This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DpVlP-CDojfJd8BFvlgfdr3f-T4.roa File: DpVlP-CDojfJd8BFvlgfdr3f-T4.roa (raw, json) Hash identifier: eNNDlrOJw2Jo/OW5o5qOgoZ27JzOfR4lVRHbMkq1Bdc= Subject key identifier: 0E:95:65:3F:E0:83:A2:37:C9:77:C0:45:BE:58:1F:76:BD:DF:F9:3E Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C80906631EB746C2E995C5D876E40EB Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DpVlP-CDojfJd8BFvlgfdr3f-T4.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31017 IP address blocks: 86.104.128.0/22 maxlen: 22 89.43.136.0/22 maxlen: 22 2a05:b680:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:90:66:31:eb:74:6c:2e:99:5c:5d:87:6e:40:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e95653fe083a237c977c045be581f76bddff93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:5c:17:4f:ee:23:04:60:54:08:46:3c:fd: e9:07:46:11:dd:ec:5d:92:23:f9:95:f9:dd:d1:07: 23:59:f8:55:3a:41:f2:5c:04:6c:21:c0:ba:f0:b4: 4e:28:ca:f0:cb:50:c3:ef:57:77:6d:e7:4b:f1:32: 24:1c:03:92:f9:6d:e9:f3:db:4b:a6:7a:ae:f3:41: c5:ad:16:4b:12:84:52:14:04:11:2a:1e:ac:1e:95: 56:88:f6:8b:36:44:2c:3b:40:36:c6:6e:aa:30:39: 19:67:11:15:d8:63:b4:72:a7:e5:1b:de:ed:6a:95: d4:d6:c4:0f:fc:50:c0:cc:97:ba:7d:1b:f8:38:92: c9:cd:38:56:37:d0:59:b8:e6:de:8e:9c:f6:4e:7b: 7a:43:b9:83:4f:ab:95:d6:37:5f:de:66:02:d4:3b: e0:7c:d3:66:c9:6e:a2:78:98:34:7b:b8:9f:d8:e0: ee:d3:be:53:e5:f1:5a:b7:36:eb:9f:f2:62:57:23: c0:b9:57:5e:b1:5d:6d:7b:ce:6f:1c:dd:bc:ea:d5: 26:64:0b:a5:a5:4a:f3:89:d2:08:19:70:e8:fe:a8: b9:8c:a6:17:20:ba:a0:2f:ef:42:f0:7f:0c:5c:66: 3e:87:ea:98:ba:8b:62:02:1a:87:15:b5:75:e3:8d: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:95:65:3F:E0:83:A2:37:C9:77:C0:45:BE:58:1F:76:BD:DF:F9:3E X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DpVlP-CDojfJd8BFvlgfdr3f-T4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.128.0/22 89.43.136.0/22 IPv6: 2a05:b680:6::/48 Signature Algorithm: sha256WithRSAEncryption 39:23:17:f8:85:21:59:c9:68:d9:22:66:56:83:9f:8e:13:2a: 02:cf:8b:4b:0d:d1:37:41:24:56:38:3f:a1:39:53:72:69:ca: 1a:72:f7:bb:96:96:ea:76:51:cd:00:34:89:bb:ab:74:5d:ef: a6:21:45:c7:4f:c3:33:7a:95:e9:04:5f:09:43:d1:e8:63:7d: 0e:36:3b:75:46:99:77:fb:b0:4b:df:19:96:26:d0:2b:72:b6: fc:1b:24:c9:4d:8e:18:eb:98:ac:92:08:a2:0f:1f:bc:12:de: 87:4a:67:3c:93:06:6e:18:fa:6c:90:1f:6a:6c:de:93:37:07: b1:aa:fa:a9:a3:48:f3:e0:b5:5a:02:d1:f2:19:30:59:1d:3d: 70:ce:b1:8a:68:b4:ba:d4:6d:38:32:b3:41:d4:c3:a3:98:e9: cd:ff:e2:c0:82:e6:47:b9:a1:5b:91:14:b0:1a:0f:3c:6f:26: cb:9b:d7:b1:96:dc:10:b1:39:25:93:c1:f1:2e:8d:6c:8a:33: 59:9e:92:4b:2a:ef:58:2d:d6:69:61:84:c1:51:3a:9d:27:ba: e8:c3:3c:33:ee:3d:70:59:a6:89:ef:93:95:c1:32:0f:39:16: 4b:d3:32:33:6e:11:4c:76:0f:c3:85:93:72:49:a8:35:08:2b: 09:c9:ba:b7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8gJBmMet0bC6ZXF2HbkDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTk1NjUzZmUwODNhMjM3Yzk3N2MwNDViZTU4MWY3NmJkZGZmOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApglcF0/uIwRgVAhGPP3pB0YR3exd kiP5lfnd0QcjWfhVOkHyXARsIcC68LROKMrwy1DD71d3bedL8TIkHAOS+W3p89tL pnqu80HFrRZLEoRSFAQRKh6sHpVWiPaLNkQsO0A2xm6qMDkZZxEV2GO0cqflG97t apXU1sQP/FDAzJe6fRv4OJLJzThWN9BZuObejpz2Tnt6Q7mDT6uV1jdf3mYC1Dvg fNNmyW6ieJg0e7if2ODu075T5fFatzbrn/JiVyPAuVdesV1te85vHN286tUmZAul pUrzidIIGXDo/qi5jKYXILqgL+9C8H8MXGY+h+qYuotiAhqHFbV1440TMQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFA6VZT/gg6I3yXfARb5YH3a93/k+MB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvRHBWbFAtQ0RvamZKZDhCRnZsZ2ZkcjNmLVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCVmiAAwQC WSuIMA8EAgACMAkDBwAqBbaAAAYwDQYJKoZIhvcNAQELBQADggEBADkjF/iFIVnJ aNkiZlaDn44TKgLPi0sN0TdBJFY4P6E5U3Jpyhpy97uWlup2Uc0ANIm7q3Rd76Yh RcdPwzN6lekEXwlD0ehjfQ42O3VGmXf7sEvfGZYm0CtytvwbJMlNjhjrmKySCKIP H7wS3odKZzyTBm4Y+myQH2ps3pM3B7Gq+qmjSPPgtVoC0fIZMFkdPXDOsYpotLrU bTgys0HUw6OY6c3/4sCC5ke5oVuRFLAaDzxvJsub17GW3BCxOSWTwfEujWyKM1me kksq71gt1mlhhMFROp0nuujDPDPuPXBZponvk5XBMg85FkvTMjNuEUx2D8OFk3JJ qDUIKwnJurc= -----END CERTIFICATE-----Generated at Wed Jan 21 10:46:56 2026 by rpki-client