This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/DVxcthJ5zcZ8COkBA3rotGAlLFU.roa File: DVxcthJ5zcZ8COkBA3rotGAlLFU.roa (raw, json) Hash identifier: vJnipHRerz0UttumCZypDHr2IzvHL7fPbWoqduV1jL8= Subject key identifier: 0D:5C:5C:B6:12:79:CD:C6:7C:08:E9:01:03:7A:E8:B4:60:25:2C:55 Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52 Certificate serial: 019B77C6D595E35BE11EE9316D0902F66549 Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/DVxcthJ5zcZ8COkBA3rotGAlLFU.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60624 IP address blocks: 185.172.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d5:95:e3:5b:e1:1e:e9:31:6d:09:02:f6:65:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52 Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d5c5cb61279cdc67c08e901037ae8b460252c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:1f:f5:b5:61:d9:16:26:b1:42:cd:74:8a: 2f:40:f5:e7:ee:70:14:54:e4:2d:b2:e8:ef:ad:81: 00:4e:41:cc:6a:32:59:24:db:4c:f3:40:80:e3:79: b3:e7:f4:28:97:10:2b:30:c7:7f:31:f1:10:8e:43: 05:b7:f2:52:7b:ab:4f:b0:bf:61:bf:51:bb:f2:81: cd:8c:a5:5a:b6:fa:e0:c5:e4:a2:1d:63:b8:e6:66: 1e:e0:4d:4d:20:3f:c7:d3:17:0d:68:5e:8d:25:3b: 63:23:ee:f5:87:ab:86:4d:e3:58:6d:f6:8e:3a:62: d3:16:04:1c:5e:18:df:ae:b4:74:38:ed:b3:10:c9: d6:21:ce:5a:7b:4c:83:06:9e:7b:f4:6c:b0:4d:e8: 1e:45:e9:fd:d4:65:cf:5a:6e:8b:ed:b7:f6:2f:d3: c2:71:c3:52:2a:db:c4:50:52:d9:e4:d4:e7:4e:ed: e3:94:43:4a:be:f2:5f:2b:64:0e:10:6d:7e:9d:6b: ea:dd:eb:20:c4:49:4b:cc:dc:f2:a4:d9:e7:30:5f: 3a:a3:7a:bd:de:dd:2a:c1:83:d9:37:9c:f7:95:d3: b9:07:5f:ac:75:f9:f2:62:5b:fe:d4:9e:cf:d3:51: 4a:91:5f:f7:38:e7:47:a9:48:c9:89:13:cc:47:39: cd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5C:5C:B6:12:79:CD:C6:7C:08:E9:01:03:7A:E8:B4:60:25:2C:55 X509v3 Authority Key Identifier: keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/DVxcthJ5zcZ8COkBA3rotGAlLFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.87.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:94:3f:aa:22:db:bf:8f:f4:b3:f8:61:d9:c4:3b:b4:2c:11: cc:fa:93:29:7f:d0:68:b1:e0:43:42:34:bc:af:ae:8d:de:13: ca:a0:30:b5:9a:18:07:b2:0a:ce:3e:35:f6:e2:0c:fe:3a:f6: 3c:c9:c6:a7:b8:3e:8a:75:86:b4:e7:db:a3:7d:a2:f5:c4:58: 0b:97:12:7d:c4:bd:45:bc:3e:a6:a9:80:89:67:0d:9f:d3:93: a3:31:49:c1:69:44:25:7b:2f:f2:ad:9c:e7:af:96:21:4b:f4: 77:f6:4b:2d:75:a0:d7:d7:e3:dd:91:92:0c:61:01:4a:7e:68: 66:08:5e:a1:72:88:b9:2a:b7:14:d8:69:3f:3f:a3:34:94:b4: 52:07:35:b8:bb:cd:a3:e8:d8:0f:66:53:a5:f3:60:02:c6:28: 33:a1:90:7c:9f:0e:5a:3b:94:1d:1d:c4:8f:ed:f7:a3:67:68: d2:3c:30:c5:bf:cc:a6:58:5b:85:09:27:3a:ad:f9:4a:e6:ff: 74:40:1a:98:3d:af:d9:cb:d6:fb:6f:38:d4:19:f2:d9:a3:66: 58:68:db:b6:ed:61:fc:1b:ea:ed:30:96:9c:6f:11:f3:b5:83: 1e:d2:2c:4e:39:a3:74:bc:74:85:e9:4d:fe:83:33:f8:76:6e: 3e:55:17:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtWV41vhHukxbQkC9mVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzI5ZWU4OTYzNmJhMzRmZTU2YmQ3MmU3NThmNTgyYWRl NzBlNTIwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDVjNWNiNjEyNzljZGM2N2MwOGU5MDEwMzdhZThiNDYwMjUyYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zQf9bVh2RYmsULNdIovQPXn7nAU VOQtsujvrYEATkHMajJZJNtM80CA43mz5/QolxArMMd/MfEQjkMFt/JSe6tPsL9h v1G78oHNjKVatvrgxeSiHWO45mYe4E1NID/H0xcNaF6NJTtjI+71h6uGTeNYbfaO OmLTFgQcXhjfrrR0OO2zEMnWIc5ae0yDBp579GywTegeRen91GXPWm6L7bf2L9PC ccNSKtvEUFLZ5NTnTu3jlENKvvJfK2QOEG1+nWvq3esgxElLzNzypNnnMF86o3q9 3t0qwYPZN5z3ldO5B1+sdfnyYlv+1J7P01FKkV/3OOdHqUjJiRPMRznN4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1cXLYSec3GfAjpAQN66LRgJSxVMB8GA1UdIwQY MBaAFOVynuiWNro0/la9cudY9YKt5w5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAt YzEzOGJkMWMxNzFlLzEvRFZ4Y3RoSjV6Y1o4Q09rQkEzcm90R0FsTEZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAtYzEzOGJkMWMxNzFl LzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaxXMA0G CSqGSIb3DQEBCwUAA4IBAQBvlD+qItu/j/Sz+GHZxDu0LBHM+pMpf9BoseBDQjS8 r66N3hPKoDC1mhgHsgrOPjX24gz+OvY8ycanuD6KdYa059ujfaL1xFgLlxJ9xL1F vD6mqYCJZw2f05OjMUnBaUQley/yrZznr5YhS/R39kstdaDX1+PdkZIMYQFKfmhm CF6hcoi5KrcU2Gk/P6M0lLRSBzW4u82j6NgPZlOl82ACxigzoZB8nw5aO5QdHcSP 7fejZ2jSPDDFv8ymWFuFCSc6rflK5v90QBqYPa/Zy9b7bzjUGfLZo2ZYaNu27WH8 G+rtMJacbxHztYMe0ixOOaN0vHSF6U3+gzP4dm4+VRdN -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:28 2026 by rpki-client