This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa File: Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa (raw, json) Hash identifier: gLzddFQSRg/+84Z04UYrdta+47qpL6E3gmNgoeRKLvI= Subject key identifier: 0E:DE:7F:6F:C8:23:EC:D8:74:70:AB:A9:D4:C0:35:5B:31:59:AB:8D Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67 Certificate serial: 019B79ED424F406FD78AD3D450703F051136 Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25598 IP address blocks: 193.5.126.0/23 maxlen: 23 193.135.4.0/22 maxlen: 22 193.135.4.0/23 maxlen: 24 193.200.144.0/24 maxlen: 24 195.245.237.0/24 maxlen: 24 2a03:8780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:42:4f:40:6f:d7:8a:d3:d4:50:70:3f:05:11:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67 Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ede7f6fc823ecd87470aba9d4c0355b3159ab8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:8c:0e:19:82:2c:cd:de:20:3f:bd:f3:cc: 85:51:ea:4f:65:fe:ed:06:e9:74:b3:79:15:be:f8: 81:9f:e9:9f:5e:24:77:fc:e2:ed:26:38:e9:ac:c2: 06:47:07:28:b9:fb:ea:9a:04:12:a3:42:85:da:fc: 30:47:03:e0:36:a1:be:e7:2c:28:e7:1d:14:73:b5: 8e:97:6b:d2:c0:c8:bb:a2:5e:2d:cb:fc:14:87:a5: df:87:e2:ce:1f:1e:a4:bd:9e:8a:ed:e3:91:7e:06: 79:fc:d0:8e:41:23:4d:19:5c:1f:cb:cf:b7:1a:22: 4a:15:02:b5:4f:f1:31:21:0c:df:f6:1b:f6:88:45: 39:d7:95:02:b1:22:38:b7:a1:e0:b5:ca:e4:a0:e1: cc:ce:63:0e:40:1d:86:9d:6e:ce:ec:2c:51:cd:5c: 4a:75:e4:8f:e3:db:29:83:65:e1:c8:84:a5:ad:35: 2a:92:2d:8e:13:a9:56:a4:e1:08:84:a7:2d:ad:2d: 35:1e:8f:03:40:7b:5e:01:35:81:ce:3b:63:50:7a: e9:00:9f:f8:36:f1:f1:8f:76:c3:7d:d1:76:48:5a: 39:7e:3c:1e:fd:4b:e5:82:6d:d6:98:69:1b:3b:c2: e1:9f:74:64:9c:d4:fd:f8:75:23:3c:25:68:72:2e: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DE:7F:6F:C8:23:EC:D8:74:70:AB:A9:D4:C0:35:5B:31:59:AB:8D X509v3 Authority Key Identifier: keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.126.0/23 193.135.4.0/22 193.200.144.0/24 195.245.237.0/24 IPv6: 2a03:8780::/32 Signature Algorithm: sha256WithRSAEncryption 1a:ec:c1:9e:7c:67:de:12:03:a5:6c:4e:43:35:43:15:a3:65: bb:e9:e1:1e:55:35:f0:7a:5c:b7:f8:dd:94:82:d6:7f:72:3b: 1a:7a:3b:ef:dd:2b:5e:4b:7a:b3:5e:55:86:95:22:ad:ab:9c: 12:64:5c:3c:b6:69:9c:e5:33:4f:83:75:d5:f8:cf:f9:f7:e4: 29:a3:22:07:95:a2:1f:0d:9c:7c:0c:e4:e9:57:a5:b1:32:30: c3:5e:f2:65:93:e4:44:70:74:d9:37:7a:51:14:41:6b:59:36: a3:9a:5f:7f:3f:cc:35:52:ee:62:1c:85:b0:fc:39:15:03:2c: 1c:c0:70:20:0f:73:56:a0:1f:82:bc:8b:25:f2:68:ab:01:66: a5:44:36:b4:39:db:34:9a:3c:fb:7c:3c:5b:41:d0:c1:d2:ed: 9c:01:9e:52:d1:87:14:73:df:94:59:6c:90:1f:4b:c6:59:79: 83:a1:86:79:95:7c:d4:f8:7e:ac:32:4a:22:0a:fb:58:46:67: 18:c0:dc:35:6a:3d:9c:d4:76:85:3c:8b:cb:41:aa:82:53:21: 45:2d:13:ac:5e:a7:70:29:ee:88:a6:27:2c:51:fd:ed:6e:f2: aa:3e:f0:6a:d8:c4:05:20:44:5f:61:cb:d6:d8:f4:6a:24:5d: 65:86:20:ce -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57UJPQG/XitPUUHA/BRE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYmQ3NGM2ZDExZDYzY2E1ZGUzY2M2MzdjZTk2N2VlOTc2 MDRjNjcwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWRlN2Y2ZmM4MjNlY2Q4NzQ3MGFiYTlkNGMwMzU1YjMxNTlhYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS6MDhmCLM3eID+988yFUepPZf7t Bul0s3kVvviBn+mfXiR3/OLtJjjprMIGRwcoufvqmgQSo0KF2vwwRwPgNqG+5ywo 5x0Uc7WOl2vSwMi7ol4ty/wUh6Xfh+LOHx6kvZ6K7eORfgZ5/NCOQSNNGVwfy8+3 GiJKFQK1T/ExIQzf9hv2iEU515UCsSI4t6HgtcrkoOHMzmMOQB2GnW7O7CxRzVxK deSP49spg2XhyISlrTUqki2OE6lWpOEIhKctrS01Ho8DQHteATWBzjtjUHrpAJ/4 NvHxj3bDfdF2SFo5fjwe/Uvlgm3WmGkbO8Lhn3RknNT9+HUjPCVoci6WxwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFA7ef2/II+zYdHCrqdTANVsxWauNMB8GA1UdIwQY MBaAFIy9dMbRHWPKXePMY3zpZ+6XYExnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZDNmZmItMDlkYS00ZmFiLWIzOGUt NmM4ZTVkMTkzNzdlLzEvRHQ1X2I4Z2o3TmgwY0t1cDFNQTFXekZacTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZDNmZmItMDlkYS00ZmFiLWIzOGUtNmM4ZTVkMTkzNzdl LzEvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBwQV+AwQC wYcEAwQAwciQAwQAw/XtMA0EAgACMAcDBQAqA4eAMA0GCSqGSIb3DQEBCwUAA4IB AQAa7MGefGfeEgOlbE5DNUMVo2W76eEeVTXwely3+N2UgtZ/cjsaejvv3SteS3qz XlWGlSKtq5wSZFw8tmmc5TNPg3XV+M/59+QpoyIHlaIfDZx8DOTpV6WxMjDDXvJl k+REcHTZN3pRFEFrWTajml9/P8w1Uu5iHIWw/DkVAywcwHAgD3NWoB+CvIsl8mir AWalRDa0Ods0mjz7fDxbQdDB0u2cAZ5S0YcUc9+UWWyQH0vGWXmDoYZ5lXzU+H6s MkoiCvtYRmcYwNw1aj2c1HaFPIvLQaqCUyFFLROsXqdwKe6IpicsUf3tbvKqPvBq 2MQFIERfYcvW2PRqJF1lhiDO -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:30 2026 by rpki-client