This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa File: DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa (raw, json) Hash identifier: HH9fYr3P6DqXc1+m5cKoAOtNDzmk8tYbfKtERsO0Vok= Subject key identifier: 0E:92:8E:AC:4F:DC:BC:3A:58:51:49:A1:EC:CB:F0:98:63:96:04:F9 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CD33F8804C36C8ACBC18446F50E4E Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199961 IP address blocks: 194.28.227.0/24 maxlen: 24 2a09:6280:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d3:3f:88:04:c3:6c:8a:cb:c1:84:46:f5:0e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e928eac4fdcbc3a585149a1eccbf098639604f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:48:b6:a1:a9:5a:c1:3e:59:cc:27:dd:e9:9e: 1c:62:eb:09:a2:a1:2c:57:33:40:91:58:d0:21:29: 2e:e7:79:6d:dd:7a:01:47:64:4e:a8:80:1c:27:7e: 97:f5:83:5f:c6:e0:8e:39:18:9b:50:25:af:a5:46: b9:bc:ac:b5:17:31:e1:75:06:7d:31:a7:03:91:76: 3f:3f:0a:78:c4:d1:43:60:d0:e2:67:67:33:df:11: fd:83:a0:7d:a4:96:c2:fb:9d:cf:9e:06:8e:d8:29: 1a:d9:d8:97:65:d9:d6:f3:fb:47:e1:18:ee:05:ce: e6:6c:ee:93:5a:26:79:91:c3:b8:23:57:5c:dc:d7: 8a:77:57:22:80:3f:d4:c3:7e:4f:5f:25:40:5a:3a: 01:1e:66:f5:da:91:98:3e:87:79:76:d7:8f:09:2e: 14:d9:d6:d6:a6:8d:b4:1c:a9:71:db:26:bc:d3:ce: 21:06:e7:21:66:1d:5c:cf:b4:cd:7c:db:09:be:9b: f3:04:23:58:21:17:56:fc:84:02:8f:7d:7c:82:56: 8d:21:ad:8e:19:37:88:f1:27:fd:94:f5:4f:5c:f7: 08:62:8f:40:63:6c:55:6a:74:2d:32:e2:60:5b:86: 3b:a3:85:b3:5c:45:3c:cd:2b:f4:95:66:df:0b:4e: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:92:8E:AC:4F:DC:BC:3A:58:51:49:A1:EC:CB:F0:98:63:96:04:F9 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.227.0/24 IPv6: 2a09:6280:c::/48 Signature Algorithm: sha256WithRSAEncryption 48:18:b6:09:ac:0d:e4:a5:f0:f4:9d:b2:cf:81:88:db:21:03: d4:6b:aa:d3:96:38:34:13:c2:e0:65:6d:f7:b0:48:ca:35:74: e3:f0:f3:fd:e9:3b:65:01:2d:0a:9e:8e:51:a3:44:bd:9e:78: fa:aa:88:fd:21:63:80:37:ea:88:39:3f:40:7b:dc:ec:a6:8e: 30:24:96:60:74:87:e8:30:35:9f:04:31:67:a0:9b:fe:26:31: ad:fa:9a:d3:b0:e4:14:b1:52:3b:ea:cc:58:09:f2:76:65:18: 53:fe:ec:de:a1:6b:0f:d1:36:0d:04:b8:62:88:09:91:c9:fd: 31:3d:47:7b:a7:4a:8a:3f:ce:73:e3:40:a8:e3:01:4b:c4:e9: 32:65:6e:b0:cf:c5:32:1a:02:79:55:23:ff:6a:81:37:5e:17: 33:94:21:c1:66:3e:07:b6:1b:cc:d2:63:ec:5a:e2:1c:98:ce: c3:01:0a:b2:a9:b6:96:36:fa:98:67:74:18:a6:b6:d2:21:50: 14:db:f2:11:f7:e5:19:2d:f3:49:2e:6d:fd:99:1d:e7:0e:95: 3e:53:b9:77:b0:30:f0:39:10:5d:48:77:6c:ac:92:9c:1a:c7: 74:0f:1d:27:29:fb:3e:a8:c5:54:24:40:e5:aa:33:db:fd:21: eb:d4:96:e8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XNM/iATDbIrLwYRG9Q5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTkyOGVhYzRmZGNiYzNhNTg1MTQ5YTFlY2NiZjA5ODYzOTYwNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80i2oalawT5ZzCfd6Z4cYusJoqEs VzNAkVjQISku53lt3XoBR2ROqIAcJ36X9YNfxuCOORibUCWvpUa5vKy1FzHhdQZ9 MacDkXY/Pwp4xNFDYNDiZ2cz3xH9g6B9pJbC+53PngaO2Cka2diXZdnW8/tH4Rju Bc7mbO6TWiZ5kcO4I1dc3NeKd1cigD/Uw35PXyVAWjoBHmb12pGYPod5dtePCS4U 2dbWpo20HKlx2ya8084hBuchZh1cz7TNfNsJvpvzBCNYIRdW/IQCj318glaNIa2O GTeI8Sf9lPVPXPcIYo9AY2xVanQtMuJgW4Y7o4WzXEU8zSv0lWbfC06wOwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA6SjqxP3Lw6WFFJoezL8JhjlgT5MB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvRHBLT3JFX2N2RHBZVVVtaDdNdndtR09XQlBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwhzjMA8E AgACMAkDBwAqCWKAAAwwDQYJKoZIhvcNAQELBQADggEBAEgYtgmsDeSl8PSdss+B iNshA9RrqtOWODQTwuBlbfewSMo1dOPw8/3pO2UBLQqejlGjRL2eePqqiP0hY4A3 6og5P0B73OymjjAklmB0h+gwNZ8EMWegm/4mMa36mtOw5BSxUjvqzFgJ8nZlGFP+ 7N6haw/RNg0EuGKICZHJ/TE9R3unSoo/znPjQKjjAUvE6TJlbrDPxTIaAnlVI/9q gTdeFzOUIcFmPge2G8zSY+xa4hyYzsMBCrKptpY2+phndBimttIhUBTb8hH35Rkt 80kubf2ZHecOlT5TuXewMPA5EF1Id2yskpwax3QPHScp+z6oxVQkQOWqM9v9IevU lug= -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:31 2026 by rpki-client