This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/DKPrKwEm9w_rRG3TMuhv1McAamk.roa File: DKPrKwEm9w_rRG3TMuhv1McAamk.roa (raw, json) Hash identifier: 4OtFjtxkmUmlHY70yrx1zCjgip8Y0WBSl5BdZAXK0TQ= Subject key identifier: 0C:A3:EB:2B:01:26:F7:0F:EB:44:6D:D3:32:E8:6F:D4:C7:00:6A:69 Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756 Certificate serial: 019B7FF213A5641B52F90943DB6B7E9A9690 Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/DKPrKwEm9w_rRG3TMuhv1McAamk.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 193.109.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:13:a5:64:1b:52:f9:09:43:db:6b:7e:9a:96:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ca3eb2b0126f70feb446dd332e86fd4c7006a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:ea:8c:ed:a8:6b:f5:30:bb:52:a9:17:70: 4e:e8:71:30:0b:e0:c6:e8:1f:2a:9c:55:56:6f:6e: 71:d1:bb:b8:28:81:40:f4:70:13:30:06:18:d6:ea: 44:2a:9e:c0:e7:d9:1d:89:54:49:d8:fe:3e:f3:46: 2b:eb:3f:78:d5:03:f6:ef:db:6c:cf:19:89:09:52: 5c:3d:0e:e7:19:c1:f7:34:95:f4:36:9a:d0:1c:42: 6b:85:77:ab:0e:1c:f6:69:81:a8:3f:43:00:03:7a: b7:fa:54:4e:94:35:8e:4f:24:ff:de:17:c8:8c:e6: e3:68:11:8e:9a:04:0a:51:49:db:8e:12:47:67:de: a0:c1:a4:8b:4c:0b:9e:6b:5c:1e:11:17:63:db:f1: ff:b9:93:49:cd:d8:cd:43:8d:7b:bd:81:28:5b:7d: f7:0d:dc:d5:2d:6d:0e:9d:33:f8:5d:92:52:69:e7: 1d:67:d5:9b:99:49:f6:68:5e:1f:14:ca:5e:aa:0d: b5:c3:44:a9:e2:d8:b2:bd:c7:94:c6:35:f8:df:19: 62:d8:28:01:c1:5d:b8:ce:33:51:f1:3c:6f:6c:15: 58:9f:83:ee:86:00:35:eb:e6:30:bd:6b:f0:e5:ea: 94:89:cb:8a:74:d5:57:98:cc:84:ee:ee:a2:03:6e: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A3:EB:2B:01:26:F7:0F:EB:44:6D:D3:32:E8:6F:D4:C7:00:6A:69 X509v3 Authority Key Identifier: keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/DKPrKwEm9w_rRG3TMuhv1McAamk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.252.0/24 Signature Algorithm: sha256WithRSAEncryption 56:48:91:c5:c2:1e:5d:ae:94:b1:0e:d9:1a:12:e8:76:e2:d6: ae:02:d2:02:26:36:90:20:b1:c9:82:49:00:53:cb:77:3e:d3: cf:72:1f:fb:dc:ff:07:a3:34:ce:81:71:de:44:01:dd:2f:a8: e6:bf:1e:f1:19:43:63:ea:61:e8:7b:72:2b:b8:d4:15:1d:e5: 63:cb:02:8d:f4:a1:02:2e:4f:dc:56:6d:d2:3c:01:d5:f5:32: 7c:0a:ab:7b:7c:62:e4:4c:89:92:68:28:51:d4:d0:f5:37:bc: 97:15:e6:e3:c0:fe:8e:95:3e:13:5c:76:43:43:a5:cc:d4:9f: ce:7c:d8:a6:bc:3c:a6:a6:b3:a7:3d:b3:b1:62:12:9b:ce:f7: 4a:1d:f1:c3:9c:c8:e9:7e:b1:82:5e:75:44:b5:05:40:3f:d4: e2:a8:7f:1c:fb:dd:27:2c:41:d7:d5:75:e4:cb:71:87:f4:b1: 1a:5a:e6:c7:f8:aa:63:12:10:38:17:ce:8a:8f:81:ae:e0:4f: ce:66:de:92:d3:4d:d3:89:1b:7c:ff:a0:e8:99:bd:c4:0d:27: 13:65:95:dd:8c:79:7e:f2:7d:92:70:b7:b5:e6:04:8f:a9:7c: f6:33:0d:e1:26:31:1b:37:81:5f:da:9a:90:fe:2a:8e:68:96: 62:29:d0:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hOlZBtS+QlD22t+mpaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTNkMTFmNzJkZGJlZDgzNjEyODViNDk5YjkzMjE5MTIw M2I3NTYwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2EzZWIyYjAxMjZmNzBmZWI0NDZkZDMzMmU4NmZkNGM3MDA2YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocXqjO2oa/Uwu1KpF3BO6HEwC+DG 6B8qnFVWb25x0bu4KIFA9HATMAYY1upEKp7A59kdiVRJ2P4+80Yr6z941QP279ts zxmJCVJcPQ7nGcH3NJX0NprQHEJrhXerDhz2aYGoP0MAA3q3+lROlDWOTyT/3hfI jObjaBGOmgQKUUnbjhJHZ96gwaSLTAuea1weERdj2/H/uZNJzdjNQ417vYEoW333 DdzVLW0OnTP4XZJSaecdZ9WbmUn2aF4fFMpeqg21w0Sp4tiyvceUxjX43xli2CgB wV24zjNR8TxvbBVYn4PuhgA16+YwvWvw5eqUicuKdNVXmMyE7u6iA259vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAyj6ysBJvcP60Rt0zLob9THAGppMB8GA1UdIwQY MBaAFBnj0R9y3b7YNhKFtJm5MhkSA7dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQt MDY5YmZhZjJiY2U0LzEvREtQckt3RW05d19yUkczVE11aHYxTWNBYW1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQtMDY5YmZhZjJiY2U0 LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW38MA0G CSqGSIb3DQEBCwUAA4IBAQBWSJHFwh5drpSxDtkaEuh24tauAtICJjaQILHJgkkA U8t3PtPPch/73P8HozTOgXHeRAHdL6jmvx7xGUNj6mHoe3IruNQVHeVjywKN9KEC Lk/cVm3SPAHV9TJ8Cqt7fGLkTImSaChR1ND1N7yXFebjwP6OlT4TXHZDQ6XM1J/O fNimvDymprOnPbOxYhKbzvdKHfHDnMjpfrGCXnVEtQVAP9TiqH8c+90nLEHX1XXk y3GH9LEaWubH+KpjEhA4F86Kj4Gu4E/OZt6S003TiRt8/6Domb3EDScTZZXdjHl+ 8n2ScLe15gSPqXz2Mw3hJjEbN4Ff2pqQ/iqOaJZiKdB4 -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:43 2026 by rpki-client