This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/Dp-5SfRdrS2syjxkNh-Ncbm3U6E.roa File: Dp-5SfRdrS2syjxkNh-Ncbm3U6E.roa (raw, json) Hash identifier: d+MSK9XLiweN50Gdr3N6DwKiGAfWQHnTunYo6ZAmk1c= Subject key identifier: 0E:9F:B9:49:F4:5D:AD:2D:AC:CA:3C:64:36:1F:8D:71:B9:B7:53:A1 Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001 Certificate serial: 019C24959BCEFD353BB13E0E667CFDEC6836 Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/Dp-5SfRdrS2syjxkNh-Ncbm3U6E.roa Signing time: Tue 03 Feb 2026 17:38:30 +0000 ROA not before: Tue 03 Feb 2026 17:38:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209082 IP address blocks: 185.222.16.0/22 maxlen: 22 2a0c:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:95:9b:ce:fd:35:3b:b1:3e:0e:66:7c:fd:ec:68:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535a0905ad5684f414182c99e1ed998163093001 Validity Not Before: Feb 3 17:38:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e9fb949f45dad2dacca3c64361f8d71b9b753a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e2:62:84:fe:10:e2:6c:6f:cd:bd:61:e5:04: 27:9c:0a:11:17:b3:4e:25:47:39:26:b1:f5:d6:e3: 9d:14:cb:0f:04:4b:2a:b5:f0:3b:cf:a1:40:fb:d4: f2:d9:a3:3d:70:f3:16:a2:0d:6d:e5:aa:63:bb:2d: 82:f7:d6:60:6b:9a:5f:54:60:9d:0f:ec:bf:ad:8f: 77:68:e7:4e:2f:bd:97:35:15:66:c2:c8:27:d4:a8: 2b:23:5b:ae:30:23:85:6b:2d:68:22:0b:d4:b1:b2: 0f:0c:3a:1a:76:e9:9c:e0:bd:aa:6f:b6:8c:9a:33: 69:36:1f:2e:4a:63:89:6c:41:a7:b2:90:71:a0:ad: 39:af:a6:a9:f8:92:11:92:04:14:4c:0d:d2:40:e6: 21:d6:28:3f:ad:47:50:ac:76:8b:61:6c:66:57:39: 4d:15:e3:b6:01:7c:d3:bc:82:21:29:f5:86:fc:23: 08:f5:a0:10:c2:54:83:76:5d:58:51:56:24:f7:3b: 07:c7:57:38:76:83:9d:4e:a4:e5:94:25:65:5f:19: fa:ad:97:a8:bf:fe:31:1e:e5:86:fb:c3:a2:cc:b6: c6:ec:51:41:7e:0d:3f:2a:2b:d9:d6:54:95:2c:02: 2e:de:ef:bf:6b:ba:a8:b9:03:8e:ca:51:9a:de:78: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:B9:49:F4:5D:AD:2D:AC:CA:3C:64:36:1F:8D:71:B9:B7:53:A1 X509v3 Authority Key Identifier: keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/Dp-5SfRdrS2syjxkNh-Ncbm3U6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.16.0/22 IPv6: 2a0c:f000::/48 Signature Algorithm: sha256WithRSAEncryption 44:d5:fd:45:da:2d:f5:06:09:c0:e3:e8:3a:85:88:d4:a5:cc: a7:d1:ca:2f:ee:3e:a9:56:0a:44:72:2b:b7:da:e6:fb:d8:e8: c5:2e:5f:7e:35:39:5d:32:5b:8b:6a:42:80:c4:38:01:7d:41: 7a:c1:6c:fc:7c:05:ce:3d:ff:17:16:16:bb:1f:09:01:ee:bf: 93:13:29:0c:18:53:63:19:d0:22:83:8d:af:6f:ab:23:2a:e8: c6:29:c0:df:03:59:80:dd:83:b1:22:4a:be:5b:cc:21:93:68: 1a:94:c6:6d:50:cd:8e:6e:dd:e5:1a:13:d8:b6:8e:07:4c:ae: a5:fc:da:8b:f0:d8:e1:80:0c:c2:4c:02:13:d7:19:8c:0c:08: d0:b5:af:2c:ca:df:f0:7d:54:e1:01:fc:25:8c:09:49:d9:dd: 6a:13:a3:41:9f:0f:fc:31:94:dc:41:6f:dc:19:d5:f2:40:c3: 38:c9:9d:a6:d8:a1:d6:c9:e4:6a:cc:0e:15:91:10:ac:b7:a9: d5:53:b5:06:34:cd:27:85:40:e0:a9:be:e0:1d:40:92:4e:e8: 2e:3d:07:8e:11:15:88:bf:da:74:96:ef:27:c0:31:5e:29:29: 84:2c:a7:9b:45:49:73:5f:d6:b0:9b:9e:ac:f8:48:39:ee:1f: cc:ea:1a:60 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZwklZvO/TU7sT4OZnz97Gg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWEwOTA1YWQ1Njg0ZjQxNDE4MmM5OWUxZWQ5OTgxNjMw OTMwMDEwHhcNMjYwMjAzMTczODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTlmYjk0OWY0NWRhZDJkYWNjYTNjNjQzNjFmOGQ3MWI5Yjc1M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+JihP4Q4mxvzb1h5QQnnAoRF7NO JUc5JrH11uOdFMsPBEsqtfA7z6FA+9Ty2aM9cPMWog1t5apjuy2C99Zga5pfVGCd D+y/rY93aOdOL72XNRVmwsgn1KgrI1uuMCOFay1oIgvUsbIPDDoadumc4L2qb7aM mjNpNh8uSmOJbEGnspBxoK05r6ap+JIRkgQUTA3SQOYh1ig/rUdQrHaLYWxmVzlN FeO2AXzTvIIhKfWG/CMI9aAQwlSDdl1YUVYk9zsHx1c4doOdTqTllCVlXxn6rZeo v/4xHuWG+8OizLbG7FFBfg0/KivZ1lSVLAIu3u+/a7qouQOOylGa3nhIlwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA6fuUn0Xa0trMo8ZDYfjXG5t1OhMB8GA1UdIwQY MBaAFFNaCQWtVoT0FBgsmeHtmYFjCTABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMt NmExMGM2ZTMyMjJkLzEvRHAtNVNmUmRyUzJzeWp4a05oLU5jYm0zVTZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMtNmExMGM2ZTMyMjJk LzEvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCud4QMA8E AgACMAkDBwAqDPAAAAAwDQYJKoZIhvcNAQELBQADggEBAETV/UXaLfUGCcDj6DqF iNSlzKfRyi/uPqlWCkRyK7fa5vvY6MUuX341OV0yW4tqQoDEOAF9QXrBbPx8Bc49 /xcWFrsfCQHuv5MTKQwYU2MZ0CKDja9vqyMq6MYpwN8DWYDdg7EiSr5bzCGTaBqU xm1QzY5u3eUaE9i2jgdMrqX82ovw2OGADMJMAhPXGYwMCNC1ryzK3/B9VOEB/CWM CUnZ3WoTo0GfD/wxlNxBb9wZ1fJAwzjJnabYodbJ5GrMDhWREKy3qdVTtQY0zSeF QOCpvuAdQJJO6C49B44RFYi/2nSW7yfAMV4pKYQsp5tFSXNf1rCbnqz4SDnuH8zq GmA= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:18 2026 by rpki-client