This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/DpXD_qmAIFL_EpLe0GJAEUHvYxs.roa File: DpXD_qmAIFL_EpLe0GJAEUHvYxs.roa (raw, json) Hash identifier: H5hh0chuQLZ9k4SOj22nhApIqV8qceTKzoblxLgW6NE= Subject key identifier: 0E:95:C3:FE:A9:80:20:52:FF:12:92:DE:D0:62:40:11:41:EF:63:1B Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b Certificate serial: 019BB638CBF6C08CB802135C1957B9CB1814 Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/DpXD_qmAIFL_EpLe0GJAEUHvYxs.roa Signing time: Tue 13 Jan 2026 07:18:54 +0000 ROA not before: Tue 13 Jan 2026 07:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39798 IP address blocks: 5.181.156.0/22 maxlen: 24 5.252.176.0/22 maxlen: 24 5.252.179.0/24 maxlen: 24 94.158.244.0/22 maxlen: 24 185.163.44.0/22 maxlen: 24 185.225.16.0/22 maxlen: 24 194.180.157.0/24 maxlen: 24 194.180.158.0/24 maxlen: 24 194.180.174.0/24 maxlen: 24 194.180.191.0/24 maxlen: 24 2001:67c:2db8::/48 maxlen: 48 2a0a:c800::/29 maxlen: 48 2a0a:c802:5::/48 maxlen: 48 2a0a:c802:6::/48 maxlen: 48 2a0a:c802:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:38:cb:f6:c0:8c:b8:02:13:5c:19:57:b9:cb:18:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b Validity Not Before: Jan 13 07:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e95c3fea9802052ff1292ded062401141ef631b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:3b:d8:ec:1e:0d:4f:51:cb:05:74:01:5e: 71:da:1b:40:f2:f9:13:5a:45:e1:25:16:83:ec:11: c8:b1:d8:44:40:46:56:02:4b:06:fc:ad:1d:34:40: 6d:2b:13:61:3c:11:4c:b4:79:35:a0:a9:e3:cd:3a: 93:09:5c:05:73:0f:d0:78:33:51:de:40:de:a6:3a: 35:06:f3:2f:34:7d:54:d3:91:91:2a:50:d3:91:ee: 58:35:b5:ad:83:79:57:48:42:83:bb:fe:32:ff:53: 82:84:34:ab:e2:28:47:78:f5:e0:fd:2f:f7:20:9f: d6:9a:62:f6:cb:95:4e:0b:ab:c4:0a:c0:ba:fb:5c: 7a:b8:2b:53:2f:1e:c1:b8:84:e2:9b:0e:f1:54:d6: 58:da:7f:ac:fa:98:57:d0:35:7c:86:eb:a4:9a:11: e2:7e:9a:d2:43:c4:6b:e8:f3:39:4c:c2:be:58:bd: 18:8e:92:15:bb:c8:59:db:6a:01:df:3c:a5:31:60: aa:cb:4b:49:07:99:5e:2e:1d:b6:9d:f6:7f:2b:41: 73:94:74:d0:aa:df:e8:a3:62:1f:27:99:de:14:a4: 37:85:96:62:e4:49:90:df:93:9c:d3:ba:c2:23:00: 17:21:1e:db:bb:ec:4f:69:76:25:47:a3:fd:b9:ce: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:95:C3:FE:A9:80:20:52:FF:12:92:DE:D0:62:40:11:41:EF:63:1B X509v3 Authority Key Identifier: keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/DpXD_qmAIFL_EpLe0GJAEUHvYxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.156.0/22 5.252.176.0/22 94.158.244.0/22 185.163.44.0/22 185.225.16.0/22 194.180.157.0-194.180.158.255 194.180.174.0/24 194.180.191.0/24 IPv6: 