This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa
File: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (raw, json)
Hash identifier: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=
Subject key identifier: 0D:72:80:D2:45:C4:D0:DE:59:B4:F3:91:D8:EC:B8:2C:07:01:FF:80
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019C34FBF3592EA3AFD6336D249F9EC60585
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa
Signing time: Fri 06 Feb 2026 22:04:12 +0000
ROA not before: Fri 06 Feb 2026 22:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56322
IP address blocks: 91.219.236.0/22 maxlen: 22
91.219.236.0/24 maxlen: 24
91.219.237.0/24 maxlen: 24
91.219.238.0/24 maxlen: 24
91.219.239.0/24 maxlen: 24
185.163.204.0/24 maxlen: 24
195.20.115.0/24 maxlen: 24
2a10:c800::/48 maxlen: 48
2a10:c800:1::/48 maxlen: 48
2a10:c800:400::/48 maxlen: 48
2a10:c800:401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:34:fb:f3:59:2e:a3:af:d6:33:6d:24:9f:9e:c6:05:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Feb 6 22:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d7280d245c4d0de59b4f391d8ecb82c0701ff80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:14:2e:0c:37:57:4d:74:32:96:a5:6d:a8:
e5:b1:dc:ad:0b:47:b4:1c:ad:a4:ae:35:98:56:9f:
46:68:d7:6a:a9:08:c1:6e:4f:58:4c:38:07:16:3b:
21:7b:fb:a8:58:07:81:d8:d6:94:35:27:80:70:aa:
ca:19:f0:ff:c4:30:7e:f4:d5:5a:a0:ca:2f:0f:d4:
ef:0c:e8:3f:65:70:30:1b:f7:06:03:df:e3:16:54:
42:ef:4c:c2:45:11:f7:5e:42:46:9f:2a:3d:f1:f4:
8a:bb:b4:9b:18:46:11:32:bf:d1:e1:da:5b:34:73:
d5:2f:fb:20:09:92:e1:97:1a:c4:a9:2c:98:7a:ba:
5b:f5:c9:29:85:88:e3:b9:29:c3:ed:48:ff:c9:70:
97:b0:02:30:37:1b:7d:f2:ed:c9:16:79:da:a0:1b:
63:02:b4:a2:79:7c:90:90:4a:55:9d:58:29:f3:9d:
19:3b:f9:d1:67:a1:dc:f7:63:e8:89:46:5c:0f:5a:
5c:a1:24:c8:4d:3d:8b:ca:d0:87:9d:e1:b7:8a:24:
12:fc:31:b3:7d:2e:68:bc:4f:22:91:1b:42:dc:bd:
bb:69:24:57:d0:f8:37:47:5c:8b:f8:be:d8:ac:a8:
d2:97:6f:a8:5b:1d:70:0c:81:cb:e6:3b:2d:e7:5d:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:80:D2:45:C4:D0:DE:59:B4:F3:91:D8:EC:B8:2C:07:01:FF:80
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.236.0/22
185.163.204.0/24
195.20.115.0/24
IPv6:
2a10:c800::/47
2a10:c800:400::/47
Signature Algorithm: sha256WithRSAEncryption
35:33:f5:30:8a:6b:e1:81:8d:7d:c6:b5:78:12:97:bb:5d:b4:
50:2b:f4:b9:e0:af:fc:20:44:0d:f1:c5:64:d4:fb:4c:d5:41:
4f:29:f8:61:b2:46:3c:62:3e:bf:b2:03:f2:24:cf:15:cd:1b:
6c:35:49:c6:a3:ed:b7:47:47:30:c7:01:43:eb:ec:ae:f1:50:
8e:ee:35:6d:e3:f1:41:c5:49:78:4d:18:a2:90:4c:8e:ad:fc:
78:2f:11:b7:24:bd:3a:72:ea:05:49:75:9a:1a:2d:4a:88:c9:
06:c5:7b:4b:00:67:86:bf:f0:05:e3:12:55:53:cf:93:b0:db:
ea:29:cd:a3:02:1d:93:f4:a7:2a:0c:64:49:00:e2:80:54:ea:
d8:ac:39:0e:5c:75:ae:b0:45:72:04:e7:79:2e:df:68:8f:ad:
38:79:ef:fa:9e:2c:5b:80:ec:49:bf:ee:80:bd:f8:26:35:bf:
75:1e:d4:e0:40:01:2a:54:4a:d4:04:bd:ae:b9:bd:5c:42:7f:
61:ca:8d:63:a9:7d:fc:cc:7f:d7:f3:2e:68:77:eb:ea:85:7a:
69:9c:f7:7f:33:ff:1b:bf:b3:12:e1:fe:9f:60:fb:77:1c:93:
d5:4e:a1:fc:54:4d:d0:7c:96:0a:a1:e8:1a:ae:81:64:19:ac:
c0:06:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:53 2026 by rpki-client