This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DajSSy3ROjxgKkh4qzC0gLm_A8Y.roa File: DajSSy3ROjxgKkh4qzC0gLm_A8Y.roa (raw, json) Hash identifier: RHHssm4Kgna/eCJAfjcbGT8TBR4tZ0HgisG6QZsmPkM= Subject key identifier: 0D:A8:D2:4B:2D:D1:3A:3C:60:2A:48:78:AB:30:B4:80:B9:BF:03:C6 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37C7DDBE2420639BEAB8AC7B0C9A80 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DajSSy3ROjxgKkh4qzC0gLm_A8Y.roa Signing time: Fri 02 Jan 2026 10:19:03 +0000 ROA not before: Fri 02 Jan 2026 10:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209260 IP address blocks: 158.173.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c7:dd:be:24:20:63:9b:ea:b8:ac:7b:0c:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0da8d24b2dd13a3c602a4878ab30b480b9bf03c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:43:92:06:17:aa:a0:de:b4:fa:4d:ee:8c: b3:53:8f:71:dc:0a:ee:6d:40:0a:5a:9c:1a:46:15: df:01:f4:5f:00:61:55:6e:e1:e3:74:62:06:fd:9c: e1:8a:e4:53:d9:ad:78:c7:e0:c9:38:7e:79:0f:1a: e5:97:99:90:b3:34:29:b8:73:e5:8e:05:b8:2d:59: e3:99:20:74:5b:25:f4:96:fa:87:cc:ac:27:e3:8a: 53:2a:49:78:91:04:1a:ef:ea:e8:70:88:f6:09:42: 6e:69:16:c5:c8:46:0d:c4:07:c9:71:d6:7e:9a:15: 1b:56:35:00:0f:41:22:49:70:ad:53:fc:87:17:dd: 54:75:ed:54:40:44:73:62:dd:ac:96:33:be:e9:e2: c8:1e:55:03:b9:5f:06:c1:56:c6:e9:00:14:b7:f2: 37:2f:11:75:ab:23:6d:2e:04:38:91:34:ce:32:8e: a7:e2:2d:7a:70:05:c6:9f:6c:09:42:78:29:0b:02: 92:27:34:42:6f:68:24:48:6b:71:bb:51:7b:93:5d: 26:52:7f:0b:5a:f0:bb:7b:0b:d0:39:96:61:e8:bd: cf:0f:b1:22:94:87:62:56:95:4e:ed:43:5d:e6:0d: 5d:78:c5:03:23:8e:7c:01:de:5d:26:90:72:cb:9c: 20:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A8:D2:4B:2D:D1:3A:3C:60:2A:48:78:AB:30:B4:80:B9:BF:03:C6 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DajSSy3ROjxgKkh4qzC0gLm_A8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.203.0/24 Signature Algorithm: sha256WithRSAEncryption 97:1f:10:51:b8:57:c6:d8:a5:ba:e5:6c:ca:d4:30:49:61:b8: 9c:31:00:d8:0f:da:9a:06:8c:5c:05:59:d9:50:11:1a:8f:bf: e3:01:0b:eb:29:75:78:0a:6b:f0:0c:71:2b:d6:40:1d:02:a3: a6:cb:e4:72:3f:17:44:66:8a:c4:c2:f8:d2:21:d5:e3:08:dc: d1:62:8b:f3:bc:95:a5:57:b3:99:e4:bc:81:15:86:40:4f:6f: a4:da:90:7c:4e:07:3c:62:79:91:ad:3e:76:86:f0:89:65:72: 87:c3:23:5a:31:c9:20:08:35:0f:d9:d9:10:a5:42:5c:d0:3c: 6d:9c:cb:e9:d0:d9:b0:a8:1b:f0:de:41:11:40:4e:e9:6a:a2: 68:18:66:51:59:49:d1:81:a5:02:a9:d4:5b:7a:14:75:9d:a8: 70:ab:90:bd:18:5d:f4:51:90:41:1f:80:b1:3d:9d:80:b3:48: 25:16:b1:fa:25:ea:de:51:d6:1d:10:92:88:40:16:14:46:b7: d0:be:ee:e6:95:cd:07:40:7f:2a:48:e8:7c:0a:a0:60:93:80: ab:69:0f:cd:bc:d0:f7:8c:e1:bc:2a:a8:a1:2c:44:c1:ca:42: 12:32:90:07:a7:a8:73:26:56:27:ea:b5:86:ff:9a:35:3f:55: 86:ff:39:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8fdviQgY5vquKx7DJqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGE4ZDI0YjJkZDEzYTNjNjAyYTQ4NzhhYjMwYjQ4MGI5YmYwM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM1DkgYXqqDetPpN7oyzU49x3Aru bUAKWpwaRhXfAfRfAGFVbuHjdGIG/ZzhiuRT2a14x+DJOH55Dxrll5mQszQpuHPl jgW4LVnjmSB0WyX0lvqHzKwn44pTKkl4kQQa7+rocIj2CUJuaRbFyEYNxAfJcdZ+ mhUbVjUAD0EiSXCtU/yHF91Ude1UQERzYt2sljO+6eLIHlUDuV8GwVbG6QAUt/I3 LxF1qyNtLgQ4kTTOMo6n4i16cAXGn2wJQngpCwKSJzRCb2gkSGtxu1F7k10mUn8L WvC7ewvQOZZh6L3PD7EilIdiVpVO7UNd5g1deMUDI458Ad5dJpByy5wgpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2o0kst0To8YCpIeKswtIC5vwPGMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvRGFqU1N5M1JPanhnS2toNHF6QzBnTG1fQThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq3LMA0G CSqGSIb3DQEBCwUAA4IBAQCXHxBRuFfG2KW65WzK1DBJYbicMQDYD9qaBoxcBVnZ UBEaj7/jAQvrKXV4CmvwDHEr1kAdAqOmy+RyPxdEZorEwvjSIdXjCNzRYovzvJWl V7OZ5LyBFYZAT2+k2pB8Tgc8YnmRrT52hvCJZXKHwyNaMckgCDUP2dkQpUJc0Dxt nMvp0NmwqBvw3kERQE7paqJoGGZRWUnRgaUCqdRbehR1nahwq5C9GF30UZBBH4Cx PZ2As0glFrH6JereUdYdEJKIQBYURrfQvu7mlc0HQH8qSOh8CqBgk4CraQ/NvND3 jOG8KqihLETBykISMpAHp6hzJlYn6rWG/5o1P1WG/zkk -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:23 2026 by rpki-client