2001:67c:2db8::/48 2a0a:c800::/29 Signature Algorithm: sha256WithRSAEncryption 95:24:bd:a5:6c:7f:6e:87:32:c3:e3:fa:b0:4c:5f:69:f1:14: de:a6:b1:db:fe:4d:26:9d:e8:fa:c8:54:be:be:b7:1e:eb:d2: ae:5e:49:59:d2:46:c4:04:23:5c:44:19:17:0c:ee:e2:6c:69: f7:7f:01:73:f2:09:45:76:7e:16:66:bc:65:b8:2e:f6:04:b6: 36:f0:d5:33:24:e0:fc:f9:df:2f:08:8e:cf:52:4d:aa:fb:d9: f2:7d:67:c0:a2:9f:2a:c2:03:16:b0:f3:fe:f7:d4:de:ee:a8: 9a:c1:b0:7a:7e:7c:30:b7:af:cb:7d:0c:b5:71:53:a0:55:07: d5:78:8a:17:f1:ac:8d:53:44:7e:8d:4b:af:1e:04:99:56:ff: 4c:b6:9a:67:90:32:be:4d:6a:42:5c:51:a3:77:4b:0c:1b:5b: 2a:40:61:a1:07:ba:22:2e:dc:6c:1e:a8:55:8c:bf:6e:15:4d: f9:23:cc:07:5f:f8:96:26:e5:4c:db:fc:de:f5:4d:81:70:77: 32:11:f1:51:f5:00:ab:0d:db:40:e0:4e:56:0d:62:91:cd:c7: 66:f0:5d:04:ca:40:75:26:f0:44:61:3a:15:74:b2:af:0e:95: 59:0b:6a:03:03:9a:99:a9:50:16:b6:c9:eb:6b:0c:f0:0a:a3: b4:7c:eb:5c -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZu2OMv2wIy4AhNcGVe5yxgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MzFkNjIxZDE5MmY5MmRiMDkzZDkzMzA5MmMxZTIzNmI0 ZDQ5N2IwHhcNMjYwMTEzMDcxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTk1YzNmZWE5ODAyMDUyZmYxMjkyZGVkMDYyNDAxMTQxZWY2MzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o472OweDU9RywV0AV5x2htA8vkT WkXhJRaD7BHIsdhEQEZWAksG/K0dNEBtKxNhPBFMtHk1oKnjzTqTCVwFcw/QeDNR 3kDepjo1BvMvNH1U05GRKlDTke5YNbWtg3lXSEKDu/4y/1OChDSr4ihHePXg/S/3 IJ/WmmL2y5VOC6vECsC6+1x6uCtTLx7BuITimw7xVNZY2n+s+phX0DV8huukmhHi fprSQ8Rr6PM5TMK+WL0YjpIVu8hZ22oB3zylMWCqy0tJB5leLh22nfZ/K0FzlHTQ qt/oo2IfJ5neFKQ3hZZi5EmQ35Oc07rCIwAXIR7bu+xPaXYlR6P9uc7f5wIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFA6Vw/6pgCBS/xKS3tBiQBFB72MbMB8GA1UdIwQY MBaAFIgx1iHRkvktsJPZMwksHiNrTUl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80NDA3ODEtZjYxNC00NTBkLTlkOWYt MmI4NzYxZDhhMTM3LzEvRHBYRF9xbUFJRkxfRXBMZTBHSkFFVUh2WXhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS80NDA3ODEtZjYxNC00NTBkLTlkOWYtMmI4NzYxZDhhMTM3 LzEvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDA+BAIAATA4AwQCBbWcAwQC BfywAwQCXp70AwQCuaMsAwQCueEQMAwDBADCtJ0DBADCtJ4DBADCtK4DBADCtL8w FgQCAAIwEAMHACABBnwtuAMFAyoKyAAwDQYJKoZIhvcNAQELBQADggEBAJUkvaVs f26HMsPj+rBMX2nxFN6msdv+TSad6PrIVL6+tx7r0q5eSVnSRsQEI1xEGRcM7uJs afd/AXPyCUV2fhZmvGW4LvYEtjbw1TMk4Pz53y8Ijs9STar72fJ9Z8CinyrCAxaw 8/731N7uqJrBsHp+fDC3r8t9DLVxU6BVB9V4ihfxrI1TRH6NS68eBJlW/0y2mmeQ Mr5NakJcUaN3SwwbWypAYaEHuiIu3GweqFWMv24VTfkjzAdf+JYm5Uzb/N71TYFw dzIR8VH1AKsN20DgTlYNYpHNx2bwXQTKQHUm8ERhOhV0sq8OlVkLagMDmpmpUBa2 yetrDPAKo7R861w= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:50 2026 by rpki-client