This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/Dhrq3603FXAC1wqjo20wzUmr4F8.roa File: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (raw, json) Hash identifier: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA= Subject key identifier: 0E:1A:EA:DF:AD:37:15:70:02:D7:0A:A3:A3:6D:30:CD:49:AB:E0:5F Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B8C195F2556E8AC33B9C515CA3026 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/Dhrq3603FXAC1wqjo20wzUmr4F8.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5391 IP address blocks: 213.202.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8c:19:5f:25:56:e8:ac:33:b9:c5:15:ca:30:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e1aeadfad37157002d70aa3a36d30cd49abe05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:f3:34:91:48:d0:0a:e2:49:1c:49:e1:b0: ff:b8:2b:ec:aa:4e:eb:cf:ac:9e:cb:53:f7:7c:2f: ff:02:87:fd:4b:6e:e3:d1:d7:ad:03:43:c8:4b:04: 24:b4:09:80:34:d4:5a:10:f6:04:9b:d4:9a:0d:97: c6:b5:34:cf:10:3b:16:b5:8d:92:b8:f8:9f:6c:a3: ad:5a:99:ec:05:f3:c9:ca:28:b4:de:da:93:39:42: 57:97:37:8c:8e:56:f9:d4:c8:79:54:8c:4b:41:75: 89:9e:fa:08:25:63:05:69:c8:33:ce:1d:a4:85:9c: b1:78:43:18:b4:e0:03:ec:64:42:ba:d7:51:26:e3: 21:65:55:5d:b4:ea:0a:f9:ea:0b:ca:8f:cf:3b:d6: be:0a:fd:40:8a:be:ae:4e:39:81:51:fa:7d:3f:9f: 26:52:9c:1e:0b:3e:9f:96:f3:dc:c5:29:2d:f9:6d: 49:af:d1:97:a3:da:7b:64:e5:e0:50:f4:2e:55:e3: e0:dc:bf:1a:7e:08:17:e0:8f:9a:7f:98:df:37:bd: 86:c3:10:9e:33:d5:b7:80:21:7d:f0:aa:84:7d:fd: b0:90:95:f8:0e:e7:1d:d1:94:85:52:56:57:ed:4a: 2a:f9:df:14:ef:a4:8f:5f:88:51:4d:87:b6:c5:cf: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1A:EA:DF:AD:37:15:70:02:D7:0A:A3:A3:6D:30:CD:49:AB:E0:5F X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/Dhrq3603FXAC1wqjo20wzUmr4F8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.202.71.0/24 Signature Algorithm: sha256WithRSAEncryption a4:94:cd:ef:30:00:3d:41:b7:fb:65:21:35:8d:cd:2d:1a:ad: a5:ac:9d:ff:99:f6:29:b5:25:19:61:87:a4:48:cc:a4:1a:13: 75:59:d8:b5:1b:48:7c:94:3a:49:ef:b9:c2:9a:91:35:70:02: a9:4e:9d:4d:3f:11:1e:1a:19:2e:c2:2d:ea:cd:2a:7c:62:97: 5f:e2:97:0e:0f:d3:0a:66:2a:06:f5:1a:20:d1:f3:68:bf:80: 33:6c:2a:1d:83:73:24:33:0b:47:76:c8:2b:82:19:77:79:0a: ad:54:6d:57:f7:88:c8:9a:b1:58:3b:70:04:71:b9:ba:1e:4c: 15:b0:f7:34:6c:4a:37:17:13:e4:bb:20:6e:cc:eb:dd:ef:db: f6:d1:8f:78:d5:9d:4c:7c:42:e2:63:dc:9a:f7:6f:55:ef:a1: 04:62:37:7b:80:4a:78:ab:87:b4:49:5c:bb:1d:09:e6:d3:32: 09:55:f2:f5:c9:b7:f6:db:6b:ff:85:c7:ca:d2:ab:a8:e6:9f: fa:b9:26:39:a7:73:1f:0f:8c:90:25:10:49:65:26:c6:58:a4: ae:41:ab:f7:82:a3:13:b7:e0:76:59:5c:7d:c8:74:97:66:2d: 63:19:8b:05:d6:f5:e4:bb:6a:29:99:99:34:0c:c3:9a:5a:04: e4:3d:8c:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4wZXyVW6KwzucUVyjAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTFhZWFkZmFkMzcxNTcwMDJkNzBhYTNhMzZkMzBjZDQ5YWJlMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTjzNJFI0AriSRxJ4bD/uCvsqk7r z6yey1P3fC//Aof9S27j0detA0PISwQktAmANNRaEPYEm9SaDZfGtTTPEDsWtY2S uPifbKOtWpnsBfPJyii03tqTOUJXlzeMjlb51Mh5VIxLQXWJnvoIJWMFacgzzh2k hZyxeEMYtOAD7GRCutdRJuMhZVVdtOoK+eoLyo/PO9a+Cv1Air6uTjmBUfp9P58m UpweCz6flvPcxSkt+W1Jr9GXo9p7ZOXgUPQuVePg3L8afggX4I+af5jfN72GwxCe M9W3gCF98KqEff2wkJX4Ducd0ZSFUlZX7Uoq+d8U76SPX4hRTYe2xc9vOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4a6t+tNxVwAtcKo6NtMM1Jq+BfMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvRGhycTM2MDNGWEFDMXdxam8yMHd6VW1yNEY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cpHMA0G CSqGSIb3DQEBCwUAA4IBAQCklM3vMAA9Qbf7ZSE1jc0tGq2lrJ3/mfYptSUZYYek SMykGhN1Wdi1G0h8lDpJ77nCmpE1cAKpTp1NPxEeGhkuwi3qzSp8Ypdf4pcOD9MK ZioG9Rog0fNov4AzbCodg3MkMwtHdsgrghl3eQqtVG1X94jImrFYO3AEcbm6HkwV sPc0bEo3FxPkuyBuzOvd79v20Y941Z1MfELiY9ya929V76EEYjd7gEp4q4e0SVy7 HQnm0zIJVfL1ybf222v/hcfK0quo5p/6uSY5p3MfD4yQJRBJZSbGWKSuQav3gqMT t+B2WVx9yHSXZi1jGYsF1vXku2opmZk0DMOaWgTkPYy1 -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:40 2026 by rpki-client