This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dk-D-iIGj4QLCo3_RtgPezTv51k.roa File: dk-D-iIGj4QLCo3_RtgPezTv51k.roa (raw, json) Hash identifier: v5wWsLHwBYKZsDveGLysnvEIL0DLWrjrnl6NHsO44oc= Subject key identifier: 76:4F:83:FA:22:06:8F:84:0B:0A:8D:FF:46:D8:0F:7B:34:EF:E7:59 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75CF3E6F31DE0406DA6C106BF0F0F Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dk-D-iIGj4QLCo3_RtgPezTv51k.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12958 IP address blocks: 46.237.40.0/22 maxlen: 22 109.161.56.0/24 maxlen: 24 217.15.137.0/24 maxlen: 24 217.15.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5c:f3:e6:f3:1d:e0:40:6d:a6:c1:06:bf:0f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=764f83fa22068f840b0a8dff46d80f7b34efe759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:0c:60:72:1a:18:70:52:0e:69:a8:53:34: 92:33:c9:85:52:1c:6b:ab:b6:a7:41:01:ec:49:4d: a1:c1:9c:3a:b9:0d:c8:a0:f4:f2:05:8d:9c:9a:04: 2b:1a:4e:34:52:4c:72:cf:d4:ab:44:73:fc:91:cb: aa:a8:71:98:28:f6:32:48:1f:7c:78:c9:bc:3f:47: c9:94:72:be:a2:da:a0:96:5b:93:6b:e4:56:13:ad: 10:d4:26:94:dc:0c:65:9d:d4:a2:cc:3e:39:32:cf: e3:cb:e3:ca:11:b5:69:f0:e1:a2:0b:00:70:da:c8: 6d:2e:22:1e:9f:fb:bb:45:08:4c:d5:80:b8:12:f3: 02:52:98:41:be:4a:c4:b8:bc:cb:4e:70:6e:29:3c: 67:ff:b2:c4:71:73:8d:6e:b6:8c:df:01:44:0c:9a: ee:af:02:08:9d:e4:cb:ae:c4:00:a6:e6:28:c2:da: 44:38:ed:15:ea:e4:dd:08:60:98:ef:38:ff:c0:6c: 4e:ca:49:1a:4f:60:d9:3a:35:98:cc:17:05:7e:0c: b5:bc:8b:80:15:e7:31:cb:ae:59:20:d0:e1:fc:ae: 71:1a:18:64:a0:a7:d3:4d:27:4c:0d:14:7c:c5:51: 02:45:d2:9f:1c:9c:90:2b:dd:70:70:44:48:2c:ad: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4F:83:FA:22:06:8F:84:0B:0A:8D:FF:46:D8:0F:7B:34:EF:E7:59 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dk-D-iIGj4QLCo3_RtgPezTv51k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.237.40.0/22 109.161.56.0/24 217.15.137.0/24 217.15.156.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:2c:c9:3f:b8:54:dc:0b:3a:1d:f7:3b:d8:51:ee:cd:a9:18: 38:79:79:73:69:88:c4:a4:b8:e3:0a:89:f0:98:58:43:1c:c5: 08:66:4d:c0:39:e2:21:6d:b5:61:be:9a:f9:19:66:4d:a8:91: 1d:07:bb:e5:bb:87:d0:cf:fb:56:27:0d:84:7f:4b:e5:f7:62: 07:1f:36:f6:31:b9:2c:55:7e:95:4c:74:1d:fc:28:92:2f:dd: c2:51:e7:30:02:c1:41:a3:54:6f:7b:8e:25:b5:79:fe:9f:7c: a0:27:c3:30:77:f3:5d:60:a6:81:95:c0:eb:bf:e7:fa:9c:08: aa:6c:78:4f:e2:50:84:73:0b:a6:d8:a0:2e:60:3d:32:08:fd: 27:5c:30:1b:76:11:1d:40:e6:46:07:62:e9:1e:1b:c5:e9:f1: 4a:f5:d0:3f:cb:05:21:f9:dd:39:f8:3d:e2:4b:4b:b2:30:98: 65:b2:88:3a:f3:e2:26:3b:f9:0b:66:23:fd:cf:7d:12:b2:2a: af:77:c7:a4:66:38:9a:30:e1:79:c7:80:97:aa:8b:82:90:00: ae:fd:eb:d3:97:09:70:31:64:8c:c2:e6:34:49:0f:4b:13:b9: dd:9f:c0:f1:01:df:9a:da:12:ef:1d:cb:8a:37:a2:bb:3a:06: 13:fd:ed:8e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+p1zz5vMd4EBtpsEGvw8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjRmODNmYTIyMDY4Zjg0MGIwYThkZmY0NmQ4MGY3YjM0ZWZlNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jMMYHIaGHBSDmmoUzSSM8mFUhxr q7anQQHsSU2hwZw6uQ3IoPTyBY2cmgQrGk40Ukxyz9SrRHP8kcuqqHGYKPYySB98 eMm8P0fJlHK+otqglluTa+RWE60Q1CaU3AxlndSizD45Ms/jy+PKEbVp8OGiCwBw 2shtLiIen/u7RQhM1YC4EvMCUphBvkrEuLzLTnBuKTxn/7LEcXONbraM3wFEDJru rwIIneTLrsQApuYowtpEOO0V6uTdCGCY7zj/wGxOykkaT2DZOjWYzBcFfgy1vIuA Fecxy65ZINDh/K5xGhhkoKfTTSdMDRR8xVECRdKfHJyQK91wcERILK3AewIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHZPg/oiBo+ECwqN/0bYD3s07+dZMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvZGstRC1pSUdqNFFMQ28zX1J0Z1BlelR2NTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLu0oAwQA baE4AwQA2Q+JAwQA2Q+cMA0GCSqGSIb3DQEBCwUAA4IBAQBeLMk/uFTcCzod9zvY Ue7NqRg4eXlzaYjEpLjjConwmFhDHMUIZk3AOeIhbbVhvpr5GWZNqJEdB7vlu4fQ z/tWJw2Ef0vl92IHHzb2MbksVX6VTHQd/CiSL93CUecwAsFBo1Rve44ltXn+n3yg J8Mwd/NdYKaBlcDrv+f6nAiqbHhP4lCEcwum2KAuYD0yCP0nXDAbdhEdQOZGB2Lp HhvF6fFK9dA/ywUh+d05+D3iS0uyMJhlsog68+ImO/kLZiP9z30Ssiqvd8ekZjia MOF5x4CXqouCkACu/evTlwlwMWSMwuY0SQ9LE7ndn8DxAd+a2hLvHcuKN6K7OgYT /e2O -----END CERTIFICATE-----Generated at Mon Jan 26 11:27:03 2026 by rpki-client