This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/DJHov9oo258LJAX-skLATEZmb24.roa File: DJHov9oo258LJAX-skLATEZmb24.roa (raw, json) Hash identifier: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk= Subject key identifier: 0C:91:E8:BF:DA:28:DB:9F:0B:24:05:FE:B2:42:C0:4C:46:66:6F:6E Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B79108868ED4BAA9CDD7A689B796AE664 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/DJHov9oo258LJAX-skLATEZmb24.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214319 IP address blocks: 212.119.25.0/24 maxlen: 24 213.198.78.0/24 maxlen: 24 213.198.91.0/24 maxlen: 24 2001:728:1010:300::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:88:68:ed:4b:aa:9c:dd:7a:68:9b:79:6a:e6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c91e8bfda28db9f0b2405feb242c04c46666f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:0b:4f:53:ec:cc:f2:7b:a0:6e:b2:0e:7c: 89:3e:c1:9c:19:be:01:24:c4:ca:a0:34:34:7d:8c: d4:3e:d7:05:6b:4f:5e:82:a6:4f:a4:ed:7d:53:9b: 8d:32:e3:32:d0:c6:93:5d:3e:98:0a:e8:87:28:92: 01:53:ca:a3:d6:7d:28:7e:c0:64:d0:1b:54:5c:47: 11:ef:e1:cb:c2:09:d5:a8:d7:90:29:f0:7c:ea:31: c6:51:b7:eb:32:ec:0a:a4:33:7f:df:e7:df:03:d6: 61:8c:bf:c2:e5:e8:79:d7:aa:9b:27:42:f7:be:26: ac:3a:77:b6:78:1d:4e:5a:54:a2:01:88:22:d0:2a: ec:2a:73:97:69:0d:ce:cf:1f:db:ac:75:55:9b:36: 77:c0:77:97:31:37:28:f8:03:39:46:77:11:a4:dc: 52:91:ee:84:8b:a0:e5:18:88:29:50:6e:91:0e:85: c8:1f:9f:9d:47:6d:11:ef:d3:ef:d0:54:02:3b:aa: 7f:3a:7c:16:2e:ce:1f:28:a1:fb:7e:d7:57:e8:f6: 46:3e:4b:53:4f:46:53:43:6e:5c:b7:01:0d:83:d9: 34:cb:b2:35:89:0d:e8:da:2e:42:79:88:7f:2a:dd: 7f:73:42:7a:e4:a4:27:99:39:31:5f:12:cf:ae:bc: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:91:E8:BF:DA:28:DB:9F:0B:24:05:FE:B2:42:C0:4C:46:66:6F:6E X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/DJHov9oo258LJAX-skLATEZmb24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.119.25.0/24 213.198.78.0/24 213.198.91.0/24 IPv6: 2001:728:1010:300::/56 Signature Algorithm: sha256WithRSAEncryption 8a:58:3a:3e:7c:27:42:08:61:0e:8f:3f:ca:df:8d:ab:67:5a: 2f:89:16:45:37:a4:43:43:3d:82:ce:ac:40:b8:58:8b:d6:88: ee:f8:ce:e3:14:df:41:aa:75:65:de:d2:42:0e:06:08:3b:a0: b7:71:ff:4c:81:a9:e6:44:30:88:48:8e:6a:69:e6:c1:9d:39: cc:96:6e:c2:57:93:ce:9e:9e:ee:64:b2:2f:7d:c7:81:07:d1: 39:fc:dc:2c:e0:7a:7a:41:d1:dc:90:3a:4f:14:b0:a7:0c:f0: 8c:f2:23:17:38:b8:24:8c:e8:19:aa:9e:3a:5d:f4:be:32:da: be:20:cf:03:1b:39:d7:1f:35:07:5a:0a:5b:38:69:fd:e7:d8: 50:ff:f1:b5:40:c8:a9:e2:d3:0a:c6:c4:75:2d:66:db:e9:50: b6:5c:41:15:27:05:82:f7:6a:87:0e:d6:53:8d:69:78:97:c9: d0:dc:3b:f2:b9:db:b7:f6:b8:90:d1:29:37:cc:de:3c:0d:87: 76:58:36:53:94:00:3c:86:1c:ed:de:9f:65:62:4a:90:75:8c: 4e:7b:a6:e7:b3:ba:3d:60:58:49:9c:e1:50:9e:1e:a5:6e:cf: 0a:b7:9b:ff:72:8c:c8:8a:35:52:68:6d:b4:9c:41:ce:3e:ae: d6:a7:19:bc -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5EIho7UuqnN16aJt5auZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzkxZThiZmRhMjhkYjlmMGIyNDA1ZmViMjQyYzA0YzQ2NjY2ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pMLT1PszPJ7oG6yDnyJPsGcGb4B JMTKoDQ0fYzUPtcFa09egqZPpO19U5uNMuMy0MaTXT6YCuiHKJIBU8qj1n0ofsBk 0BtUXEcR7+HLwgnVqNeQKfB86jHGUbfrMuwKpDN/3+ffA9ZhjL/C5eh516qbJ0L3 viasOne2eB1OWlSiAYgi0CrsKnOXaQ3Ozx/brHVVmzZ3wHeXMTco+AM5RncRpNxS ke6Ei6DlGIgpUG6RDoXIH5+dR20R79Pv0FQCO6p/OnwWLs4fKKH7ftdX6PZGPktT T0ZTQ25ctwENg9k0y7I1iQ3o2i5CeYh/Kt1/c0J65KQnmTkxXxLPrrwpdwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAyR6L/aKNufCyQF/rJCwExGZm9uMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvREpIb3Y5b28yNThMSkFYLXNrTEFURVptYjI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAYBAIAATASAwQA1HcZAwQA 1cZOAwQA1cZbMBAEAgACMAoDCAAgAQcoEBADMA0GCSqGSIb3DQEBCwUAA4IBAQCK WDo+fCdCCGEOjz/K342rZ1oviRZFN6RDQz2CzqxAuFiL1oju+M7jFN9BqnVl3tJC DgYIO6C3cf9MganmRDCISI5qaebBnTnMlm7CV5POnp7uZLIvfceBB9E5/Nws4Hp6 QdHckDpPFLCnDPCM8iMXOLgkjOgZqp46XfS+Mtq+IM8DGznXHzUHWgpbOGn959hQ //G1QMip4tMKxsR1LWbb6VC2XEEVJwWC92qHDtZTjWl4l8nQ3Dvyudu39riQ0Sk3 zN48DYd2WDZTlAA8hhzt3p9lYkqQdYxOe6bns7o9YFhJnOFQnh6lbs8Kt5v/cozI ijVSaG20nEHOPq7Wpxm8 -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:09 2026 by rpki-client