This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/dJUmGz-VHARh9iQCCVjAjqcYY24.roa File: dJUmGz-VHARh9iQCCVjAjqcYY24.roa (raw, json) Hash identifier: 6l/C0aO7pVVh6TmumDnFhpRIJmTtsI9/rCHq3aG0LHQ= Subject key identifier: 74:95:26:1B:3F:95:1C:04:61:F6:24:02:09:58:C0:8E:A7:18:63:6E Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12 Certificate serial: 019B77C7185AF30AEA7FA1E8F855E88557B9 Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/dJUmGz-VHARh9iQCCVjAjqcYY24.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41585 IP address blocks: 91.136.128.0/17 maxlen: 21 91.194.254.0/23 maxlen: 23 91.195.50.0/23 maxlen: 23 194.9.124.0/23 maxlen: 23 194.9.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:5a:f3:0a:ea:7f:a1:e8:f8:55:e8:85:57:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12 Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7495261b3f951c0461f624020958c08ea718636e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0b:36:b7:10:a0:3c:d7:e6:10:6e:c5:6c:e9: fa:ca:a0:c9:15:b0:56:26:0d:24:97:e2:a6:78:75: ed:d9:63:36:41:19:79:21:9d:2f:cf:15:ca:c2:68: 92:51:a4:cc:26:11:a0:ec:b1:c5:3f:fd:4b:e8:59: ab:46:79:92:9c:65:bf:28:15:d6:34:b4:18:8f:71: 92:35:c5:30:8c:f4:a5:ef:4d:4b:2b:33:a7:df:1f: 59:f6:14:0f:43:04:67:27:27:1d:be:00:0b:bd:7e: 70:84:57:f5:cb:03:73:6c:9a:f9:24:83:29:07:ef: 2b:d9:ce:d4:f2:fa:7e:cb:b1:ba:bc:9a:a1:54:88: 04:02:90:f9:49:6d:f4:fa:70:f5:0e:dc:a3:9f:5c: eb:50:87:05:77:31:33:ea:c1:1a:64:4b:22:f7:23: c9:f0:59:12:74:94:8c:13:40:35:ab:9b:bc:2f:35: 57:f1:4c:40:aa:a6:fd:1b:19:42:9b:7c:01:fb:d3: ff:70:b0:66:c9:ec:f8:66:7f:8d:99:09:77:fc:aa: f9:4d:05:2f:71:f7:f4:9f:66:7b:ad:08:ce:28:2c: 01:07:72:40:35:66:5f:92:b7:47:a8:af:d1:d4:0c: 60:f7:a2:6f:1c:73:98:a7:4a:c1:68:f8:0a:96:7e: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:95:26:1B:3F:95:1C:04:61:F6:24:02:09:58:C0:8E:A7:18:63:6E X509v3 Authority Key Identifier: keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/dJUmGz-VHARh9iQCCVjAjqcYY24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.136.128.0/17 91.194.254.0/23 91.195.50.0/23 194.9.124.0-194.9.126.255 Signature Algorithm: sha256WithRSAEncryption 66:8f:9f:f3:d3:ad:2d:a5:a8:84:34:9d:9e:27:34:a9:44:ef: 88:97:c5:bd:c7:a9:03:35:ab:ae:9f:6c:6c:2e:0d:20:c6:2e: be:f7:fc:3e:71:2e:d8:a5:75:e0:32:85:fe:b5:35:ff:f8:8e: a2:63:53:5e:3b:82:a0:05:51:20:4d:48:2b:02:90:c1:ec:d3: b2:6b:4a:bf:4f:d5:68:46:db:fa:a7:8e:29:65:1b:80:35:0f: 23:95:8e:95:83:80:4c:c2:34:af:d1:6f:ec:e0:ff:16:01:bb: 12:f9:b6:8e:14:b5:08:cc:ea:2a:77:be:da:e5:8c:41:8b:2c: 8a:b9:6d:51:47:c1:c9:5f:42:7a:46:5e:a5:18:e2:4c:71:a0: a4:a6:63:4a:32:88:99:03:50:50:9a:59:da:8a:70:4a:b8:2e: 22:aa:13:f4:f9:60:ef:6a:71:02:ca:49:bb:8e:1a:dc:32:e3: 9a:d4:b7:41:3a:46:9a:d1:33:b7:4e:b9:d5:00:8e:ed:1d:04: 69:7c:d9:aa:ff:fe:3b:af:7f:ad:c9:b0:23:14:d9:51:3d:4e: 66:8c:6e:37:12:cd:81:bc:a0:c9:62:a6:ec:91:3c:81:e3:ed: d7:75:3d:25:6d:69:55:99:9c:07:71:8e:8a:d3:99:e5:7e:f2: d7:0b:30:41 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3xxha8wrqf6Ho+FXohVe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi ODhjMTIwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDk1MjYxYjNmOTUxYzA0NjFmNjI0MDIwOTU4YzA4ZWE3MTg2MzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAs2txCgPNfmEG7FbOn6yqDJFbBW Jg0kl+KmeHXt2WM2QRl5IZ0vzxXKwmiSUaTMJhGg7LHFP/1L6FmrRnmSnGW/KBXW NLQYj3GSNcUwjPSl701LKzOn3x9Z9hQPQwRnJycdvgALvX5whFf1ywNzbJr5JIMp B+8r2c7U8vp+y7G6vJqhVIgEApD5SW30+nD1Dtyjn1zrUIcFdzEz6sEaZEsi9yPJ 8FkSdJSME0A1q5u8LzVX8UxAqqb9GxlCm3wB+9P/cLBmyez4Zn+NmQl3/Kr5TQUv cff0n2Z7rQjOKCwBB3JANWZfkrdHqK/R1Axg96JvHHOYp0rBaPgKln6fUQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHSVJhs/lRwEYfYkAglYwI6nGGNuMB8GA1UdIwQY MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt YWM1MzZiMmFiNGY4LzEvZEpVbUd6LVZIQVJoOWlRQ0NWakFqcWNZWTI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4 LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQHW4iAAwQB W8L+AwQBW8MyMAwDBALCCXwDBADCCX4wDQYJKoZIhvcNAQELBQADggEBAGaPn/PT rS2lqIQ0nZ4nNKlE74iXxb3HqQM1q66fbGwuDSDGLr73/D5xLtildeAyhf61Nf/4 jqJjU147gqAFUSBNSCsCkMHs07JrSr9P1WhG2/qnjillG4A1DyOVjpWDgEzCNK/R b+zg/xYBuxL5to4UtQjM6ip3vtrljEGLLIq5bVFHwclfQnpGXqUY4kxxoKSmY0oy iJkDUFCaWdqKcEq4LiKqE/T5YO9qcQLKSbuOGtwy45rUt0E6RprRM7dOudUAju0d BGl82ar//juvf63JsCMU2VE9TmaMbjcSzYG8oMlipuyRPIHj7dd1PSVtaVWZnAdx jorTmeV+8tcLMEE= -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:38 2026 by rpki-client