This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/DNSKPd01dwV1m0UA3OWZjHrv0VI.roa File: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (raw, json) Hash identifier: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg= Subject key identifier: 0C:D4:8A:3D:DD:35:77:05:75:9B:45:00:DC:E5:99:8C:7A:EF:D1:52 Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32 Certificate serial: 019B77589D7ECEFEC450FD472E5EEE6C88DC Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/DNSKPd01dwV1m0UA3OWZjHrv0VI.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59979 IP address blocks: 195.43.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9d:7e:ce:fe:c4:50:fd:47:2e:5e:ee:6c:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b660a611980c68273139e32affb74b454a9d32 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cd48a3ddd357705759b4500dce5998c7aefd152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:ef:cc:2e:c4:46:6c:cb:e5:38:18:d7:8e: f0:f6:00:b5:51:e9:ab:e9:3d:d7:c5:61:2b:a9:98: 13:8b:4c:e8:25:52:d1:c3:20:ce:c6:d4:60:dd:7a: 88:0b:c4:2e:45:d4:aa:5f:f7:e6:c7:4f:3a:07:ea: d2:6c:6b:0b:08:9f:34:d8:ec:44:b9:5d:10:fa:6c: e2:d8:29:f6:ce:d4:2f:94:61:c7:07:97:75:82:8c: ef:dd:6a:50:de:5b:1c:05:cb:4c:d5:5e:0a:16:35: 33:b5:a4:69:5a:aa:ff:a9:0b:0d:9f:2d:a0:0c:a4: 34:73:0d:5b:48:27:e2:e4:0a:04:37:dd:10:56:a4: 27:8f:09:3e:df:d9:69:af:1d:42:50:b4:f9:6c:75: 41:8e:13:c7:4a:2b:ca:1b:8d:b9:0d:22:32:eb:df: 26:90:cf:13:58:23:f5:ea:85:22:6c:91:ea:90:aa: 95:8e:2c:6a:9e:5a:4e:03:78:ca:66:c0:d4:50:fb: 7c:ea:65:8b:4b:be:7f:a0:bf:7c:09:8c:f8:b0:c1: c2:87:c8:b2:74:e6:92:7a:86:51:37:a1:93:27:4e: 59:f8:22:9a:15:13:55:24:4e:8e:0b:ad:c8:09:09: ea:78:df:9b:b6:09:4a:4c:6b:76:67:55:02:5d:86: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D4:8A:3D:DD:35:77:05:75:9B:45:00:DC:E5:99:8C:7A:EF:D1:52 X509v3 Authority Key Identifier: keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/DNSKPd01dwV1m0UA3OWZjHrv0VI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.138.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:41:e9:f7:b2:a5:8a:45:a5:67:9a:25:0a:d7:c0:d0:61:8f: e2:6a:92:6b:57:d9:70:5d:4f:d2:89:88:89:9b:9a:18:7d:16: cb:5a:af:46:23:ef:29:37:ba:3b:2d:d0:07:34:e5:a5:a6:35: f4:c9:41:6d:33:98:f7:f2:46:14:0a:dc:05:30:5e:cc:35:81: 53:68:cb:45:d5:54:40:31:a0:99:d1:43:30:72:7c:1c:c4:6f: 16:5f:48:d9:3b:f6:e2:ef:47:10:f9:49:29:44:50:5d:0d:df: 31:8f:44:3b:84:bf:1f:c6:07:70:95:b4:71:2d:42:0f:b8:21: e8:fd:90:95:49:ad:5c:a5:5b:ae:cd:bf:44:66:22:b5:ba:83: 2e:c1:dd:6c:94:a5:9e:15:04:bd:d9:ca:88:fb:d2:6c:ce:28: fb:e8:97:1f:80:9c:3e:bc:7d:f9:60:72:57:2a:42:c0:d4:fc: 40:1c:c0:85:1e:c0:b3:ad:74:70:a4:f2:7d:b4:d8:36:fc:a0: 2d:2c:d7:42:74:77:e3:c4:59:2a:6c:49:21:1e:35:0d:bb:be: 43:11:b6:7a:0e:fd:7b:87:ac:98:58:70:f3:bf:a0:92:47:4d: 2e:7f:b8:8b:85:e9:47:56:6a:40:2b:87:d6:7a:2a:40:04:58: cc:54:1d:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJ1+zv7EUP1HLl7ubIjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0 YTlkMzIwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2Q0OGEzZGRkMzU3NzA1NzU5YjQ1MDBkY2U1OTk4YzdhZWZkMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqurvzC7ERmzL5TgY147w9gC1Uemr 6T3XxWErqZgTi0zoJVLRwyDOxtRg3XqIC8QuRdSqX/fmx086B+rSbGsLCJ802OxE uV0Q+mzi2Cn2ztQvlGHHB5d1gozv3WpQ3lscBctM1V4KFjUztaRpWqr/qQsNny2g DKQ0cw1bSCfi5AoEN90QVqQnjwk+39lprx1CULT5bHVBjhPHSivKG425DSIy698m kM8TWCP16oUibJHqkKqVjixqnlpOA3jKZsDUUPt86mWLS75/oL98CYz4sMHCh8iy dOaSeoZRN6GTJ05Z+CKaFRNVJE6OC63ICQnqeN+btglKTGt2Z1UCXYaJEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzUij3dNXcFdZtFANzlmYx679FSMB8GA1UdIwQY MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt NzA1MTk3NTA3YTU5LzEvRE5TS1BkMDFkd1YxbTBVQTNPV1pqSHJ2MFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5 LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyuKMA0G CSqGSIb3DQEBCwUAA4IBAQBdQen3sqWKRaVnmiUK18DQYY/iapJrV9lwXU/SiYiJ m5oYfRbLWq9GI+8pN7o7LdAHNOWlpjX0yUFtM5j38kYUCtwFMF7MNYFTaMtF1VRA MaCZ0UMwcnwcxG8WX0jZO/bi70cQ+UkpRFBdDd8xj0Q7hL8fxgdwlbRxLUIPuCHo /ZCVSa1cpVuuzb9EZiK1uoMuwd1slKWeFQS92cqI+9Jszij76JcfgJw+vH35YHJX KkLA1PxAHMCFHsCzrXRwpPJ9tNg2/KAtLNdCdHfjxFkqbEkhHjUNu75DEbZ6Dv17 h6yYWHDzv6CSR00uf7iLhelHVmpAK4fWeipABFjMVB2V -----END CERTIFICATE-----Generated at Tue Jan 27 07:44:41 2026 by rpki-client