This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/dksbh_tx3bU5Ok0WztbuReiYrpU.roa File: dksbh_tx3bU5Ok0WztbuReiYrpU.roa (raw, json) Hash identifier: NSSCxFWQG/xHAi2bn2Rv8MYwRip8Bj4kZ82RJfLw3As= Subject key identifier: 76:4B:1B:87:FB:71:DD:B5:39:3A:4D:16:CE:D6:EE:45:E8:98:AE:95 Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a Certificate serial: 019B7CECEB7F70EE5FAD6D577F73B2CFE87B Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/dksbh_tx3bU5Ok0WztbuReiYrpU.roa Signing time: Fri 02 Jan 2026 04:17:40 +0000 ROA not before: Fri 02 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 37.114.72.0/21 maxlen: 32 78.110.16.0/20 maxlen: 32 80.245.208.0/20 maxlen: 32 95.131.232.0/21 maxlen: 32 185.56.252.0/22 maxlen: 32 195.38.30.0/24 maxlen: 32 217.168.160.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:eb:7f:70:ee:5f:ad:6d:57:7f:73:b2:cf:e8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a Validity Not Before: Jan 2 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=764b1b87fb71ddb5393a4d16ced6ee45e898ae95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:93:6d:f7:b4:9f:2e:f3:fa:63:b9:d7:1c:f9: a9:c4:b0:e1:40:1a:3b:0a:aa:92:00:24:57:22:cc: 35:da:e0:0a:4d:f5:f5:3e:8c:6d:4d:39:b5:c3:a3: d3:1d:34:98:3d:58:8f:ce:20:5d:d0:38:52:18:dd: b9:e2:97:92:28:bc:f2:c4:7c:fc:8f:0a:7d:82:88: 64:e1:4c:93:ef:99:2b:65:a1:c5:04:5f:32:6b:b0: bf:e0:68:f7:9b:61:9f:f1:63:91:e0:eb:3c:b6:18: f9:27:b4:c1:55:87:9b:05:97:41:db:9d:c0:1c:8a: 20:42:f5:aa:07:ea:39:ae:55:17:8d:78:ac:23:90: ea:02:dd:04:0b:5a:8f:e5:16:e9:18:89:2a:65:66: 11:cc:6a:4b:2f:9a:d0:2f:b6:a1:2a:db:4e:45:d8: e1:bc:9b:6c:2f:a6:f9:4c:cf:b0:cb:93:1d:20:d7: fd:5e:72:1a:9f:66:a0:1b:f4:da:dc:f5:ef:e9:a7: b0:3f:f8:28:ce:65:9f:02:60:48:60:9d:78:33:0f: 63:20:d7:41:12:7b:a5:a5:f4:14:84:da:cf:1e:52: 87:23:3b:8a:5b:b5:53:f1:4b:11:b9:d4:d7:db:19: f3:53:41:1c:97:ec:e4:00:19:41:d9:3b:34:a2:50: d5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4B:1B:87:FB:71:DD:B5:39:3A:4D:16:CE:D6:EE:45:E8:98:AE:95 X509v3 Authority Key Identifier: keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/dksbh_tx3bU5Ok0WztbuReiYrpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.72.0/21 78.110.16.0/20 80.245.208.0/20 95.131.232.0/21 185.56.252.0/22 195.38.30.0/24 217.168.160.0/20 Signature Algorithm: sha256WithRSAEncryption 59:eb:ea:3f:64:a1:13:01:5a:99:43:55:ee:97:9f:49:8f:8a: