This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/DghlG5g8kh3BeIC870myqIarxAw.roa File: DghlG5g8kh3BeIC870myqIarxAw.roa (raw, json) Hash identifier: jDUL776SurMFsX7IAknzdET8gzAlypgO2s6eGi65foY= Subject key identifier: 0E:08:65:1B:98:3C:92:1D:C1:78:80:BC:EF:49:B2:A8:86:AB:C4:0C Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Certificate serial: 019B7DC9FB71BCFE1DACA4CC3443D3D74CE2 Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/DghlG5g8kh3BeIC870myqIarxAw.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 185.197.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fb:71:bc:fe:1d:ac:a4:cc:34:43:d3:d7:4c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e08651b983c921dc17880bcef49b2a886abc40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e6:c3:66:30:a0:37:5d:67:6e:c9:5c:9f:fd: 45:d0:dc:ab:e4:56:3a:e9:0a:92:c3:c9:dd:50:ff: ff:d2:15:aa:47:17:ae:09:36:26:d9:b0:36:36:9f: 77:8e:15:9f:71:dd:02:b0:96:2e:41:7a:6e:92:ac: c7:f0:0d:a9:b3:51:07:9e:4d:fa:66:e9:9e:05:32: 1e:d1:1e:58:67:4c:b2:b6:bd:1a:72:2f:80:4e:69: ab:69:1b:e0:7d:6e:8d:5d:2a:c9:c5:62:d2:4c:90: fd:09:f8:f9:fc:bd:fe:5c:b1:60:67:ee:bb:dc:b6: 64:fc:b1:15:34:f9:7f:9a:1d:ca:24:d5:21:e3:ad: 31:0a:d1:3b:cd:77:b6:a1:43:39:27:8f:df:ea:cd: eb:49:76:12:1a:dc:80:44:b1:94:2b:7c:19:2f:eb: 38:50:f4:7b:2f:4c:99:e3:dd:9e:30:53:1e:83:42: 64:23:07:12:62:e5:b8:3a:f8:0b:38:c9:a4:f8:5f: fe:18:b8:b7:8e:15:05:6b:e1:63:06:8f:6b:5b:a0: 21:17:e5:1a:5d:cf:57:85:5d:d6:74:2b:96:bc:b1: 24:2b:0c:35:b5:19:3a:1f:64:73:67:cd:94:df:4e: 46:9b:24:e3:6b:a1:5d:26:f7:96:43:42:70:b9:12: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:08:65:1B:98:3C:92:1D:C1:78:80:BC:EF:49:B2:A8:86:AB:C4:0C X509v3 Authority Key Identifier: keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/DghlG5g8kh3BeIC870myqIarxAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.102.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b8:a4:3e:d6:75:6d:21:f3:06:f2:0c:60:be:fe:79:30:dd: 8b:ae:1b:df:23:0f:49:b5:8e:50:e3:56:84:0c:8d:b0:86:50: 9f:2e:96:17:9e:45:7c:16:e5:cd:f2:9a:61:ee:45:99:2f:52: 25:2f:de:9a:c8:2c:9e:ea:26:66:5d:90:dd:ec:94:3f:11:83: 7c:4e:51:66:c8:98:fd:f8:78:a3:9d:57:2e:e0:d1:86:8b:58: 48:97:63:b5:a8:2d:fb:d9:c0:ad:46:7a:1b:dd:7d:4f:63:61: 57:da:53:23:97:df:fd:81:df:ae:9a:2a:37:5b:e1:77:76:ac: 6c:b6:63:86:59:e4:d6:be:e1:53:dc:73:92:30:59:16:12:dc: 9f:1f:ad:dc:b7:1e:f7:1f:1d:83:29:8e:54:f8:ae:5d:c7:15: d1:72:85:be:e6:ce:95:94:95:f3:d8:a3:ee:d6:63:25:29:ea: 20:32:60:2e:8c:2c:72:36:f5:31:f9:99:51:0e:62:7a:9b:a7: 45:50:4d:99:3a:e7:ff:18:c1:fd:60:85:25:63:b7:e5:5e:96: 5e:7c:28:bd:d9:28:ce:1a:02:d5:43:87:74:ea:9c:06:e9:aa: d8:af:7c:36:4b:86:e4:0a:e9:d9:a7:a1:a8:e5:00:8e:e6:7f: 29:bc:b8:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yftxvP4drKTMNEPT10ziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTU1Y2E0NTg0NjhjNTc3NmI4ZDk5MzZkZmU5YjBiMjY2 ODczMWMwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTA4NjUxYjk4M2M5MjFkYzE3ODgwYmNlZjQ5YjJhODg2YWJjNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ebDZjCgN11nbslcn/1F0Nyr5FY6 6QqSw8ndUP//0hWqRxeuCTYm2bA2Np93jhWfcd0CsJYuQXpukqzH8A2ps1EHnk36 ZumeBTIe0R5YZ0yytr0aci+ATmmraRvgfW6NXSrJxWLSTJD9Cfj5/L3+XLFgZ+67 3LZk/LEVNPl/mh3KJNUh460xCtE7zXe2oUM5J4/f6s3rSXYSGtyARLGUK3wZL+s4 UPR7L0yZ492eMFMeg0JkIwcSYuW4OvgLOMmk+F/+GLi3jhUFa+FjBo9rW6AhF+Ua Xc9XhV3WdCuWvLEkKww1tRk6H2RzZ82U305GmyTja6FdJveWQ0JwuRJuHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4IZRuYPJIdwXiAvO9JsqiGq8QMMB8GA1UdIwQY MBaAFFqVXKRYRoxXdrjZk23+mwsmaHMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYt MTM4NThkYTg1ZjUzLzEvRGdobEc1ZzhraDNCZUlDODcwbXlxSWFyeEF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYtMTM4NThkYTg1ZjUz LzEvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucVmMA0G CSqGSIb3DQEBCwUAA4IBAQBZuKQ+1nVtIfMG8gxgvv55MN2LrhvfIw9JtY5Q41aE DI2whlCfLpYXnkV8FuXN8pph7kWZL1IlL96ayCye6iZmXZDd7JQ/EYN8TlFmyJj9 +HijnVcu4NGGi1hIl2O1qC372cCtRnob3X1PY2FX2lMjl9/9gd+umio3W+F3dqxs tmOGWeTWvuFT3HOSMFkWEtyfH63ctx73Hx2DKY5U+K5dxxXRcoW+5s6VlJXz2KPu 1mMlKeogMmAujCxyNvUx+ZlRDmJ6m6dFUE2ZOuf/GMH9YIUlY7flXpZefCi92SjO GgLVQ4d06pwG6arYr3w2S4bkCunZp6Go5QCO5n8pvLgM -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:32 2026 by rpki-client