This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/zd4dg2repc5ZtAXTGRO80on_DTU.roa File: zd4dg2repc5ZtAXTGRO80on_DTU.roa (raw, json) Hash identifier: lt8llCWKdVjVRwkRrXSZnj64/kiIsHVPgvu062D0oJU= Subject key identifier: CD:DE:1D:83:6A:DE:A5:CE:59:B4:05:D3:19:13:BC:D2:89:FF:0D:35 Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22 Certificate serial: 019C1CEF4CEDA20839F04237F3D1842A4426 Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/zd4dg2repc5ZtAXTGRO80on_DTU.roa Signing time: Mon 02 Feb 2026 05:59:30 +0000 ROA not before: Mon 02 Feb 2026 05:59:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204203 IP address blocks: 91.108.145.0/24 maxlen: 24 91.108.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:ef:4c:ed:a2:08:39:f0:42:37:f3:d1:84:2a:44:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22 Validity Not Before: Feb 2 05:59:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdde1d836adea5ce59b405d31913bcd289ff0d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:ff:fb:b4:b6:75:6c:1f:c6:3b:a7:d7:13: 1f:d1:7c:78:60:f6:e5:39:14:17:a1:11:76:b8:10: b6:87:7a:4c:e0:d4:d7:fc:65:f5:b5:ae:9a:1e:4b: 63:8d:8c:b5:3a:cf:e8:26:cd:04:dc:23:be:10:1d: aa:3e:f1:a9:33:42:95:7d:e6:60:1f:4a:e2:d9:26: 21:0b:ff:49:f1:92:e5:1a:c4:e5:37:06:ce:c4:98: 3f:00:7c:8c:a4:44:8b:76:0c:0e:78:ac:d5:46:25: 55:d1:34:2f:9a:74:5f:ae:ab:f5:33:04:18:c0:34: 95:5f:06:b3:45:32:37:c7:86:e3:f0:3d:8e:ac:0f: 61:d9:dd:a6:72:17:97:42:b4:43:2a:18:9d:84:c4: ef:7a:08:39:ef:3a:ce:06:ac:bd:a8:6c:51:af:7f: a3:20:c7:f0:55:e2:07:f9:74:28:54:61:b4:cd:f9: 4e:54:8c:7c:9a:65:95:aa:99:4d:e9:94:8c:d2:dd: a9:e2:bf:d8:e5:83:86:f0:7f:e4:bc:a9:8a:46:d3: 09:8d:e5:97:cf:d6:8a:b9:36:89:3b:9a:ce:56:c7: b2:96:50:7f:6c:1f:d5:40:cd:d3:5b:71:6b:81:db: 80:5c:b4:16:73:74:4a:71:a2:8c:d7:da:f9:7d:f1: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DE:1D:83:6A:DE:A5:CE:59:B4:05:D3:19:13:BC:D2:89:FF:0D:35 X509v3 Authority Key Identifier: keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/zd4dg2repc5ZtAXTGRO80on_DTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.145.0-91.108.146.255 Signature Algorithm: sha256WithRSAEncryption 52:ea:0e:0d:cf:88:4c:93:f7:ef:d5:5a:94:61:f8:9e:69:e2: 3a:63:be:62:74:2c:2d:7e:38:41:6c:31:1f:1c:a3:21:e5:5c: 09:c7:af:16:4e:28:b0:1f:d9:69:f0:01:78:0a:24:37:73:4d: 8f:ce:1a:32:a3:b6:3b:49:d9:3a:c5:8b:a4:a8:51:fa:d9:f4: 2c:ab:4e:40:9b:c6:39:b2:a5:bd:95:52:28:ea:b6:f0:66:40: 9d:fa:c8:dc:29:2c:25:eb:b5:dd:92:24:40:c3:ae:19:1d:2c: 73:02:98:85:15:80:95:a1:5f:d0:53:a8:ce:eb:26:c5:94:22: 0a:b7:54:93:ad:ae:a6:53:53:f5:70:d0:96:69:f4:54:90:15: ae:cf:54:4c:22:05:22:f7:52:96:36:bc:2f:5e:8d:f9:4e:9e: bb:78:f1:8e:7b:5d:c4:f9:e3:bd:9b:79:8e:e6:9e:94:25:5b: ae:ca:56:6d:b5:b5:76:ae:c8:49:3c:f1:5d:82:30:97:87:89: 4e:f1:b5:96:0e:d7:e9:9a:e0:56:4b:d2:ea:32:9f:56:34:1b: 30:19:98:7d:62:fb:b2:97:82:32:4f:38:61:0b:1b:f4:5d:d2: 00:ae:99:46:ca:92:54:3d:2f:25:f8:4b:4b:50:16:8f:31:87: d4:6c:3c:cf -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZwc70ztogg58EI389GEKkQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2Y2JjZjJlOTU3Y2E4ZDk0MjQ3MmE3YjAwNDQyODViMjZk YjZiMjIwHhcNMjYwMjAyMDU1OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGRlMWQ4MzZhZGVhNWNlNTliNDA1ZDMxOTEzYmNkMjg5ZmYwZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTv/+7S2dWwfxjun1xMf0Xx4YPbl ORQXoRF2uBC2h3pM4NTX/GX1ta6aHktjjYy1Os/oJs0E3CO+EB2qPvGpM0KVfeZg H0ri2SYhC/9J8ZLlGsTlNwbOxJg/AHyMpESLdgwOeKzVRiVV0TQvmnRfrqv1MwQY wDSVXwazRTI3x4bj8D2OrA9h2d2mcheXQrRDKhidhMTvegg57zrOBqy9qGxRr3+j IMfwVeIH+XQoVGG0zflOVIx8mmWVqplN6ZSM0t2p4r/Y5YOG8H/kvKmKRtMJjeWX z9aKuTaJO5rOVseyllB/bB/VQM3TW3FrgduAXLQWc3RKcaKM19r5ffH1DQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM3eHYNq3qXOWbQF0xkTvNKJ/w01MB8GA1UdIwQY MBaAFJbLzy6VfKjZQkcqewBEKFsm22siMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYjYwZTktYjZlMC00ODkwLTlkZTEt MTNiNDMxMzQyYWI4LzEvemQ0ZGcycmVwYzVadEFYVEdSTzgwb25fRFRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYjYwZTktYjZlMC00ODkwLTlkZTEtMTNiNDMxMzQyYWI4 LzEvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbbJED BABbbJIwDQYJKoZIhvcNAQELBQADggEBAFLqDg3PiEyT9+/VWpRh+J5p4jpjvmJ0 LC1+OEFsMR8coyHlXAnHrxZOKLAf2WnwAXgKJDdzTY/OGjKjtjtJ2TrFi6SoUfrZ 9CyrTkCbxjmypb2VUijqtvBmQJ36yNwpLCXrtd2SJEDDrhkdLHMCmIUVgJWhX9BT qM7rJsWUIgq3VJOtrqZTU/Vw0JZp9FSQFa7PVEwiBSL3UpY2vC9ejflOnrt48Y57 XcT5472beY7mnpQlW67KVm21tXauyEk88V2CMJeHiU7xtZYO1+ma4FZL0uoyn1Y0 GzAZmH1i+7KXgjJPOGELG/Rd0gCumUbKklQ9LyX4S0tQFo8xh9RsPM8= -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:54 2026 by rpki-client