This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/dvF-ax6xW9w6QlzjTOaIlgyWKik.roa File: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (raw, json) Hash identifier: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8= Subject key identifier: 76:F1:7E:6B:1E:B1:5B:DC:3A:42:5C:E3:4C:E6:88:96:0C:96:2A:29 Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582 Certificate serial: 019B7BA3F22AA94A1DD4E36FCBC68216C4A9 Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/dvF-ax6xW9w6QlzjTOaIlgyWKik.roa Signing time: Thu 01 Jan 2026 22:18:20 +0000 ROA not before: Thu 01 Jan 2026 22:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205993 IP address blocks: 46.102.190.0/24 maxlen: 24 86.105.186.0/24 maxlen: 24 89.32.202.0/24 maxlen: 24 89.34.0.0/24 maxlen: 24 89.34.4.0/24 maxlen: 24 89.40.138.0/24 maxlen: 24 185.199.228.0/23 maxlen: 23 185.199.230.0/23 maxlen: 23 188.214.140.0/24 maxlen: 24 188.214.155.0/24 maxlen: 24 188.214.193.0/24 maxlen: 24 2a0a:a4c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f2:2a:a9:4a:1d:d4:e3:6f:cb:c6:82:16:c4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389755423f832a528c93136110f0fe4b10453582 Validity Not Before: Jan 1 22:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76f17e6b1eb15bdc3a425ce34ce688960c962a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:d8:9e:b4:84:55:e8:8d:61:7d:aa:53:a4: 9c:75:37:59:e9:30:bf:1e:eb:c9:b3:d1:7a:ec:8b: 26:36:f2:f8:5d:d6:22:b8:d7:22:34:db:df:ef:3a: 8d:d3:ea:21:22:16:74:67:c8:7a:62:4e:d9:e2:54: e0:9a:b3:19:ec:b1:71:ff:e1:57:90:5a:2b:eb:9b: 36:28:4c:86:9a:d4:4a:73:77:7d:b4:c2:13:5b:04: 8c:2f:28:3a:95:33:1c:5e:0a:ea:ea:26:40:13:61: 11:31:14:60:6f:12:ed:37:67:ee:91:26:7e:5e:86: 63:85:98:52:e8:aa:7e:f0:c8:68:94:16:e6:3f:45: e3:3e:2c:79:d6:fd:77:f4:7e:b1:09:84:d8:b7:78: de:e5:11:3d:c9:e0:f2:fc:3d:29:6e:3d:1c:4d:d8: 48:e5:47:79:1c:dc:2f:f5:97:94:b3:6d:c5:97:2e: b2:a2:e9:ec:5c:fc:7a:c4:45:0e:bd:09:e1:17:3d: cc:f7:bf:bc:a3:85:69:c9:24:b5:88:75:bf:56:a1: cc:a1:b7:d8:d0:48:67:12:28:89:4f:38:e6:91:40: be:7d:c3:12:6f:76:fd:15:99:1d:e8:b2:45:e3:f7: 4b:9f:15:07:b1:d6:0d:4e:f0:f4:f3:29:30:98:f8: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F1:7E:6B:1E:B1:5B:DC:3A:42:5C:E3:4C:E6:88:96:0C:96:2A:29 X509v3 Authority Key Identifier: keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/dvF-ax6xW9w6QlzjTOaIlgyWKik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.190.0/24 86.105.186.0/24 89.32.202.0/24 89.34.0.0/24 89.34.4.0/24 89.40.138.0/24 185.199.228.0/22 188.214.140.0/24 