This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/DAxx-UN0iBz6pOJGvTXHcOZD_jg.roa File: DAxx-UN0iBz6pOJGvTXHcOZD_jg.roa (raw, json) Hash identifier: Kdz9GuJlZ7ZKJVHKRBo+yO7QuXh68uExIpIMEaag7CQ= Subject key identifier: 0C:0C:71:F9:43:74:88:1C:FA:A4:E2:46:BD:35:C7:70:E6:43:FE:38 Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7 Certificate serial: 019B78A37E32F44BF025D2D22C0F0589CD65 Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/DAxx-UN0iBz6pOJGvTXHcOZD_jg.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198175 IP address blocks: 193.134.8.0/21 maxlen: 21 2a10:8240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7e:32:f4:4b:f0:25:d2:d2:2c:0f:05:89:cd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7 Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c0c71f94374881cfaa4e246bd35c770e643fe38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:a9:8e:92:2a:e0:f3:d9:3d:7f:3e:a7:34: 38:0b:69:9a:5e:26:b1:af:64:b7:fc:86:3c:7b:6f: aa:df:71:81:ad:67:88:39:34:f2:ea:fb:89:cc:07: a0:14:e2:56:d8:e0:93:b9:07:70:c5:1a:fb:33:58: aa:fc:3e:96:2c:a7:21:57:cd:9a:1d:26:a4:69:b3: fd:0c:3f:7f:a7:4b:5f:43:e0:f3:8d:23:a8:84:0a: f8:43:ca:0a:b9:55:3a:02:6f:19:ba:c9:cf:f2:e3: e9:97:45:44:f0:47:99:6b:fd:50:66:13:10:45:02: 2b:25:97:b2:91:a7:ae:15:fa:01:9a:24:72:d7:45: 8f:84:f6:00:e5:c0:8a:88:06:36:7a:06:5a:34:1a: a7:b7:10:25:85:e4:55:08:ab:88:76:4c:8e:a6:28: a8:4c:6e:a2:db:45:77:f2:b2:46:b0:0f:35:70:2c: f2:7b:88:ac:ad:47:44:1e:df:10:dc:9a:a7:c5:3e: 1a:ff:eb:01:3b:de:7d:ee:a4:31:e1:62:63:ae:d7: 5c:82:40:63:9a:15:68:67:51:5d:7f:1c:b2:24:e9: 98:85:21:7e:37:cf:bf:bd:31:eb:9d:35:2e:43:b1: e0:76:7b:49:3d:c5:42:bf:79:c1:21:47:f0:c9:b4: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0C:71:F9:43:74:88:1C:FA:A4:E2:46:BD:35:C7:70:E6:43:FE:38 X509v3 Authority Key Identifier: keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/DAxx-UN0iBz6pOJGvTXHcOZD_jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.8.0/21 IPv6: 2a10:8240::/32 Signature Algorithm: sha256WithRSAEncryption 01:d0:db:4c:aa:4d:e0:c6:66:d5:18:16:35:2e:fc:a4:e3:a7: e5:f3:2c:2e:ba:da:fd:ec:af:3b:57:c4:88:44:1c:b1:fd:37: 15:44:c9:5d:7d:4b:6b:17:07:60:63:89:8f:a5:21:c3:35:a8: d9:ac:51:cc:bc:cf:d6:70:3a:8e:6f:83:30:74:54:5f:20:86: e9:03:8a:3a:d1:8f:b7:ec:19:65:3a:12:07:54:0a:7d:99:f1: d7:b8:50:79:33:80:d3:e7:77:ed:06:76:d4:c2:d1:17:68:8f: 9e:03:e5:45:d6:a2:3c:4f:21:5b:19:9f:cf:b7:2d:e2:1a:69: 53:98:80:7a:98:1b:1c:0d:8d:be:fd:2c:2e:8d:41:be:ae:06: e1:53:12:a6:45:43:be:6c:1f:f2:e2:46:13:bf:49:a0:c9:e4: 17:2b:eb:77:61:83:f6:e2:72:44:33:94:cc:ea:39:12:c5:a6: e6:c5:27:d8:8a:35:59:7d:32:ed:46:23:2c:9e:62:dc:5d:8d: ed:e0:0e:6d:37:46:07:ed:00:0e:2d:da:2f:a9:4e:13:17:aa: 4d:58:b3:d5:9b:bc:60:39:ff:14:5b:e9:3f:e6:82:91:5b:f7: c7:41:e8:41:58:7c:45:b1:f0:44:4b:d8:de:b7:18:86:65:c4: 67:ba:27:54 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o34y9EvwJdLSLA8Fic1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYzI2MDM0MzdlZjc0MTE3ZmExMjI3MmVjNDJjMjUyN2Rh ODAwYzcwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzBjNzFmOTQzNzQ4ODFjZmFhNGUyNDZiZDM1Yzc3MGU2NDNmZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLqpjpIq4PPZPX8+pzQ4C2maXiax r2S3/IY8e2+q33GBrWeIOTTy6vuJzAegFOJW2OCTuQdwxRr7M1iq/D6WLKchV82a HSakabP9DD9/p0tfQ+DzjSOohAr4Q8oKuVU6Am8ZusnP8uPpl0VE8EeZa/1QZhMQ RQIrJZeykaeuFfoBmiRy10WPhPYA5cCKiAY2egZaNBqntxAlheRVCKuIdkyOpiio TG6i20V38rJGsA81cCzye4isrUdEHt8Q3JqnxT4a/+sBO9597qQx4WJjrtdcgkBj mhVoZ1FdfxyyJOmYhSF+N8+/vTHrnTUuQ7HgdntJPcVCv3nBIUfwybSLJQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAwMcflDdIgc+qTiRr01x3DmQ/44MB8GA1UdIwQY MBaAFN/CYDQ373QRf6EicuxCwlJ9qADHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUt YzgzMDA3MzI3NDQ5LzEvREF4eC1VTjBpQno2cE9KR3ZUWEhjT1pEX2pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUtYzgzMDA3MzI3NDQ5 LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDwYYIMA0E AgACMAcDBQAqEIJAMA0GCSqGSIb3DQEBCwUAA4IBAQAB0NtMqk3gxmbVGBY1Lvyk 46fl8ywuutr97K87V8SIRByx/TcVRMldfUtrFwdgY4mPpSHDNajZrFHMvM/WcDqO b4MwdFRfIIbpA4o60Y+37BllOhIHVAp9mfHXuFB5M4DT53ftBnbUwtEXaI+eA+VF 1qI8TyFbGZ/Pty3iGmlTmIB6mBscDY2+/SwujUG+rgbhUxKmRUO+bB/y4kYTv0mg yeQXK+t3YYP24nJEM5TM6jkSxabmxSfYijVZfTLtRiMsnmLcXY3t4A5tN0YH7QAO LdovqU4TF6pNWLPVm7xgOf8UW+k/5oKRW/fHQehBWHxFsfBES9jetxiGZcRnuidU -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:56 2026 by rpki-client