This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa File: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (raw, json) Hash identifier: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE= Subject key identifier: 0C:97:94:16:76:A6:4D:9F:79:8A:9D:70:A9:00:7A:18:1B:26:CA:24 Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054 Certificate serial: 019B797E43B40AD67F5D6CE165F990977E83 Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199346 IP address blocks: 81.24.248.0/21 maxlen: 24 185.12.156.0/24 maxlen: 24 185.12.158.0/23 maxlen: 24 2a03:2240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:43:b4:0a:d6:7f:5d:6c:e1:65:f9:90:97:7e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c97941676a64d9f798a9d70a9007a181b26ca24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:5a:46:45:b5:f8:79:1b:02:2a:33:c3:75: 87:30:b0:ad:14:ea:44:b7:4f:3c:c9:02:f5:29:86: 59:37:cb:90:80:b7:1e:12:b2:2d:9e:56:83:b6:39: 5f:4b:59:b6:0f:17:af:a6:3e:04:48:86:4e:7b:33: 3b:0e:8f:af:49:6b:a4:55:53:f1:06:ca:3d:7a:62: a6:36:ff:ab:21:d7:3b:01:fe:b4:4c:ac:f8:49:2d: bf:7d:0f:20:25:63:09:9f:00:67:1e:79:38:3b:bf: 73:cf:34:78:35:af:8e:f3:38:3c:1b:ab:0e:4d:5f: 26:c5:09:1d:ef:c0:ab:7b:5c:27:57:27:f1:02:f1: 78:35:8d:6e:ba:e3:38:f7:fb:fa:e3:c8:86:e3:3c: 5f:94:83:1a:c9:2c:16:92:44:e5:45:be:b1:57:66: c9:56:f4:3a:dc:3a:2f:0d:f2:96:78:eb:37:1b:32: e9:64:6b:43:15:27:b9:61:8f:7e:43:43:17:c7:7e: b5:79:f8:68:88:7e:50:99:7e:97:8c:79:75:72:84: c9:c1:ad:78:66:84:06:63:57:a9:b9:8e:ff:aa:51: b3:08:06:4b:68:b2:13:4b:9c:f9:19:27:34:f7:cd: b6:dc:3e:11:27:87:a8:33:27:9c:77:ff:c7:f8:3b: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:97:94:16:76:A6:4D:9F:79:8A:9D:70:A9:00:7A:18:1B:26:CA:24 X509v3 Authority Key Identifier: keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.24.248.0/21 185.12.156.0/24 185.12.158.0/23 IPv6: 2a03:2240::/32 Signature Algorithm: sha256WithRSAEncryption 15:8d:fb:97:af:75:d6:65:de:7e:19:18:d4:70:75:e8:bf:32: 33:8c:a8:12:4e:b6:27:bf:b5:f7:7a:71:2b:8a:e7:bd:30:76: 98:0d:67:83:9c:97:c3:32:fa:a3:d6:77:48:6b:9a:5d:71:80: 75:bc:c0:06:ae:a6:46:e5:23:4a:8f:b7:9b:d5:0f:98:5f:ad: 79:9d:dd:43:1c:a5:95:3b:e4:24:60:6e:bc:27:fd:df:7b:31: 4f:fc:59:9f:9e:d4:b8:2b:9e:b4:ed:11:3e:67:cb:37:13:b6: d0:a4:0b:2b:55:33:c0:16:99:59:06:51:d0:fe:93:e7:31:db: fb:c9:85:5c:ac:a4:b2:06:3b:36:23:d6:03:6e:98:7b:3b:5e: 22:14:41:24:92:ef:aa:b9:d7:7a:52:eb:89:04:84:c8:33:9c: c9:76:54:80:ff:f5:e5:cf:33:60:6b:2c:71:a3:b8:45:a3:e7: b3:11:17:7f:ae:7a:db:e9:ea:3a:88:fb:f0:7b:27:cc:c8:03: c2:27:54:44:d7:10:b4:aa:a0:64:2f:17:a1:7e:78:d0:af:20: be:71:ba:e6:d8:cb:18:e0:c5:12:c4:ca:e6:09:d6:4b:49:92: c5:bf:b1:87:15:31:fa:f2:b1:3c:de:82:aa:34:f4:d6:10:9c: b6:0a:dc:ab -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fkO0CtZ/XWzhZfmQl36DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3 YmQwNTQwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzk3OTQxNjc2YTY0ZDlmNzk4YTlkNzBhOTAwN2ExODFiMjZjYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG1aRkW1+HkbAiozw3WHMLCtFOpE t088yQL1KYZZN8uQgLceErItnlaDtjlfS1m2Dxevpj4ESIZOezM7Do+vSWukVVPx Bso9emKmNv+rIdc7Af60TKz4SS2/fQ8gJWMJnwBnHnk4O79zzzR4Na+O8zg8G6sO TV8mxQkd78Cre1wnVyfxAvF4NY1uuuM49/v648iG4zxflIMaySwWkkTlRb6xV2bJ VvQ63DovDfKWeOs3GzLpZGtDFSe5YY9+Q0MXx361efhoiH5QmX6XjHl1coTJwa14 ZoQGY1epuY7/qlGzCAZLaLITS5z5GSc098223D4RJ4eoMyecd//H+DtuMQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAyXlBZ2pk2feYqdcKkAehgbJsokMB8GA1UdIwQY MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt NTZiYmUzOGY3NDA3LzEvREplVUZuYW1UWjk1aXAxd3FRQjZHQnNteWlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3 LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDURj4AwQA uQycAwQBuQyeMA0EAgACMAcDBQAqAyJAMA0GCSqGSIb3DQEBCwUAA4IBAQAVjfuX r3XWZd5+GRjUcHXovzIzjKgSTrYnv7X3enEriue9MHaYDWeDnJfDMvqj1ndIa5pd cYB1vMAGrqZG5SNKj7eb1Q+YX615nd1DHKWVO+QkYG68J/3fezFP/FmfntS4K560 7RE+Z8s3E7bQpAsrVTPAFplZBlHQ/pPnMdv7yYVcrKSyBjs2I9YDbph7O14iFEEk ku+qudd6UuuJBITIM5zJdlSA//XlzzNgayxxo7hFo+ezERd/rnrb6eo6iPvweyfM yAPCJ1RE1xC0qqBkLxehfnjQryC+cbrm2MsY4MUSxMrmCdZLSZLFv7GHFTH68rE8 3oKqNPTWEJy2Ctyr -----END CERTIFICATE-----Generated at Tue Jan 27 18:26:55 2026 by rpki-client