This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/DIaQR8xGk_YiX6t4cr3tzmYixRI.roa File: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (raw, json) Hash identifier: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU= Subject key identifier: 0C:86:90:47:CC:46:93:F6:22:5F:AB:78:72:BD:ED:CE:66:22:C5:12 Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2 Certificate serial: 019B7A5AE399AF4C29E7DF300E38970CDF56 Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/DIaQR8xGk_YiX6t4cr3tzmYixRI.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 188.241.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e3:99:af:4c:29:e7:df:30:0e:38:97:0c:df:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2 Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c869047cc4693f6225fab7872bdedce6622c512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:13:35:a8:83:30:3b:37:b0:d0:fc:e7:ee: 1d:be:cb:6d:94:a2:a4:aa:cb:d3:83:a6:ed:54:72: cb:82:27:f7:13:4d:c8:69:e2:37:78:d5:8d:5a:2a: 03:76:a3:2a:96:e6:8a:e5:d2:cf:e0:b9:ca:1e:1d: a4:dd:0c:8e:ab:e9:69:ad:03:cd:03:a3:83:1c:ec: b3:3a:4c:11:22:26:fe:85:09:9c:37:dc:23:ff:e0: 0d:97:69:fe:83:1c:8b:79:ad:dc:8d:55:0d:77:24: 28:73:cd:5c:c7:ff:4f:79:7e:ce:f6:d3:a1:3b:bb: e9:d1:95:52:5b:b3:ff:32:5e:52:ce:3e:00:e6:23: 7e:e4:fd:75:0b:f6:15:6f:ba:2a:85:55:51:93:26: 7f:a6:5e:be:2e:68:07:ae:e3:ba:c4:f8:14:e3:13: ad:20:15:8c:21:ac:2e:64:36:7a:e6:24:38:4d:91: 1e:2a:7f:36:0e:e3:af:d6:ca:e8:ce:c6:71:6d:2d: 16:82:03:2c:36:cc:c5:3d:7c:12:e4:02:82:58:2b: 0b:7a:b2:5f:05:bb:03:fb:48:fe:3a:db:d8:c6:0f: 7a:6f:33:c2:2f:09:0a:65:f4:e4:f3:52:24:60:d6: 4f:bd:fc:10:a7:96:f9:56:7b:d7:d4:70:b4:b3:b2: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:86:90:47:CC:46:93:F6:22:5F:AB:78:72:BD:ED:CE:66:22:C5:12 X509v3 Authority Key Identifier: keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/DIaQR8xGk_YiX6t4cr3tzmYixRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.52.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:00:fe:65:1b:e3:76:63:08:2a:4d:d8:e9:35:3b:03:73:1e: 04:db:26:ce:c0:77:7a:97:3f:40:c0:c1:31:65:1a:3c:55:e2: de:4c:b2:08:c9:83:08:9c:7a:22:f7:88:9f:8d:14:31:54:55: bf:95:f7:99:ed:d8:b9:c3:94:d5:bd:da:3c:5a:7c:09:35:78: 77:be:3e:3e:6a:37:ef:85:6e:ae:79:a0:8d:ff:1f:03:3e:72: 38:c2:ae:3f:3c:eb:d6:94:c2:01:35:6d:73:92:91:b4:64:b7: 00:b7:41:9f:3f:82:a7:ff:8d:d2:88:13:35:18:81:51:70:1c: 8f:1a:e5:4f:cc:8a:10:e0:f0:73:67:33:19:c7:d7:6d:0f:7b: eb:77:b0:92:d5:28:db:4b:b5:75:ac:51:a4:e7:72:79:50:d2: b4:da:06:36:19:fa:f4:c6:1e:0b:73:c8:14:4c:a3:da:f8:49: d2:4c:95:fe:d5:56:c6:c5:12:e7:0e:9b:1d:85:f7:30:2e:d5: 4d:68:49:bf:4a:db:2e:04:cb:91:2d:8b:7e:7f:e7:b1:87:65: 73:cc:fa:f8:5d:4d:9d:fb:9a:75:5e:bd:ac:34:bc:ac:f8:f8: 6f:db:0d:c1:f5:ce:2b:9e:09:b3:ae:62:f7:6c:e2:bc:ed:44: 12:c8:ab:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuOZr0wp598wDjiXDN9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjOTZjNjZhZjMzMWM5ODViODU5ZDQwM2IzNjk3NGMwNjMy ZTFlZjIwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzg2OTA0N2NjNDY5M2Y2MjI1ZmFiNzg3MmJkZWRjZTY2MjJjNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKkTNaiDMDs3sND85+4dvsttlKKk qsvTg6btVHLLgif3E03IaeI3eNWNWioDdqMqluaK5dLP4LnKHh2k3QyOq+lprQPN A6ODHOyzOkwRIib+hQmcN9wj/+ANl2n+gxyLea3cjVUNdyQoc81cx/9PeX7O9tOh O7vp0ZVSW7P/Ml5Szj4A5iN+5P11C/YVb7oqhVVRkyZ/pl6+LmgHruO6xPgU4xOt IBWMIawuZDZ65iQ4TZEeKn82DuOv1srozsZxbS0WggMsNszFPXwS5AKCWCsLerJf BbsD+0j+OtvYxg96bzPCLwkKZfTk81IkYNZPvfwQp5b5VnvX1HC0s7LB+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAyGkEfMRpP2Il+reHK97c5mIsUSMB8GA1UdIwQY MBaAFIyWxmrzMcmFuFnUA7NpdMBjLh7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgt ODNhNDQzMTBhOTY0LzEvRElhUVI4eEdrX1lpWDZ0NGNyM3R6bVlpeFJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgtODNhNDQzMTBhOTY0 LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPE0MA0G CSqGSIb3DQEBCwUAA4IBAQBeAP5lG+N2YwgqTdjpNTsDcx4E2ybOwHd6lz9AwMEx ZRo8VeLeTLIIyYMInHoi94ifjRQxVFW/lfeZ7di5w5TVvdo8WnwJNXh3vj4+ajfv hW6ueaCN/x8DPnI4wq4/POvWlMIBNW1zkpG0ZLcAt0GfP4Kn/43SiBM1GIFRcByP GuVPzIoQ4PBzZzMZx9dtD3vrd7CS1SjbS7V1rFGk53J5UNK02gY2Gfr0xh4Lc8gU TKPa+EnSTJX+1VbGxRLnDpsdhfcwLtVNaEm/StsuBMuRLYt+f+exh2VzzPr4XU2d +5p1Xr2sNLys+Phv2w3B9c4rngmzrmL3bOK87UQSyKv0 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:24 2026 by rpki-client