This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DJRSTcAP7CihbaiAnxY8hNby_aU.roa File: DJRSTcAP7CihbaiAnxY8hNby_aU.roa (raw, json) Hash identifier: YU74KKCH0msp5e3D31IubggMA5tchQwNb9z3GV1ugds= Subject key identifier: 0C:94:52:4D:C0:0F:EC:28:A1:6D:A8:80:9F:16:3C:84:D6:F2:FD:A5 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA66A8BF57D5E6028340CFB5420B8 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DJRSTcAP7CihbaiAnxY8hNby_aU.roa Signing time: Fri 02 Jan 2026 06:17:31 +0000 ROA not before: Fri 02 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 213.176.76.0/24 maxlen: 24 213.176.77.0/24 maxlen: 24 213.176.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a6:6a:8b:f5:7d:5e:60:28:34:0c:fb:54:20:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c94524dc00fec28a16da8809f163c84d6f2fda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b3:f9:74:1b:37:fd:a6:38:76:d2:3e:d7:3d: a0:0c:1f:aa:dd:35:bd:ae:21:e2:06:48:9c:24:71: 0b:b4:7d:b0:d9:07:e0:c1:e2:4c:db:11:f1:01:bd: ee:d1:5b:66:ca:d6:14:67:a2:f4:c3:ec:e1:8b:f8: 19:11:9d:9a:00:7b:b7:93:66:c0:18:57:78:85:52: ec:06:e6:ad:7d:f4:8e:50:3c:fb:cc:2e:a5:b2:b4: 37:ca:f1:2b:14:47:10:81:6e:cd:3f:8a:f2:6e:af: a8:53:e4:d6:9b:49:12:9c:98:e7:d4:28:cd:b2:70: 2f:72:a2:1c:f4:42:69:f8:cc:bb:57:7c:af:90:97: 80:e9:f1:3c:3a:ad:f7:bb:26:c9:73:14:88:db:67: 90:1d:af:9b:63:00:b7:45:e2:62:14:ec:7e:38:79: b3:ef:9d:ea:3a:bb:d3:bc:4c:79:c1:d7:df:ca:3e: 5c:2a:be:ee:f7:4b:35:8b:e8:e1:13:24:f6:ac:7d: 2a:f5:97:e3:94:8a:49:7d:02:38:55:3f:23:16:c9: 36:fc:7a:c5:8f:0a:e5:a2:24:40:6c:25:b4:47:7b: cf:90:89:22:ab:0b:a6:79:0b:38:6a:6e:56:00:56: b0:92:0a:60:c1:0d:03:61:6f:8c:df:cc:ec:ac:87: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:94:52:4D:C0:0F:EC:28:A1:6D:A8:80:9F:16:3C:84:D6:F2:FD:A5 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/DJRSTcAP7CihbaiAnxY8hNby_aU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.176.76.0/22 Signature Algorithm: sha256WithRSAEncryption 18:d6:58:eb:fb:b7:67:60:0b:5e:6a:b6:e4:44:11:d1:e5:ae: 78:8a:f9:bc:4a:c1:70:9d:33:17:54:af:3e:1d:02:59:f4:bc: d8:f9:3a:c7:d1:3e:70:6b:da:c4:c3:9b:d6:86:ff:6b:3b:a2: c1:74:14:87:de:b1:fe:57:40:c7:ea:4d:c1:e2:d8:52:17:f5: 98:33:ee:ab:91:bf:1e:f3:57:f7:ee:6b:bb:ac:92:07:da:5c: 52:2c:fa:6c:61:06:09:c4:86:f6:7f:11:78:33:e8:72:f7:56: 33:0b:be:50:a2:33:be:75:c5:f2:6f:c8:99:ba:4d:3d:09:d2: 77:b4:10:53:2a:61:4c:be:3a:5a:24:18:fc:e2:54:d6:f1:79: 21:de:d8:7a:37:11:c3:48:75:89:cb:63:e6:77:34:4e:04:a0: b0:c2:ee:64:15:63:80:db:4d:0f:66:b8:48:20:c6:7a:cf:0e: 73:ad:a1:54:9b:e3:ec:16:b1:dc:3c:60:84:1b:f7:90:43:a1: 78:f7:53:e8:9f:c3:43:97:d2:e4:ff:21:8a:d3:4c:86:2d:69: 30:e3:f1:24:df:03:2d:14:7e:4c:d5:43:bf:f7:09:44:2d:b2: d0:27:3b:97:e0:83:21:40:4a:72:d6:88:f9:00:f4:82:18:e3: 1c:29:27:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WqZqi/V9XmAoNAz7VCC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzk0NTI0ZGMwMGZlYzI4YTE2ZGE4ODA5ZjE2M2M4NGQ2ZjJmZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLP5dBs3/aY4dtI+1z2gDB+q3TW9 riHiBkicJHELtH2w2QfgweJM2xHxAb3u0VtmytYUZ6L0w+zhi/gZEZ2aAHu3k2bA GFd4hVLsBuatffSOUDz7zC6lsrQ3yvErFEcQgW7NP4rybq+oU+TWm0kSnJjn1CjN snAvcqIc9EJp+My7V3yvkJeA6fE8Oq33uybJcxSI22eQHa+bYwC3ReJiFOx+OHmz 753qOrvTvEx5wdffyj5cKr7u90s1i+jhEyT2rH0q9ZfjlIpJfQI4VT8jFsk2/HrF jwrloiRAbCW0R3vPkIkiqwumeQs4am5WAFawkgpgwQ0DYW+M38zsrIfksQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAyUUk3AD+wooW2ogJ8WPITW8v2lMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvREpSU1RjQVA3Q2loYmFpQW54WThoTmJ5X2FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1bBMMA0G CSqGSIb3DQEBCwUAA4IBAQAY1ljr+7dnYAtearbkRBHR5a54ivm8SsFwnTMXVK8+ HQJZ9LzY+TrH0T5wa9rEw5vWhv9rO6LBdBSH3rH+V0DH6k3B4thSF/WYM+6rkb8e 81f37mu7rJIH2lxSLPpsYQYJxIb2fxF4M+hy91YzC75QojO+dcXyb8iZuk09CdJ3 tBBTKmFMvjpaJBj84lTW8Xkh3th6NxHDSHWJy2PmdzROBKCwwu5kFWOA200PZrhI IMZ6zw5zraFUm+PsFrHcPGCEG/eQQ6F491Pon8NDl9Lk/yGK00yGLWkw4/Ek3wMt FH5M1UO/9wlELbLQJzuX4IMhQEpy1oj5APSCGOMcKSfv -----END CERTIFICATE-----Generated at Wed Jan 21 10:46:57 2026 by rpki-client