzmA3YDKRVH63CzNULUnNVXB zIAduodvRcVW6ThPpQ1jvDZ2mdERyrHKtPv2z3BRKlcdAAM4t+dTrDCN0NK/JpuW u1azoYJ4NcDxveSymbiIglSoVOPe8V/a7VW1ILM13eS6m3nQHunj -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:49 2026 by rpki-client