This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DJyfTRSLjKXX842H-M_4ldgNdM8.roa File: DJyfTRSLjKXX842H-M_4ldgNdM8.roa (raw, json) Hash identifier: R5+JsX5BIiNEhBT9b4TYt+dvQqr96/QuW/5SXabbCHc= Subject key identifier: 0C:9C:9F:4D:14:8B:8C:A5:D7:F3:8D:87:F8:CF:F8:95:D8:0D:74:CF Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E382B0B8EA80CA5E49221B3D9CF46BC Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DJyfTRSLjKXX842H-M_4ldgNdM8.roa Signing time: Fri 02 Jan 2026 10:19:28 +0000 ROA not before: Fri 02 Jan 2026 10:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 5.188.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2b:0b:8e:a8:0c:a5:e4:92:21:b3:d9:cf:46:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c9c9f4d148b8ca5d7f38d87f8cff895d80d74cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:bd:31:eb:f9:2a:30:aa:59:db:85:19:cd: 29:b8:37:89:fe:86:f7:de:f5:89:2c:5c:9f:8e:75: 77:fd:92:a0:0f:78:b6:65:dd:59:b6:fd:94:f4:1b: 81:59:55:73:a7:95:27:d8:3c:a4:88:84:be:f8:23: 3c:3b:8e:bf:75:09:9b:f0:26:1e:97:e7:4a:3b:da: f8:f9:35:4e:93:5c:cb:49:01:ac:55:64:78:72:85: 64:b3:04:a2:34:ef:f7:bc:f6:5d:90:ed:7d:f6:59: f3:7d:74:fd:3b:e1:8b:37:ce:ce:eb:4e:ba:2a:a3: dd:22:82:1b:aa:3c:f0:af:be:d7:ee:2f:9e:59:5b: b2:8d:88:82:57:b7:75:2c:44:a5:8f:a3:9b:b7:ba: be:75:43:28:5b:33:d8:f7:0c:fb:c9:4e:53:66:d3: 66:8b:c3:f9:f5:f7:f7:f8:f8:b4:cd:58:b4:1f:27: 57:d6:31:59:8d:6e:02:28:48:d5:d3:d0:5c:ce:6f: 76:8f:b9:42:6d:9b:e8:d5:1f:25:18:1c:43:3c:65: aa:ff:00:f6:8a:1b:33:ba:77:bd:9c:95:bc:6d:6a: 14:bf:e9:34:d5:a2:06:25:8b:41:4e:8f:d7:6d:ec: 8d:f4:e3:a2:6e:76:f5:7e:1d:7c:51:9e:f9:f1:1f: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9C:9F:4D:14:8B:8C:A5:D7:F3:8D:87:F8:CF:F8:95:D8:0D:74:CF X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DJyfTRSLjKXX842H-M_4ldgNdM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.60.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:7c:74:c6:bd:77:c9:98:42:6d:90:77:63:8e:2a:d1:01:d7: a5:53:5d:e3:41:13:3b:01:8c:f5:ee:8d:ed:37:6e:f1:e8:6b: dc:92:43:5b:4c:18:58:84:2a:18:83:5c:c4:4b:34:ff:d8:fb: 33:22:61:2c:ed:3f:25:b6:03:e3:c3:76:e9:b6:05:f2:62:df: 22:52:6a:31:1e:53:ec:e2:be:b3:6d:c1:d2:9c:83:75:9a:32: a5:70:c8:45:18:27:0b:0d:a6:de:ba:7d:d7:17:8c:cb:c7:6f: 64:59:ac:d3:bc:9c:ed:25:10:e3:77:68:cc:ad:16:2e:4e:ee: dd:2e:7f:ce:39:e9:8b:95:5e:55:8b:b9:ce:fc:76:c3:0e:8a: 17:65:d5:c7:1d:f7:96:68:ed:3f:05:c2:8e:12:b9:f7:84:1f: 67:8f:94:87:a2:28:08:a6:7c:53:d1:37:b8:70:6c:df:53:58: 5e:1d:1f:5b:26:cb:d2:a5:e2:d9:32:9e:ba:88:07:48:17:2a: ab:4b:89:3f:60:7e:6c:51:0d:9e:e2:04:5c:33:79:d9:6a:43: e0:d2:d3:79:e8:5c:7c:5a:c4:88:f8:bd:2e:c2:6c:fb:54:d2: 95:f4:1c:27:13:ed:5d:f2:e9:da:70:18:ea:dc:1b:d3:01:8a: 41:d1:16:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCsLjqgMpeSSIbPZz0a8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzljOWY0ZDE0OGI4Y2E1ZDdmMzhkODdmOGNmZjg5NWQ4MGQ3NGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyC9Mev5KjCqWduFGc0puDeJ/ob3 3vWJLFyfjnV3/ZKgD3i2Zd1Ztv2U9BuBWVVzp5Un2DykiIS++CM8O46/dQmb8CYe l+dKO9r4+TVOk1zLSQGsVWR4coVkswSiNO/3vPZdkO199lnzfXT9O+GLN87O6066 KqPdIoIbqjzwr77X7i+eWVuyjYiCV7d1LESlj6Obt7q+dUMoWzPY9wz7yU5TZtNm i8P59ff3+Pi0zVi0HydX1jFZjW4CKEjV09Bczm92j7lCbZvo1R8lGBxDPGWq/wD2 ihszune9nJW8bWoUv+k01aIGJYtBTo/XbeyN9OOibnb1fh18UZ758R8DOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAycn00Ui4yl1/ONh/jP+JXYDXTPMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvREp5ZlRSU0xqS1hYODQySC1NXzRsZGdOZE04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbw8MA0G CSqGSIb3DQEBCwUAA4IBAQAMfHTGvXfJmEJtkHdjjirRAdelU13jQRM7AYz17o3t N27x6GvckkNbTBhYhCoYg1zESzT/2PszImEs7T8ltgPjw3bptgXyYt8iUmoxHlPs 4r6zbcHSnIN1mjKlcMhFGCcLDabeun3XF4zLx29kWazTvJztJRDjd2jMrRYuTu7d Ln/OOemLlV5Vi7nO/HbDDooXZdXHHfeWaO0/BcKOErn3hB9nj5SHoigIpnxT0Te4 cGzfU1heHR9bJsvSpeLZMp66iAdIFyqrS4k/YH5sUQ2e4gRcM3nZakPg0tN56Fx8 WsSI+L0uwmz7VNKV9BwnE+1d8unacBjq3BvTAYpB0RZv -----END CERTIFICATE-----Generated at Tue Jan 20 09:22:00 2026 by rpki-client