This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/DKRX12LW62Pwhd7lkkBTAIcEFmg.roa File: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (raw, json) Hash identifier: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU= Subject key identifier: 0C:A4:57:D7:62:D6:EB:63:F0:85:DE:E5:92:40:53:00:87:04:16:68 Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b Certificate serial: 019B98A3519E5453D466BED4ACC561AF6B3B Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/DKRX12LW62Pwhd7lkkBTAIcEFmg.roa Signing time: Wed 07 Jan 2026 13:26:38 +0000 ROA not before: Wed 07 Jan 2026 13:26:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198731 IP address blocks: 5.1.32.0/24 maxlen: 24 5.1.33.0/24 maxlen: 24 5.1.34.0/24 maxlen: 24 5.1.35.0/24 maxlen: 24 5.1.36.0/24 maxlen: 24 5.1.37.0/24 maxlen: 24 5.1.38.0/24 maxlen: 24 5.1.39.0/24 maxlen: 24 81.173.40.0/24 maxlen: 24 81.173.41.0/24 maxlen: 24 85.184.224.0/24 maxlen: 24 85.184.225.0/24 maxlen: 24 85.184.226.0/24 maxlen: 24 85.184.227.0/24 maxlen: 24 185.45.28.0/24 maxlen: 24 185.45.29.0/24 maxlen: 24 185.45.30.0/24 maxlen: 24 185.45.31.0/24 maxlen: 24 185.64.232.0/24 maxlen: 24 185.64.233.0/24 maxlen: 24 185.64.234.0/24 maxlen: 24 185.64.235.0/24 maxlen: 24 2a00:bc40::/40 maxlen: 40 2a00:bc40:b00::/40 maxlen: 40 2a00:bc40:c00::/40 maxlen: 40 2a00:bc40:f01::/48 maxlen: 48 2a00:bc40:f02::/48 maxlen: 48 2a00:bc40:f03::/48 maxlen: 48 2a00:bc40:f04::/48 maxlen: 48 2a00:bc40:f0e::/48 maxlen: 48 2a00:bc40:1000::/36 maxlen: 36 2a00:bc40:2000::/36 maxlen: 36 2a00:bc40:3000::/36 maxlen: 36 2a00:bc40:4000::/36 maxlen: 36 2a00:bc40:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:a3:51:9e:54:53:d4:66:be:d4:ac:c5:61:af:6b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b Validity Not Before: Jan 7 13:26:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ca457d762d6eb63f085dee59240530087041668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:63:0c:4f:9e:80:fb:33:d0:d9:a5:a0:93: 94:20:4f:3a:8f:78:c6:fc:a6:62:af:b6:80:74:ac: 68:34:41:a0:28:f6:3a:37:9c:f6:cc:00:ff:8f:d6: 6c:de:55:a1:bd:07:ce:48:63:2b:66:e5:3a:fb:f5: 04:a2:8e:c0:d1:5a:48:31:52:84:65:2d:4c:a2:5f: a7:2c:3b:bc:c4:f3:f4:33:4e:c7:47:30:85:fe:5e: 71:f9:d5:c4:3a:0e:10:66:ce:86:c5:e1:3e:44:5d: 94:0d:1a:88:1a:21:7b:e6:d0:cd:53:70:4d:d8:23: 38:ae:e0:0c:bc:ff:ed:eb:fa:a2:f4:aa:08:a1:a9: 43:52:6c:ed:11:af:72:0a:70:3c:d9:5f:f4:07:48: 97:f8:02:a8:19:ea:22:3a:16:fd:db:1a:12:d6:78: a9:90:69:c8:2e:80:55:36:58:b6:c5:57:49:6b:c2: 29:e8:d8:87:70:8a:1f:ff:59:d5:ad:f8:aa:50:38: c1:40:2c:7b:e2:ab:d3:fc:35:c7:12:0e:ad:47:90: d6:0b:6d:c5:df:45:eb:65:72:66:87:61:59:c7:c2: fc:43:ec:d0:12:ae:df:2f:9c:9e:a0:86:b6:81:3e: 3a:40:3c:df:0c:e5:e3:60:a7:49:46:8c:e8:56:ce: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A4:57:D7:62:D6:EB:63:F0:85:DE:E5:92:40:53:00:87:04:16:68 X509v3 Authority Key Identifier: keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/DKRX12LW62Pwhd7lkkBTAIcEFmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.32.0/21 81.173.40.0/23 85.184.224.0/22 185.45.28.0/22 185.64.232.0/22 IPv6: 2a00:bc40::/40 2a00:bc40:b00::-2a00:bc40:cff:ffff:ffff:ffff:ffff:ffff 2a00:bc40:f01::-2a00:bc40:f04:ffff:ffff:ffff:ffff:ffff 2a00:bc40:f0e::/48 2a00:bc40:1000::-2a00:bc40:4fff:ffff:ffff:ffff:ffff:ffff 2a00:bc40:e000::/36 Signature Algorithm: sha256WithRSAEncryption 2e:c0:0e:1c:3d:02:eb:7b:73:5a:04:1b:2c:22:4e:a7:32:f0: 80:5f:83:3b:2f:4a:d3:0f:07:98:65:25:07:7e:ac:cc:99:b2: 83:54:6c:d5:0a:45:05:f5:7b:35:81:26:27:af:7a:ea:8b:62: ba:fb:b2:47:cb:bd:da:16:a0:1e:4b:c0:3d:7f:b7:8c:59:cb: ec:87:09:61:86:43:c6:6e:13:9b:d2:b5:7e:bd:b8:0f:42:50: 38:68:d9:98:eb:21:b7:76:1a:08:fe:5b:ed:eb:5c:51:c1:37: 13:ed:0a:fe:4c:41:25:a2:0d:ca:0b:86:d8:12:75:3d:fb:70: 17:f3:91:5e:e4:6e:a7:83:a5:81:bd:f0:54:b1:a3:03:22:b2: d2:b8:fb:04:5d:e6:bd:3b:de:d5:12:eb:48:b7:59:6b:9c:85: 35:7b:47:40:87:ba:dd:d6:12:ca:20:fb:ee:08:2f:b0:94:00: 6e:68:fb:13:2e:98:6b:60:cb:2d:e4:f3:b2:6c:14:af:b2:d6: 8c:63:5f:74:84:12:48:22:2c:da:da:5a:d7:e3:51:c8:46:4b: 20:62:17:78:74:ee:e6:b3:b2:c4:5d:d2:d3:62:6e:7c:e7:de: b4:f0:31:6b:ef:65:2a:c3:f4:d4:bd:61:dd:f2:e4:c4:7b:47: 66:71:f3:35 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZuYo1GeVFPUZr7UrMVhr2s7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh OWI4OGIwHhcNMjYwMTA3MTMyNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2E0NTdkNzYyZDZlYjYzZjA4NWRlZTU5MjQwNTMwMDg3MDQxNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W9jDE+egPsz0NmloJOUIE86j3jG /KZir7aAdKxoNEGgKPY6N5z2zAD/j9Zs3lWhvQfOSGMrZuU6+/UEoo7A0VpIMVKE ZS1Mol+nLDu8xPP0M07HRzCF/l5x+dXEOg4QZs6GxeE+RF2UDRqIGiF75tDNU3BN 2CM4ruAMvP/t6/qi9KoIoalDUmztEa9yCnA82V/0B0iX+AKoGeoiOhb92xoS1nip kGnILoBVNli2xVdJa8Ip6NiHcIof/1nVrfiqUDjBQCx74qvT/DXHEg6tR5DWC23F 30XrZXJmh2FZx8L8Q+zQEq7fL5yeoIa2gT46QDzfDOXjYKdJRozoVs7kJwIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFAykV9di1utj8IXe5ZJAUwCHBBZoMB8GA1UdIwQY MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt MmI4MDM4MjgzMDE3LzEvREtSWDEyTFc2MlB3aGQ3bGtrQlRBSWNFRm1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3 LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MCQEAgABMB4DBAMFASAD BAFRrSgDBAJVuOADBAK5LRwDBAK5QOgwVwQCAAIwUQMGACoAvEAAMBADBgAqALxA CwMGACoAvEAMMBIDBwAqALxADwEDBwAqALxADwQDBwAqALxADw4wEAMGBCoAvEAQ AwYEKgC8QEADBgQqALxA4DANBgkqhkiG9w0BAQsFAAOCAQEALsAOHD0C63tzWgQb LCJOpzLwgF+DOy9K0w8HmGUlB36szJmyg1Rs1QpFBfV7NYEmJ6966otiuvuyR8u9 2hagHkvAPX+3jFnL7IcJYYZDxm4Tm9K1fr24D0JQOGjZmOsht3YaCP5b7etcUcE3 E+0K/kxBJaINyguG2BJ1PftwF/ORXuRup4Olgb3wVLGjAyKy0rj7BF3mvTve1RLr SLdZa5yFNXtHQIe63dYSyiD77ggvsJQAbmj7Ey6Ya2DLLeTzsmwUr7LWjGNfdIQS SCIs2tpa1+NRyEZLIGIXeHTu5rOyxF3S02JufOfetPAxa+9lKsP01L1h3fLkxHtH ZnHzNQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:23 2026 by rpki-client