This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DkRm5MbZO9RcFF5V1VbXUQeZAvs.roa File: DkRm5MbZO9RcFF5V1VbXUQeZAvs.roa (raw, json) Hash identifier: 7D1NYdiGx7nDJ1RMyherSsJ4ca0r1jDDZse5Fii1r+c= Subject key identifier: 0E:44:66:E4:C6:D9:3B:D4:5C:14:5E:55:D5:56:D7:51:07:99:02:FB Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41E98802D613B73783CAE003E5DDA Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DkRm5MbZO9RcFF5V1VbXUQeZAvs.roa Signing time: Thu 01 Jan 2026 22:18:31 +0000 ROA not before: Thu 01 Jan 2026 22:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213369 IP address blocks: 185.180.228.0/23 maxlen: 23 185.180.228.0/24 maxlen: 24 185.180.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1e:98:80:2d:61:3b:73:78:3c:ae:00:3e:5d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e4466e4c6d93bd45c145e55d556d751079902fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:4d:45:01:06:33:44:8c:fd:40:f4:bb:60: 26:94:0a:b6:b4:86:5d:05:7c:20:9e:c5:c3:b9:92: cd:99:1f:de:10:7a:ee:19:b0:29:09:8d:26:4a:b7: 9c:82:7c:8b:c8:95:fe:e9:3d:72:ab:0d:c1:43:e5: 2f:c3:cf:7c:85:01:95:47:a3:71:6e:07:22:84:92: c9:32:07:1d:78:e8:61:e3:76:5b:44:ab:d8:41:ab: 23:95:7f:33:36:c7:55:b5:39:13:ee:48:c9:9f:e1: 1d:a4:2b:ef:29:e1:9b:2c:2c:37:c6:73:d2:75:bf: 43:66:b2:2b:fe:b8:56:ac:bc:a3:54:64:fe:4a:a7: 56:34:92:54:29:b6:f5:6c:19:0c:ee:93:e2:0f:ed: 8f:47:17:c5:6f:d9:15:2c:6f:28:96:81:99:cc:aa: a2:6f:2b:71:da:fb:0a:de:21:8f:b9:e4:2f:42:4e: e8:f8:90:87:d7:4f:8c:4c:59:30:08:99:87:42:26: 0e:49:59:31:41:b9:6f:b4:3e:55:26:f6:d3:bc:6e: c0:e7:a5:16:47:1d:0d:33:15:2d:85:81:0c:d8:be: c9:a9:30:b7:31:e3:3a:cb:4e:92:64:0d:33:62:89: 4e:a4:52:d6:31:de:81:45:38:9f:1a:bc:ec:6c:98: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:66:E4:C6:D9:3B:D4:5C:14:5E:55:D5:56:D7:51:07:99:02:FB X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DkRm5MbZO9RcFF5V1VbXUQeZAvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.228.0/23 Signature Algorithm: sha256WithRSAEncryption 57:46:b8:f0:19:07:ae:e1:df:22:61:5f:90:8e:46:e1:2e:af: cf:f7:35:71:42:ca:a1:35:cf:b0:ee:ce:e6:7a:41:38:5f:04: cc:9f:0e:4b:cb:5f:5a:95:ba:ac:19:8c:c2:d9:ee:bf:ab:48: db:6a:aa:d8:8d:c9:2c:19:fa:dd:ab:90:23:6a:26:4e:23:78: 97:d0:11:77:1f:a7:bd:04:98:be:80:d5:91:38:e1:84:7d:5c: e9:9b:cb:bb:a3:10:4e:75:ef:18:bb:e4:fc:36:7b:b7:31:2d: 6a:2c:fb:63:48:6b:e8:99:47:8c:12:d1:c1:5b:91:be:60:a2: a8:2f:67:da:a8:3e:a3:2c:c9:93:3a:62:e2:35:ea:44:26:59: 4c:78:49:4f:5a:66:d3:0f:a4:42:2f:9f:d0:22:f6:82:f1:20: 20:67:2f:83:96:c6:8d:d0:eb:d8:fa:cc:9a:f5:1c:ae:f6:91: fb:9c:66:c2:dd:b0:f7:20:e6:ea:26:1d:35:87:55:e9:6d:5e: 62:86:c3:98:e0:b9:f6:e6:4c:8b:b9:4e:93:9c:c1:97:ae:56: 14:e8:e2:1a:97:c8:bb:4a:65:a8:60:31:4b:ee:bf:1a:6c:59: ee:74:0b:c7:c8:56:20:45:3f:ca:08:d2:8c:d2:e4:30:37:b3: b9:ea:66:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pB6YgC1hO3N4PK4APl3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTQ0NjZlNGM2ZDkzYmQ0NWMxNDVlNTVkNTU2ZDc1MTA3OTkwMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS9NRQEGM0SM/UD0u2AmlAq2tIZd BXwgnsXDuZLNmR/eEHruGbApCY0mSrecgnyLyJX+6T1yqw3BQ+Uvw898hQGVR6Nx bgcihJLJMgcdeOhh43ZbRKvYQasjlX8zNsdVtTkT7kjJn+EdpCvvKeGbLCw3xnPS db9DZrIr/rhWrLyjVGT+SqdWNJJUKbb1bBkM7pPiD+2PRxfFb9kVLG8oloGZzKqi bytx2vsK3iGPueQvQk7o+JCH10+MTFkwCJmHQiYOSVkxQblvtD5VJvbTvG7A56UW Rx0NMxUthYEM2L7JqTC3MeM6y06SZA0zYolOpFLWMd6BRTifGrzsbJh8hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA5EZuTG2TvUXBReVdVW11EHmQL7MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvRGtSbTVNYlpPOVJjRkY1VjFWYlhVUWVaQXZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubTkMA0G CSqGSIb3DQEBCwUAA4IBAQBXRrjwGQeu4d8iYV+QjkbhLq/P9zVxQsqhNc+w7s7m ekE4XwTMnw5Ly19albqsGYzC2e6/q0jbaqrYjcksGfrdq5AjaiZOI3iX0BF3H6e9 BJi+gNWROOGEfVzpm8u7oxBOde8Yu+T8Nnu3MS1qLPtjSGvomUeMEtHBW5G+YKKo L2faqD6jLMmTOmLiNepEJllMeElPWmbTD6RCL5/QIvaC8SAgZy+DlsaN0OvY+sya 9Ryu9pH7nGbC3bD3IObqJh01h1XpbV5ihsOY4Ln25kyLuU6TnMGXrlYU6OIal8i7 SmWoYDFL7r8abFnudAvHyFYgRT/KCNKM0uQwN7O56mZo -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:14 2026 by rpki-client