This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/DXdb0QbgjHMGHimqfVTZInAkH0I.roa File: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (raw, json) Hash identifier: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8= Subject key identifier: 0D:77:5B:D1:06:E0:8C:73:06:1E:29:AA:7D:54:D9:22:70:24:1F:42 Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4 Certificate serial: 019B7F158689856D04A6E6BCFA14ED0B5394 Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/DXdb0QbgjHMGHimqfVTZInAkH0I.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212325 IP address blocks: 89.22.64.0/19 maxlen: 19 89.22.65.0/24 maxlen: 24 89.22.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:86:89:85:6d:04:a6:e6:bc:fa:14:ed:0b:53:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d775bd106e08c73061e29aa7d54d92270241f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:8d:d2:e8:f6:e1:48:ab:4e:00:db:29:11: 18:c1:8b:22:9d:28:1f:29:0a:7d:16:57:32:08:cb: 8b:50:42:b2:ad:61:2c:82:ba:65:99:a2:63:a6:e7: 7f:db:fa:ef:40:79:93:68:d5:66:da:b7:55:92:80: bc:5c:55:9f:a0:87:17:02:93:16:38:34:d2:f1:3f: 5a:1f:4d:40:da:fc:66:f2:b7:44:69:2d:99:cb:52: 1c:84:14:21:61:ca:0b:9a:d9:9d:29:c3:cd:5c:6d: be:70:1e:05:25:22:a4:e5:ec:9c:17:97:12:d7:65: 66:8a:4c:98:db:94:0d:3d:1d:2c:58:91:bb:59:45: 15:d0:e7:24:a7:de:70:28:8e:67:29:3e:e6:57:e3: 0e:9b:0d:e3:a8:2b:08:75:e1:c3:87:1e:10:aa:69: 2c:f0:5b:f2:e8:05:2e:54:12:5c:be:0f:29:39:3b: 3e:23:c8:93:9f:de:f5:74:09:d2:c3:d2:b6:0f:12: 83:40:ac:95:84:bb:a7:d2:1b:8e:80:5b:52:18:07: b6:db:3d:c9:22:e5:09:c6:5c:2d:68:8f:0d:d5:e5: bb:cc:5c:8b:97:d7:ed:b5:f4:be:a8:8e:ca:8c:2a: 1f:1e:57:11:87:ff:17:be:ee:4b:57:32:66:c7:81: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:77:5B:D1:06:E0:8C:73:06:1E:29:AA:7D:54:D9:22:70:24:1F:42 X509v3 Authority Key Identifier: keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/DXdb0QbgjHMGHimqfVTZInAkH0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.22.64.0/19 Signature Algorithm: sha256WithRSAEncryption 0d:6e:75:dc:5b:00:5a:d3:f4:01:5f:65:c5:23:18:13:f8:4c: a9:a8:22:60:f2:5c:d2:29:fc:af:0b:03:a2:47:60:74:84:bb: db:36:f2:32:1e:f2:86:bb:ba:8f:e3:54:69:e1:eb:51:20:61: c0:8b:fc:f5:b5:ce:1f:ce:34:a1:6c:e0:8d:5f:01:94:a2:33: 40:10:75:89:7a:9a:e5:55:ed:50:78:08:88:35:be:8d:c1:6a: ff:b0:44:0d:06:ef:55:7e:87:20:02:77:cc:93:9d:9e:cc:65: 8c:81:ec:51:14:75:71:db:09:f4:46:96:24:55:d0:44:34:1b: 5f:c9:f4:d2:5a:2d:3c:7b:17:97:81:db:35:fa:d0:27:2f:c8: 68:21:53:29:17:e9:8e:cd:58:ef:80:8c:b6:7e:43:24:57:80: f2:92:47:09:87:a5:c0:8e:1b:e2:fe:a6:44:7c:5f:6c:66:67: a4:68:18:4a:14:91:43:aa:9c:a9:b6:87:b6:3d:50:2e:93:a5: 13:a6:cb:ac:30:8a:8a:92:28:d6:4f:83:f0:f1:43:78:79:cb: a7:30:cf:d1:6c:5d:99:28:49:5c:c4:b0:e2:bf:73:16:f5:eb: 42:10:a4:37:62:88:ea:6b:d9:32:e8:e6:dc:df:88:ff:56:44: d2:c2:07:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYaJhW0Epua8+hTtC1OUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Y2MwMmY4ZmE3NGNmMGRhODFlOGNlMjk0M2VhN2Y5ZWQy YTg1ZjQwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDc3NWJkMTA2ZTA4YzczMDYxZTI5YWE3ZDU0ZDkyMjcwMjQxZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5yN0uj24UirTgDbKREYwYsinSgf KQp9FlcyCMuLUEKyrWEsgrplmaJjpud/2/rvQHmTaNVm2rdVkoC8XFWfoIcXApMW ODTS8T9aH01A2vxm8rdEaS2Zy1IchBQhYcoLmtmdKcPNXG2+cB4FJSKk5eycF5cS 12VmikyY25QNPR0sWJG7WUUV0Ockp95wKI5nKT7mV+MOmw3jqCsIdeHDhx4Qqmks 8Fvy6AUuVBJcvg8pOTs+I8iTn971dAnSw9K2DxKDQKyVhLun0huOgFtSGAe22z3J IuUJxlwtaI8N1eW7zFyLl9fttfS+qI7KjCofHlcRh/8Xvu5LVzJmx4GjYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA13W9EG4IxzBh4pqn1U2SJwJB9CMB8GA1UdIwQY MBaAFMTMAvj6dM8NqB6M4pQ+p/ntKoX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTIt MjE5ZTc5ZDg0ZTQzLzEvRFhkYjBRYmdqSE1HSGltcWZWVFpJbkFrSDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTItMjE5ZTc5ZDg0ZTQz LzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFWRZAMA0G CSqGSIb3DQEBCwUAA4IBAQANbnXcWwBa0/QBX2XFIxgT+EypqCJg8lzSKfyvCwOi R2B0hLvbNvIyHvKGu7qP41Rp4etRIGHAi/z1tc4fzjShbOCNXwGUojNAEHWJeprl Ve1QeAiINb6NwWr/sEQNBu9VfocgAnfMk52ezGWMgexRFHVx2wn0RpYkVdBENBtf yfTSWi08exeXgds1+tAnL8hoIVMpF+mOzVjvgIy2fkMkV4DykkcJh6XAjhvi/qZE fF9sZmekaBhKFJFDqpyptoe2PVAuk6UTpsusMIqKkijWT4Pw8UN4ecunMM/RbF2Z KElcxLDiv3MW9etCEKQ3Yojqa9ky6Obc34j/VkTSwgdo -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:50 2026 by rpki-client