This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/de_3vJfXeXhVKgCaiSs44gZCA8A.roa File: de_3vJfXeXhVKgCaiSs44gZCA8A.roa (raw, json) Hash identifier: SZ/DHM8HFtP6XUXr8ZKZg3jTMbbqq1Kkx2fwqWMQRhg= Subject key identifier: 75:EF:F7:BC:97:D7:79:78:55:2A:00:9A:89:2B:38:E2:06:42:03:C0 Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Certificate serial: 019B7AC8A44ABFBA42453158AF52298A6188 Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/de_3vJfXeXhVKgCaiSs44gZCA8A.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54573 IP address blocks: 160.20.248.0/24 maxlen: 24 160.20.249.0/24 maxlen: 24 160.238.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a4:4a:bf:ba:42:45:31:58:af:52:29:8a:61:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75eff7bc97d77978552a009a892b38e2064203c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:71:64:38:e8:a8:e6:6a:dc:19:6e:59:12: dc:c6:c0:e5:a1:9f:7d:f2:05:70:2d:8b:f0:94:e6: 5b:ed:a5:4e:e7:93:ad:a0:f7:cd:73:ac:de:65:24: 50:fd:46:fc:69:5f:a3:a1:c4:74:0a:69:2e:34:c1: 1a:21:44:35:ac:27:a5:a7:1c:6c:4a:f1:7d:54:73: ba:67:5e:66:23:fb:8b:e0:bb:04:48:1a:0a:5f:08: 3f:4d:5b:ee:8e:7b:ec:02:e6:4a:2a:6a:43:c2:5a: bd:9c:11:4c:71:3e:2c:0c:70:f2:aa:e4:d0:c4:8a: 2e:01:c0:1c:c3:8e:64:13:bb:2e:90:bc:ae:2a:99: e5:8a:d3:90:28:e5:82:2b:73:08:5f:fd:c5:96:c1: 97:4b:6b:f9:52:90:d9:a3:6e:fc:b2:40:56:d1:85: 30:24:00:04:98:bf:38:73:21:7e:6c:1d:72:7f:4f: 30:d1:7f:6c:1c:4b:a4:13:f7:25:1a:a3:c5:20:a0: e4:c6:7a:4b:62:52:e7:1f:18:e0:91:d2:ba:23:4c: 93:e6:3d:8f:37:75:e1:c2:3a:a2:ae:d0:db:1d:43: 5e:b4:b1:81:80:40:dd:2e:04:d2:fc:c5:1e:38:30: ba:7d:90:55:e8:a3:92:8f:ac:3a:f9:6d:4b:3e:fe: 65:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:F7:BC:97:D7:79:78:55:2A:00:9A:89:2B:38:E2:06:42:03:C0 X509v3 Authority Key Identifier: keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/de_3vJfXeXhVKgCaiSs44gZCA8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.248.0/23 160.238.61.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:5a:27:c1:7e:fc:33:d0:d2:c7:7d:42:e3:4c:8f:a0:a0:7a: 41:f8:d7:70:19:cd:ed:26:9f:30:17:c8:d0:af:68:8b:48:e4: 68:44:81:3b:ee:61:c8:a7:09:13:ba:25:16:16:47:14:05:9e: 3e:fd:3c:e1:6a:d4:02:d0:54:52:ee:f9:a9:6c:bc:49:23:5b: eb:6b:a1:f9:9a:f9:61:1c:a5:97:e7:13:a8:86:59:6a:bb:21: aa:e1:6c:c2:2b:aa:3b:b0:04:af:5d:37:fa:32:57:17:cf:33: 14:e0:7f:24:16:2e:ca:16:dd:e9:2b:2b:e7:77:a6:96:82:1f: 32:45:f4:50:9b:57:82:1c:82:18:fe:94:91:48:43:92:d8:14: 67:65:e3:33:fb:06:cc:a0:26:05:c9:a5:1c:76:a6:8b:35:a1: 7a:a5:43:9f:f6:07:3a:15:35:a3:a4:f1:35:3f:85:e9:a0:bc: 23:67:d4:b0:3e:c1:e7:7a:9a:20:8f:67:76:2f:d6:ce:08:a2: c9:d1:d2:2e:b3:f1:58:54:1e:7e:0c:8f:2f:38:26:33:31:16: a7:1f:a0:4a:02:5e:e6:2d:12:88:c4:18:22:de:51:db:e7:6b: cc:60:62:9c:2f:f7:f1:db:f5:ba:48:f3:e7:8b:06:5b:6a:22: a3:e8:6b:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yKRKv7pCRTFYr1IpimGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh OWJkNjkwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWVmZjdiYzk3ZDc3OTc4NTUyYTAwOWE4OTJiMzhlMjA2NDIwM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yVxZDjoqOZq3BluWRLcxsDloZ99 8gVwLYvwlOZb7aVO55OtoPfNc6zeZSRQ/Ub8aV+jocR0CmkuNMEaIUQ1rCelpxxs SvF9VHO6Z15mI/uL4LsESBoKXwg/TVvujnvsAuZKKmpDwlq9nBFMcT4sDHDyquTQ xIouAcAcw45kE7sukLyuKpnlitOQKOWCK3MIX/3FlsGXS2v5UpDZo278skBW0YUw JAAEmL84cyF+bB1yf08w0X9sHEukE/clGqPFIKDkxnpLYlLnHxjgkdK6I0yT5j2P N3XhwjqirtDbHUNetLGBgEDdLgTS/MUeODC6fZBV6KOSj6w6+W1LPv5lnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHXv97yX13l4VSoAmokrOOIGQgPAMB8GA1UdIwQY MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt NzcxNDBkMDk3ODNjLzEvZGVfM3ZKZlhlWGhWS2dDYWlTczQ0Z1pDQThBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoBT4AwQA oO49MA0GCSqGSIb3DQEBCwUAA4IBAQBbWifBfvwz0NLHfULjTI+goHpB+NdwGc3t Jp8wF8jQr2iLSORoRIE77mHIpwkTuiUWFkcUBZ4+/TzhatQC0FRS7vmpbLxJI1vr a6H5mvlhHKWX5xOohllquyGq4WzCK6o7sASvXTf6MlcXzzMU4H8kFi7KFt3pKyvn d6aWgh8yRfRQm1eCHIIY/pSRSEOS2BRnZeMz+wbMoCYFyaUcdqaLNaF6pUOf9gc6 FTWjpPE1P4XpoLwjZ9SwPsHnepogj2d2L9bOCKLJ0dIus/FYVB5+DI8vOCYzMRan H6BKAl7mLRKIxBgi3lHb52vMYGKcL/fx2/W6SPPniwZbaiKj6GtP -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:00 2026 by rpki-client