This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dtn-uqii-cHX1yuVYge3yu7idc8.roa File: dtn-uqii-cHX1yuVYge3yu7idc8.roa (raw, json) Hash identifier: z7UtmLBxrw3CXcEPvDm3hOvcLWcuoFEBw0HYOYaXqvQ= Subject key identifier: 76:D9:FE:BA:A8:A2:F9:C1:D7:D7:2B:95:62:07:B7:CA:EE:E2:75:CF Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE4AAA5DB1401A9A5D84C022B5506E Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dtn-uqii-cHX1yuVYge3yu7idc8.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 178.238.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4a:aa:5d:b1:40:1a:9a:5d:84:c0:22:b5:50:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76d9febaa8a2f9c1d7d72b956207b7caeee275cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:ee:6d:f9:c8:45:c5:cd:4e:1e:9d:86:0f: f3:94:f2:42:9d:0a:02:0d:4e:c2:10:c2:ef:45:d8: 23:d6:b6:41:e4:dd:64:01:a6:7f:78:7c:19:11:ec: f2:d9:6f:eb:78:25:bd:20:91:bb:f7:f5:1b:39:ac: 42:f6:94:fe:5c:b7:94:f7:3d:6e:cc:62:44:28:10: e6:45:af:25:32:60:ff:a4:0e:15:93:27:2d:e6:3a: 05:d2:8b:9c:8c:13:c3:38:5c:f5:9b:e0:3d:ea:c2: 9e:49:44:ea:ae:7d:56:fe:e8:92:9b:9b:fb:1f:91: e1:cd:bd:ec:b2:c2:ef:71:54:66:bf:56:6f:ef:f0: ff:32:29:74:8d:7d:b9:75:ee:78:ed:66:fd:44:11: b5:2e:0b:82:31:d5:68:eb:43:9b:71:a8:3c:41:71: 3f:b6:b1:8e:67:bc:ce:80:8d:7f:1c:86:a6:ff:77: ab:8a:dd:54:63:b6:73:69:fe:4b:b8:b4:fd:c2:d7: 80:e1:45:e9:93:85:bc:33:07:f4:3a:ae:26:f3:bd: 02:7b:28:8d:29:9c:bc:44:55:79:cc:ac:26:e7:05: 25:c1:de:c1:4c:48:ff:16:5c:1d:df:c7:c6:bf:a5: 5e:44:1a:ca:9f:c0:50:22:10:14:a5:1e:13:75:cd: 56:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:FE:BA:A8:A2:F9:C1:D7:D7:2B:95:62:07:B7:CA:EE:E2:75:CF X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dtn-uqii-cHX1yuVYge3yu7idc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.238.221.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:67:1f:28:f1:42:20:c1:44:4e:fe:4a:ed:12:af:8a:59:cd: d0:b3:c2:3e:a5:ae:b1:27:5e:5e:aa:36:fc:ba:49:4c:85:da: 11:15:61:7d:40:b8:4d:41:42:23:35:67:39:61:51:b7:81:47: c0:57:3e:01:7c:21:01:58:80:8a:36:b4:8e:f0:c9:90:be:03: 56:7e:1e:73:86:40:0b:2c:0a:11:90:df:23:18:f7:95:e9:7f: 3a:6e:c9:3e:20:cf:a6:43:d1:ac:3f:17:37:5e:9d:84:99:3c: 27:e3:73:23:86:94:c3:96:ec:e2:d4:45:f5:47:2f:fc:17:e2: d7:fc:2d:d5:71:e2:f6:91:a9:41:25:57:cd:88:42:a4:ac:02: c4:42:55:bd:f6:75:7f:d9:8a:48:6f:6b:fc:e9:5b:20:24:29: e3:2f:cf:1b:e9:60:02:ae:f4:ba:2d:63:cb:6c:74:d0:a0:85: 0b:12:e7:04:28:a4:8b:36:2f:c0:ae:81:38:b4:0c:29:b3:99: 11:72:bf:6c:3a:f1:38:91:66:75:4e:97:51:10:d7:7d:05:e1: 56:2f:41:9b:d3:f0:d4:7d:0b:74:1f:77:fe:7a:62:13:21:e9: b8:8f:fb:6a:e3:89:6e:4e:d2:83:73:c7:21:73:1d:e1:fb:dc: 62:e8:07:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kqqXbFAGppdhMAitVBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmQ5ZmViYWE4YTJmOWMxZDdkNzJiOTU2MjA3YjdjYWVlZTI3NWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSLubfnIRcXNTh6dhg/zlPJCnQoC DU7CEMLvRdgj1rZB5N1kAaZ/eHwZEezy2W/reCW9IJG79/UbOaxC9pT+XLeU9z1u zGJEKBDmRa8lMmD/pA4Vkyct5joF0oucjBPDOFz1m+A96sKeSUTqrn1W/uiSm5v7 H5Hhzb3sssLvcVRmv1Zv7/D/Mil0jX25de547Wb9RBG1LguCMdVo60Obcag8QXE/ trGOZ7zOgI1/HIam/3erit1UY7Zzaf5LuLT9wteA4UXpk4W8Mwf0Oq4m870CeyiN KZy8RFV5zKwm5wUlwd7BTEj/Flwd38fGv6VeRBrKn8BQIhAUpR4Tdc1WDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbZ/rqoovnB19crlWIHt8ru4nXPMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvZHRuLXVxaWktY0hYMXl1VllnZTN5dTdpZGM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu7dMA0G CSqGSIb3DQEBCwUAA4IBAQBMZx8o8UIgwURO/krtEq+KWc3Qs8I+pa6xJ15eqjb8 uklMhdoRFWF9QLhNQUIjNWc5YVG3gUfAVz4BfCEBWICKNrSO8MmQvgNWfh5zhkAL LAoRkN8jGPeV6X86bsk+IM+mQ9GsPxc3Xp2EmTwn43MjhpTDluzi1EX1Ry/8F+LX /C3VceL2kalBJVfNiEKkrALEQlW99nV/2YpIb2v86VsgJCnjL88b6WACrvS6LWPL bHTQoIULEucEKKSLNi/AroE4tAwps5kRcr9sOvE4kWZ1TpdRENd9BeFWL0Gb0/DU fQt0H3f+emITIem4j/tq44luTtKDc8chcx3h+9xi6Acy -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:13 2026 by rpki-client