This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa File: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (raw, json) Hash identifier: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4= Subject key identifier: 0D:05:CE:D3:86:87:54:5D:D6:03:E5:28:D4:A4:AE:D9:4B:FF:E5:9F Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf Certificate serial: 019B7B35B9FED4E9EEDF3CE118F61C22E1EA Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41068 IP address blocks: 185.222.48.0/24 maxlen: 24 185.222.49.0/24 maxlen: 24 185.222.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b9:fe:d4:e9:ee:df:3c:e1:18:f6:1c:22:e1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d05ced38687545dd603e528d4a4aed94bffe59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:c5:61:0d:f3:c7:68:85:ea:6c:5f:3b:33: 30:11:8a:58:dd:57:cf:56:78:e1:08:3c:c5:fc:da: e1:1d:15:e1:35:0b:8a:fe:f4:58:26:0e:9d:34:c8: bc:e2:18:6c:1c:0b:ef:7c:24:81:71:88:a2:6b:d1: 46:23:4e:3c:57:63:7e:41:83:1b:96:ee:e2:4a:cb: 24:99:c8:d6:a6:4a:ed:e2:6e:3d:6b:93:b5:f9:d7: 4a:24:a0:66:db:14:d9:98:ff:c5:60:0f:2e:ac:ba: b7:db:3a:de:52:9d:c5:d3:cc:e4:c3:2e:98:0d:c2: 31:38:9f:b3:d2:2b:87:f7:c1:3b:71:82:bd:f2:ca: 68:0b:76:0e:b6:b3:b2:9a:38:75:c5:49:27:81:e1: cb:dc:f3:c7:69:7a:f1:84:84:7b:98:c3:4b:db:35: e1:9f:c0:72:06:1d:a9:af:d9:b3:5b:50:75:87:08: 2d:7d:f8:5d:f7:a9:26:10:63:e6:01:1d:72:d7:05: ce:95:c6:13:02:30:b0:a7:bf:e8:2b:52:93:b7:ac: d5:38:ff:ff:6f:cc:63:1d:0d:47:ac:70:8e:b0:a9: 87:85:15:b1:fb:1e:6b:db:65:4d:18:66:df:1a:15: c9:aa:52:7e:41:df:29:bb:3c:3d:30:94:e3:5e:69: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:05:CE:D3:86:87:54:5D:D6:03:E5:28:D4:A4:AE:D9:4B:FF:E5:9F X509v3 Authority Key Identifier: keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.48.0-185.222.50.255 Signature Algorithm: sha256WithRSAEncryption 1e:28:69:a2:fc:30:11:b6:dd:25:c8:56:b7:e6:31:3e:8c:a3: 92:19:d4:75:cf:78:27:42:87:0e:92:72:df:aa:7b:15:57:bc: 38:41:f3:71:ac:f8:ea:ff:d5:52:d7:c9:b0:e5:c5:5f:25:08: c7:6e:0f:44:57:71:6e:f4:26:c1:8f:0b:5b:95:d2:2b:f8:a0: f7:2b:72:72:c1:d7:32:ee:01:ad:9d:72:11:d8:af:2c:56:70: b6:07:1c:b6:cd:8b:f1:a0:ae:c9:b7:96:94:f2:1c:f9:dc:dc: 56:8a:0d:71:be:df:e3:ce:95:24:56:8f:d4:26:42:1a:a9:4d: 2e:06:5a:9f:7e:ab:f4:5f:41:d3:58:b6:5a:8c:5c:56:dc:bd: e4:2b:1f:e1:a8:e8:8b:b0:72:f4:fd:2d:55:37:ab:51:3a:e0: 2d:8a:01:f6:93:1d:32:fb:fa:69:f3:62:3c:c2:30:67:95:71: 7e:7f:b3:05:e9:f3:7d:b0:7d:a7:25:4b:70:59:8b:d1:3c:b9: e8:df:d9:58:75:69:69:d1:60:d1:fa:51:e6:9f:49:c7:f8:7d: ea:b4:2b:8c:31:99:9c:a3:3b:57:4a:5d:9a:23:83:13:f7:a1: ca:df:ca:3e:83:79:c0:d2:a0:27:93:ba:f1:ca:fb:50:b2:39: 5b:4a:19:70 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7Nbn+1Onu3zzhGPYcIuHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDE1MWU0NjRiMjk3OTEzNzZjMGM1N2JlYjQwYzU4NGVm NWExY2YwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDA1Y2VkMzg2ODc1NDVkZDYwM2U1MjhkNGE0YWVkOTRiZmZlNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxDFYQ3zx2iF6mxfOzMwEYpY3VfP VnjhCDzF/NrhHRXhNQuK/vRYJg6dNMi84hhsHAvvfCSBcYiia9FGI048V2N+QYMb lu7iSsskmcjWpkrt4m49a5O1+ddKJKBm2xTZmP/FYA8urLq32zreUp3F08zkwy6Y DcIxOJ+z0iuH98E7cYK98spoC3YOtrOymjh1xUkngeHL3PPHaXrxhIR7mMNL2zXh n8ByBh2pr9mzW1B1hwgtffhd96kmEGPmAR1y1wXOlcYTAjCwp7/oK1KTt6zVOP// b8xjHQ1HrHCOsKmHhRWx+x5r22VNGGbfGhXJqlJ+Qd8puzw9MJTjXmkqswIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFA0FztOGh1Rd1gPlKNSkrtlL/+WfMB8GA1UdIwQY MBaAFFABUeRkspeRN2wMV760DFhO9aHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80YTEyYzItOWJlZC00NWRkLTg2M2Mt MGI5ZmI5N2U1MjlkLzEvRFFYTzA0YUhWRjNXQS1VbzFLU3UyVXZfNVo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi80YTEyYzItOWJlZC00NWRkLTg2M2MtMGI5ZmI5N2U1Mjlk LzEvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAS53jAD BAC53jIwDQYJKoZIhvcNAQELBQADggEBAB4oaaL8MBG23SXIVrfmMT6Mo5IZ1HXP eCdChw6Sct+qexVXvDhB83Gs+Or/1VLXybDlxV8lCMduD0RXcW70JsGPC1uV0iv4 oPcrcnLB1zLuAa2dchHYryxWcLYHHLbNi/Ggrsm3lpTyHPnc3FaKDXG+3+POlSRW j9QmQhqpTS4GWp9+q/RfQdNYtlqMXFbcveQrH+Go6IuwcvT9LVU3q1E64C2KAfaT HTL7+mnzYjzCMGeVcX5/swXp832wfaclS3BZi9E8uejf2Vh1aWnRYNH6UeafScf4 feq0K4wxmZyjO1dKXZojgxP3ocrfyj6DecDSoCeTuvHK+1CyOVtKGXA= -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:31 2026 by rpki-client