This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/DYnUNaZAsVV0zg8BMJ8ALP8YoaA.roa File: DYnUNaZAsVV0zg8BMJ8ALP8YoaA.roa (raw, json) Hash identifier: 99fcTIhNFwctA5y5YOLO0bKZ5UWAKG6gqXfeOW7ZWyc= Subject key identifier: 0D:89:D4:35:A6:40:B1:55:74:CE:0F:01:30:9F:00:2C:FF:18:A1:A0 Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Certificate serial: 019B7FF2195624853A236AEE7F76086F897C Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/DYnUNaZAsVV0zg8BMJ8ALP8YoaA.roa Signing time: Fri 02 Jan 2026 18:22:11 +0000 ROA not before: Fri 02 Jan 2026 18:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8648 IP address blocks: 81.173.82.0/24 maxlen: 24 81.173.88.0/21 maxlen: 24 192.162.28.0/22 maxlen: 24 2a00:1128::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:19:56:24:85:3a:23:6a:ee:7f:76:08:6f:89:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d89d435a640b15574ce0f01309f002cff18a1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:c8:56:a8:ed:b3:5f:e3:a4:86:99:fb:a7: 1b:ea:d3:2f:b5:76:ca:4e:71:62:bb:a3:b4:a4:e4: 12:d6:3f:88:84:29:66:b6:bb:d4:56:78:41:0c:2b: 34:eb:f3:fa:fa:ea:67:af:22:0b:05:7b:b8:98:43: 42:a3:22:f5:1f:ad:8a:5d:e5:10:fc:eb:74:8a:61: c8:be:97:d6:40:9f:3c:74:4d:2c:06:04:d7:35:c0: 2e:7d:d4:7f:85:ed:75:7e:b0:b6:f5:25:b2:6b:8d: 66:5f:3c:d2:69:e7:6a:af:df:09:40:31:4b:fb:8f: 45:77:41:ec:48:6f:6b:c9:49:6f:ab:5d:e5:44:93: ea:6e:ea:b1:ea:60:ff:53:12:d9:42:20:82:c2:69: e8:53:18:dc:9a:d3:93:c4:89:8c:57:27:9d:47:4a: 92:7d:df:f6:87:06:56:ac:99:a7:a3:22:9b:14:4e: 68:bc:f9:6a:9f:1e:f4:71:01:9e:78:b0:37:f0:77: c3:f6:36:86:2f:4f:ea:2a:30:25:0d:3d:cb:c2:9d: 89:fb:54:27:b8:9a:00:a2:ed:bc:22:cb:c5:d8:c0: 76:a4:e2:2e:1f:92:19:dd:a5:61:0b:6d:7e:65:2e: fe:45:57:f2:64:b9:25:9f:3e:4a:5e:a5:98:86:6b: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:D4:35:A6:40:B1:55:74:CE:0F:01:30:9F:00:2C:FF:18:A1:A0 X509v3 Authority Key Identifier: keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/DYnUNaZAsVV0zg8BMJ8ALP8YoaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.173.82.0/24 81.173.88.0/21 192.162.28.0/22 IPv6: 2a00:1128::/32 Signature Algorithm: sha256WithRSAEncryption 4e:1f:be:f5:31:bb:b9:1c:2d:ce:2d:a1:af:4b:b7:b1:e3:cd: 57:36:1f:bb:89:3e:86:d5:10:05:93:da:70:9d:62:2f:cf:31: 10:e7:d1:87:b9:d2:b5:82:12:3c:86:93:d0:ab:d5:79:ee:0c: bf:fb:83:e0:8e:aa:d1:33:6c:44:1a:55:e1:c0:5c:4c:a4:db: 1e:55:44:0a:fc:3c:38:1f:d3:db:a8:83:eb:ba:c4:d7:ca:b8: 39:0a:6e:79:d0:da:9f:01:7b:32:9e:1b:34:3e:8f:8e:37:0b: 9d:15:7b:0a:ce:b1:04:99:b2:29:2d:e5:8e:bb:24:6c:06:b8: 93:c8:1d:86:a8:12:36:69:5c:d2:75:19:e4:c2:0e:fc:26:f4: ca:ed:7f:36:42:09:a8:1d:f7:61:71:02:1b:8a:cc:73:6e:52: 74:94:e7:76:38:44:90:64:26:ff:7b:9b:e1:e5:cd:12:2a:61: c5:f1:f2:45:68:0c:9d:7f:f5:c1:45:cc:3c:0c:68:2e:ef:41: 0b:dc:fc:e0:f1:e5:44:60:f3:b1:b5:17:29:b5:33:dd:20:a5: de:d4:ae:07:b5:08:18:86:c6:6a:44:7f:12:eb:e4:7e:66:60: b0:6e:4c:b0:e4:bb:90:b9:58:32:05:9e:24:ee:96:15:ee:0d: ce:38:92:45 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/8hlWJIU6I2ruf3YIb4l8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTUzNWVmMjE2ZWJlNmY3ZmM1NWNmYmRjMzE1MzJiOTEy ZDhlNjMwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDg5ZDQzNWE2NDBiMTU1NzRjZTBmMDEzMDlmMDAyY2ZmMThhMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKPIVqjts1/jpIaZ+6cb6tMvtXbK TnFiu6O0pOQS1j+IhClmtrvUVnhBDCs06/P6+upnryILBXu4mENCoyL1H62KXeUQ /Ot0imHIvpfWQJ88dE0sBgTXNcAufdR/he11frC29SWya41mXzzSaedqr98JQDFL +49Fd0HsSG9ryUlvq13lRJPqbuqx6mD/UxLZQiCCwmnoUxjcmtOTxImMVyedR0qS fd/2hwZWrJmnoyKbFE5ovPlqnx70cQGeeLA38HfD9jaGL0/qKjAlDT3Lwp2J+1Qn uJoAou28IsvF2MB2pOIuH5IZ3aVhC21+ZS7+RVfyZLklnz5KXqWYhmvtSwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFA2J1DWmQLFVdM4PATCfACz/GKGgMB8GA1UdIwQY MBaAFNblNe8hbr5vf8Vc+9wxUyuRLY5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2Qt MDc3MTFlZDAyYjc1LzEvRFluVU5hWkFzVlYwemc4Qk1KOEFMUDhZb2FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2QtMDc3MTFlZDAyYjc1 LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUa1SAwQD Ua1YAwQCwKIcMA0EAgACMAcDBQAqABEoMA0GCSqGSIb3DQEBCwUAA4IBAQBOH771 Mbu5HC3OLaGvS7ex481XNh+7iT6G1RAFk9pwnWIvzzEQ59GHudK1ghI8hpPQq9V5 7gy/+4PgjqrRM2xEGlXhwFxMpNseVUQK/Dw4H9PbqIPrusTXyrg5Cm550NqfAXsy nhs0Po+ONwudFXsKzrEEmbIpLeWOuyRsBriTyB2GqBI2aVzSdRnkwg78JvTK7X82 QgmoHfdhcQIbisxzblJ0lOd2OESQZCb/e5vh5c0SKmHF8fJFaAydf/XBRcw8DGgu 70EL3Pzg8eVEYPOxtRcptTPdIKXe1K4HtQgYhsZqRH8S6+R+ZmCwbkyw5LuQuVgy BZ4k7pYV7g3OOJJF -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:31 2026 by rpki-client