This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa File: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (raw, json) Hash identifier: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk= Subject key identifier: 0D:7E:68:A0:4F:59:21:92:5A:17:4D:90:F4:2B:C6:9C:A2:16:70:D6 Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e Certificate serial: 019B78353163385CC22DD0423648EF98AAD0 Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208598 IP address blocks: 194.156.108.0/22 maxlen: 22 194.156.108.0/24 maxlen: 24 194.156.109.0/24 maxlen: 24 194.156.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:31:63:38:5c:c2:2d:d0:42:36:48:ef:98:aa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d7e68a04f5921925a174d90f42bc69ca21670d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:91:40:29:e9:5b:59:75:c7:a3:ad:14:00: 58:55:52:a5:81:19:74:dc:33:08:7b:a0:c5:74:10: 24:f8:e9:05:7e:be:d0:d9:e7:f2:32:53:b3:b4:a7: 42:97:a6:72:a4:6b:9e:90:f7:df:d8:8b:8e:1d:4f: 1c:8b:db:fc:14:33:42:72:4c:7b:62:d2:31:41:e5: 3a:a1:8d:e7:d8:f8:f0:f5:c9:fe:6b:5d:3e:a4:83: 04:39:1d:fe:d5:41:8f:52:17:87:3f:ba:4f:ef:2b: ee:8f:06:b3:c1:46:59:e4:ef:9d:b5:de:f9:90:cd: 34:6c:c2:08:62:f6:de:7b:a5:f9:87:19:47:ce:f2: 66:52:cd:9f:b7:ab:51:a1:f1:9a:b9:48:95:d6:57: 72:6a:b3:dd:3a:42:c5:c9:c7:b1:99:e8:27:e2:bc: d9:55:62:6a:ae:71:4d:82:ce:7d:49:58:63:7e:07: 8a:e3:c5:ba:c4:fb:96:c8:9d:9d:7a:32:8f:2b:cc: eb:25:d5:1b:dc:83:ed:ca:c3:e1:b2:0f:1e:fa:8e: fd:90:78:f1:27:cd:60:f8:9f:eb:d0:db:cd:95:6b: f9:f5:c4:8a:b4:f5:e2:eb:68:0a:ef:49:89:54:c0: 15:74:02:84:5a:3e:32:21:a7:2f:16:28:46:fe:37: 38:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7E:68:A0:4F:59:21:92:5A:17:4D:90:F4:2B:C6:9C:A2:16:70:D6 X509v3 Authority Key Identifier: keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.108.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:f7:f8:72:9f:a6:eb:35:4e:22:5c:fa:17:01:5b:df:16:ee: c7:f8:ca:43:63:64:b9:d3:f3:b0:bd:43:d5:07:ea:ab:72:7f: d8:66:ce:64:fb:39:41:86:29:58:82:42:18:c8:85:9d:c7:df: 97:5f:fe:3e:84:c2:d8:7e:3b:fd:e1:e4:3f:a9:f2:81:16:36: 49:71:91:4d:86:71:e1:59:86:2d:03:63:6d:74:eb:05:94:d1: ac:90:29:76:c2:c6:39:77:46:9d:c8:e8:a5:d8:5a:ea:8f:5d: ab:2e:6d:da:e4:29:24:a8:cc:17:da:7c:74:4a:e2:80:f6:5a: 2f:d4:ed:a5:fb:29:aa:39:98:bd:f5:eb:14:11:be:2f:76:85: b9:58:6b:68:e9:d6:3f:19:ca:03:54:c9:ac:81:f6:90:66:16: 44:70:09:5c:72:d4:06:85:5f:49:ff:9c:8c:60:af:53:92:59: 16:59:c2:54:76:94:e6:e7:09:ae:11:8e:9a:eb:ba:4d:7e:fc: 22:8d:b4:c5:28:d2:25:2a:92:0d:a2:d7:b6:1c:6c:49:62:f3: c3:5f:8e:9f:16:f9:04:da:c9:86:4e:f9:8b:65:68:59:f7:af: 9c:6b:8c:9c:12:61:46:32:a2:75:c8:ed:a4:56:11:30:ad:25: a1:e9:fc:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTFjOFzCLdBCNkjvmKrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDdlZDU4OGJhOTA2OTQ1N2EyYTg5OGZjN2EwY2I5Nzdk MWY4MWUwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDdlNjhhMDRmNTkyMTkyNWExNzRkOTBmNDJiYzY5Y2EyMTY3MGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSeRQCnpW1l1x6OtFABYVVKlgRl0 3DMIe6DFdBAk+OkFfr7Q2efyMlOztKdCl6ZypGuekPff2IuOHU8ci9v8FDNCckx7 YtIxQeU6oY3n2Pjw9cn+a10+pIMEOR3+1UGPUheHP7pP7yvujwazwUZZ5O+dtd75 kM00bMIIYvbee6X5hxlHzvJmUs2ft6tRofGauUiV1ldyarPdOkLFycexmegn4rzZ VWJqrnFNgs59SVhjfgeK48W6xPuWyJ2dejKPK8zrJdUb3IPtysPhsg8e+o79kHjx J81g+J/r0NvNlWv59cSKtPXi62gK70mJVMAVdAKEWj4yIacvFihG/jc4zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1+aKBPWSGSWhdNkPQrxpyiFnDWMB8GA1UdIwQY MBaAFN1H7ViLqQaUV6KomPx6DLl30fgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMt ZjQ1OTZlNzc2N2E4LzEvRFg1b29FOVpJWkphRjAyUTlDdkduS0lXY05ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMtZjQ1OTZlNzc2N2E4 LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpxsMA0G CSqGSIb3DQEBCwUAA4IBAQA89/hyn6brNU4iXPoXAVvfFu7H+MpDY2S50/OwvUPV B+qrcn/YZs5k+zlBhilYgkIYyIWdx9+XX/4+hMLYfjv94eQ/qfKBFjZJcZFNhnHh WYYtA2NtdOsFlNGskCl2wsY5d0adyOil2Frqj12rLm3a5CkkqMwX2nx0SuKA9lov 1O2l+ymqOZi99esUEb4vdoW5WGto6dY/GcoDVMmsgfaQZhZEcAlcctQGhV9J/5yM YK9TklkWWcJUdpTm5wmuEY6a67pNfvwijbTFKNIlKpINote2HGxJYvPDX46fFvkE 2smGTvmLZWhZ96+ca4ycEmFGMqJ1yO2kVhEwrSWh6fyH -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:27 2026 by rpki-client