This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/DtAUOHLSS6WIfSS0GF2C7AUksM4.roa File: DtAUOHLSS6WIfSS0GF2C7AUksM4.roa (raw, json) Hash identifier: 2zf4aTdLuiPqep9tgkg3+1DOOvs3BrWOmseQlMJ7vC8= Subject key identifier: 0E:D0:14:38:72:D2:4B:A5:88:7D:24:B4:18:5D:82:EC:05:24:B0:CE Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845 Certificate serial: 019B77587DD3D74C28E3521B44B741387564 Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/DtAUOHLSS6WIfSS0GF2C7AUksM4.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201627 IP address blocks: 185.68.168.0/22 maxlen: 22 185.68.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7d:d3:d7:4c:28:e3:52:1b:44:b7:41:38:75:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ed0143872d24ba5887d24b4185d82ec0524b0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:a2:01:ce:16:4f:a5:e3:d5:32:ba:b5:3f: 6f:89:f3:22:71:82:b8:1a:31:73:8d:f4:39:cf:3f: e1:6d:16:1e:af:8b:42:85:c2:94:32:48:0c:1d:44: 32:45:e7:2e:0a:be:dc:e8:ce:3a:97:8a:0a:4f:44: 27:f3:16:35:e5:57:4c:22:4b:fe:61:38:5a:a1:90: 56:d4:ed:b6:4d:49:d4:2b:d9:1b:63:8b:f6:b6:b6: 41:c4:6c:30:37:3c:de:e2:7c:30:4c:fa:94:b6:99: 30:0d:34:c5:60:a5:0e:10:ea:45:34:19:42:9d:2f: 9f:60:f0:45:1f:44:d7:37:da:78:c1:85:fb:ae:19: 16:d4:32:24:87:68:66:17:be:56:d8:60:68:38:3c: a4:02:25:d3:7b:51:cc:b1:65:1d:49:af:9e:c9:3b: 06:d5:7c:4b:46:69:9f:18:82:ba:bf:81:49:79:43: 78:7f:ec:a5:c1:94:da:a9:d2:43:cb:a8:84:00:63: 76:4f:cc:e1:b6:42:37:d0:f0:7f:4a:55:aa:25:be: f6:7b:52:d6:74:3b:fa:85:89:03:69:1b:5b:d4:ad: 03:26:e7:ed:03:32:ef:2c:45:5a:e4:ce:0b:03:26: 66:56:2c:56:73:3c:71:5a:9e:9a:20:56:6a:f8:c2: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D0:14:38:72:D2:4B:A5:88:7D:24:B4:18:5D:82:EC:05:24:B0:CE X509v3 Authority Key Identifier: keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/DtAUOHLSS6WIfSS0GF2C7AUksM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.168.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:26:f7:76:dd:57:53:d4:d8:52:28:eb:d0:25:c5:2b:b6:fd: 50:d8:8a:f8:c5:c2:5f:e7:8a:dc:cd:2f:3a:ef:b5:b3:56:dc: 17:b7:ad:e4:ce:ff:a0:d7:6e:81:af:83:0b:4c:00:70:4d:3a: c3:99:03:71:52:2d:1f:16:4e:7e:23:e8:5a:ab:66:59:7e:f3: a1:fa:02:18:21:94:80:18:5d:3a:24:10:8b:c5:fe:e6:40:38: f0:87:5c:07:b8:47:40:55:05:27:b2:95:b4:bb:56:6d:9d:9d: 33:78:68:5b:c0:86:49:7c:01:5a:33:ff:d7:ae:82:b9:8d:46: e8:7c:fd:a6:48:01:00:f0:50:4b:57:ba:97:c5:bf:30:fc:60: 5d:97:10:b8:39:78:5f:06:9c:9b:68:52:27:24:34:d2:d0:82: 45:57:ba:e6:ec:a6:a1:d3:c9:53:b4:56:78:54:2b:0c:4e:44: b3:64:b7:6e:26:e1:fe:df:ad:3c:fa:5a:a9:b5:95:6c:5f:35: 60:db:e6:96:2d:15:15:08:f8:23:37:64:a0:c5:6b:2b:eb:81: a6:43:17:f7:09:eb:29:79:34:c3:9a:c1:b6:d1:49:22:65:63: 1f:8c:21:a2:cb:01:5f:24:c5:6b:1a:05:f4:f9:b0:60:fa:23: b8:39:02:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WH3T10wo41IbRLdBOHVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMWZhYjc2NzQ0N2QzNjkxMTk3NGNmOWJiMWQxYWU5MTMx ZmM4NDUwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWQwMTQzODcyZDI0YmE1ODg3ZDI0YjQxODVkODJlYzA1MjRiMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vCiAc4WT6Xj1TK6tT9vifMicYK4 GjFzjfQ5zz/hbRYer4tChcKUMkgMHUQyRecuCr7c6M46l4oKT0Qn8xY15VdMIkv+ YThaoZBW1O22TUnUK9kbY4v2trZBxGwwNzze4nwwTPqUtpkwDTTFYKUOEOpFNBlC nS+fYPBFH0TXN9p4wYX7rhkW1DIkh2hmF75W2GBoODykAiXTe1HMsWUdSa+eyTsG 1XxLRmmfGIK6v4FJeUN4f+ylwZTaqdJDy6iEAGN2T8zhtkI30PB/SlWqJb72e1LW dDv6hYkDaRtb1K0DJuftAzLvLEVa5M4LAyZmVixWczxxWp6aIFZq+MInawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7QFDhy0kuliH0ktBhdguwFJLDOMB8GA1UdIwQY MBaAFMIfq3Z0R9NpEZdM+bsdGukTH8hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2Yt NGYyMjVkMDg4NTY2LzEvRHRBVU9ITFNTNldJZlNTMEdGMkM3QVVrc000LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2YtNGYyMjVkMDg4NTY2 LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUSoMA0G CSqGSIb3DQEBCwUAA4IBAQAtJvd23VdT1NhSKOvQJcUrtv1Q2Ir4xcJf54rczS86 77WzVtwXt63kzv+g126Br4MLTABwTTrDmQNxUi0fFk5+I+haq2ZZfvOh+gIYIZSA GF06JBCLxf7mQDjwh1wHuEdAVQUnspW0u1ZtnZ0zeGhbwIZJfAFaM//XroK5jUbo fP2mSAEA8FBLV7qXxb8w/GBdlxC4OXhfBpybaFInJDTS0IJFV7rm7Kah08lTtFZ4 VCsMTkSzZLduJuH+3608+lqptZVsXzVg2+aWLRUVCPgjN2SgxWsr64GmQxf3Cesp eTTDmsG20UkiZWMfjCGiywFfJMVrGgX0+bBg+iO4OQIp -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:41 2026 by rpki-client