This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DASfpt6NusBMafxKXMbsXkknaLs.roa File: DASfpt6NusBMafxKXMbsXkknaLs.roa (raw, json) Hash identifier: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI= Subject key identifier: 0C:04:9F:A6:DE:8D:BA:C0:4C:69:FC:4A:5C:C6:EC:5E:49:27:68:BB Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B783515DE44512DA4D5ACCC85507FFB54 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DASfpt6NusBMafxKXMbsXkknaLs.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41956 IP address blocks: 185.6.148.0/24 maxlen: 24 185.6.149.0/24 maxlen: 24 185.6.150.0/24 maxlen: 24 185.6.151.0/24 maxlen: 24 212.30.40.0/24 maxlen: 24 212.30.52.0/24 maxlen: 24 212.30.53.0/24 maxlen: 24 212.30.54.0/24 maxlen: 24 212.30.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:15:de:44:51:2d:a4:d5:ac:cc:85:50:7f:fb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c049fa6de8dbac04c69fc4a5cc6ec5e492768bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:8f:b3:35:fe:73:e8:78:a3:56:e5:dc:73: 56:e2:2b:06:68:91:e4:9a:8c:ba:a6:1e:24:99:82: fa:73:e3:85:e2:e6:41:fe:95:23:4f:e9:a4:20:12: 0c:1b:3f:7d:76:0d:78:85:08:b1:33:36:08:14:3f: d0:98:1c:65:eb:c9:c2:53:1d:db:c4:10:21:99:5a: f8:59:68:df:a0:a5:54:ed:6a:35:84:76:95:bf:95: 02:64:7a:28:9c:bf:76:5b:22:89:26:7c:71:be:f9: 84:09:d6:d4:c1:cf:f1:ed:46:c8:5a:05:6b:04:32: 0a:dd:d4:16:0b:24:64:39:f7:f4:7d:84:98:b9:16: 14:82:26:41:52:d6:e1:be:32:ed:b7:79:91:92:e0: d8:7f:e7:f3:82:13:50:21:99:41:c2:89:18:07:bf: b9:a7:49:2a:c8:07:92:8a:bc:b1:47:62:4d:1d:ef: fe:41:0b:1c:53:2b:87:19:0f:e3:b7:97:8f:3d:c3: b5:76:d4:36:f0:2e:7f:45:ae:f2:82:3d:18:4d:32: a8:b5:5b:e0:e8:41:60:f4:16:82:22:91:bd:1f:38: 07:0f:4f:ee:a8:da:c8:41:9f:0b:23:c7:e0:a0:9c: 07:29:35:c2:42:e1:c6:47:48:36:ce:cc:a3:66:a5: a5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:04:9F:A6:DE:8D:BA:C0:4C:69:FC:4A:5C:C6:EC:5E:49:27:68:BB X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DASfpt6NusBMafxKXMbsXkknaLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.148.0/22 212.30.40.0/24 212.30.52.0/22 Signature Algorithm: sha256WithRSAEncryption 79:7e:61:cb:57:78:c4:28:dd:56:f1:97:50:d9:e1:7f:4c:6d: db:d9:93:80:f6:64:d0:f6:41:3d:f4:05:ec:86:06:ad:80:b3: b2:f2:df:7d:9d:30:8c:4d:89:fd:4b:31:8b:b2:bb:f0:20:c8: 7c:9f:0e:77:b8:c4:d0:1d:81:36:96:1b:79:a3:d3:bc:18:02: ea:1a:dc:a8:31:27:af:15:de:1f:2a:94:44:a1:d2:a6:88:4d: 66:d5:72:97:4b:9c:af:55:a5:09:6c:3b:a3:8f:8d:f6:e4:9c: fa:79:c3:3f:c2:87:02:79:e6:1b:fb:dc:6b:f4:23:73:9f:69: ab:57:23:c1:76:3d:67:b0:ff:80:ed:8e:c3:21:d0:26:a9:a3: 7c:e4:0f:35:e8:15:be:52:dc:f5:4d:96:91:56:f1:79:fa:9c: a6:9c:9a:b4:84:dc:88:e6:29:5f:20:c8:4a:ac:12:e0:8d:85: b9:0a:bf:ce:be:ed:dd:c9:d2:96:03:79:03:36:bf:76:7e:7b: 80:60:1b:0c:42:41:43:18:df:85:a1:e5:d6:d4:b7:85:96:c5: 3d:9f:0b:3d:cf:da:a9:4f:93:4e:91:ec:12:03:78:20:4c:b4: 23:98:97:cc:1d:d9:46:3c:f6:69:65:ca:69:af:a0:c4:4d:f7: fb:6e:6c:2d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NRXeRFEtpNWszIVQf/tUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzA0OWZhNmRlOGRiYWMwNGM2OWZjNGE1Y2M2ZWM1ZTQ5Mjc2OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo+PszX+c+h4o1bl3HNW4isGaJHk moy6ph4kmYL6c+OF4uZB/pUjT+mkIBIMGz99dg14hQixMzYIFD/QmBxl68nCUx3b xBAhmVr4WWjfoKVU7Wo1hHaVv5UCZHoonL92WyKJJnxxvvmECdbUwc/x7UbIWgVr BDIK3dQWCyRkOff0fYSYuRYUgiZBUtbhvjLtt3mRkuDYf+fzghNQIZlBwokYB7+5 p0kqyAeSiryxR2JNHe/+QQscUyuHGQ/jt5ePPcO1dtQ28C5/Ra7ygj0YTTKotVvg 6EFg9BaCIpG9HzgHD0/uqNrIQZ8LI8fgoJwHKTXCQuHGR0g2zsyjZqWl1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAwEn6bejbrATGn8SlzG7F5JJ2i7MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvREFTZnB0Nk51c0JNYWZ4S1hNYnNYa2tuYUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuQaUAwQA 1B4oAwQC1B40MA0GCSqGSIb3DQEBCwUAA4IBAQB5fmHLV3jEKN1W8ZdQ2eF/TG3b 2ZOA9mTQ9kE99AXshgatgLOy8t99nTCMTYn9SzGLsrvwIMh8nw53uMTQHYE2lht5 o9O8GALqGtyoMSevFd4fKpREodKmiE1m1XKXS5yvVaUJbDujj4325Jz6ecM/wocC eeYb+9xr9CNzn2mrVyPBdj1nsP+A7Y7DIdAmqaN85A816BW+Utz1TZaRVvF5+pym nJq0hNyI5ilfIMhKrBLgjYW5Cr/Ovu3dydKWA3kDNr92fnuAYBsMQkFDGN+FoeXW 1LeFlsU9nws9z9qpT5NOkewSA3ggTLQjmJfMHdlGPPZpZcppr6DETff7bmwt -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:41 2026 by rpki-client