This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa File: DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa (raw, json) Hash identifier: oHLHJsgbUguG193W+KSxMKgTzMMz/6UR3KrwC/LYnpQ= Subject key identifier: 0D:5E:56:2A:68:49:57:37:F4:0D:96:31:21:92:91:24:11:9B:26:B1 Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac Certificate serial: 019B7F8296FD8A138AD3853821ED1458A586 Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa Signing time: Fri 02 Jan 2026 16:20:23 +0000 ROA not before: Fri 02 Jan 2026 16:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 45.10.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:96:fd:8a:13:8a:d3:85:38:21:ed:14:58:a5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac Validity Not Before: Jan 2 16:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d5e562a68495737f40d963121929124119b26b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:b2:98:4e:4a:c8:b6:3a:98:d0:16:69:90: 08:f2:c1:51:d6:f7:0e:26:61:3b:f5:a3:51:b8:5e: 39:e8:ee:11:6b:b3:e0:ea:e1:21:14:b8:d3:70:b1: dd:68:43:7f:4e:da:27:75:0a:a5:e7:d4:cc:b9:67: f9:76:98:dc:d0:c1:77:b6:4d:de:c1:df:12:a1:e8: 72:77:8f:b7:05:62:16:d3:54:69:29:00:54:d3:23: eb:25:cb:73:e2:2e:4f:f6:59:28:b0:15:2e:3c:d6: 18:44:49:5e:c6:f6:5a:98:73:3f:96:9e:42:6f:fa: b5:05:3f:18:60:5c:53:24:45:0f:33:e7:0e:ec:44: 75:b6:f3:f9:8b:c2:b7:32:a5:35:b8:c6:b0:56:22: 58:83:30:9a:6e:08:6c:7e:7d:47:c1:8c:60:fe:96: e5:c6:d4:03:ac:66:4f:36:06:01:57:5f:79:07:34: 70:f8:b6:b7:ed:1a:a1:90:62:73:b3:b2:93:18:14: 54:70:ce:c2:ec:22:e3:50:31:ff:bb:ed:1c:b1:45: 2d:bf:f3:cb:69:0f:45:05:1d:54:b4:73:9e:95:c9: 23:4b:76:ac:a2:0c:6a:b9:df:a8:9b:2c:a7:3c:58: 6e:12:93:48:ff:bf:5a:0e:31:2f:d1:6c:23:40:ff: 08:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5E:56:2A:68:49:57:37:F4:0D:96:31:21:92:91:24:11:9B:26:B1 X509v3 Authority Key Identifier: keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.200.0/22 Signature Algorithm: sha256WithRSAEncryption a7:54:12:ab:2d:f6:16:d2:31:3d:df:70:74:6a:03:cb:79:d7: b6:79:df:8c:7f:33:ce:a6:b9:04:2a:69:97:0d:51:fd:5b:11: 08:ae:47:7d:59:c9:e5:dc:e8:5e:bc:a5:ba:c3:b1:e5:86:00: 0c:4d:fb:e4:73:52:a6:e0:c3:c1:cb:3f:83:2d:65:57:41:20: e8:36:f5:ba:85:83:5f:17:cd:a7:f7:cd:18:cf:ca:48:7b:6d: 79:d5:3c:80:69:42:ab:11:2d:ea:07:1a:81:c7:d8:9c:9f:20: c7:90:48:12:79:1d:6c:87:ec:7b:86:e6:47:bf:9c:c9:b8:24: 65:ac:74:78:0f:8c:16:ac:ec:7b:81:0a:47:a8:1d:53:fc:19: a1:6a:9c:2a:19:8e:b6:a9:3d:6a:38:0c:ba:7a:56:88:30:ea: 4c:b1:e2:4a:ce:1d:62:45:af:cd:5d:d7:47:5f:37:37:ac:51: 75:65:6b:97:c9:d2:02:17:b1:e5:af:8c:bb:29:77:69:c1:af: 27:92:11:a2:c2:ca:3f:89:4a:83:15:66:b2:ed:dd:b0:e1:27: 47:2c:d3:ce:7d:0d:d3:aa:9c:74:8b:52:f0:d6:07:d4:b9:6c: 51:27:fa:f7:4a:e4:d7:81:7e:ec:ce:ae:ef:d3:9a:75:1b:99: bd:e7:f7:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gpb9ihOK04U4Ie0UWKWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDg2NGFlOTJiZDdjZWFiNTA4M2JjYzcxMTAxZWYwNDY3 NmY4YWMwHhcNMjYwMTAyMTYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDVlNTYyYTY4NDk1NzM3ZjQwZDk2MzEyMTkyOTEyNDExOWIyNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OuymE5KyLY6mNAWaZAI8sFR1vcO JmE79aNRuF456O4Ra7Pg6uEhFLjTcLHdaEN/TtondQql59TMuWf5dpjc0MF3tk3e wd8Soehyd4+3BWIW01RpKQBU0yPrJctz4i5P9lkosBUuPNYYRElexvZamHM/lp5C b/q1BT8YYFxTJEUPM+cO7ER1tvP5i8K3MqU1uMawViJYgzCabghsfn1HwYxg/pbl xtQDrGZPNgYBV195BzRw+La37RqhkGJzs7KTGBRUcM7C7CLjUDH/u+0csUUtv/PL aQ9FBR1UtHOelckjS3asogxqud+omyynPFhuEpNI/79aDjEv0WwjQP8I9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1eVipoSVc39A2WMSGSkSQRmyaxMB8GA1UdIwQY MBaAFGTYZK6SvXzqtQg7zHEQHvBGdvisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAt MmMwNWNjOTIyMDAxLzEvRFY1V0ttaEpWemYwRFpZeElaS1JKQkdiSnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAtMmMwNWNjOTIyMDAx LzEvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQrIMA0G CSqGSIb3DQEBCwUAA4IBAQCnVBKrLfYW0jE933B0agPLede2ed+MfzPOprkEKmmX DVH9WxEIrkd9Wcnl3OhevKW6w7HlhgAMTfvkc1Km4MPByz+DLWVXQSDoNvW6hYNf F82n980Yz8pIe2151TyAaUKrES3qBxqBx9icnyDHkEgSeR1sh+x7huZHv5zJuCRl rHR4D4wWrOx7gQpHqB1T/BmhapwqGY62qT1qOAy6elaIMOpMseJKzh1iRa/NXddH Xzc3rFF1ZWuXydICF7Hlr4y7KXdpwa8nkhGiwso/iUqDFWay7d2w4SdHLNPOfQ3T qpx0i1Lw1gfUuWxRJ/r3SuTXgX7szq7v05p1G5m95/dh -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:18 2026 by rpki-client