This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/DtNjMaX-knG3kL803vSueqhEdMU.roa File: DtNjMaX-knG3kL803vSueqhEdMU.roa (raw, json) Hash identifier: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0= Subject key identifier: 0E:D3:63:31:A5:FE:92:71:B7:90:BF:34:DE:F4:AE:7A:A8:44:74:C5 Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Certificate serial: 019B7AC8B75DFFD687CA14268BE89007E282 Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/DtNjMaX-knG3kL803vSueqhEdMU.roa Signing time: Thu 01 Jan 2026 18:18:53 +0000 ROA not before: Thu 01 Jan 2026 18:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198218 IP address blocks: 82.205.160.0/21 maxlen: 21 82.205.168.0/21 maxlen: 21 82.205.176.0/21 maxlen: 21 82.205.184.0/24 maxlen: 24 164.40.160.0/21 maxlen: 21 2a03:d080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b7:5d:ff:d6:87:ca:14:26:8b:e8:90:07:e2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ed36331a5fe9271b790bf34def4ae7aa84474c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:09:85:b2:3e:81:6c:08:86:c1:11:2b:16: bf:0e:ab:83:5d:f7:50:51:03:05:02:35:35:2d:5f: e4:1d:be:12:58:db:d4:b4:f0:ca:45:c1:b8:04:e5: 31:5d:3b:92:f4:c6:76:39:3f:c5:b4:77:c0:5b:1f: f4:19:27:48:a6:74:ae:d3:be:e1:80:40:11:28:52: 3a:e3:c1:46:2a:e2:f4:d7:07:51:ef:04:5c:52:57: 91:8b:b0:7f:93:55:db:a6:d5:06:ff:cb:76:67:c1: 22:ef:e7:0b:a3:ba:51:ea:4a:ae:e4:5f:d1:45:24: 4c:6c:3f:55:b4:1b:22:71:b2:0a:cd:4e:7b:88:73: 22:3a:06:17:09:c4:0c:d1:ac:8c:08:6e:0c:f9:ca: 4b:e2:89:1f:72:16:c1:5a:c3:36:7b:c9:f1:01:03: 95:3f:ae:bb:44:c9:79:2c:58:c3:1e:38:19:6a:57: 6f:66:c5:09:94:13:37:d2:bc:fb:bf:d0:2f:9b:9e: 30:ff:f4:52:bd:e4:c8:72:ee:4d:6e:65:a9:cc:49: af:3b:f4:8b:b9:63:9b:34:0b:a8:2a:e0:11:f4:98: 6c:41:c3:14:98:fd:7b:80:7b:a7:aa:b7:17:59:5b: f5:bc:20:8f:fc:7b:cd:d3:c9:66:a6:df:34:03:df: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D3:63:31:A5:FE:92:71:B7:90:BF:34:DE:F4:AE:7A:A8:44:74:C5 X509v3 Authority Key Identifier: keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/DtNjMaX-knG3kL803vSueqhEdMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.205.160.0-82.205.184.255 164.40.160.0/21 IPv6: 2a03:d080::/32 Signature Algorithm: sha256WithRSAEncryption c6:9f:5e:8b:9b:46:f5:ee:95:b7:35:b0:d3:6b:a2:92:a9:0c: 83:bb:0a:0b:4b:61:49:eb:76:c1:aa:53:02:c2:5c:15:a7:fd: 93:ab:92:eb:f1:fb:84:2d:06:de:b8:fb:ac:02:97:4d:7f:54: e8:a9:f0:e0:df:f9:1d:68:88:4a:c9:30:0a:29:c0:c0:43:aa: 40:4a:f5:a2:50:73:bf:26:9c:cb:c5:4d:7b:c6:b0:8b:ff:d3: 77:d3:53:fe:c0:43:51:f4:da:cc:d0:1e:6c:52:21:2f:ce:50: f2:8c:1a:ac:ec:be:e9:70:29:b1:44:35:a7:12:bc:e7:10:65: b2:50:6a:d9:c1:9e:d7:d2:09:d4:44:8c:31:74:46:9b:0a:11: f1:a4:ce:e3:84:98:81:15:52:1d:b7:a8:a1:42:9b:2c:99:97: 88:43:7a:3b:28:cb:1b:7f:99:b0:ed:b7:fa:42:45:df:b6:64: 17:59:75:1c:4f:59:46:36:0d:47:82:dc:53:46:31:63:68:9d: 7d:9a:50:0f:18:cf:3a:2e:bc:d7:61:a6:ac:d0:5d:7a:53:64: ad:8b:9b:af:97:7d:22:ee:54:98:bf:f9:e1:f5:4c:84:01:e6: 63:0f:9c:4f:a1:65:43:1b:f9:f2:db:1c:d7:1f:1a:b0:31:66: 27:ac:65:92 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt6yLdd/9aHyhQmi+iQB+KCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5 YjA5MzYwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWQzNjMzMWE1ZmU5MjcxYjc5MGJmMzRkZWY0YWU3YWE4NDQ3NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4cJhbI+gWwIhsERKxa/DquDXfdQ UQMFAjU1LV/kHb4SWNvUtPDKRcG4BOUxXTuS9MZ2OT/FtHfAWx/0GSdIpnSu077h gEARKFI648FGKuL01wdR7wRcUleRi7B/k1XbptUG/8t2Z8Ei7+cLo7pR6kqu5F/R RSRMbD9VtBsicbIKzU57iHMiOgYXCcQM0ayMCG4M+cpL4okfchbBWsM2e8nxAQOV P667RMl5LFjDHjgZaldvZsUJlBM30rz7v9Avm54w//RSveTIcu5NbmWpzEmvO/SL uWObNAuoKuAR9JhsQcMUmP17gHunqrcXWVv1vCCP/HvN08lmpt80A9/AtwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFA7TYzGl/pJxt5C/NN70rnqoRHTFMB8GA1UdIwQY MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt OTk2MTg5ZjljZTE0LzEvRHROak1hWC1rbkcza0w4MDN2U3VlcWhFZE1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0 LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAVSzaAD BABSzbgDBAOkKKAwDQQCAAIwBwMFACoD0IAwDQYJKoZIhvcNAQELBQADggEBAMaf XoubRvXulbc1sNNropKpDIO7CgtLYUnrdsGqUwLCXBWn/ZOrkuvx+4QtBt64+6wC l01/VOip8ODf+R1oiErJMAopwMBDqkBK9aJQc78mnMvFTXvGsIv/03fTU/7AQ1H0 2szQHmxSIS/OUPKMGqzsvulwKbFENacSvOcQZbJQatnBntfSCdREjDF0RpsKEfGk zuOEmIEVUh23qKFCmyyZl4hDejsoyxt/mbDtt/pCRd+2ZBdZdRxPWUY2DUeC3FNG MWNonX2aUA8YzzouvNdhpqzQXXpTZK2Lm6+XfSLuVJi/+eH1TIQB5mMPnE+hZUMb +fLbHNcfGrAxZiesZZI= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:24 2026 by rpki-client