This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/DjKvHGkxm9JLkDzr5jJuPNohrKM.roa File: DjKvHGkxm9JLkDzr5jJuPNohrKM.roa (raw, json) Hash identifier: 4xyJPy+sZSw3rF0C0CNhWMzSFjnYCLyNFxo1nQPPkU4= Subject key identifier: 0E:32:AF:1C:69:31:9B:D2:4B:90:3C:EB:E6:32:6E:3C:DA:21:AC:A3 Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6 Certificate serial: 019B7E37832753CEA156D4F42DC7DF626553 Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/DjKvHGkxm9JLkDzr5jJuPNohrKM.roa Signing time: Fri 02 Jan 2026 10:18:45 +0000 ROA not before: Fri 02 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47700 IP address blocks: 91.208.107.0/24 maxlen: 24 2001:678:478::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:83:27:53:ce:a1:56:d4:f4:2d:c7:df:62:65:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6 Validity Not Before: Jan 2 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e32af1c69319bd24b903cebe6326e3cda21aca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d5:62:c7:f6:b4:bf:e2:e2:12:8c:71:01:1b: ed:6d:f8:17:a7:81:0c:c0:48:c6:d7:73:57:e0:09: 9e:f8:5a:8f:6a:80:7c:83:d3:71:40:be:2d:31:d0: 4a:57:14:14:66:97:dc:13:85:e3:72:32:fe:3a:da: 94:2a:75:6d:97:28:1b:0f:6e:5a:e7:4f:84:0f:fd: 0c:ff:c5:6c:a2:ca:9d:95:be:d2:f9:67:25:44:b0: 09:98:74:8c:77:f1:74:ea:77:31:d7:66:a8:c7:05: c0:46:c3:91:c6:18:d4:08:ee:e3:d1:f8:48:1b:3f: 36:a2:7e:58:d0:d5:ec:3f:94:96:91:42:7f:0e:6c: 0a:28:8a:20:75:38:11:75:3e:1b:4e:f0:67:96:2f: 4f:df:eb:2b:f3:eb:9c:bb:fd:e5:6f:ba:c3:6b:4e: 1b:6d:e4:93:d1:4b:97:78:14:65:e3:be:d0:93:d1: 6d:c1:87:5a:62:60:af:8d:88:19:e6:3e:77:cc:be: 01:a9:1f:84:67:3e:d8:f7:5c:e1:eb:d7:74:ee:eb: 72:45:8a:f5:90:bb:da:ee:85:c9:de:dd:79:ef:02: b2:4a:89:1d:36:81:48:75:6c:82:6a:fd:3c:1b:50: f0:d6:8f:8d:1f:d5:16:c4:6e:8e:b7:b7:3d:f1:79: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:32:AF:1C:69:31:9B:D2:4B:90:3C:EB:E6:32:6E:3C:DA:21:AC:A3 X509v3 Authority Key Identifier: keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/DjKvHGkxm9JLkDzr5jJuPNohrKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.107.0/24 IPv6: 2001:678:478::/48 Signature Algorithm: sha256WithRSAEncryption 4f:0a:e4:13:05:53:b7:3c:2b:41:9e:eb:71:11:5d:fb:0c:7b: fb:d3:19:d5:ef:f0:bd:ae:b0:18:df:a4:32:8b:62:b9:23:fe: 8a:35:d9:61:11:d9:a2:ac:99:66:45:cb:28:ac:e5:8c:5b:00: 0f:cc:68:2f:22:fc:4c:dc:2d:de:af:6a:3b:53:05:e8:fd:99: 0d:a7:8a:02:69:61:ea:71:15:46:a2:6d:c7:6d:91:e0:3c:fb: 98:59:dc:2a:7d:70:9b:10:8d:39:a1:34:f7:78:5f:d3:6f:6f: 97:dd:d7:89:e7:71:e7:31:9a:d6:5e:24:bf:e4:12:a9:d9:53: ae:14:c7:0e:0d:bd:be:5d:ba:37:ad:76:f6:ed:30:28:66:58: 84:4d:e5:be:f9:2b:73:0e:b7:1f:dd:17:5b:36:0c:ef:2f:5d: 57:02:f8:87:6a:80:e7:72:7d:6d:3a:9e:d1:03:39:a1:ad:7e: b3:c9:28:0e:0c:b4:64:76:c4:e5:42:b9:c8:60:cb:df:03:5a: 9f:72:46:84:38:f9:cc:e0:b7:9d:f5:ae:9c:4f:04:c0:5a:1f: 9d:ae:91:67:c7:92:20:da:5c:2f:8c:97:36:24:ed:30:29:b6: 45:ef:d3:d2:93:bb:7e:65:03:0b:07:5e:31:f5:62:9a:62:b7: 1f:c3:f4:94 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N4MnU86hVtT0LcffYmVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYTYxMzc3NDk1OTljMDNjN2I0NzJmMTQyYzcxOTY4MDAw NmI2ZTYwHhcNMjYwMTAyMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTMyYWYxYzY5MzE5YmQyNGI5MDNjZWJlNjMyNmUzY2RhMjFhY2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tVix/a0v+LiEoxxARvtbfgXp4EM wEjG13NX4Ame+FqPaoB8g9NxQL4tMdBKVxQUZpfcE4XjcjL+OtqUKnVtlygbD25a 50+ED/0M/8Vsosqdlb7S+WclRLAJmHSMd/F06ncx12aoxwXARsORxhjUCO7j0fhI Gz82on5Y0NXsP5SWkUJ/DmwKKIogdTgRdT4bTvBnli9P3+sr8+ucu/3lb7rDa04b beST0UuXeBRl477Qk9FtwYdaYmCvjYgZ5j53zL4BqR+EZz7Y91zh69d07utyRYr1 kLva7oXJ3t157wKySokdNoFIdWyCav08G1Dw1o+NH9UWxG6Ot7c98XlXgwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA4yrxxpMZvSS5A86+YybjzaIayjMB8GA1UdIwQY MBaAFCymE3dJWZwDx7Ry8ULHGWgABrbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82ZmNmNjYtOGU4Yy00ZGJiLThjZjAt NTAxOWQyYzM4OGRiLzEvRGpLdkhHa3htOUpMa0R6cjVqSnVQTm9ocktNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS82ZmNmNjYtOGU4Yy00ZGJiLThjZjAtNTAxOWQyYzM4OGRi LzEvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9BrMA8E AgACMAkDBwAgAQZ4BHgwDQYJKoZIhvcNAQELBQADggEBAE8K5BMFU7c8K0Ge63ER XfsMe/vTGdXv8L2usBjfpDKLYrkj/oo12WER2aKsmWZFyyis5YxbAA/MaC8i/Ezc Ld6vajtTBej9mQ2nigJpYepxFUaibcdtkeA8+5hZ3Cp9cJsQjTmhNPd4X9Nvb5fd 14nncecxmtZeJL/kEqnZU64Uxw4Nvb5dujetdvbtMChmWIRN5b75K3MOtx/dF1s2 DO8vXVcC+IdqgOdyfW06ntEDOaGtfrPJKA4MtGR2xOVCuchgy98DWp9yRoQ4+czg t531rpxPBMBaH52ukWfHkiDaXC+MlzYk7TAptkXv09KTu35lAwsHXjH1Yppitx/D 9JQ= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:28 2026 by rpki-client