This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/DShqO0Ue11GUy5d8RFMckaCauhk.roa File: DShqO0Ue11GUy5d8RFMckaCauhk.roa (raw, json) Hash identifier: PD8/R6zXgkXFWzaUz+2PUMdYJX3ZY2n+651dnXziaN8= Subject key identifier: 0D:28:6A:3B:45:1E:D7:51:94:CB:97:7C:44:53:1C:91:A0:9A:BA:19 Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517 Certificate serial: 019B797ED6DE4417641B611A15D6A4140274 Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/DShqO0Ue11GUy5d8RFMckaCauhk.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.239.162.0/24 maxlen: 24 193.239.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d6:de:44:17:64:1b:61:1a:15:d6:a4:14:02:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d286a3b451ed75194cb977c44531c91a09aba19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e3:16:3a:0f:4e:87:37:4e:98:22:e4:06:80: 9e:4b:7d:1a:ab:83:66:93:64:53:d3:49:9a:e3:4c: 03:52:73:c7:26:fe:29:73:b2:21:d2:82:e7:ab:68: 69:c7:8e:7d:1d:a1:cb:12:53:46:01:86:50:c3:de: b0:ef:d2:68:6a:61:49:b2:c7:65:f9:9c:67:f2:c7: 99:1d:58:18:07:b7:da:c5:79:91:5a:77:ce:de:fe: dd:96:cc:1c:c4:79:03:60:5f:bf:dc:16:37:39:e2: b3:98:dc:42:28:00:43:7c:45:9e:c4:f1:d9:ad:35: ce:3f:a2:43:c2:05:00:35:9f:94:eb:c0:75:45:e1: 5c:87:63:d6:f1:c0:74:95:50:06:50:0d:46:7f:a6: 82:0a:31:30:90:83:66:74:06:ae:3f:1c:49:d6:11: e3:d1:f2:a2:14:78:e4:49:fa:e5:26:f0:1f:88:82: fe:89:68:1a:ad:cc:2a:c4:1c:eb:de:ff:f4:93:d9: 55:4f:7b:fe:25:54:ff:15:5b:ac:51:2b:eb:3b:cf: 70:50:7a:16:9f:c2:60:af:d7:39:fa:7d:03:b9:3f: 6c:cb:45:c9:89:92:6f:84:47:5e:f6:44:c1:b8:45: 87:7d:4c:ac:d9:ec:9c:22:f0:bf:80:d8:4a:af:14: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:6A:3B:45:1E:D7:51:94:CB:97:7C:44:53:1C:91:A0:9A:BA:19 X509v3 Authority Key Identifier: keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/DShqO0Ue11GUy5d8RFMckaCauhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.162.0/23 Signature Algorithm: sha256WithRSAEncryption 11:96:c1:5b:71:5f:da:5c:a9:e1:86:2a:29:b8:6f:e8:7e:46: b5:22:52:ae:4f:b7:6f:84:ee:14:ee:c8:0c:2b:24:c7:07:9a: fc:45:6b:a7:03:83:1d:f0:e6:de:4f:37:c8:32:37:6b:57:97: 5e:ca:33:3a:60:ec:94:aa:02:8b:9d:4d:96:de:17:10:8e:45: 9d:16:25:6f:a6:9c:84:4c:9a:2d:7c:88:23:34:bc:7e:9f:a6: 6a:7b:ff:d3:7a:60:62:58:a5:04:68:22:b0:6c:8e:45:6b:9b: c1:15:6d:84:9d:fb:4a:85:40:2a:f0:c4:7d:9a:05:aa:88:0d: 01:5e:e0:62:a7:b1:ba:6a:37:2b:7c:10:1c:57:51:57:6d:c5: 4c:e6:9d:ad:6b:8b:5f:47:39:04:51:8c:de:b1:3d:ed:93:fd: 42:17:98:d6:bc:f2:a4:6a:ea:8c:1e:c1:8c:e3:a1:71:4d:d5: fc:43:b7:7d:4c:6b:81:14:09:09:a7:74:e2:b2:c1:f8:1c:bb: f9:92:93:e9:5c:98:35:f3:31:43:9d:02:5e:b5:7d:57:bf:bb: 2d:49:cc:fb:4a:4a:c7:e3:02:7e:e8:86:bb:d6:8f:ff:89:ca: f2:29:0f:ea:0c:17:e4:8f:52:e7:65:c1:57:4f:e7:09:34:a3: bc:7f:08:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftbeRBdkG2EaFdakFAJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFiNWI4MTMyZjllMzA3YjcxN2EzZTFlNTRkMWY3ZjQ1 YWU1MTcwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDI4NmEzYjQ1MWVkNzUxOTRjYjk3N2M0NDUzMWM5MWEwOWFiYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+MWOg9OhzdOmCLkBoCeS30aq4Nm k2RT00ma40wDUnPHJv4pc7Ih0oLnq2hpx459HaHLElNGAYZQw96w79JoamFJssdl +Zxn8seZHVgYB7faxXmRWnfO3v7dlswcxHkDYF+/3BY3OeKzmNxCKABDfEWexPHZ rTXOP6JDwgUANZ+U68B1ReFch2PW8cB0lVAGUA1Gf6aCCjEwkINmdAauPxxJ1hHj 0fKiFHjkSfrlJvAfiIL+iWgarcwqxBzr3v/0k9lVT3v+JVT/FVusUSvrO89wUHoW n8Jgr9c5+n0DuT9sy0XJiZJvhEde9kTBuEWHfUys2eycIvC/gNhKrxRdFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0oajtFHtdRlMuXfERTHJGgmroZMB8GA1UdIwQY MBaAFI9RtbgTL54we3F6Ph5U0ff0WuUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzct ZTIyNTFlNDg5Y2JiLzEvRFNocU8wVWUxMUdVeTVkOFJGTWNrYUNhdWhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzctZTIyNTFlNDg5Y2Ji LzEvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe+iMA0G CSqGSIb3DQEBCwUAA4IBAQARlsFbcV/aXKnhhiopuG/ofka1IlKuT7dvhO4U7sgM KyTHB5r8RWunA4Md8ObeTzfIMjdrV5deyjM6YOyUqgKLnU2W3hcQjkWdFiVvppyE TJotfIgjNLx+n6Zqe//TemBiWKUEaCKwbI5Fa5vBFW2EnftKhUAq8MR9mgWqiA0B XuBip7G6ajcrfBAcV1FXbcVM5p2ta4tfRzkEUYzesT3tk/1CF5jWvPKkauqMHsGM 46FxTdX8Q7d9TGuBFAkJp3TissH4HLv5kpPpXJg18zFDnQJetX1Xv7stScz7SkrH 4wJ+6Ia71o//icryKQ/qDBfkj1LnZcFXT+cJNKO8fwg0 -----END CERTIFICATE-----Generated at Fri Jan 2 14:41:01 2026 by rpki-client