This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/DKtfJq7x0DJhe_hFPZnHoc3QjyA.roa File: DKtfJq7x0DJhe_hFPZnHoc3QjyA.roa (raw, json) Hash identifier: i9+gFVyb3SxyLJJwgR43XfwCTSTrRwfgOhIAHEXtM3I= Subject key identifier: 0C:AB:5F:26:AE:F1:D0:32:61:7B:F8:45:3D:99:C7:A1:CD:D0:8F:20 Certificate issuer: /CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79 Certificate serial: 019B7FF13F8E9AD840032C1E1F4B4B8EDA2E Authority key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/DKtfJq7x0DJhe_hFPZnHoc3QjyA.roa Signing time: Fri 02 Jan 2026 18:21:15 +0000 ROA not before: Fri 02 Jan 2026 18:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206522 IP address blocks: 185.184.12.0/24 maxlen: 24 185.184.13.0/24 maxlen: 24 185.184.14.0/24 maxlen: 24 185.184.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:3f:8e:9a:d8:40:03:2c:1e:1f:4b:4b:8e:da:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79 Validity Not Before: Jan 2 18:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cab5f26aef1d032617bf8453d99c7a1cdd08f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:1a:4c:ab:0e:23:f2:aa:dd:8b:3e:aa:60: ad:24:f4:65:25:4e:8a:7e:c2:e2:2d:46:b4:57:a1: f6:f2:22:f7:c1:f4:a8:33:08:92:52:84:6d:6a:85: ac:cb:8e:c9:ac:f2:84:17:e4:73:24:e5:ac:95:70: 80:7b:fd:58:79:a2:53:dd:c3:6b:e3:38:e8:72:cc: 1c:22:14:e8:0b:96:fc:f1:63:70:40:3b:37:5e:6a: 00:de:a1:5d:fb:53:45:b3:4d:de:8c:8e:f1:d5:83: 32:94:1f:be:58:38:6a:6a:db:9a:ff:a4:94:54:04: d4:d0:1a:53:eb:d0:90:af:36:ec:66:5c:4d:6c:85: 87:5e:e5:ab:17:46:b0:0f:65:71:7f:ae:c9:36:12: cc:58:2c:ea:fc:ff:ea:cc:c5:5f:e6:4e:25:05:c3: 65:f9:d4:27:36:29:da:7c:a7:d4:14:21:9d:5f:04: 2c:22:01:43:fd:31:04:b9:2e:8d:70:76:4e:f0:e8: e5:76:e7:5d:20:7c:ac:87:2e:05:f7:17:c9:b1:84: d4:2a:ce:40:2c:ae:d8:57:9d:ae:ca:6d:b4:b6:8f: e9:df:f0:97:88:32:4d:8f:21:0d:cb:00:55:ad:f5: aa:18:b3:21:3c:f6:e7:e4:f2:a2:4a:35:67:f0:64: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:5F:26:AE:F1:D0:32:61:7B:F8:45:3D:99:C7:A1:CD:D0:8F:20 X509v3 Authority Key Identifier: keyid:14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/DKtfJq7x0DJhe_hFPZnHoc3QjyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.12.0/22 Signature Algorithm: sha256WithRSAEncryption 18:6b:d8:97:d0:e4:44:f4:86:aa:51:71:be:54:5e:e7:c7:93: f3:9a:7d:28:21:56:16:1c:4a:7e:3e:51:40:96:d2:ce:97:54: 09:b5:9e:4d:4f:e5:f8:7e:54:ae:43:55:1c:ef:17:4f:25:c4: 44:0b:66:88:14:9b:73:6e:b0:f5:40:4b:ea:8e:56:94:95:75: bc:94:99:d5:ee:2f:1a:92:21:0a:e8:0b:b5:7f:8a:5f:9d:d0: c7:e8:72:19:17:94:49:4e:09:86:58:f5:f4:ca:3e:1f:db:9e: 7e:e4:34:8d:b4:b8:8c:98:d6:83:33:56:fc:21:20:54:30:54: 06:71:99:fc:d2:73:bd:b4:36:e2:2b:6d:b3:5e:0c:6a:62:9c: 5f:88:cf:0b:0b:c4:d1:39:ff:fc:2f:b7:a7:78:c6:8e:7b:c5: 66:70:cf:41:68:5e:0d:79:d4:79:dc:06:1f:35:d8:34:f6:09: a7:d7:dd:20:47:60:fe:83:39:5b:7d:43:4f:e1:ab:65:b3:6a: 50:25:59:c8:a9:c8:49:74:74:a3:ef:ef:ad:be:d0:cc:75:ad: 96:4e:67:47:f3:8a:b6:4c:66:86:26:82:ae:2f:c0:49:e5:92: 39:0a:4d:bf:e4:d3:6d:2b:ab:91:4b:46:b4:97:d7:00:fd:bf: d9:7d:3e:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8T+OmthAAyweH0tLjtouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZTE2ODQ2ZDdjMjJkMGZjM2FkODg0Yzk0YzAzNGRkN2Ji MzVmNzkwHhcNMjYwMTAyMTgyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2FiNWYyNmFlZjFkMDMyNjE3YmY4NDUzZDk5YzdhMWNkZDA4ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxYaTKsOI/Kq3Ys+qmCtJPRlJU6K fsLiLUa0V6H28iL3wfSoMwiSUoRtaoWsy47JrPKEF+RzJOWslXCAe/1YeaJT3cNr 4zjocswcIhToC5b88WNwQDs3XmoA3qFd+1NFs03ejI7x1YMylB++WDhqatua/6SU VATU0BpT69CQrzbsZlxNbIWHXuWrF0awD2Vxf67JNhLMWCzq/P/qzMVf5k4lBcNl +dQnNinafKfUFCGdXwQsIgFD/TEEuS6NcHZO8OjlduddIHyshy4F9xfJsYTUKs5A LK7YV52uym20to/p3/CXiDJNjyENywBVrfWqGLMhPPbn5PKiSjVn8GStEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAyrXyau8dAyYXv4RT2Zx6HN0I8gMB8GA1UdIwQY MBaAFBThaEbXwi0Pw62ITJTANN17s195MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk9Gb1J0ZkNMUV9EclloTWxNQTAzWHV6WDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NDU1M2QtYTA4OC00ZDM3LWI0YTYt MWQ5ZDg5MGJlNjMyLzEvREt0ZkpxN3gwREpoZV9oRlBabkhvYzNRanlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83NDU1M2QtYTA4OC00ZDM3LWI0YTYtMWQ5ZDg5MGJlNjMy LzEvRk9Gb1J0ZkNMUV9EclloTWxNQTAzWHV6WDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubgMMA0G CSqGSIb3DQEBCwUAA4IBAQAYa9iX0ORE9IaqUXG+VF7nx5Pzmn0oIVYWHEp+PlFA ltLOl1QJtZ5NT+X4flSuQ1Uc7xdPJcREC2aIFJtzbrD1QEvqjlaUlXW8lJnV7i8a kiEK6Au1f4pfndDH6HIZF5RJTgmGWPX0yj4f255+5DSNtLiMmNaDM1b8ISBUMFQG cZn80nO9tDbiK22zXgxqYpxfiM8LC8TROf/8L7eneMaOe8VmcM9BaF4NedR53AYf Ndg09gmn190gR2D+gzlbfUNP4atls2pQJVnIqchJdHSj7++tvtDMda2WTmdH84q2 TGaGJoKuL8BJ5ZI5Ck2/5NNtK6uRS0a0l9cA/b/ZfT5L -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:02 2026 by rpki-client