This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/DmAsoEh_ftaKPOhVRscVORbXGKo.roa File: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (raw, json) Hash identifier: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4= Subject key identifier: 0E:60:2C:A0:48:7F:7E:D6:8A:3C:E8:55:46:C7:15:39:16:D7:18:AA Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Certificate serial: 019C281D3C2C585051A04FF60E71FA6320ED Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/DmAsoEh_ftaKPOhVRscVORbXGKo.roa Signing time: Wed 04 Feb 2026 10:05:30 +0000 ROA not before: Wed 04 Feb 2026 10:05:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207467 IP address blocks: 185.65.72.0/22 maxlen: 24 185.65.72.0/23 maxlen: 23 185.65.74.0/24 maxlen: 24 185.65.75.0/24 maxlen: 24 2a03:1a20::/48 maxlen: 48 2a03:1a20:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:1d:3c:2c:58:50:51:a0:4f:f6:0e:71:fa:63:20:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Validity Not Before: Feb 4 10:05:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e602ca0487f7ed68a3ce85546c7153916d718aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:b0:8c:d0:5d:fa:f2:98:78:61:3c:99:33: 5f:98:1b:d6:0b:95:54:37:45:75:ef:43:97:c1:d7: 69:cc:c8:b9:66:b3:7d:8a:05:00:f9:f5:ac:8b:c0: 50:da:d5:93:4a:b5:b0:91:e3:a2:88:96:24:c7:ae: 7e:16:23:7a:26:4d:b2:c4:6d:9e:ad:72:0f:83:59: 73:da:e0:b7:78:85:ce:a8:dc:71:68:fb:05:9d:6a: 00:62:e8:bf:92:7c:fd:11:14:1e:9b:70:21:19:74: 90:b0:b7:00:b9:15:5e:40:d0:f9:e8:9b:0a:b8:bd: eb:d4:bb:24:9d:9d:64:89:43:22:99:e6:b2:b4:dc: 8f:2a:4c:52:b5:25:d1:08:43:c3:b2:8e:22:dc:bb: b8:d6:ff:e0:ed:ed:a5:c3:fd:f8:98:3b:cb:0e:20: e6:c3:28:3c:91:39:bf:6d:49:99:d2:76:56:8f:74: d3:71:d2:fc:12:45:68:d8:f1:a6:3d:7c:c2:0d:3b: 98:64:df:55:52:d3:44:cf:c5:3e:d2:39:2d:d0:25: 2b:0b:ab:92:ed:22:75:9f:07:d2:bc:c1:ed:6f:5c: 81:f2:71:5c:0a:61:41:b1:a2:61:f7:de:88:56:0b: 3a:53:8a:d0:bd:00:ee:8d:98:54:c8:63:0d:d2:b7: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:60:2C:A0:48:7F:7E:D6:8A:3C:E8:55:46:C7:15:39:16:D7:18:AA X509v3 Authority Key Identifier: keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/DmAsoEh_ftaKPOhVRscVORbXGKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.72.0/22 IPv6: 2a03:1a20::/48 2a03:1a20:10::/48 Signature Algorithm: sha256WithRSAEncryption 07:9d:63:6f:88:79:a3:43:df:d4:08:ee:fa:37:7b:70:f4:01: 3e:43:58:58:55:60:47:e3:40:46:50:82:74:e5:b7:a0:ec:52: 04:40:13:48:07:a7:08:18:42:08:f4:5e:5f:49:c1:16:4b:66: 65:3f:e4:34:4f:23:55:2e:7f:4e:90:78:bb:2b:54:ae:82:77: 82:f2:5b:d4:12:c0:68:67:e8:36:30:ae:1d:9c:78:07:92:8e: 04:b9:3b:f4:0c:a0:b3:ce:ad:72:87:56:90:1e:04:40:e1:aa: 2a:fc:ff:98:3a:37:a4:a7:1e:c8:ba:7a:02:84:1b:2d:f6:90: e6:12:52:cd:e7:80:d8:f5:3e:7b:22:4b:c3:d8:f7:af:89:83: aa:80:97:2b:5c:84:b2:be:af:76:ce:a6:1f:7e:89:5a:b1:b3: 0d:c0:80:ef:af:1c:d2:fd:81:4e:58:cc:a6:4d:71:2a:bf:fa: 89:05:ec:fb:0f:0b:e4:f5:ec:01:6f:dd:7f:93:2b:0d:65:a7: 0a:88:25:a1:8d:2f:b3:32:e5:ee:e2:0e:a2:67:c0:4a:27:59: f0:10:84:a4:c7:63:da:ab:be:41:10:26:2d:47:d2:77:cb:af: ee:34:9c:27:be:c5:2b:bf:39:2f:cd:fb:25:ab:07:be:e0:92: a2:db:55:47 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZwoHTwsWFBRoE/2DnH6YyDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl NWNmOTYwHhcNMjYwMjA0MTAwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTYwMmNhMDQ4N2Y3ZWQ2OGEzY2U4NTU0NmM3MTUzOTE2ZDcxOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHSwjNBd+vKYeGE8mTNfmBvWC5VU N0V170OXwddpzMi5ZrN9igUA+fWsi8BQ2tWTSrWwkeOiiJYkx65+FiN6Jk2yxG2e rXIPg1lz2uC3eIXOqNxxaPsFnWoAYui/knz9ERQem3AhGXSQsLcAuRVeQND56JsK uL3r1LsknZ1kiUMimeaytNyPKkxStSXRCEPDso4i3Lu41v/g7e2lw/34mDvLDiDm wyg8kTm/bUmZ0nZWj3TTcdL8EkVo2PGmPXzCDTuYZN9VUtNEz8U+0jkt0CUrC6uS 7SJ1nwfSvMHtb1yB8nFcCmFBsaJh996IVgs6U4rQvQDujZhUyGMN0rfjMwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFA5gLKBIf37WijzoVUbHFTkW1xiqMB8GA1UdIwQY MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt NGY4YzYzOGE3MmUxLzEvRG1Bc29FaF9mdGFLUE9oVlJzY1ZPUmJYR0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuUFIMBgE AgACMBIDBwAqAxogAAADBwAqAxogABAwDQYJKoZIhvcNAQELBQADggEBAAedY2+I eaND39QI7vo3e3D0AT5DWFhVYEfjQEZQgnTlt6DsUgRAE0gHpwgYQgj0Xl9JwRZL ZmU/5DRPI1Uuf06QeLsrVK6Cd4LyW9QSwGhn6DYwrh2ceAeSjgS5O/QMoLPOrXKH VpAeBEDhqir8/5g6N6SnHsi6egKEGy32kOYSUs3ngNj1PnsiS8PY96+Jg6qAlytc hLK+r3bOph9+iVqxsw3AgO+vHNL9gU5YzKZNcSq/+okF7PsPC+T17AFv3X+TKw1l pwqIJaGNL7My5e7iDqJnwEonWfAQhKTHY9qrvkEQJi1H0nfLr+40nCe+xSu/OS/N +yWrB77gkqLbVUc= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:46 2026 by rpki-client