ab:f3:58:ef:07:52:cb:d6:4a:da:3d:f0:7b:a0:6d:91:71:54: 6c:6b:41:a8:e6:e3:80:46:f6:26:3b:3f:a8:de:73:8d:cc:72: f5:f2:4c:27:8d:46:36:ee:3f:fd:a1:55:15:69:cd:99:fa:ab: 5f:d7:57:8c:a1:a9:93:07:34:bc:1e:ab:eb:4e:fa:9b:e0:44: 46:7d:0e:85:75:45:36:82:70:00:68:2e:78:42:0c:49:1f:0d: 2c:13:e3:1b:ba:9d:57:71:49:8c:14:2b:a0:24:96:57:fd:6b: ab:ca:d6:93:83:ef:f4:ea:93:7f:36:4a:33:37:bb:20:0c:00: d2:89:00:17:ba:47:c0:b9:ff:c1:72:f9:ed:22:ec:a6:20:7d: d3:9c:e3:1d:7e:f4:38:b6:ee:c5:b2:0a:2e:7c:ae:46:a6:2f: c7:3d:e0:bd:46:11:0b:7d:28:47:1c:f7:87:db:4b:0a:0c:5c: d6:04:50:61:44:69:ef:1f:37:2f:02:ae:1a:79:02:26:fe:49: f8:5d:2d:dc:a0:20:27:d8:41:d1:cf:b2:70:0b:68:bc:6f:74: 10:61:78:84:be:0b:bc:33:21:14:f8:da:e5:27:4b:06:07:19: 8a:a4:57:97 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt87Ot/cO5frW1Xf3Oyz+h7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NjhkMGE3MjA0NTYwYjYzNTZkODM3YmJmMTUxMGQ5NjM2 ZGY2M2EwHhcNMjYwMTAyMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjRiMWI4N2ZiNzFkZGI1MzkzYTRkMTZjZWQ2ZWU0NWU4OThhZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZNt97SfLvP6Y7nXHPmpxLDhQBo7 CqqSACRXIsw12uAKTfX1PoxtTTm1w6PTHTSYPViPziBd0DhSGN254peSKLzyxHz8 jwp9gohk4UyT75krZaHFBF8ya7C/4Gj3m2Gf8WOR4Os8thj5J7TBVYebBZdB253A HIogQvWqB+o5rlUXjXisI5DqAt0EC1qP5RbpGIkqZWYRzGpLL5rQL7ahKttORdjh vJtsL6b5TM+wy5MdINf9XnIan2agG/Ta3PXv6aewP/gozmWfAmBIYJ14Mw9jINdB EnulpfQUhNrPHlKHIzuKW7VT8UsRudTX2xnzU0Ecl+zkABlB2Ts0olDV7wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFHZLG4f7cd21OTpNFs7W7kXomK6VMB8GA1UdIwQY MBaAFEVo0KcgRWC2NW2De78VENljbfY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGZiMGItYjk2YS00MzkwLTg2YTgt NmZlMzVhZTU0YTViLzEvZGtzYmhfdHgzYlU1T2swV3p0YnVSZWlZcnBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iMGZiMGItYjk2YS00MzkwLTg2YTgtNmZlMzVhZTU0YTVi LzEvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDJXJIAwQE Tm4QAwQEUPXQAwQDX4PoAwQCuTj8AwQAwyYeAwQE2aigMA0GCSqGSIb3DQEBCwUA A4IBAQBZ6+o/ZKETAVqZQ1Xul59Jj4qr81jvB1LL1kraPfB7oG2RcVRsa0Go5uOA RvYmOz+o3nONzHL18kwnjUY27j/9oVUVac2Z+qtf11eMoamTBzS8HqvrTvqb4ERG fQ6FdUU2gnAAaC54QgxJHw0sE+Mbup1XcUmMFCugJJZX/WurytaTg+/06pN/Nkoz N7sgDADSiQAXukfAuf/BcvntIuymIH3TnOMdfvQ4tu7FsgoufK5Gpi/HPeC9RhEL fShHHPeH20sKDFzWBFBhRGnvHzcvAq4aeQIm/kn4XS3coCAn2EHRz7JwC2i8b3QQ YXiEvgu8MyEU+NrlJ0sGBxmKpFeX -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:22 2026 by rpki-client