This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/dK5xl69D2qaQ1GI8cpwqmA8ljfo.roa File: dK5xl69D2qaQ1GI8cpwqmA8ljfo.roa (raw, json) Hash identifier: TibVb3pro9xYgz32FM9o4Gl6dJankSy+fx99rC3V6b8= Subject key identifier: 74:AE:71:97:AF:43:DA:A6:90:D4:62:3C:72:9C:2A:98:0F:25:8D:FA Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c Certificate serial: 019B79EC92113490583E27D706B7693A1A41 Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/dK5xl69D2qaQ1GI8cpwqmA8ljfo.roa Signing time: Thu 01 Jan 2026 14:18:25 +0000 ROA not before: Thu 01 Jan 2026 14:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200046 IP address blocks: 45.8.27.0/24 maxlen: 24 185.38.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:92:11:34:90:58:3e:27:d7:06:b7:69:3a:1a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c Validity Not Before: Jan 1 14:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74ae7197af43daa690d4623c729c2a980f258dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:25:af:5a:3a:61:3b:97:2a:2d:71:90:c0: fc:01:e6:33:90:e3:8e:fe:03:44:20:46:b4:65:c5: d9:7b:c2:9b:0b:6d:79:d4:0e:a7:92:ad:ce:eb:64: e9:86:d5:b0:fe:ba:f9:15:44:97:31:f9:c2:7c:f4: fb:80:c5:76:d7:91:00:4e:95:16:73:c6:24:b9:9b: 77:50:fe:6a:fc:b3:40:c5:44:64:79:b1:20:91:d8: 19:5b:cc:eb:5e:e8:78:5e:48:95:ec:96:2f:c8:fa: e7:9f:a5:a4:bc:ab:2c:a9:ab:17:dd:78:9f:16:09: 59:ed:4b:0e:97:bd:fb:17:1a:22:10:21:8d:04:69: 1c:45:b2:81:55:da:38:9f:ea:3a:3e:19:ca:f8:75: 56:84:39:00:6e:0d:52:da:c1:b6:7c:71:fc:23:56: 26:bc:86:5f:8f:55:db:f5:6f:db:6d:8e:61:23:b3: a2:f8:cd:08:89:88:e3:f8:f2:60:5e:41:fe:bc:ea: 55:bd:c0:a3:7b:fc:4b:0d:b2:a0:a2:6b:66:c6:de: 66:15:bc:a1:95:c7:4c:0f:e2:78:99:63:14:70:a4: d2:fc:3f:89:da:65:cf:a6:b2:8e:04:e8:12:cd:d4: 59:78:d4:96:54:71:9d:1c:f2:f4:ec:57:4a:94:a7: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AE:71:97:AF:43:DA:A6:90:D4:62:3C:72:9C:2A:98:0F:25:8D:FA X509v3 Authority Key Identifier: keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/dK5xl69D2qaQ1GI8cpwqmA8ljfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.27.0/24 185.38.60.0/22 Signature Algorithm: sha256WithRSAEncryption 13:7a:c3:39:56:92:28:77:e7:93:ca:15:65:51:a7:30:3f:4b: 15:f5:3e:59:e2:07:4d:60:3c:ed:30:d9:34:03:27:e1:d0:57: 8a:68:68:8f:4e:39:09:27:c8:80:d3:58:8b:30:81:65:68:3b: 2c:b5:76:db:82:27:79:1a:92:2e:49:f1:fd:77:f9:16:98:40: c9:21:f1:bd:f5:43:fb:f7:97:a8:cb:fb:7f:75:ff:2c:87:c1: 06:3d:87:4f:a2:0d:8c:2b:03:c5:25:b5:44:cc:b1:a2:fd:56: fc:80:1b:8f:b2:18:38:a5:26:bb:5b:99:80:23:1d:d3:7b:a4: 2f:ab:54:a6:80:53:15:20:95:1c:91:04:81:13:f9:8b:64:5e: a8:21:14:ea:3c:88:0f:01:03:f8:e0:9c:f9:b9:55:20:9d:a4: dd:36:cb:87:1c:c1:ea:ba:4f:44:f5:3f:af:21:b5:93:94:56: 10:84:02:e8:10:09:db:52:e3:c6:dc:e1:2b:56:e3:99:af:1b: da:71:bd:e5:8d:c9:60:1e:8c:0a:81:fd:99:fe:4d:cf:9e:bf: fb:7b:b7:77:62:40:8f:a3:e8:50:b2:a9:cf:a5:b9:08:bd:39: 9f:38:81:4e:fa:04:c8:8b:b5:c9:ea:f6:90:5a:db:cb:c7:c7: 9e:2b:9d:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57JIRNJBYPifXBrdpOhpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDEzMDI0NTUyOTQyY2VhZjY4YzY3ZTAxMjhkZmY0Yjll Zjc0OWMwHhcNMjYwMTAxMTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGFlNzE5N2FmNDNkYWE2OTBkNDYyM2M3MjljMmE5ODBmMjU4ZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OIlr1o6YTuXKi1xkMD8AeYzkOOO /gNEIEa0ZcXZe8KbC2151A6nkq3O62TphtWw/rr5FUSXMfnCfPT7gMV215EATpUW c8YkuZt3UP5q/LNAxURkebEgkdgZW8zrXuh4XkiV7JYvyPrnn6WkvKssqasX3Xif FglZ7UsOl737FxoiECGNBGkcRbKBVdo4n+o6PhnK+HVWhDkAbg1S2sG2fHH8I1Ym vIZfj1Xb9W/bbY5hI7Oi+M0IiYjj+PJgXkH+vOpVvcCje/xLDbKgomtmxt5mFbyh lcdMD+J4mWMUcKTS/D+J2mXPprKOBOgSzdRZeNSWVHGdHPL07FdKlKfJ3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHSucZevQ9qmkNRiPHKcKpgPJY36MB8GA1UdIwQY MBaAFBUBMCRVKULOr2jGfgEo3/S573ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWIt NzBmYzRiMDhmMDBiLzEvZEs1eGw2OUQycWFRMUdJOGNwd3FtQThsamZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWItNzBmYzRiMDhmMDBi LzEvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQgbAwQC uSY8MA0GCSqGSIb3DQEBCwUAA4IBAQATesM5VpIod+eTyhVlUacwP0sV9T5Z4gdN YDztMNk0Ayfh0FeKaGiPTjkJJ8iA01iLMIFlaDsstXbbgid5GpIuSfH9d/kWmEDJ IfG99UP795eoy/t/df8sh8EGPYdPog2MKwPFJbVEzLGi/Vb8gBuPshg4pSa7W5mA Ix3Te6Qvq1SmgFMVIJUckQSBE/mLZF6oIRTqPIgPAQP44Jz5uVUgnaTdNsuHHMHq uk9E9T+vIbWTlFYQhALoEAnbUuPG3OErVuOZrxvacb3ljclgHowKgf2Z/k3Pnr/7 e7d3YkCPo+hQsqnPpbkIvTmfOIFO+gTIi7XJ6vaQWtvLx8eeK50Y -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:49 2026 by rpki-client