This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DUTgV1bA9_o5dKe8lemDWjvMEEE.roa File: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (raw, json) Hash identifier: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o= Subject key identifier: 0D:44:E0:57:56:C0:F7:FA:39:74:A7:BC:95:E9:83:5A:3B:CC:10:41 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC82AB2F5329428200E62EDE1D15F17 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DUTgV1bA9_o5dKe8lemDWjvMEEE.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50256 IP address blocks: 213.252.240.0/24 maxlen: 24 213.252.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2a:b2:f5:32:94:28:20:0e:62:ed:e1:d1:5f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d44e05756c0f7fa3974a7bc95e9835a3bcc1041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:92:06:84:35:99:38:1d:24:69:3a:99:13:f7: d2:5e:a8:c0:30:82:96:a7:2a:84:06:72:03:be:d5: 74:d3:16:c7:68:d2:71:9d:c2:bf:75:7b:ed:00:79: 57:62:32:82:f3:72:90:63:d8:b9:a5:20:9a:42:24: 53:d4:e7:ad:f8:44:1d:30:3d:a3:1b:64:70:be:f9: a6:23:15:ad:b7:25:c2:e7:57:0a:ba:3e:62:b4:13: 95:0a:b5:9e:dc:88:c4:e1:9e:2d:71:20:04:4e:67: a4:b3:d0:c9:36:e4:10:cd:81:9b:bb:46:08:49:1c: 2b:fb:35:67:cb:ca:a4:3e:45:e4:19:a1:3a:16:d4: af:05:e6:30:d3:0c:ad:59:fd:4f:30:58:0c:88:72: 1f:01:e8:b6:7d:2a:40:41:52:f5:3d:4d:6d:fd:f9: a6:08:e4:53:80:f5:2e:2f:33:d5:da:8c:56:3f:01: bf:29:b8:94:fc:7b:f8:3e:2a:06:d0:20:68:ab:70: 5d:04:b1:11:37:2a:cd:39:f9:5c:73:96:60:41:2a: 6e:18:3b:32:b0:f2:ed:4a:37:e8:35:d7:52:b8:d6: ff:82:f7:08:25:f3:f8:19:79:23:5f:19:eb:d2:f3: 49:3a:a5:40:60:d9:17:5a:61:ec:c1:81:49:8e:29: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:44:E0:57:56:C0:F7:FA:39:74:A7:BC:95:E9:83:5A:3B:CC:10:41 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DUTgV1bA9_o5dKe8lemDWjvMEEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.252.240.0/23 Signature Algorithm: sha256WithRSAEncryption 91:cc:49:40:0f:4b:b2:f2:db:3e:58:72:6f:8c:dd:98:60:1a: e9:56:8d:db:57:c0:e3:01:b2:d7:68:17:b0:cb:a3:02:30:27: ac:67:e4:53:f3:bf:f9:95:2c:2c:32:03:cb:e8:01:bf:22:0d: a1:52:2c:f7:c5:3e:51:11:17:41:1d:32:ce:79:78:fe:f4:b6: ef:1b:e6:dc:f4:fd:3e:bc:a4:09:58:04:4b:a5:f8:dc:a3:9e: 9a:92:c8:8a:15:9e:5b:22:7f:82:af:12:80:d5:2b:52:a6:59: ea:33:26:85:87:0c:ef:a4:5d:92:4f:62:12:87:bf:b3:0f:90: 12:28:e5:42:0a:14:29:32:f9:e3:78:5e:6a:a3:f1:d6:6b:10: 2f:d0:76:ec:6d:96:e4:7b:bd:32:ba:01:89:df:fd:83:4d:cf: fe:d7:c8:b8:82:94:37:d9:07:02:ad:d8:ae:f8:c3:dd:8d:54: d1:80:b2:8d:21:0b:8e:80:59:b5:b4:cd:87:e5:4e:f6:d7:b7: 36:34:8e:4d:60:21:cb:87:fd:0c:27:31:46:69:e3:33:44:fe: 34:91:9d:22:d7:a2:b9:d5:c2:66:ef:27:62:f9:5d:73:57:d5: 94:22:fb:1c:4d:ba:ab:c0:8b:7e:9a:fb:71:02:91:d2:f2:a4: 4d:95:ef:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yCqy9TKUKCAOYu3h0V8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDQ0ZTA1NzU2YzBmN2ZhMzk3NGE3YmM5NWU5ODM1YTNiY2MxMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZIGhDWZOB0kaTqZE/fSXqjAMIKW pyqEBnIDvtV00xbHaNJxncK/dXvtAHlXYjKC83KQY9i5pSCaQiRT1Oet+EQdMD2j G2RwvvmmIxWttyXC51cKuj5itBOVCrWe3IjE4Z4tcSAETmeks9DJNuQQzYGbu0YI SRwr+zVny8qkPkXkGaE6FtSvBeYw0wytWf1PMFgMiHIfAei2fSpAQVL1PU1t/fmm CORTgPUuLzPV2oxWPwG/KbiU/Hv4PioG0CBoq3BdBLERNyrNOflcc5ZgQSpuGDsy sPLtSjfoNddSuNb/gvcIJfP4GXkjXxnr0vNJOqVAYNkXWmHswYFJjilzewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1E4FdWwPf6OXSnvJXpg1o7zBBBMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvRFVUZ1YxYkE5X281ZEtlOGxlbURXanZNRUVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1fzwMA0G CSqGSIb3DQEBCwUAA4IBAQCRzElAD0uy8ts+WHJvjN2YYBrpVo3bV8DjAbLXaBew y6MCMCesZ+RT87/5lSwsMgPL6AG/Ig2hUiz3xT5RERdBHTLOeXj+9LbvG+bc9P0+ vKQJWARLpfjco56aksiKFZ5bIn+CrxKA1StSplnqMyaFhwzvpF2ST2ISh7+zD5AS KOVCChQpMvnjeF5qo/HWaxAv0HbsbZbke70yugGJ3/2DTc/+18i4gpQ32QcCrdiu +MPdjVTRgLKNIQuOgFm1tM2H5U7217c2NI5NYCHLh/0MJzFGaeMzRP40kZ0i16K5 1cJm7ydi+V1zV9WUIvscTbqrwIt+mvtxApHS8qRNle8P -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:08 2026 by rpki-client