This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/DRyy__y2K7EoC3QE195_fwyvhlY.roa File: DRyy__y2K7EoC3QE195_fwyvhlY.roa (raw, json) Hash identifier: s7Y5XSMvKihqYEySUEuGbt0+4FD6pVJYWQa+Q5dHg+k= Subject key identifier: 0D:1C:B2:FF:FC:B6:2B:B1:28:0B:74:04:D7:DE:7F:7F:0C:AF:86:56 Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Certificate serial: 019B7AC7DD2223AD80CB568BD55651DB4853 Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/DRyy__y2K7EoC3QE195_fwyvhlY.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59812 IP address blocks: 193.134.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dd:22:23:ad:80:cb:56:8b:d5:56:51:db:48:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d1cb2fffcb62bb1280b7404d7de7f7f0caf8656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:e6:65:31:de:e8:43:14:83:c8:1a:99:a9: fe:e3:4e:bb:b0:9c:bd:24:1c:65:e3:3a:0f:c4:cd: 3c:85:db:3f:d0:c1:f7:b5:a1:35:79:91:c1:ae:78: 82:b0:db:af:a5:dd:55:a1:38:b3:11:55:02:e7:ea: 95:38:d0:7e:64:1d:96:68:d3:4f:97:ea:54:7d:f1: 8b:7f:8c:2c:e1:c2:b0:ec:a3:1b:9f:36:5d:41:6f: 8c:cd:81:fa:83:8e:8c:e6:d4:45:02:56:bc:9e:ad: 2a:f3:36:5b:c5:be:9a:13:13:39:b6:d2:94:3d:6f: 18:9c:b4:ba:6e:a0:52:b3:9f:69:3e:81:4c:e2:b0: ea:91:41:d8:c1:81:f7:9d:16:6d:ec:00:47:4d:cc: 0b:49:7b:9d:94:f4:dc:3a:81:0d:52:c8:64:68:1f: d1:d3:7f:e1:ad:1e:c1:9b:11:5c:e8:58:1f:61:ae: 1e:7a:75:9f:db:a5:97:6f:80:77:6d:0f:0f:87:f2: 6e:51:d0:80:4d:6f:ab:f4:2a:23:a4:d7:71:bf:f7: a0:2f:60:ad:a8:ce:40:a6:21:2f:5a:00:f9:19:6d: 36:ab:58:87:39:aa:5e:b6:a8:9f:7e:42:b4:29:44: c4:29:09:ce:93:b9:a0:83:3b:10:89:ac:6a:61:ba: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1C:B2:FF:FC:B6:2B:B1:28:0B:74:04:D7:DE:7F:7F:0C:AF:86:56 X509v3 Authority Key Identifier: keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/DRyy__y2K7EoC3QE195_fwyvhlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.251.0/24 Signature Algorithm: sha256WithRSAEncryption 92:82:ac:52:e2:46:77:7b:99:6b:5a:56:59:b5:c6:88:ec:96: 22:60:64:25:66:b8:62:04:0b:56:fe:0f:ca:be:32:1a:16:a9: 22:d7:a4:aa:13:90:71:f1:79:85:e9:1a:f6:ab:72:37:39:e6: ab:04:4e:04:16:01:ce:03:93:9f:fd:e7:dc:35:98:53:2c:70: d3:36:f6:39:34:2d:a7:74:8d:de:59:04:80:1f:58:05:2f:f4: 43:52:39:51:55:9b:ba:74:e9:87:ec:8a:5b:bc:1d:5b:0a:61: 8b:9e:ad:56:31:20:43:61:78:09:a4:d3:23:25:59:ba:f7:d3: c0:6c:80:ca:5d:6b:31:09:b4:6f:7b:25:b9:fa:43:89:00:4b: e8:f8:90:f2:d4:fe:08:61:1f:fb:a7:38:86:8e:8e:c0:1f:87: 8f:8e:5e:df:f5:51:bb:b9:36:34:c3:91:ae:46:2d:a2:5c:1a: 84:cc:35:04:a0:24:f9:2a:a9:57:65:ae:02:38:ac:5f:04:6f: 41:b5:ae:98:d1:52:74:55:c2:bf:89:f7:86:65:a2:d5:ef:c9: 35:39:bf:18:48:29:fc:0c:a6:38:76:31:38:7c:ad:1c:14:2f: dd:72:3f:9f:bd:56:dd:2a:c8:69:76:c5:b9:77:db:db:53:6b: 41:2d:93:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x90iI62Ay1aL1VZR20hTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi MDI1NDUwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDFjYjJmZmZjYjYyYmIxMjgwYjc0MDRkN2RlN2Y3ZjBjYWY4NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzPmZTHe6EMUg8gaman+4067sJy9 JBxl4zoPxM08hds/0MH3taE1eZHBrniCsNuvpd1VoTizEVUC5+qVONB+ZB2WaNNP l+pUffGLf4ws4cKw7KMbnzZdQW+MzYH6g46M5tRFAla8nq0q8zZbxb6aExM5ttKU PW8YnLS6bqBSs59pPoFM4rDqkUHYwYH3nRZt7ABHTcwLSXudlPTcOoENUshkaB/R 03/hrR7BmxFc6FgfYa4eenWf26WXb4B3bQ8Ph/JuUdCATW+r9CojpNdxv/egL2Ct qM5ApiEvWgD5GW02q1iHOapetqiffkK0KUTEKQnOk7mggzsQiaxqYbo9PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0csv/8tiuxKAt0BNfef38Mr4ZWMB8GA1UdIwQY MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt YjQ3M2NlNzgwN2NhLzEvRFJ5eV9feTJLN0VvQzNRRTE5NV9md3l2aGxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYb7MA0G CSqGSIb3DQEBCwUAA4IBAQCSgqxS4kZ3e5lrWlZZtcaI7JYiYGQlZrhiBAtW/g/K vjIaFqki16SqE5Bx8XmF6Rr2q3I3OearBE4EFgHOA5Of/efcNZhTLHDTNvY5NC2n dI3eWQSAH1gFL/RDUjlRVZu6dOmH7IpbvB1bCmGLnq1WMSBDYXgJpNMjJVm699PA bIDKXWsxCbRveyW5+kOJAEvo+JDy1P4IYR/7pziGjo7AH4ePjl7f9VG7uTY0w5Gu Ri2iXBqEzDUEoCT5KqlXZa4COKxfBG9Bta6Y0VJ0VcK/ifeGZaLV78k1Ob8YSCn8 DKY4djE4fK0cFC/dcj+fvVbdKshpdsW5d9vbU2tBLZN2 -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:02 2026 by rpki-client