188.214.155.0/24 188.214.193.0/24 IPv6: 2a0a:a4c0::/29 Signature Algorithm: sha256WithRSAEncryption a1:13:d3:58:8c:fd:2f:74:7c:25:e9:e4:ae:46:41:bf:d1:37: 4e:2e:a9:21:fa:85:13:78:05:72:2e:ef:a4:76:a7:f7:40:e3: 99:7f:22:ce:6a:6e:f2:0f:f2:f6:bc:66:66:22:7c:94:c8:b7: 05:c5:1f:5b:ff:73:06:b8:82:1c:0e:35:ca:71:43:12:77:7e: 78:5f:7a:d2:f1:a9:0a:4c:fe:22:08:06:8b:b3:61:fa:3a:66: a3:5c:1a:84:da:76:f7:2b:ef:19:7e:5a:cd:44:a3:4a:d6:15: c1:76:f5:fd:b6:6c:1b:6b:85:5d:f0:1b:8d:da:28:85:51:c9: 7d:3a:11:58:27:b6:a5:9e:6b:e1:f0:84:4a:09:1c:76:9f:27: 32:7a:71:56:4a:7b:b6:c3:66:7f:07:42:5f:84:83:e4:b3:93: 10:97:80:56:ac:b3:c8:25:f5:3b:20:a7:b4:35:6b:b7:70:15: 74:ee:60:ce:a4:c8:b6:e5:d8:b7:d3:6c:0a:dd:51:dd:ac:61: a8:86:41:3d:52:6b:9a:67:70:0e:97:30:5a:51:36:41:9e:23: 95:45:02:82:21:9e:71:ee:84:d4:09:e6:0e:93:62:39:84:df: 47:13:d2:a6:55:8b:c0:bf:73:6c:e8:64:b1:28:96:4b:63:92: e0:b7:1b:53 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt7o/IqqUod1ONvy8aCFsSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTc1NTQyM2Y4MzJhNTI4YzkzMTM2MTEwZjBmZTRiMTA0 NTM1ODIwHhcNMjYwMTAxMjIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmYxN2U2YjFlYjE1YmRjM2E0MjVjZTM0Y2U2ODg5NjBjOTYyYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWXYnrSEVeiNYX2qU6ScdTdZ6TC/ HuvJs9F67IsmNvL4XdYiuNciNNvf7zqN0+ohIhZ0Z8h6Yk7Z4lTgmrMZ7LFx/+FX kFor65s2KEyGmtRKc3d9tMITWwSMLyg6lTMcXgrq6iZAE2ERMRRgbxLtN2fukSZ+ XoZjhZhS6Kp+8MholBbmP0XjPix51v139H6xCYTYt3je5RE9yeDy/D0pbj0cTdhI 5Ud5HNwv9ZeUs23Fly6younsXPx6xEUOvQnhFz3M97+8o4VpySS1iHW/VqHMobfY 0EhnEiiJTzjmkUC+fcMSb3b9FZkd6LJF4/dLnxUHsdYNTvD08ykwmPjiRQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFHbxfmsesVvcOkJc40zmiJYMliopMB8GA1UdIwQY MBaAFDiXVUI/gypSjJMTYRDw/ksQRTWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0Mjgt NDY5NTdiZDg4NjBkLzEvZHZGLWF4NnhXOXc2UWx6alRPYUlsZ3lXS2lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0MjgtNDY5NTdiZDg4NjBk LzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQALma+AwQA Vmm6AwQAWSDKAwQAWSIAAwQAWSIEAwQAWSiKAwQCucfkAwQAvNaMAwQAvNabAwQA vNbBMA0EAgACMAcDBQMqCqTAMA0GCSqGSIb3DQEBCwUAA4IBAQChE9NYjP0vdHwl 6eSuRkG/0TdOLqkh+oUTeAVyLu+kdqf3QOOZfyLOam7yD/L2vGZmInyUyLcFxR9b /3MGuIIcDjXKcUMSd354X3rS8akKTP4iCAaLs2H6OmajXBqE2nb3K+8ZflrNRKNK 1hXBdvX9tmwba4Vd8BuN2iiFUcl9OhFYJ7alnmvh8IRKCRx2nycyenFWSnu2w2Z/ B0JfhIPks5MQl4BWrLPIJfU7IKe0NWu3cBV07mDOpMi25di302wK3VHdrGGohkE9 UmuaZ3AOlzBaUTZBniOVRQKCIZ5x7oTUCeYOk2I5hN9HE9KmVYvAv3Ns6GSxKJZL Y5LgtxtT -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:49 2026 by rpki-client