This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DjmXD5dBp_blYUk6hG3MPCrfiug.roa File: DjmXD5dBp_blYUk6hG3MPCrfiug.roa (raw, json) Hash identifier: n4S5ocH53uP3ZQk624w1twWYIlRb4ANhNcoSB38x7NY= Subject key identifier: 0E:39:97:0F:97:41:A7:F6:E5:61:49:3A:84:6D:CC:3C:2A:DF:8A:E8 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019BFE61F27F926CCA33BD7352A80A4AC13D Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DjmXD5dBp_blYUk6hG3MPCrfiug.roa Signing time: Tue 27 Jan 2026 07:36:30 +0000 ROA not before: Tue 27 Jan 2026 07:36:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197275 IP address blocks: 85.209.1.0/24 maxlen: 24 185.221.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:61:f2:7f:92:6c:ca:33:bd:73:52:a8:0a:4a:c1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 27 07:36:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e39970f9741a7f6e561493a846dcc3c2adf8ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:c4:91:5c:96:85:c4:20:be:42:1f:16:34: 1e:2d:ac:40:e7:49:90:90:30:47:c4:9a:63:47:c1: 6b:e4:e6:71:3f:c1:8a:65:cc:c6:05:cb:c2:f5:50: ed:ef:d6:be:de:ff:11:4b:9d:aa:be:51:e9:88:bc: 39:a9:d1:5f:f9:29:97:55:db:b0:e5:56:da:be:35: 5f:50:ab:7b:ee:3b:7b:2e:aa:15:3d:81:c2:73:26: 2d:57:3a:ab:b4:a9:08:af:17:dd:6f:9a:9a:5c:92: d4:64:7f:ef:fb:9d:21:be:d9:6b:c6:91:18:18:08: 1e:f8:4f:e1:5f:6c:bf:56:df:c4:98:78:8c:dd:06: ef:4c:12:d9:76:b9:0c:13:34:cf:72:50:fa:83:ae: 1b:2a:7e:98:58:5d:cb:61:d5:6f:76:a0:9f:3e:a5: b4:3c:af:ee:62:84:c2:22:97:57:ab:d5:c2:19:57: 7e:7b:56:4c:57:b9:1c:6a:d4:0b:ed:49:59:69:24: 5c:86:25:9b:1b:ec:dc:62:ed:41:80:44:af:ea:3a: 1c:be:7d:50:be:b8:72:9a:0b:dd:3d:db:8b:fe:f1: 6c:43:b0:3b:10:b7:e0:c7:45:7f:39:fb:bf:36:ef: 22:2f:ab:a0:25:c0:1a:41:a8:bd:b6:7d:3b:93:76: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:39:97:0F:97:41:A7:F6:E5:61:49:3A:84:6D:CC:3C:2A:DF:8A:E8 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DjmXD5dBp_blYUk6hG3MPCrfiug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.1.0/24 185.221.161.0/24 Signature Algorithm: sha256WithRSAEncryption c1:a4:05:99:f5:a6:a1:a5:86:94:54:2b:f3:d3:94:7c:eb:25: 99:a7:ab:5c:b6:ed:cb:1b:c2:1b:fc:eb:20:f0:8b:14:3b:7b: 4e:2c:96:68:4c:89:9d:02:47:59:2a:77:64:d0:84:5b:90:11: a3:93:da:d7:72:44:ce:6f:b2:04:a7:a9:93:76:ca:03:69:b5: 05:42:00:17:8c:4e:79:93:ec:8c:d1:5d:b3:8e:cb:3a:27:fd: d8:ee:1f:d2:83:0b:eb:07:8c:37:50:51:3b:6d:d3:08:47:2b: 81:86:92:27:b5:11:f2:8c:66:73:88:ce:bd:ad:66:2f:63:39: 73:bc:9a:30:58:34:fd:5b:ee:2d:49:cf:44:bf:a2:b1:53:81: d1:ad:1a:22:3f:eb:ed:3f:45:a0:9a:64:b1:1d:a2:59:35:bc: 4c:a7:c4:02:b2:33:b1:25:a8:fb:42:fc:d9:85:23:f1:81:e9: f7:64:2a:cd:d3:bb:ea:d9:c2:e6:2f:96:52:bb:07:9c:b1:49: d1:15:91:21:cd:07:2f:95:66:ec:b3:72:84:e7:dc:eb:d0:d9: 42:e5:5a:cc:4b:33:01:5a:ed:ee:ef:59:17:e0:1c:38:16:ed: 1f:53:e7:58:02:00:b2:6c:25:27:70:08:ad:62:f8:eb:79:87: 62:01:70:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv+YfJ/kmzKM71zUqgKSsE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTI3MDczNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTM5OTcwZjk3NDFhN2Y2ZTU2MTQ5M2E4NDZkY2MzYzJhZGY4YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/PEkVyWhcQgvkIfFjQeLaxA50mQ kDBHxJpjR8Fr5OZxP8GKZczGBcvC9VDt79a+3v8RS52qvlHpiLw5qdFf+SmXVduw 5VbavjVfUKt77jt7LqoVPYHCcyYtVzqrtKkIrxfdb5qaXJLUZH/v+50hvtlrxpEY GAge+E/hX2y/Vt/EmHiM3QbvTBLZdrkMEzTPclD6g64bKn6YWF3LYdVvdqCfPqW0 PK/uYoTCIpdXq9XCGVd+e1ZMV7kcatQL7UlZaSRchiWbG+zcYu1BgESv6jocvn1Q vrhymgvdPduL/vFsQ7A7ELfgx0V/Ofu/Nu8iL6ugJcAaQai9tn07k3YsfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA45lw+XQaf25WFJOoRtzDwq34roMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvRGptWEQ1ZEJwX2JsWVVrNmhHM01QQ3JmaXVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVdEBAwQA ud2hMA0GCSqGSIb3DQEBCwUAA4IBAQDBpAWZ9aahpYaUVCvz05R86yWZp6tctu3L G8Ib/Osg8IsUO3tOLJZoTImdAkdZKndk0IRbkBGjk9rXckTOb7IEp6mTdsoDabUF QgAXjE55k+yM0V2zjss6J/3Y7h/SgwvrB4w3UFE7bdMIRyuBhpIntRHyjGZziM69 rWYvYzlzvJowWDT9W+4tSc9Ev6KxU4HRrRoiP+vtP0WgmmSxHaJZNbxMp8QCsjOx Jaj7QvzZhSPxgen3ZCrN07vq2cLmL5ZSuwecsUnRFZEhzQcvlWbss3KE59zr0NlC 5VrMSzMBWu3u71kX4Bw4Fu0fU+dYAgCybCUncAitYvjreYdiAXD2 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:41 2026 by rpki-client