This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa File: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (raw, json) Hash identifier: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo= Subject key identifier: 0E:DA:CA:52:3B:B0:01:1F:4D:F6:5B:F9:6C:0B:36:9C:90:E6:FE:F9 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B7C80331493F2DC66BE6DA29C0F844CAA Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 185.133.173.0/24 maxlen: 24 185.133.174.0/24 maxlen: 24 185.133.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:33:14:93:f2:dc:66:be:6d:a2:9c:0f:84:4c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0edaca523bb0011f4df65bf96c0b369c90e6fef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:c8:b5:ec:33:75:69:f7:5f:1d:b9:09:55: 8b:16:de:ff:dc:da:1e:27:cb:cf:c9:0f:fb:96:42: 83:4f:d9:85:22:64:0a:63:de:40:c2:a4:44:6e:7f: f3:ae:93:a3:d7:5c:8e:a4:3c:d5:91:32:5e:1e:f0: cf:38:96:52:f6:98:34:5d:5a:26:fd:01:2c:4f:0c: 3e:5d:85:4b:8a:51:05:04:63:2e:15:a7:b9:32:ee: d1:91:29:75:4a:a5:b3:86:31:58:7d:7e:fd:32:50: 59:64:63:47:aa:3f:3e:f4:be:6d:61:3a:79:d3:c1: a0:c4:0d:20:55:11:97:e8:7b:c6:46:94:43:7a:c9: d7:8f:35:09:2c:cd:a0:4a:b9:75:0e:b8:fb:04:2b: 04:0c:70:62:cb:92:76:ac:76:6e:f8:a5:5c:ac:27: f1:3f:19:8f:21:c7:e8:93:80:36:7e:41:3e:f7:ea: 6b:7d:d6:ec:3c:71:27:f9:3a:f7:38:40:48:96:1a: 8f:60:67:9f:ee:4a:88:02:b6:d8:07:83:22:aa:c9: a7:4e:e6:7b:71:76:65:6c:08:78:a9:53:aa:7b:94: d2:5e:1d:0b:f6:a1:52:0f:a9:9e:3d:1a:ab:7d:63: 65:85:b2:a6:0c:98:9e:83:5e:68:25:cb:e4:8b:ad: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DA:CA:52:3B:B0:01:1F:4D:F6:5B:F9:6C:0B:36:9C:90:E6:FE:F9 X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.173.0-185.133.175.255 Signature Algorithm: sha256WithRSAEncryption 52:e5:55:ee:39:17:9e:b8:13:a7:73:fe:3b:22:b3:c7:87:00: 14:66:bd:16:26:9b:57:c9:5f:65:ca:e7:d9:09:13:94:ee:1d: 23:b8:24:c5:1e:be:e7:06:46:e9:3e:6c:2e:11:b8:0d:81:ec: d2:23:24:ca:75:c1:8a:b9:cc:8f:f9:45:3f:f7:c8:48:cf:88: 54:63:23:55:83:ae:2f:07:eb:b2:e2:73:bc:58:54:19:37:83: 00:88:f1:ad:62:7b:bc:fa:ae:cf:3e:0b:89:3e:96:a6:22:93: 0e:54:a2:a7:0f:95:f8:71:b6:d1:ad:63:c1:66:40:70:08:82: 72:3a:7d:61:91:1d:89:3a:c9:7b:a1:cb:a0:7c:7d:d9:17:09: 93:17:e4:98:80:02:fb:1f:b1:7e:28:84:31:b9:df:f1:48:6a: f1:3b:48:f7:a9:a0:fe:a2:f6:c5:a4:ce:fe:50:da:f0:af:1f: b3:89:7a:ed:7d:23:d3:af:64:ac:ab:0b:67:51:53:e5:28:d7: 07:fd:df:dd:42:64:38:4c:d4:6a:c9:05:50:a3:6f:99:eb:b3: ba:96:19:ff:f3:e0:73:d2:ed:be:da:40:e4:82:0c:fb:13:54: 33:9b:da:74:c7:0f:37:e6:39:18:cc:b9:f7:34:3b:20:cd:a8: 50:ea:d9:48 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gDMUk/LcZr5topwPhEyqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWRhY2E1MjNiYjAwMTFmNGRmNjViZjk2YzBiMzY5YzkwZTZmZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLLItewzdWn3Xx25CVWLFt7/3Noe J8vPyQ/7lkKDT9mFImQKY95AwqREbn/zrpOj11yOpDzVkTJeHvDPOJZS9pg0XVom /QEsTww+XYVLilEFBGMuFae5Mu7RkSl1SqWzhjFYfX79MlBZZGNHqj8+9L5tYTp5 08GgxA0gVRGX6HvGRpRDesnXjzUJLM2gSrl1Drj7BCsEDHBiy5J2rHZu+KVcrCfx PxmPIcfok4A2fkE+9+prfdbsPHEn+Tr3OEBIlhqPYGef7kqIArbYB4MiqsmnTuZ7 cXZlbAh4qVOqe5TSXh0L9qFSD6mePRqrfWNlhbKmDJieg15oJcvki60cXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFA7aylI7sAEfTfZb+WwLNpyQ5v75MB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvRHRyS1VqdXdBUjlOOWx2NWJBczJuSkRtX3ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5ha0D BAS5haAwDQYJKoZIhvcNAQELBQADggEBAFLlVe45F564E6dz/jsis8eHABRmvRYm m1fJX2XK59kJE5TuHSO4JMUevucGRuk+bC4RuA2B7NIjJMp1wYq5zI/5RT/3yEjP iFRjI1WDri8H67Lic7xYVBk3gwCI8a1ie7z6rs8+C4k+lqYikw5UoqcPlfhxttGt Y8FmQHAIgnI6fWGRHYk6yXuhy6B8fdkXCZMX5JiAAvsfsX4ohDG53/FIavE7SPep oP6i9sWkzv5Q2vCvH7OJeu19I9OvZKyrC2dRU+Uo1wf9391CZDhM1GrJBVCjb5nr s7qWGf/z4HPS7b7aQOSCDPsTVDOb2nTHDzfmORjMufc0OyDNqFDq2Ug= -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:14 2026 by rpki-client