This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/dkWWGb3-IWBVxRW9IJktktg89iU.roa File: dkWWGb3-IWBVxRW9IJktktg89iU.roa (raw, json) Hash identifier: 7/IsdgeK6yl0IUjq8qy/te40MYPjkzlfyF/tgjYBMrQ= Subject key identifier: 76:45:96:19:BD:FE:21:60:55:C5:15:BD:20:99:2D:92:D8:3C:F6:25 Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019BC6C468DEC432B9E0154A123501CCEFED Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/dkWWGb3-IWBVxRW9IJktktg89iU.roa Signing time: Fri 16 Jan 2026 12:25:19 +0000 ROA not before: Fri 16 Jan 2026 12:25:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 185.226.155.0/24 maxlen: 24 194.59.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:c4:68:de:c4:32:b9:e0:15:4a:12:35:01:cc:ef:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Jan 16 12:25:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76459619bdfe216055c515bd20992d92d83cf625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:f0:89:5f:26:0d:e5:97:dd:70:cc:e9:39: 75:91:ae:1f:7d:cb:a1:c3:6b:97:ca:58:03:5e:71: 6a:90:16:1f:cb:da:74:06:c7:8d:e5:75:09:86:5f: eb:38:2d:56:06:65:6c:e6:e7:89:f2:31:d4:6f:fb: df:f3:cb:24:a3:ee:4d:5e:68:22:d1:d3:ca:54:24: b8:0c:b7:11:0c:76:f7:f8:81:74:af:48:69:bf:4c: 4c:55:53:66:9b:1f:59:f6:31:f0:fd:c4:98:eb:e1: 64:df:40:c4:a2:2d:71:9d:52:a9:7a:a8:b0:30:d6: 39:78:63:26:7e:e6:d5:9c:3c:20:3c:b4:3c:9d:1e: bb:11:8d:90:08:56:1c:38:29:cc:73:6d:fd:89:c8: a4:91:6c:26:18:4a:da:25:8e:80:95:e6:ce:a1:2a: 6b:4b:33:f5:d0:d0:73:3c:b3:39:4c:6c:20:f6:30: ac:78:e3:87:75:59:96:10:61:da:ac:6c:90:78:2c: 22:24:09:d5:df:0f:fc:a0:c6:7c:18:2d:64:d3:04: 4e:f1:b9:8d:9f:82:98:5a:3d:47:45:d8:b4:8d:0d: 34:85:4a:00:7f:f9:f9:40:58:ce:0d:c5:7e:c4:96: b4:9a:ec:6e:c4:3d:30:0f:34:ef:68:64:d1:a0:94: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:45:96:19:BD:FE:21:60:55:C5:15:BD:20:99:2D:92:D8:3C:F6:25 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/dkWWGb3-IWBVxRW9IJktktg89iU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.155.0/24 194.59.223.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:31:6a:16:1c:23:6f:83:f6:38:78:0c:de:a0:c9:7a:72:a2: ea:3a:2a:30:65:a5:54:c5:88:c2:17:11:cf:c7:90:e9:c5:45: 28:54:0c:1b:f5:b3:4e:9c:65:f5:2d:b1:bf:94:be:9a:dd:2b: 2b:b9:a3:19:fb:c4:01:98:74:a8:14:aa:c0:17:93:ad:9c:2f: c7:aa:bc:49:0e:27:80:9e:37:51:26:9f:59:4d:2e:d3:c6:f5: 42:ef:3c:6a:22:f8:b6:f1:1d:3a:e5:23:5b:d9:f9:1e:b4:73: 76:72:8b:99:ad:7b:49:c9:bd:73:42:d7:f3:5c:2a:bf:c3:91: 35:62:4d:35:fd:c3:74:4e:64:d6:c9:46:d6:03:7b:14:ed:95: 64:92:ab:bb:08:f7:5f:da:23:c2:1d:70:b8:bb:56:69:da:18: 4e:a0:c7:ba:36:5a:94:77:b6:02:91:2f:55:63:b6:ac:dc:83: bf:f8:ba:ce:9b:8b:2e:0d:b1:5d:49:55:8a:52:7f:b8:98:88: 59:05:74:a0:fd:7c:14:ae:33:db:94:ae:6f:d6:44:4c:a0:66: 75:63:94:90:fc:db:ee:a5:40:26:d0:9e:a6:c3:47:3e:37:3e: 35:05:e6:1f:ce:33:82:95:67:21:45:57:b9:98:92:ed:d3:d9: b2:7b:16:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvGxGjexDK54BVKEjUBzO/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwMTE2MTIyNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjQ1OTYxOWJkZmUyMTYwNTVjNTE1YmQyMDk5MmQ5MmQ4M2NmNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlnwiV8mDeWX3XDM6Tl1ka4ffcuh w2uXylgDXnFqkBYfy9p0BseN5XUJhl/rOC1WBmVs5ueJ8jHUb/vf88sko+5NXmgi 0dPKVCS4DLcRDHb3+IF0r0hpv0xMVVNmmx9Z9jHw/cSY6+Fk30DEoi1xnVKpeqiw MNY5eGMmfubVnDwgPLQ8nR67EY2QCFYcOCnMc239icikkWwmGEraJY6AlebOoSpr SzP10NBzPLM5TGwg9jCseOOHdVmWEGHarGyQeCwiJAnV3w/8oMZ8GC1k0wRO8bmN n4KYWj1HRdi0jQ00hUoAf/n5QFjODcV+xJa0muxuxD0wDzTvaGTRoJRvjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHZFlhm9/iFgVcUVvSCZLZLYPPYlMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvZGtXV0diMy1JV0JWeFJXOUlKa3RrdGc4OWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueKbAwQA wjvfMA0GCSqGSIb3DQEBCwUAA4IBAQAOMWoWHCNvg/Y4eAzeoMl6cqLqOiowZaVU xYjCFxHPx5DpxUUoVAwb9bNOnGX1LbG/lL6a3SsruaMZ+8QBmHSoFKrAF5OtnC/H qrxJDieAnjdRJp9ZTS7TxvVC7zxqIvi28R065SNb2fketHN2couZrXtJyb1zQtfz XCq/w5E1Yk01/cN0TmTWyUbWA3sU7ZVkkqu7CPdf2iPCHXC4u1Zp2hhOoMe6NlqU d7YCkS9VY7as3IO/+LrOm4suDbFdSVWKUn+4mIhZBXSg/XwUrjPblK5v1kRMoGZ1 Y5SQ/NvupUAm0J6mw0c+Nz41BeYfzjOClWchRVe5mJLt09myexZi -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:43 2026 by rpki-client