This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/DtLePmxN_wJv4PSLH6EKntHcVY0.roa File: DtLePmxN_wJv4PSLH6EKntHcVY0.roa (raw, json) Hash identifier: U7UziCjdX8EIkcuGoidh45rKj+4qBu43u+i8Cgl9CBQ= Subject key identifier: 0E:D2:DE:3E:6C:4D:FF:02:6F:E0:F4:8B:1F:A1:0A:9E:D1:DC:55:8D Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430 Certificate serial: 019B7B35A4AF78CBFF0B9E7E0398AF9DE25E Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/DtLePmxN_wJv4PSLH6EKntHcVY0.roa Signing time: Thu 01 Jan 2026 20:17:51 +0000 ROA not before: Thu 01 Jan 2026 20:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211328 IP address blocks: 185.254.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a4:af:78:cb:ff:0b:9e:7e:03:98:af:9d:e2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430 Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ed2de3e6c4dff026fe0f48b1fa10a9ed1dc558d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:c5:aa:aa:3e:26:53:fe:fd:b1:e5:99:ef: 05:d5:b0:54:9b:e1:b8:0f:89:ac:b0:10:27:31:ab: 07:1b:c8:d7:eb:c9:fe:b9:15:89:1f:52:5c:18:f9: 86:fe:39:7d:f2:0a:c2:80:39:0e:95:0c:13:e2:06: 11:0e:3e:d5:e2:cc:8a:48:91:6b:68:8d:e1:2a:8f: b8:42:90:17:92:32:7d:de:88:0e:23:82:2a:d3:88: 17:5b:14:b7:de:e3:8f:36:d4:3f:f2:10:3b:5b:ad: 1d:9c:f9:30:2f:22:d2:79:d9:37:92:4d:c5:e7:d1: 7f:1e:dc:0f:53:c6:35:e5:0c:ac:fc:6d:66:56:12: 4e:e6:70:1b:72:f1:a6:ee:ac:5e:0d:0b:8a:f4:5b: 22:7b:f6:d0:f8:fa:6b:4b:7a:89:22:82:c0:1e:f6: f4:ba:96:de:4d:ab:bf:2f:78:91:bc:9c:2a:48:1e: 1f:fa:7d:e0:aa:25:cb:02:fc:af:08:79:3a:32:31: f3:17:50:1c:d7:6a:ee:ee:d6:a6:b9:ad:e9:e5:e1: a9:b3:6e:65:b2:fb:fd:41:72:f0:86:64:8f:e5:35: 35:0c:9c:69:0d:c1:d5:63:71:ff:c7:b1:9d:f9:2d: 17:83:2e:ba:21:00:a8:cb:95:e5:30:34:be:d6:53: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D2:DE:3E:6C:4D:FF:02:6F:E0:F4:8B:1F:A1:0A:9E:D1:DC:55:8D X509v3 Authority Key Identifier: keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/DtLePmxN_wJv4PSLH6EKntHcVY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.122.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:fa:fd:d6:6e:67:ce:ef:15:60:85:25:0d:7e:00:0f:c5:12: d3:50:f6:56:ee:56:13:34:7d:ea:23:08:06:63:42:1c:3f:2f: b4:01:0a:1e:59:17:00:eb:b5:4b:5c:86:f4:62:49:b0:76:bc: cb:79:87:21:6b:8b:0f:c8:c0:d8:78:ea:95:95:06:6c:4e:6f: 23:61:31:e6:92:5c:3f:fa:c5:a5:d5:69:a1:47:b4:41:6b:49: 35:7d:87:82:66:bf:f6:53:f8:50:d7:fa:5d:60:c1:54:ed:db: d6:ea:29:ec:8e:1c:e7:fc:78:d1:e8:22:ee:b5:bf:c2:97:67: 0c:21:52:c5:e9:0f:14:91:e4:6c:57:a0:28:d8:31:56:68:df: 38:e7:21:b9:78:1e:21:8d:62:f0:03:b9:17:f8:03:31:21:01: c6:7d:0a:98:4d:bb:02:f2:76:cb:0b:d7:b4:4b:8f:2a:6d:8a: 7f:7c:d7:80:66:d0:bb:d3:d6:f2:49:07:71:73:3f:37:8b:e8: 35:bf:92:37:23:cc:c3:67:54:62:27:31:4d:fa:31:1c:6b:35: 77:20:f5:5f:36:6d:a3:fc:51:9e:df:0b:c0:7f:22:71:35:7c: 59:07:ea:8a:63:21:ad:a7:1f:19:49:67:98:41:e4:f6:67:a1: b5:40:a2:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaSveMv/C55+A5ivneJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMDVmZTYzODAyNDk0MjU1NTY4M2Q3NjVlZGY3ZmE5M2Yy ZTg0MzAwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWQyZGUzZTZjNGRmZjAyNmZlMGY0OGIxZmExMGE5ZWQxZGM1NThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sDFqqo+JlP+/bHlme8F1bBUm+G4 D4mssBAnMasHG8jX68n+uRWJH1JcGPmG/jl98grCgDkOlQwT4gYRDj7V4syKSJFr aI3hKo+4QpAXkjJ93ogOI4Iq04gXWxS33uOPNtQ/8hA7W60dnPkwLyLSedk3kk3F 59F/HtwPU8Y15Qys/G1mVhJO5nAbcvGm7qxeDQuK9Fsie/bQ+PprS3qJIoLAHvb0 upbeTau/L3iRvJwqSB4f+n3gqiXLAvyvCHk6MjHzF1Ac12ru7tamua3p5eGps25l svv9QXLwhmSP5TU1DJxpDcHVY3H/x7Gd+S0Xgy66IQCoy5XlMDS+1lNlXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7S3j5sTf8Cb+D0ix+hCp7R3FWNMB8GA1UdIwQY MBaAFCIF/mOAJJQlVWg9dl7ff6k/LoQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMt ODRlMTFlNTFmMTM0LzEvRHRMZVBteE5fd0p2NFBTTEg2RUtudEhjVlkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMtODRlMTFlNTFmMTM0 LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf56MA0G CSqGSIb3DQEBCwUAA4IBAQCM+v3WbmfO7xVghSUNfgAPxRLTUPZW7lYTNH3qIwgG Y0IcPy+0AQoeWRcA67VLXIb0YkmwdrzLeYcha4sPyMDYeOqVlQZsTm8jYTHmklw/ +sWl1WmhR7RBa0k1fYeCZr/2U/hQ1/pdYMFU7dvW6insjhzn/HjR6CLutb/Cl2cM IVLF6Q8UkeRsV6Ao2DFWaN845yG5eB4hjWLwA7kX+AMxIQHGfQqYTbsC8nbLC9e0 S48qbYp/fNeAZtC709bySQdxcz83i+g1v5I3I8zDZ1RiJzFN+jEcazV3IPVfNm2j /FGe3wvAfyJxNXxZB+qKYyGtpx8ZSWeYQeT2Z6G1QKL+ -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:20 2026 by rpki-client