This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/dAYSnCI6TOnZuGWVtQyMgckZ_to.roa File: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (raw, json) Hash identifier: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w= Subject key identifier: 74:06:12:9C:22:3A:4C:E9:D9:B8:65:95:B5:0C:8C:81:C9:19:FE:DA Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4 Certificate serial: 019B79102F54AEFF799E8B197940AF947301 Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/dAYSnCI6TOnZuGWVtQyMgckZ_to.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 185.245.228.0/24 maxlen: 24 185.245.229.0/24 maxlen: 24 185.245.230.0/24 maxlen: 24 185.245.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2f:54:ae:ff:79:9e:8b:19:79:40:af:94:73:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7406129c223a4ce9d9b86595b50c8c81c919feda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:d5:61:e6:55:1f:12:a9:e9:cc:d5:db:4a: 9c:11:73:42:c2:dc:d6:7c:df:16:fd:f5:1d:1e:35: 44:12:07:be:79:0f:46:d0:0e:e2:0a:fa:c8:88:f5: 65:e1:a9:4e:6f:dc:ae:99:68:f4:32:eb:7d:4c:0f: e3:43:d1:89:ef:e5:d1:c1:fd:98:f3:00:1e:ba:2b: 0c:bd:3b:29:7b:43:9c:56:40:b8:70:8b:51:80:7c: b2:00:1c:f6:10:b8:d9:05:ca:ab:19:52:6e:9b:0b: 81:23:d3:70:a7:2c:13:5b:76:05:07:63:bb:47:36: 8e:8f:bf:a0:ac:50:5d:ce:02:21:c5:b7:45:39:03: ec:da:6a:76:3d:8b:18:b4:f6:85:78:46:1a:5e:ce: 7f:e9:bf:f2:62:43:27:c8:bc:45:a2:22:5c:a5:43: 5e:e4:c0:74:94:85:33:1a:a8:8e:4c:c5:b6:ea:22: 7b:d6:31:68:6b:fc:c2:17:4c:2d:fe:54:43:7c:75: e4:1c:1a:d1:5d:6b:ab:fc:43:ce:ad:ab:2e:1f:b7: 2d:9d:d3:a4:4c:9d:46:75:df:7b:15:f2:75:77:60: b4:67:a4:c0:74:ad:2f:5d:4b:d1:92:06:83:97:d0: 12:9a:b1:0e:d2:eb:ea:c9:a6:63:8e:ae:45:97:1d: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:06:12:9C:22:3A:4C:E9:D9:B8:65:95:B5:0C:8C:81:C9:19:FE:DA X509v3 Authority Key Identifier: keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/dAYSnCI6TOnZuGWVtQyMgckZ_to.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.228.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:38:d1:52:52:b5:8d:c4:0f:ca:2f:f1:64:db:29:97:48:5c: be:9f:a8:87:61:a0:52:78:09:e4:30:07:c8:64:5b:72:c1:85: 8f:f9:32:a1:99:78:05:9b:e7:6f:91:c0:f4:35:f7:ef:33:7c: 29:c1:ab:a3:12:a4:a3:6e:eb:f0:1b:fa:30:dd:80:99:10:3b: 89:1e:59:9f:70:d4:1c:f2:55:92:dc:ee:95:1a:38:f4:34:da: 87:54:9e:71:dc:12:e8:4d:82:2b:e0:1e:16:76:9c:22:b7:7b: fe:83:69:0c:67:ba:44:7e:4d:16:61:0e:bb:85:79:01:04:7e: 49:22:ad:01:57:12:3d:02:b6:ab:a1:50:ee:bf:97:a4:ae:4b: 59:b2:a7:d8:22:43:15:03:0a:34:fe:57:23:90:2c:10:d5:8b: 54:d4:b4:09:46:bb:ec:58:74:7f:8a:53:85:d0:6c:58:a6:46: 77:77:1e:5c:c3:0e:2c:00:b2:64:e1:27:db:4f:d8:61:50:d0: bc:a1:34:34:c8:9e:a5:11:2c:9a:b4:74:0a:50:a8:41:17:41: 3c:ac:58:5a:7e:2e:12:42:8f:ef:d3:81:cd:9e:33:82:8d:72: 92:93:fd:32:8f:61:45:67:63:d7:77:bf:e9:6f:bc:0a:3a:5c: d4:ad:85:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EC9Urv95nosZeUCvlHMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj MzBmZTQwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDA2MTI5YzIyM2E0Y2U5ZDliODY1OTViNTBjOGM4MWM5MTlmZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyfVYeZVHxKp6czV20qcEXNCwtzW fN8W/fUdHjVEEge+eQ9G0A7iCvrIiPVl4alOb9yumWj0Mut9TA/jQ9GJ7+XRwf2Y 8wAeuisMvTspe0OcVkC4cItRgHyyABz2ELjZBcqrGVJumwuBI9NwpywTW3YFB2O7 RzaOj7+grFBdzgIhxbdFOQPs2mp2PYsYtPaFeEYaXs5/6b/yYkMnyLxFoiJcpUNe 5MB0lIUzGqiOTMW26iJ71jFoa/zCF0wt/lRDfHXkHBrRXWur/EPOrasuH7ctndOk TJ1Gdd97FfJ1d2C0Z6TAdK0vXUvRkgaDl9ASmrEO0uvqyaZjjq5Flx2X5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQGEpwiOkzp2bhllbUMjIHJGf7aMB8GA1UdIwQY MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt OWQzODZkMDQ2ZmIwLzEvZEFZU25DSTZUT25adUdXVnRReU1nY2taX3RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufXkMA0G CSqGSIb3DQEBCwUAA4IBAQAdONFSUrWNxA/KL/Fk2ymXSFy+n6iHYaBSeAnkMAfI ZFtywYWP+TKhmXgFm+dvkcD0NffvM3wpwaujEqSjbuvwG/ow3YCZEDuJHlmfcNQc 8lWS3O6VGjj0NNqHVJ5x3BLoTYIr4B4Wdpwit3v+g2kMZ7pEfk0WYQ67hXkBBH5J Iq0BVxI9AraroVDuv5ekrktZsqfYIkMVAwo0/lcjkCwQ1YtU1LQJRrvsWHR/ilOF 0GxYpkZ3dx5cww4sALJk4SfbT9hhUNC8oTQ0yJ6lESyatHQKUKhBF0E8rFhafi4S Qo/v04HNnjOCjXKSk/0yj2FFZ2PXd7/pb7wKOlzUrYWv -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:52 2026 by rpki-client