This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/Dnmq_-IXcuuCYcO66EjRn9inPJA.roa File: Dnmq_-IXcuuCYcO66EjRn9inPJA.roa (raw, json) Hash identifier: JBkzUBE+QTQ6AfEZVnlaYzg8oi2JCs+6/Xvoz9ACRuE= Subject key identifier: 0E:79:AA:FF:E2:17:72:EB:82:61:C3:BA:E8:48:D1:9F:D8:A7:3C:90 Certificate issuer: /CN=1627573c68929ab2a4590e92a51abc40ea9e5817 Certificate serial: 019B7834D8B727C752729559D4C9A8B54178 Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/Dnmq_-IXcuuCYcO66EjRn9inPJA.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50033 IP address blocks: 185.60.162.0/24 maxlen: 24 185.161.124.0/22 maxlen: 22 185.211.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d8:b7:27:c7:52:72:95:59:d4:c9:a8:b5:41:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e79aaffe21772eb8261c3bae848d19fd8a73c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:25:7c:31:87:46:9c:01:f9:3b:aa:58:0d: bd:32:2c:e6:03:00:7d:0f:49:c2:ec:de:13:98:2c: f0:53:18:cd:74:e4:2e:8a:d9:70:cd:35:5e:00:d9: b7:74:e8:53:67:60:75:f5:f9:8a:fd:56:b5:eb:6b: 61:4e:8e:5a:17:84:03:ee:b3:3e:96:0f:65:9c:dd: 54:75:4c:b8:2e:7e:b0:30:45:4f:d9:22:8e:02:04: 9a:d0:11:b0:6b:ba:73:3a:32:ab:cc:0f:95:7d:01: d4:00:59:f1:98:11:2e:e6:67:c5:9c:76:8b:92:c9: 34:ce:72:3d:2e:af:b2:d8:3e:c8:8c:9d:23:66:f9: 24:45:6a:6c:d2:da:a5:cb:db:fa:2c:1c:4c:80:3b: 59:ed:d6:51:91:f4:bb:8c:df:16:52:98:fc:c8:7c: 0c:68:a3:41:f8:cb:69:bd:aa:14:d4:9a:fe:d7:c2: 07:ce:a5:04:77:00:e0:bc:74:c3:12:b3:d1:db:75: 5b:66:75:36:3f:32:e6:ee:cb:c9:d9:87:cb:b1:d9: 33:d6:59:ed:47:81:c7:28:98:4e:62:1f:53:29:16: 15:94:d2:af:d6:02:25:7d:af:42:b6:b4:d1:d1:25: 8f:bd:84:81:1f:1b:28:4d:aa:48:f9:27:95:57:40: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:79:AA:FF:E2:17:72:EB:82:61:C3:BA:E8:48:D1:9F:D8:A7:3C:90 X509v3 Authority Key Identifier: keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/Dnmq_-IXcuuCYcO66EjRn9inPJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.162.0/24 185.161.124.0/22 185.211.52.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:99:4a:33:76:86:24:aa:e2:9c:84:db:c2:8d:33:95:b6:ad: 14:60:ce:ed:3e:f4:4a:7d:ff:e5:6c:4d:81:6a:0a:ea:ad:f3: 11:be:fd:dc:3b:65:81:56:32:56:c5:07:66:6e:4a:d2:ed:02: 95:5f:81:27:20:7c:79:9f:22:15:84:eb:2b:93:96:c4:64:56: 85:c5:50:93:08:3a:e1:6b:40:73:e5:63:37:1b:6d:9a:01:36: f3:88:eb:48:5f:65:23:fe:d5:21:29:d4:a3:5e:8c:82:28:ea: 8c:4e:95:8e:e5:fa:da:60:4e:40:e5:54:e4:af:aa:8c:33:87: 45:0f:ab:75:34:a3:0f:8c:ec:6b:69:92:4d:cb:f4:9c:b5:ba: b4:b8:a2:12:25:e8:4b:f0:39:47:da:5e:4a:7f:b0:54:28:40: 65:78:5a:91:95:16:32:15:c7:65:db:7c:3f:92:5b:20:5e:42: 2e:05:e7:ec:52:a2:dc:db:5a:e6:c5:c1:ca:86:e8:ad:46:92: 60:f4:54:08:4e:5f:fe:69:41:d6:41:ea:80:81:ea:1a:87:ee: dd:bd:60:48:ed:31:3d:2f:7d:c4:aa:b4:23:69:aa:21:30:80: b9:03:85:64:61:8c:57:49:ec:a4:a8:f9:8c:fd:61:33:7f:4c: 2b:21:65:1e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NNi3J8dScpVZ1MmotUF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Mjc1NzNjNjg5MjlhYjJhNDU5MGU5MmE1MWFiYzQwZWE5 ZTU4MTcwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTc5YWFmZmUyMTc3MmViODI2MWMzYmFlODQ4ZDE5ZmQ4YTczYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUIlfDGHRpwB+TuqWA29MizmAwB9 D0nC7N4TmCzwUxjNdOQuitlwzTVeANm3dOhTZ2B19fmK/Va162thTo5aF4QD7rM+ lg9lnN1UdUy4Ln6wMEVP2SKOAgSa0BGwa7pzOjKrzA+VfQHUAFnxmBEu5mfFnHaL ksk0znI9Lq+y2D7IjJ0jZvkkRWps0tqly9v6LBxMgDtZ7dZRkfS7jN8WUpj8yHwM aKNB+MtpvaoU1Jr+18IHzqUEdwDgvHTDErPR23VbZnU2PzLm7svJ2YfLsdkz1lnt R4HHKJhOYh9TKRYVlNKv1gIlfa9CtrTR0SWPvYSBHxsoTapI+SeVV0BNWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA55qv/iF3LrgmHDuuhI0Z/YpzyQMB8GA1UdIwQY MBaAFBYnVzxokpqypFkOkqUavEDqnlgXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2Ut ZTZmOWRiNzQxMzlkLzEvRG5tcV8tSVhjdXVDWWNPNjZFalJuOWluUEpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2UtZTZmOWRiNzQxMzlk LzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuTyiAwQC uaF8AwQCudM0MA0GCSqGSIb3DQEBCwUAA4IBAQCbmUozdoYkquKchNvCjTOVtq0U YM7tPvRKff/lbE2BagrqrfMRvv3cO2WBVjJWxQdmbkrS7QKVX4EnIHx5nyIVhOsr k5bEZFaFxVCTCDrha0Bz5WM3G22aATbziOtIX2Uj/tUhKdSjXoyCKOqMTpWO5fra YE5A5VTkr6qMM4dFD6t1NKMPjOxraZJNy/Sctbq0uKISJehL8DlH2l5Kf7BUKEBl eFqRlRYyFcdl23w/klsgXkIuBefsUqLc21rmxcHKhuitRpJg9FQITl/+aUHWQeqA geoah+7dvWBI7TE9L33EqrQjaaohMIC5A4VkYYxXSeykqPmM/WEzf0wrIWUe -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:08 2026 by rpki-client