This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa File: DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa (raw, json) Hash identifier: 31Sl0HBZjZWI7Tb9GRR7XcM/c70/RPdQDShrKX9L2rs= Subject key identifier: 0E:1A:4E:50:BF:D3:6B:51:43:A4:7F:37:C7:97:D8:65:BD:F0:D2:2C Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf Certificate serial: 019B7D5C9134EE067BEE4C0B019BA73083A6 Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa Signing time: Fri 02 Jan 2026 06:19:37 +0000 ROA not before: Fri 02 Jan 2026 06:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47896 IP address blocks: 185.143.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:91:34:ee:06:7b:ee:4c:0b:01:9b:a7:30:83:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e1a4e50bfd36b5143a47f37c797d865bdf0d22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:56:0c:d8:8d:7a:a5:a4:5b:17:de:5a:e7: cd:72:16:9c:45:8c:6b:66:af:81:68:1d:3f:da:24: bf:48:7e:ae:4f:ea:f4:76:c3:85:dd:a9:9e:38:5a: fa:7f:6c:fc:1a:a0:f9:a3:0c:43:05:d4:a7:3f:af: 7e:51:d9:cb:24:ea:72:44:b4:36:85:f7:fb:b6:53: dc:47:9e:98:24:4f:d6:6a:e0:36:f4:c4:a7:53:a1: d9:bf:1e:37:ab:7e:3c:ba:c1:d1:6e:bd:6d:40:d1: 02:b9:72:54:fb:00:7f:21:8b:4e:2f:d6:08:bd:b6: 89:64:b4:34:33:72:fc:67:05:f8:6d:88:d2:59:5d: 25:f6:8d:f1:5e:6e:1f:5a:f2:f1:62:64:8b:0a:83: 7d:c2:04:e5:ad:0b:c9:c0:e5:07:51:92:04:c5:46: 76:68:46:36:12:01:1a:86:66:e2:f6:5a:c7:dd:67: 69:68:64:65:9f:55:6c:20:b9:d4:1d:ce:a3:d1:fa: 9b:dd:d5:c3:90:b7:e9:80:71:5f:8c:e2:09:ab:83: c5:ce:0e:19:65:8d:31:fe:26:f3:1c:f1:68:a9:93: 2d:c8:69:9c:a0:26:9e:51:9e:25:6f:a1:6e:81:4c: d5:92:ab:18:af:5d:45:11:15:9f:d6:ae:0a:f4:42: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1A:4E:50:BF:D3:6B:51:43:A4:7F:37:C7:97:D8:65:BD:F0:D2:2C X509v3 Authority Key Identifier: keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/DhpOUL_Ta1FDpH83x5fYZb3w0iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.116.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:c2:f5:35:df:c7:9f:f9:4c:91:fa:a5:5e:fc:03:66:4f:d7: eb:3b:51:d6:f1:3e:ab:f9:18:27:16:5a:59:b8:f2:55:0a:82: 60:1c:6b:44:42:be:86:77:ec:f1:3f:3d:fd:e9:e3:82:58:60: c0:cd:f0:4b:b8:05:a2:86:56:de:4e:aa:79:7c:dd:10:26:33: 2e:15:8f:c9:ad:a0:a8:02:9e:f0:c6:ec:ae:23:84:7f:e1:01: 76:ab:df:b6:78:1f:9a:1e:f8:6f:7f:ea:d6:87:4a:b5:ba:07: 8d:a8:f0:3d:4d:f9:03:00:d2:3b:41:74:35:63:f1:9c:ff:1b: cf:6f:f6:83:a1:da:a4:e0:a6:28:9c:67:a8:09:0b:22:3f:ef: 8a:0c:93:91:fc:4e:db:ff:53:87:f3:3d:09:7f:21:9c:0d:35: 91:6a:ef:a5:13:9c:73:6d:94:2d:13:92:22:62:78:93:e3:2a: 89:f0:cb:a0:88:1d:4d:67:25:c5:5d:fc:fc:0f:d9:44:2b:f7: 19:45:58:e8:cc:d3:8f:11:05:bb:b6:29:9c:64:e3:9b:0f:26: ba:50:b2:01:86:d1:60:9f:66:dd:ff:8f:3d:20:d9:2c:36:bb: 75:b1:36:9b:fd:d5:ec:8c:2b:ae:6c:d5:b9:68:87:ae:86:ff: 19:ee:58:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJE07gZ77kwLAZunMIOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjAxM2YzNTQ4YmUzZGNiM2RjYTE4ZDRmYzkzNzg5ZjQ0 ZjAzYmYwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTFhNGU1MGJmZDM2YjUxNDNhNDdmMzdjNzk3ZDg2NWJkZjBkMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycRWDNiNeqWkWxfeWufNchacRYxr Zq+BaB0/2iS/SH6uT+r0dsOF3ameOFr6f2z8GqD5owxDBdSnP69+UdnLJOpyRLQ2 hff7tlPcR56YJE/WauA29MSnU6HZvx43q348usHRbr1tQNECuXJU+wB/IYtOL9YI vbaJZLQ0M3L8ZwX4bYjSWV0l9o3xXm4fWvLxYmSLCoN9wgTlrQvJwOUHUZIExUZ2 aEY2EgEahmbi9lrH3WdpaGRln1VsILnUHc6j0fqb3dXDkLfpgHFfjOIJq4PFzg4Z ZY0x/ibzHPFoqZMtyGmcoCaeUZ4lb6FugUzVkqsYr11FERWf1q4K9ELXaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4aTlC/02tRQ6R/N8eX2GW98NIsMB8GA1UdIwQY MBaAFNAgE/NUi+Pcs9yhjU/JN4n0TwO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGIt MmE2ODVmNzhiMjlkLzEvRGhwT1VMX1RhMUZEcEg4M3g1ZllaYjN3MGl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGItMmE2ODVmNzhiMjlk LzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY90MA0G CSqGSIb3DQEBCwUAA4IBAQAKwvU138ef+UyR+qVe/ANmT9frO1HW8T6r+RgnFlpZ uPJVCoJgHGtEQr6Gd+zxPz396eOCWGDAzfBLuAWihlbeTqp5fN0QJjMuFY/JraCo Ap7wxuyuI4R/4QF2q9+2eB+aHvhvf+rWh0q1ugeNqPA9TfkDANI7QXQ1Y/Gc/xvP b/aDodqk4KYonGeoCQsiP++KDJOR/E7b/1OH8z0JfyGcDTWRau+lE5xzbZQtE5Ii YniT4yqJ8MugiB1NZyXFXfz8D9lEK/cZRVjozNOPEQW7timcZOObDya6ULIBhtFg n2bd/489INksNrt1sTab/dXsjCuubNW5aIeuhv8Z7lji -----END CERTIFICATE-----Generated at Mon Jan 12 12:08:57 2026 by rpki-client