This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/DAPMuxk_tOuoRjCSRzXJujqyl8k.roa File: DAPMuxk_tOuoRjCSRzXJujqyl8k.roa (raw, json) Hash identifier: lWuY23Ph8QIbtaF8HQP8ymDgzu9J9XtgohwKflMSPm0= Subject key identifier: 0C:03:CC:BB:19:3F:B4:EB:A8:46:30:92:47:35:C9:BA:3A:B2:97:C9 Certificate issuer: /CN=e945946be7370503beafbe40e11115b9dc953bc3 Certificate serial: 019B7C11DE299970C55D1BBC536602535E9A Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/DAPMuxk_tOuoRjCSRzXJujqyl8k.roa Signing time: Fri 02 Jan 2026 00:18:24 +0000 ROA not before: Fri 02 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 185.140.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:de:29:99:70:c5:5d:1b:bc:53:66:02:53:5e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3 Validity Not Before: Jan 2 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c03ccbb193fb4eba84630924735c9ba3ab297c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:e9:f3:e2:a6:c0:aa:32:a1:1c:53:75:9d: cf:a1:12:1b:16:4f:ce:02:04:6c:38:06:14:fe:ff: cd:25:7b:1f:ed:37:35:8c:2c:52:88:89:37:54:31: be:8e:c8:cd:b0:35:21:af:5d:00:95:e7:70:5e:be: 81:33:27:da:5d:62:4f:7a:8c:0c:c5:64:e9:4a:11: c7:bb:d7:3d:58:32:74:a2:5f:7f:e3:07:ba:90:38: 49:64:73:32:65:02:cb:89:38:ef:af:b3:c9:90:07: e6:e0:2e:7b:ca:ff:8a:87:26:55:f0:a8:3c:a5:3b: 86:80:ce:a0:c6:7a:44:ec:99:c4:ff:05:c5:da:a1: 76:bb:9c:6d:2e:41:d2:1d:ef:cf:46:0c:49:8d:6a: 26:2b:74:a3:d2:aa:16:c9:c6:6e:54:fd:9d:9c:ca: e8:12:fc:d9:a1:7a:e6:61:52:d1:40:21:5f:bb:0b: 92:e0:9e:05:7f:77:53:be:a2:64:37:f4:d4:16:70: e0:a3:6c:ab:b9:17:94:59:e6:79:c4:a0:90:0d:04: 77:67:16:c2:43:25:ad:c3:7f:1d:80:17:f1:60:86: b5:53:79:d7:47:ec:3e:50:98:0a:46:c3:5a:30:41: 39:9a:50:19:31:1a:d0:a8:88:b6:f7:57:59:43:e8: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:CC:BB:19:3F:B4:EB:A8:46:30:92:47:35:C9:BA:3A:B2:97:C9 X509v3 Authority Key Identifier: keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/DAPMuxk_tOuoRjCSRzXJujqyl8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.104.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:fb:2b:57:41:d6:f3:36:a3:ba:bc:5b:9d:5f:54:9c:b6:f0: 13:52:c7:4d:c3:e2:37:73:cf:72:d7:4e:e4:fb:70:1d:c2:a9: f1:63:f1:2f:96:46:0e:fd:02:6a:64:79:8f:ab:22:e2:5f:40: ae:4e:bd:22:1b:ce:99:11:81:de:c7:82:52:e9:9b:7d:7f:8e: ac:64:50:74:6f:10:90:de:79:e8:6d:38:7c:1a:6f:6e:f0:d3: 89:99:f2:6c:26:9f:f8:0d:6d:8b:ca:1c:d3:6b:8a:e7:f2:1e: 3d:ea:78:97:ad:5a:c2:b4:c0:9d:21:c5:5d:8d:94:f4:30:c3: c7:30:0d:f9:ee:d1:2c:ab:22:1c:37:db:85:f6:32:64:f3:36: e4:90:c1:65:3c:67:2b:64:9e:58:85:ca:48:4b:a4:17:e0:a9: 0c:ca:05:f4:83:b2:c2:a0:11:a0:3f:c1:ab:81:ed:15:20:30: 12:21:66:dc:c9:26:ba:3b:aa:bb:d3:c1:c0:87:e1:82:b0:23: f7:1c:fa:4a:ed:b4:3d:4b:de:6d:a9:28:08:dc:c5:5c:08:7d: d7:1f:cd:48:20:6d:d9:26:1a:f3:70:c1:68:ba:2c:7c:ae:02: ad:da:4c:65:b1:69:7f:0d:4b:45:f7:ae:8e:8f:b4:7d:b6:4d: 2b:85:71:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ed4pmXDFXRu8U2YCU16aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NDU5NDZiZTczNzA1MDNiZWFmYmU0MGUxMTExNWI5ZGM5 NTNiYzMwHhcNMjYwMTAyMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzAzY2NiYjE5M2ZiNGViYTg0NjMwOTI0NzM1YzliYTNhYjI5N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvDp8+KmwKoyoRxTdZ3PoRIbFk/O AgRsOAYU/v/NJXsf7Tc1jCxSiIk3VDG+jsjNsDUhr10AledwXr6BMyfaXWJPeowM xWTpShHHu9c9WDJ0ol9/4we6kDhJZHMyZQLLiTjvr7PJkAfm4C57yv+KhyZV8Kg8 pTuGgM6gxnpE7JnE/wXF2qF2u5xtLkHSHe/PRgxJjWomK3Sj0qoWycZuVP2dnMro EvzZoXrmYVLRQCFfuwuS4J4Ff3dTvqJkN/TUFnDgo2yruReUWeZ5xKCQDQR3ZxbC QyWtw38dgBfxYIa1U3nXR+w+UJgKRsNaMEE5mlAZMRrQqIi291dZQ+if5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwDzLsZP7TrqEYwkkc1ybo6spfJMB8GA1UdIwQY MBaAFOlFlGvnNwUDvq++QOERFbnclTvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQt NjZkM2Q4YmE1MzlmLzEvREFQTXV4a190T3VvUmpDU1J6WEp1anF5bDhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQtNjZkM2Q4YmE1Mzlm LzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYxoMA0G CSqGSIb3DQEBCwUAA4IBAQAb+ytXQdbzNqO6vFudX1SctvATUsdNw+I3c89y107k +3AdwqnxY/EvlkYO/QJqZHmPqyLiX0CuTr0iG86ZEYHex4JS6Zt9f46sZFB0bxCQ 3nnobTh8Gm9u8NOJmfJsJp/4DW2LyhzTa4rn8h496niXrVrCtMCdIcVdjZT0MMPH MA357tEsqyIcN9uF9jJk8zbkkMFlPGcrZJ5YhcpIS6QX4KkMygX0g7LCoBGgP8Gr ge0VIDASIWbcySa6O6q708HAh+GCsCP3HPpK7bQ9S95tqSgI3MVcCH3XH81IIG3Z JhrzcMFouix8rgKt2kxlsWl/DUtF966Oj7R9tk0rhXG2 -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:36 2026 by rpki-client