This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/DT2BesH620-Z5EInWh_qBAeAhFI.roa File: DT2BesH620-Z5EInWh_qBAeAhFI.roa (raw, json) Hash identifier: yWOOPu9qJtmGuaZJp8ftjrUIR8JbYQlWhmppICknRhE= Subject key identifier: 0D:3D:81:7A:C1:FA:DB:4F:99:E4:42:27:5A:1F:EA:04:07:80:84:52 Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e Certificate serial: 019B78A29CC964CB9805E9B0C55B0DA60C1C Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/DT2BesH620-Z5EInWh_qBAeAhFI.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.247.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9c:c9:64:cb:98:05:e9:b0:c5:5b:0d:a6:0c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d3d817ac1fadb4f99e442275a1fea0407808452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:9f:51:6c:3e:c7:12:5a:50:bc:37:13:56: 27:f4:2f:e3:a5:b3:9e:ab:70:0e:09:b4:4d:3b:cd: 3a:09:7b:b7:f2:d6:f5:db:40:0a:78:22:47:e8:6c: 9f:e9:6e:ac:12:bc:00:1d:4c:0c:92:03:48:26:76: c4:1b:f3:bf:44:64:cd:4f:ea:03:80:b8:6e:3c:d2: 78:96:5e:06:2c:bf:9f:c4:59:b7:a7:d9:ea:95:bb: 98:08:bd:68:82:14:37:c2:40:b3:fc:27:13:21:ae: d5:24:e5:bf:01:93:43:83:91:3c:bb:0f:61:e6:c3: e2:86:44:3e:50:29:bf:40:39:7f:72:7f:6e:5e:c3: 67:31:84:24:49:8a:68:05:cf:1b:82:69:bb:9c:14: 52:89:40:5f:cd:99:7b:2b:72:55:ef:9c:5b:ff:1a: f5:59:13:e2:bf:ef:d7:17:21:01:04:03:57:c7:b7: c3:c3:82:f4:5b:94:09:93:06:a1:e3:0c:00:de:46: a5:64:5f:c2:d2:8d:03:19:97:3f:a6:68:69:9b:44: d5:74:e7:95:9b:a5:b0:22:bb:d2:e2:ff:07:78:41: 5a:54:5a:c1:a4:f8:fe:57:74:df:98:0b:08:ae:20: c9:b2:0a:65:63:90:af:c9:e6:af:61:d6:a6:32:d2: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3D:81:7A:C1:FA:DB:4F:99:E4:42:27:5A:1F:EA:04:07:80:84:52 X509v3 Authority Key Identifier: keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/DT2BesH620-Z5EInWh_qBAeAhFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.96.0/22 Signature Algorithm: sha256WithRSAEncryption cb:9f:a0:d6:c9:8f:37:36:99:85:e7:75:2a:82:c2:35:c2:f7: 11:b0:49:12:37:23:8e:c0:a9:48:40:23:85:03:63:22:df:62: 0a:18:8d:5c:8e:51:be:78:43:76:46:62:40:23:79:38:fd:f3: 9b:48:7b:4f:12:dc:5c:57:70:fa:78:28:6c:7c:a1:3c:e8:85: a4:2f:40:19:28:4d:92:87:92:08:b5:ae:06:23:14:1c:ac:b6: 38:c3:e9:12:5c:d5:21:78:f1:d0:08:04:88:16:bd:2e:71:6a: 91:22:c0:92:fe:1a:50:7b:14:b5:5a:db:b9:28:d5:3f:9f:e9: 39:64:2e:21:52:4a:50:bb:22:59:e4:17:2e:54:a2:9e:99:fd: ef:82:98:63:e1:f4:3d:dd:2d:b0:d0:60:3a:42:e3:ff:1a:46: 0a:aa:e8:cb:02:96:13:e7:c7:47:e4:a4:89:5e:19:df:fc:a1: ac:23:3d:df:4b:99:90:e9:72:af:f1:1d:cb:df:2e:22:33:69: 22:03:60:21:b0:bb:e4:a8:60:79:09:c8:50:8d:fa:0a:d8:6d: 69:eb:16:c7:22:9d:8f:57:ef:3e:5f:23:1d:1c:b9:bc:0b:96: 0d:fa:67:48:67:c0:2b:b2:b2:55:04:3f:1e:f4:86:1b:55:e1: 32:4f:00:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4opzJZMuYBemwxVsNpgwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlN2NlOGZiZmI4NDc5Y2ZiOTc2YjQ0M2NjM2M3Y2UyZjcw M2FiN2UwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDNkODE3YWMxZmFkYjRmOTllNDQyMjc1YTFmZWEwNDA3ODA4NDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFCfUWw+xxJaULw3E1Yn9C/jpbOe q3AOCbRNO806CXu38tb120AKeCJH6Gyf6W6sErwAHUwMkgNIJnbEG/O/RGTNT+oD gLhuPNJ4ll4GLL+fxFm3p9nqlbuYCL1oghQ3wkCz/CcTIa7VJOW/AZNDg5E8uw9h 5sPihkQ+UCm/QDl/cn9uXsNnMYQkSYpoBc8bgmm7nBRSiUBfzZl7K3JV75xb/xr1 WRPiv+/XFyEBBANXx7fDw4L0W5QJkwah4wwA3kalZF/C0o0DGZc/pmhpm0TVdOeV m6WwIrvS4v8HeEFaVFrBpPj+V3TfmAsIriDJsgplY5CvyeavYdamMtITFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA09gXrB+ttPmeRCJ1of6gQHgIRSMB8GA1UdIwQY MBaAFP586Pv7hHnPuXa0Q8w8fOL3A6t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85Mjc2MzgtZmQ0Ny00ZTU2LWJiOWUt ZDc5MjBhZTQ0OTIwLzEvRFQyQmVzSDYyMC1aNUVJbldoX3FCQWVBaEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi85Mjc2MzgtZmQ0Ny00ZTU2LWJiOWUtZDc5MjBhZTQ0OTIw LzEvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwfdgMA0G CSqGSIb3DQEBCwUAA4IBAQDLn6DWyY83NpmF53UqgsI1wvcRsEkSNyOOwKlIQCOF A2Mi32IKGI1cjlG+eEN2RmJAI3k4/fObSHtPEtxcV3D6eChsfKE86IWkL0AZKE2S h5IIta4GIxQcrLY4w+kSXNUhePHQCASIFr0ucWqRIsCS/hpQexS1Wtu5KNU/n+k5 ZC4hUkpQuyJZ5BcuVKKemf3vgphj4fQ93S2w0GA6QuP/GkYKqujLApYT58dH5KSJ Xhnf/KGsIz3fS5mQ6XKv8R3L3y4iM2kiA2AhsLvkqGB5CchQjfoK2G1p6xbHIp2P V+8+XyMdHLm8C5YN+mdIZ8ArsrJVBD8e9IYbVeEyTwDv -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:31 2026 by rpki-client