This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/DTK1uEpNcIHomep8ZzJ8ZM5VEdY.roa File: DTK1uEpNcIHomep8ZzJ8ZM5VEdY.roa (raw, json) Hash identifier: 7QijLtYYqiOxewNr9aKQamEF1MxicHILyZTE3BfkUX0= Subject key identifier: 0D:32:B5:B8:4A:4D:70:81:E8:99:EA:7C:67:32:7C:64:CE:55:11:D6 Certificate issuer: /CN=5a93259014f5b764847072c3734ecb528072218d Certificate serial: 019B7BA4368A0AFC9ADFB9FDFB8C69DDB60E Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/DTK1uEpNcIHomep8ZzJ8ZM5VEdY.roa Signing time: Thu 01 Jan 2026 22:18:38 +0000 ROA not before: Thu 01 Jan 2026 22:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57729 IP address blocks: 194.31.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:36:8a:0a:fc:9a:df:b9:fd:fb:8c:69:dd:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a93259014f5b764847072c3734ecb528072218d Validity Not Before: Jan 1 22:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d32b5b84a4d7081e899ea7c67327c64ce5511d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:6c:32:41:11:c5:03:2e:7f:da:5c:ee:ff: ce:95:f5:a2:5d:bc:9a:a6:6b:b4:0f:27:b3:d0:e8: 97:32:ed:bc:26:5a:59:15:3e:e1:37:38:ea:a6:75: 3b:56:d8:49:ec:44:f8:b5:6f:9b:4c:2e:b6:49:55: 2a:58:4e:d7:75:f5:91:9e:c5:c0:29:81:f5:f4:67: b1:14:cb:27:e1:b8:ce:fd:6a:57:57:89:08:2f:87: a5:15:38:73:9c:5c:cf:a1:f8:c5:0c:6e:d9:76:85: 2e:b7:26:16:14:60:17:d8:5e:82:e7:34:8a:b4:02: 7e:cd:53:26:7f:81:b8:94:bd:93:7e:e0:2b:6d:06: 98:f7:df:fd:fb:f5:a3:71:e6:bc:ce:6b:8b:7c:14: 56:96:5d:3a:08:6a:10:c4:b5:df:23:6d:93:d4:a0: b6:39:c2:19:06:a0:1a:40:39:99:64:2f:69:8e:a6: 86:02:ec:9b:7a:35:53:13:4f:c2:76:5f:e7:b4:67: 91:a8:c5:b1:0b:36:ad:12:e4:c0:18:f6:f1:db:ae: b4:f2:39:3b:db:64:f5:38:a4:db:3b:04:1a:e9:8b: 81:75:f5:87:d7:4d:f9:1c:7f:e4:99:41:5b:20:a6: 36:a1:d4:9b:18:41:89:ef:07:fc:7c:2a:f0:94:e7: b8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:32:B5:B8:4A:4D:70:81:E8:99:EA:7C:67:32:7C:64:CE:55:11:D6 X509v3 Authority Key Identifier: keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/DTK1uEpNcIHomep8ZzJ8ZM5VEdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.61.0/24 Signature Algorithm: sha256WithRSAEncryption 81:e9:3f:5c:47:03:6d:40:95:fe:20:ca:61:40:69:e6:6e:db: dc:a7:6e:cd:44:44:84:1f:7a:26:8c:44:8a:be:ef:de:b7:d7: 58:7d:d6:cc:da:b1:2b:22:d2:7a:a1:a6:fc:63:74:01:1b:23: 59:e1:3f:4a:81:dc:12:26:b5:47:53:1f:db:cb:51:e2:53:7d: b4:86:73:4c:e8:c8:e9:ed:5b:ab:f6:48:44:fd:fc:95:d9:19: 12:a0:19:be:da:73:32:3b:30:54:12:ef:b6:5a:97:bd:49:b8: 13:f4:3e:24:15:82:7d:00:7d:1f:28:0a:d6:6f:0e:71:65:bc: 87:ad:74:de:48:ae:b8:63:78:82:b1:51:f6:d1:29:78:50:28: ac:a5:3c:06:95:c2:9f:d4:f0:93:f3:cc:e0:97:71:d9:c9:72: 3d:99:6d:90:a7:96:d6:1e:9b:7c:cc:91:8d:62:b4:b8:ad:cb: 95:ad:09:f5:20:46:e1:16:48:6d:19:3e:2e:dd:8c:65:ef:f7: 20:5a:81:5b:d9:9e:4a:0b:c8:0c:44:00:3b:f7:e0:9e:c8:be: 02:e5:20:7d:27:e9:fc:4e:05:c7:86:8f:ae:6a:1a:55:e2:09: 73:2f:5f:08:8d:59:94:cc:30:b4:00:26:7f:83:ea:03:cf:67: f3:c7:10:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pDaKCvya37n9+4xp3bYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTMyNTkwMTRmNWI3NjQ4NDcwNzJjMzczNGVjYjUyODA3 MjIxOGQwHhcNMjYwMTAxMjIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDMyYjViODRhNGQ3MDgxZTg5OWVhN2M2NzMyN2M2NGNlNTUxMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EZsMkERxQMuf9pc7v/OlfWiXbya pmu0Dyez0OiXMu28JlpZFT7hNzjqpnU7VthJ7ET4tW+bTC62SVUqWE7XdfWRnsXA KYH19GexFMsn4bjO/WpXV4kIL4elFThznFzPofjFDG7ZdoUutyYWFGAX2F6C5zSK tAJ+zVMmf4G4lL2TfuArbQaY99/9+/Wjcea8zmuLfBRWll06CGoQxLXfI22T1KC2 OcIZBqAaQDmZZC9pjqaGAuybejVTE0/Cdl/ntGeRqMWxCzatEuTAGPbx26608jk7 22T1OKTbOwQa6YuBdfWH1035HH/kmUFbIKY2odSbGEGJ7wf8fCrwlOe4JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0ytbhKTXCB6JnqfGcyfGTOVRHWMB8GA1UdIwQY MBaAFFqTJZAU9bdkhHByw3NOy1KAciGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BNbGtCVDF0MlNFY0hMRGMwN0xVb0J5SVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lOGQ0YzUtNWQxMS00ZDc5LTgyZWQt ODNmNjg1MmJmOTU4LzEvRFRLMXVFcE5jSUhvbWVwOFp6SjhaTTVWRWRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lOGQ0YzUtNWQxMS00ZDc5LTgyZWQtODNmNjg1MmJmOTU4 LzEvV3BNbGtCVDF0MlNFY0hMRGMwN0xVb0J5SVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh89MA0G CSqGSIb3DQEBCwUAA4IBAQCB6T9cRwNtQJX+IMphQGnmbtvcp27NRESEH3omjESK vu/et9dYfdbM2rErItJ6oab8Y3QBGyNZ4T9KgdwSJrVHUx/by1HiU320hnNM6Mjp 7Vur9khE/fyV2RkSoBm+2nMyOzBUEu+2Wpe9SbgT9D4kFYJ9AH0fKArWbw5xZbyH rXTeSK64Y3iCsVH20Sl4UCispTwGlcKf1PCT88zgl3HZyXI9mW2Qp5bWHpt8zJGN YrS4rcuVrQn1IEbhFkhtGT4u3Yxl7/cgWoFb2Z5KC8gMRAA79+CeyL4C5SB9J+n8 TgXHho+uahpV4glzL18IjVmUzDC0ACZ/g+oDz2fzxxDO -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:46 2026 by rpki-client