This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/DhUtQy3iN2_fQJa67YADtfV1x40.roa File: DhUtQy3iN2_fQJa67YADtfV1x40.roa (raw, json) Hash identifier: PvfiO0WfcmadxN2Uhm/Lhfz/fnQ9kgC0PROhIJsPF54= Subject key identifier: 0E:15:2D:43:2D:E2:37:6F:DF:40:96:BA:ED:80:03:B5:F5:75:C7:8D Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019A76CE37F61703E609A6B80C0B8A365C5F Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/DhUtQy3iN2_fQJa67YADtfV1x40.roa Signing time: Wed 12 Nov 2025 06:43:37 +0000 ROA not before: Wed 12 Nov 2025 06:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 188.191.98.0/24 maxlen: 24 188.191.100.0/24 maxlen: 24 188.191.101.0/24 maxlen: 24 188.191.103.0/24 maxlen: 24 188.191.106.0/24 maxlen: 24 188.191.109.0/24 maxlen: 24 188.191.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:ce:37:f6:17:03:e6:09:a6:b8:0c:0b:8a:36:5c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Nov 12 06:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e152d432de2376fdf4096baed8003b5f575c78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:52:e3:8f:cf:1a:50:99:48:a7:4d:a7:5c:18: 19:88:06:1f:8f:90:c1:77:38:ce:7c:ee:64:f2:f2: 78:b2:7a:ac:19:2b:32:a6:e0:99:c2:8e:28:d8:02: 95:a4:7f:16:17:db:19:a7:db:70:bc:44:20:8c:45: 2f:db:7e:bf:e9:83:33:bd:82:a4:3a:5a:4d:01:ec: bb:81:8d:6f:72:a8:c8:c0:d8:66:ba:1b:53:39:3b: 5c:22:17:cf:9e:fd:15:60:ae:c0:83:93:fa:fd:49: 69:b1:2f:ed:28:f1:3e:a9:39:17:2c:34:20:49:63: 17:9e:a0:37:e4:9f:58:9e:17:41:55:c9:16:6b:af: de:d1:30:3e:40:3c:63:00:cf:09:4c:75:49:ac:de: 00:01:d5:83:d0:c8:02:04:25:ca:a6:94:ec:fd:c0: 59:50:39:da:8d:d3:1b:43:65:cd:b6:10:36:27:b1: c4:b2:2c:c9:9c:d1:15:91:74:65:1a:05:8a:ea:54: 3b:20:d6:79:1e:c2:e2:46:4a:d2:62:f9:41:59:99: 08:dc:36:00:4c:5c:1a:aa:13:a0:23:9f:96:4b:d3: 3f:a2:39:f8:10:79:a5:37:3e:cc:80:a2:be:86:da: b8:b6:a2:0b:64:f4:d6:ef:ee:2a:89:07:6a:41:99: d6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:15:2D:43:2D:E2:37:6F:DF:40:96:BA:ED:80:03:B5:F5:75:C7:8D X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/DhUtQy3iN2_fQJa67YADtfV1x40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.98.0/24 188.191.100.0/23 188.191.103.0/24 188.191.106.0/24 188.191.109.0-188.191.110.255 Signature Algorithm: sha256WithRSAEncryption 20:7a:99:e3:cc:2b:8e:b6:ce:98:12:26:7b:36:f3:f4:2e:c5: 4a:21:66:bc:ea:16:21:5e:38:14:06:c3:af:e3:7e:75:4b:42: 09:2a:40:dc:00:ee:f7:7d:fe:f9:fd:b0:d7:17:98:42:08:3e: 6b:29:0f:82:29:41:ec:54:b3:05:da:a7:a8:7e:52:5f:8d:c3: b7:2d:8c:76:26:b3:ba:74:a1:66:cf:ae:42:5f:f4:84:04:b4: d2:23:05:3b:e0:9d:d8:62:7a:73:4c:1a:9e:fa:06:c0:a3:e2: 4b:bc:64:99:74:92:76:e7:60:5d:0b:6b:16:03:82:7c:4c:9b: 8b:55:e9:89:25:71:43:54:05:fa:7e:ba:0b:17:55:20:b2:d2: 92:1d:13:38:c4:29:8c:40:1c:f3:95:ab:81:e4:bd:d9:e4:a2: 34:a7:16:4a:1e:c4:05:d5:45:5f:4d:0d:56:a4:54:39:f6:94: f5:16:ba:a5:32:bd:05:a4:a6:73:23:2e:c8:c9:78:38:ad:5a: 34:07:a8:ef:45:ba:dd:3e:a3:ea:c1:7d:23:57:52:69:5a:d9: f6:52:b9:c2:7a:91:ca:a2:10:4b:24:b2:bd:cb:6f:bc:6b:e3: 8a:b5:50:9b:7e:03:dd:aa:82:43:90:6d:d2:f0:1c:fa:8b:1a: b6:51:b0:63 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZp2zjf2FwPmCaa4DAuKNlxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUxMTEyMDY0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE1MmQ0MzJkZTIzNzZmZGY0MDk2YmFlZDgwMDNiNWY1NzVjNzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1Ljj88aUJlIp02nXBgZiAYfj5DB dzjOfO5k8vJ4snqsGSsypuCZwo4o2AKVpH8WF9sZp9twvEQgjEUv236/6YMzvYKk OlpNAey7gY1vcqjIwNhmuhtTOTtcIhfPnv0VYK7Ag5P6/UlpsS/tKPE+qTkXLDQg SWMXnqA35J9YnhdBVckWa6/e0TA+QDxjAM8JTHVJrN4AAdWD0MgCBCXKppTs/cBZ UDnajdMbQ2XNthA2J7HEsizJnNEVkXRlGgWK6lQ7INZ5HsLiRkrSYvlBWZkI3DYA TFwaqhOgI5+WS9M/ojn4EHmlNz7MgKK+htq4tqILZPTW7+4qiQdqQZnWvwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFA4VLUMt4jdv30CWuu2AA7X1dceNMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvRGhVdFF5M2lOMl9mUUphNjdZQUR0ZlYxeDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAvL9iAwQB vL9kAwQAvL9nAwQAvL9qMAwDBAC8v20DBAC8v24wDQYJKoZIhvcNAQELBQADggEB ACB6mePMK462zpgSJns28/QuxUohZrzqFiFeOBQGw6/jfnVLQgkqQNwA7vd9/vn9 sNcXmEIIPmspD4IpQexUswXap6h+Ul+Nw7ctjHYms7p0oWbPrkJf9IQEtNIjBTvg ndhienNMGp76BsCj4ku8ZJl0knbnYF0LaxYDgnxMm4tV6YklcUNUBfp+ugsXVSCy 0pIdEzjEKYxAHPOVq4HkvdnkojSnFkoexAXVRV9NDVakVDn2lPUWuqUyvQWkpnMj LsjJeDitWjQHqO9Fut0+o+rBfSNXUmla2fZSucJ6kcqiEEsksr3Lb7xr44q1UJt+ A92qgkOQbdLwHPqLGrZRsGM= -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:35 2025 by rpki-client