This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DDms5_gJrXt-Ta2gUxpPgmLcyaQ.roa File: DDms5_gJrXt-Ta2gUxpPgmLcyaQ.roa (raw, json) Hash identifier: Eymr0uXPjl6OUxjVrYsG3XNkDB1i66nzuJXQfnyuZSg= Subject key identifier: 0C:39:AC:E7:F8:09:AD:7B:7E:4D:AD:A0:53:1A:4F:82:62:DC:C9:A4 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A260639BD1864032729228FCEF8624 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DDms5_gJrXt-Ta2gUxpPgmLcyaQ.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216211 IP address blocks: 195.172.136.0/21 maxlen: 24 212.135.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:60:63:9b:d1:86:40:32:72:92:28:fc:ef:86:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c39ace7f809ad7b7e4dada0531a4f8262dcc9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:da:a8:35:88:9e:6b:99:4b:c5:fe:f1:ec: 93:0e:db:96:e6:46:05:52:d7:e6:13:3c:96:f4:3a: 30:28:0b:20:f9:05:25:45:db:84:84:5b:2b:fe:6d: fc:76:7c:8c:c3:73:d9:3e:dc:06:90:de:4b:85:0e: 42:8e:02:8a:9f:22:c2:25:2b:52:e4:ca:4d:35:f9: 8f:54:f0:d1:c0:ed:8c:03:7c:bd:cd:c1:f0:dc:5e: 04:78:06:48:25:75:9d:ab:fd:1b:38:9d:7f:88:f3: 52:ef:26:35:86:f7:4e:44:ad:96:e7:2d:55:01:6a: 93:63:bf:2d:12:9e:d6:0a:7f:8c:98:1c:00:90:e0: ee:05:01:a9:f2:a2:b5:94:9e:81:ee:02:f1:1a:d3: d1:08:7f:02:d1:97:68:f3:cd:4e:12:4e:fc:ec:0e: 5e:49:aa:0c:c0:69:54:6f:d3:60:3f:f0:1b:0f:e0: f5:f6:de:3a:05:17:8c:e1:d4:99:8b:3e:63:cb:ce: fa:3b:90:80:38:11:23:9b:5b:96:83:59:fa:83:03: 42:b6:c7:01:3a:16:d4:26:3f:1c:89:9a:57:eb:de: ef:13:f2:a5:72:77:6a:0d:d7:93:c6:84:d6:d1:33: 60:41:fd:29:68:94:74:04:0a:75:e1:94:11:79:83: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:AC:E7:F8:09:AD:7B:7E:4D:AD:A0:53:1A:4F:82:62:DC:C9:A4 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DDms5_gJrXt-Ta2gUxpPgmLcyaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.172.136.0/21 212.135.208.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:3d:63:47:bb:f4:1f:29:d5:b5:81:c1:4a:2b:1b:91:d3:4f: c6:a0:c3:f8:f1:33:ca:87:41:dd:47:96:4d:ec:28:f8:9c:2f: 34:a5:00:2e:4f:7e:ab:d9:d3:a5:5d:11:b9:f4:5d:78:87:c2: 22:4e:46:4e:12:33:d4:93:f6:6f:50:82:de:26:2b:42:4f:07: 3c:03:7c:d7:9c:41:01:e3:e1:da:fc:78:fa:c0:b0:b9:17:7c: 8b:0e:46:e6:51:3d:76:df:a4:3d:c8:72:0c:29:ec:31:a4:37: 9c:2c:e9:5b:a9:b5:a7:93:c3:91:27:7c:d5:45:b5:ad:34:1e: a5:b5:d6:08:a7:ec:cc:ae:0f:db:ef:87:4e:56:48:52:82:e9: 22:0b:4d:e1:3d:c7:96:46:d5:7c:72:b8:b2:0a:ca:0e:f2:13: 3f:b7:6c:86:0b:b0:7b:73:bc:58:3f:63:58:b3:ab:89:0b:8a: b2:0d:dc:3d:a0:a2:b6:1a:01:99:34:20:16:d1:dc:71:0d:2f: 95:d4:7b:6c:3b:fa:a3:28:6f:43:f0:27:bc:6c:6b:42:5b:46: 68:b1:50:8b:66:c4:33:41:82:f1:ed:a6:67:f9:78:f5:d1:c4: 06:bb:12:e3:e8:e7:de:15:ff:69:3b:1e:5c:ee:c3:8a:84:53: 58:43:9c:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4omBjm9GGQDJykij874YkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzM5YWNlN2Y4MDlhZDdiN2U0ZGFkYTA1MzFhNGY4MjYyZGNjOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTjaqDWInmuZS8X+8eyTDtuW5kYF UtfmEzyW9DowKAsg+QUlRduEhFsr/m38dnyMw3PZPtwGkN5LhQ5CjgKKnyLCJStS 5MpNNfmPVPDRwO2MA3y9zcHw3F4EeAZIJXWdq/0bOJ1/iPNS7yY1hvdORK2W5y1V AWqTY78tEp7WCn+MmBwAkODuBQGp8qK1lJ6B7gLxGtPRCH8C0Zdo881OEk787A5e SaoMwGlUb9NgP/AbD+D19t46BReM4dSZiz5jy876O5CAOBEjm1uWg1n6gwNCtscB OhbUJj8ciZpX697vE/KlcndqDdeTxoTW0TNgQf0paJR0BAp14ZQReYMcvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAw5rOf4Ca17fk2toFMaT4Ji3MmkMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvRERtczVfZ0pyWHQtVGEyZ1V4cFBnbUxjeWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDw6yIAwQD 1IfQMA0GCSqGSIb3DQEBCwUAA4IBAQB9PWNHu/QfKdW1gcFKKxuR00/GoMP48TPK h0HdR5ZN7Cj4nC80pQAuT36r2dOlXRG59F14h8IiTkZOEjPUk/ZvUILeJitCTwc8 A3zXnEEB4+Ha/Hj6wLC5F3yLDkbmUT1236Q9yHIMKewxpDecLOlbqbWnk8ORJ3zV RbWtNB6ltdYIp+zMrg/b74dOVkhSgukiC03hPceWRtV8criyCsoO8hM/t2yGC7B7 c7xYP2NYs6uJC4qyDdw9oKK2GgGZNCAW0dxxDS+V1HtsO/qjKG9D8Ce8bGtCW0Zo sVCLZsQzQYLx7aZn+Xj10cQGuxLj6OfeFf9pOx5c7sOKhFNYQ5zw -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:52 2026 by rpki-client