This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/Dr3OacsNKO2WTdv7Q8llg_soZvA.roa File: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (raw, json) Hash identifier: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g= Subject key identifier: 0E:BD:CE:69:CB:0D:28:ED:96:4D:DB:FB:43:C9:65:83:FB:28:66:F0 Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Certificate serial: 019B7DCA7E5D24810EE37C9EDFE2B0962179 Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/Dr3OacsNKO2WTdv7Q8llg_soZvA.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206655 IP address blocks: 185.107.204.0/22 maxlen: 24 185.200.180.0/22 maxlen: 24 2a06:4440::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7e:5d:24:81:0e:e3:7c:9e:df:e2:b0:96:21:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ebdce69cb0d28ed964ddbfb43c96583fb2866f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9d:cc:61:6b:a5:b1:91:ce:0f:8a:26:d3:a7: 83:bf:b0:fb:a4:50:6e:06:36:56:93:97:81:9c:4b: aa:f9:ff:47:d8:2e:dd:98:47:b0:de:11:a8:eb:4a: 8f:5c:e4:8d:5e:6b:66:d0:b9:1d:19:9e:e0:0c:c6: b0:de:d6:59:92:b8:b4:00:cd:2f:8b:2f:c7:9f:9d: 3f:e6:56:5a:1c:62:cc:2a:fa:41:9c:a7:ef:36:cf: 38:90:63:ec:6c:8b:7c:f2:a9:fd:1d:a8:66:b9:dd: 62:dc:9b:ef:4b:82:e1:1d:69:94:b5:a9:29:cd:8e: e5:dd:ca:f1:50:bb:57:49:d4:f4:92:f5:44:51:e5: 3f:42:93:6d:0a:6a:24:9d:00:b2:f3:80:37:9e:b5: 77:b0:d4:bb:cb:e0:6f:2b:0e:2b:1f:4a:cf:9b:64: 39:6f:9f:7f:89:2b:f2:22:82:16:11:c0:6d:d0:cd: 67:a2:3c:c9:dc:d0:f8:0c:6c:6a:b6:87:5b:0c:85: ba:b1:e8:34:e6:a2:8b:af:82:94:89:2a:42:50:61: ff:1f:08:8a:69:86:aa:3e:b3:9d:8c:00:f3:2f:5e: 59:22:eb:34:41:3e:3e:0e:71:21:ea:ab:d2:c8:9e: 80:a1:f7:b9:3d:df:55:fc:c8:21:d2:49:18:14:de: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BD:CE:69:CB:0D:28:ED:96:4D:DB:FB:43:C9:65:83:FB:28:66:F0 X509v3 Authority Key Identifier: keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/Dr3OacsNKO2WTdv7Q8llg_soZvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.204.0/22 185.200.180.0/22 IPv6: 2a06:4440::/29 Signature Algorithm: sha256WithRSAEncryption 48:ec:c5:af:de:56:06:e1:dd:e8:cf:a1:76:18:f2:5f:e7:9d: 8a:03:35:b2:98:61:63:9d:3d:39:62:f4:b3:3d:af:9e:60:12: 81:5d:d8:cc:08:6d:53:e4:c4:a5:54:96:49:d2:3c:35:33:2a: 57:81:b4:b4:79:30:5b:45:0f:74:7e:8e:15:e3:9e:b5:45:4d: a6:d6:37:d1:06:6b:19:1c:cf:19:a2:66:b7:dd:80:1c:83:44: 2a:86:59:a7:f9:4a:26:aa:9c:15:39:2b:8c:c0:64:0c:06:67: 15:1c:fe:4a:8d:7b:53:76:03:c9:c4:ce:c8:3e:a3:86:44:b8: 25:24:38:ea:5e:9d:a6:cd:67:6f:d2:63:d9:ea:ec:4a:ac:20: 62:be:ec:e9:16:e9:d2:cb:a4:9d:75:6f:94:18:0f:b8:f1:c6: a3:dc:e1:51:1f:85:d2:5a:a3:d7:6f:d8:32:e5:a7:f9:d4:65: 97:8c:7e:a3:5e:59:50:f5:49:be:bf:fd:77:28:2d:6a:3d:3e: 00:c6:3d:98:ec:fa:b0:fb:96:86:94:89:05:f3:85:b4:63:c6: d7:b6:e5:c5:fc:d7:14:06:25:8c:98:f6:62:2a:ea:df:ad:e6: 82:65:9c:2d:41:64:b1:fc:dc:ae:95:4a:34:61:52:5c:39:b0: 4f:9c:d9:1b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yn5dJIEO43ye3+KwliF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZWZmOTJmYzlmZTUzNTQ3YjdlM2JlMWY4MzYwODgwOWM0 NTY2YzkwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWJkY2U2OWNiMGQyOGVkOTY0ZGRiZmI0M2M5NjU4M2ZiMjg2NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA453MYWulsZHOD4om06eDv7D7pFBu BjZWk5eBnEuq+f9H2C7dmEew3hGo60qPXOSNXmtm0LkdGZ7gDMaw3tZZkri0AM0v iy/Hn50/5lZaHGLMKvpBnKfvNs84kGPsbIt88qn9Hahmud1i3JvvS4LhHWmUtakp zY7l3crxULtXSdT0kvVEUeU/QpNtCmoknQCy84A3nrV3sNS7y+BvKw4rH0rPm2Q5 b59/iSvyIoIWEcBt0M1nojzJ3ND4DGxqtodbDIW6seg05qKLr4KUiSpCUGH/HwiK aYaqPrOdjADzL15ZIus0QT4+DnEh6qvSyJ6Aofe5Pd9V/Mgh0kkYFN6TRQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFA69zmnLDSjtlk3b+0PJZYP7KGbwMB8GA1UdIwQY MBaAFP7v+S/J/lNUe3474fg2CICcRWbJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMt NDU3NDA2MmFlY2I1LzEvRHIzT2Fjc05LTzJXVGR2N1E4bGxnX3NvWnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMtNDU3NDA2MmFlY2I1 LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWvMAwQC uci0MA0EAgACMAcDBQMqBkRAMA0GCSqGSIb3DQEBCwUAA4IBAQBI7MWv3lYG4d3o z6F2GPJf552KAzWymGFjnT05YvSzPa+eYBKBXdjMCG1T5MSlVJZJ0jw1MypXgbS0 eTBbRQ90fo4V4561RU2m1jfRBmsZHM8Zoma33YAcg0Qqhlmn+UomqpwVOSuMwGQM BmcVHP5KjXtTdgPJxM7IPqOGRLglJDjqXp2mzWdv0mPZ6uxKrCBivuzpFunSy6Sd dW+UGA+48caj3OFRH4XSWqPXb9gy5af51GWXjH6jXllQ9Um+v/13KC1qPT4Axj2Y 7Pqw+5aGlIkF84W0Y8bXtuXF/NcUBiWMmPZiKurfreaCZZwtQWSx/NyulUo0YVJc ObBPnNkb -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:31 2026 by rpki-client