This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/DTnex-UlwV0zKy6UASXDNP6H64M.roa File: DTnex-UlwV0zKy6UASXDNP6H64M.roa (raw, json) Hash identifier: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg= Subject key identifier: 0D:39:DE:C7:E5:25:C1:5D:33:2B:2E:94:01:25:C3:34:FE:87:EB:83 Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a Certificate serial: 019B7C808E374DD21536CA85419042891965 Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/DTnex-UlwV0zKy6UASXDNP6H64M.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61157 IP address blocks: 185.5.24.0/24 maxlen: 24 185.5.25.0/24 maxlen: 24 185.5.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8e:37:4d:d2:15:36:ca:85:41:90:42:89:19:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d39dec7e525c15d332b2e940125c334fe87eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:64:e2:79:31:7c:a2:d9:e6:bf:55:b4:68: 39:36:a8:a1:43:16:94:aa:c9:58:d9:4f:7d:30:a2: 63:aa:62:53:e1:f0:82:8a:d9:e0:a1:07:ad:99:db: c5:67:1a:1f:e0:f7:ab:42:b2:79:8a:38:bf:ea:8c: a2:f3:21:52:88:0a:66:44:8f:9c:20:97:67:93:82: e4:a9:59:92:d1:b5:0e:51:77:82:4d:3b:00:f5:49: 6e:b6:a9:1f:cc:d9:71:f3:11:11:dd:98:8f:6b:5e: 26:76:cf:8f:4b:d4:2b:bf:f4:2e:2d:24:fc:3d:3f: d4:32:08:44:93:24:d3:16:91:05:75:9a:38:d8:16: 66:37:3a:18:65:73:1e:70:f5:5e:1d:5e:76:fa:fa: 61:1b:9d:3f:24:e3:a6:1c:6b:62:ee:45:07:60:55: 8f:e0:43:8d:34:8c:44:aa:77:ae:01:c7:39:7b:4f: 3f:ac:54:82:a4:e7:d5:c6:69:37:b2:89:99:5b:74: e5:a4:85:90:e9:f4:41:60:1f:63:0c:37:b6:93:57: 08:bf:b5:9a:c6:ea:91:f3:01:4a:32:23:39:78:9b: b9:5f:5c:28:60:ea:0a:9e:cb:cf:98:d0:47:7f:e7: 49:9a:db:19:39:cd:9d:e3:7e:3d:2d:63:c4:f3:b3: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:39:DE:C7:E5:25:C1:5D:33:2B:2E:94:01:25:C3:34:FE:87:EB:83 X509v3 Authority Key Identifier: keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/DTnex-UlwV0zKy6UASXDNP6H64M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.24.0/23 185.5.27.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:80:d9:7b:f2:05:99:b2:43:d3:fe:01:4f:44:50:44:5d:2b: d0:e7:02:77:77:70:f0:e3:88:dd:21:52:63:38:51:f5:b5:ec: 1e:57:38:32:53:2d:f8:83:21:18:57:3f:90:a1:2b:d1:a6:e9: 13:c9:cf:89:1a:45:b3:1c:30:c2:a1:34:15:08:3e:fa:ea:2c: c8:f2:2c:fc:15:e8:99:60:bd:68:b0:fb:54:d9:11:b1:3f:c8: 0e:97:28:55:4f:ef:7a:6b:dc:48:58:1e:9e:4d:f7:58:d0:cb: 39:16:af:ff:70:fa:f8:c4:87:52:37:07:6d:06:a6:b0:0b:e8: eb:4a:67:0a:08:19:27:0d:b4:74:23:b2:b7:f9:90:cd:ac:36: 1b:30:fa:e1:cb:57:79:cd:ce:72:3f:08:42:67:e0:56:88:33: 82:da:8b:3f:5c:f6:f0:28:b2:1a:48:47:fa:14:b2:a7:fa:36: 67:c7:0c:91:28:1c:ae:9c:0c:a0:32:a2:7a:31:56:5a:f5:54: 6e:5e:4e:5a:09:a0:38:b2:76:37:a7:56:1a:3f:75:4a:6a:39: bd:49:75:43:54:31:25:65:67:b0:19:2d:86:c0:56:b2:41:9d: cc:85:f1:7d:5a:54:04:e3:36:90:3c:37:b9:99:13:86:41:1c: 21:3d:8f:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gI43TdIVNsqFQZBCiRllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNTIyMGU1M2U0ZjgxY2EyNThjY2ZlYTE4NzI4MDI4MGY1 ZjYyMWEwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDM5ZGVjN2U1MjVjMTVkMzMyYjJlOTQwMTI1YzMzNGZlODdlYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXdk4nkxfKLZ5r9VtGg5NqihQxaU qslY2U99MKJjqmJT4fCCitngoQetmdvFZxof4PerQrJ5iji/6oyi8yFSiApmRI+c IJdnk4LkqVmS0bUOUXeCTTsA9UlutqkfzNlx8xER3ZiPa14mds+PS9Qrv/QuLST8 PT/UMghEkyTTFpEFdZo42BZmNzoYZXMecPVeHV52+vphG50/JOOmHGti7kUHYFWP 4EONNIxEqneuAcc5e08/rFSCpOfVxmk3somZW3TlpIWQ6fRBYB9jDDe2k1cIv7Wa xuqR8wFKMiM5eJu5X1woYOoKnsvPmNBHf+dJmtsZOc2d4349LWPE87N1UQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA053sflJcFdMysulAElwzT+h+uDMB8GA1UdIwQY MBaAFMpSIOU+T4HKJYzP6hhygCgPX2IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODkt ZjIzYzVhNTMxODIzLzEvRFRuZXgtVWx3VjB6S3k2VUFTWEROUDZINjRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODktZjIzYzVhNTMxODIz LzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuQUYAwQA uQUbMA0GCSqGSIb3DQEBCwUAA4IBAQBagNl78gWZskPT/gFPRFBEXSvQ5wJ3d3Dw 44jdIVJjOFH1teweVzgyUy34gyEYVz+QoSvRpukTyc+JGkWzHDDCoTQVCD766izI 8iz8FeiZYL1osPtU2RGxP8gOlyhVT+96a9xIWB6eTfdY0Ms5Fq//cPr4xIdSNwdt BqawC+jrSmcKCBknDbR0I7K3+ZDNrDYbMPrhy1d5zc5yPwhCZ+BWiDOC2os/XPbw KLIaSEf6FLKn+jZnxwyRKByunAygMqJ6MVZa9VRuXk5aCaA4snY3p1YaP3VKajm9 SXVDVDElZWewGS2GwFayQZ3MhfF9WlQE4zaQPDe5mROGQRwhPY/r -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:10 2026 by rpki-client