This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dgjnO-Fn5Gjk4CbFXXO8VN6dPAQ.roa File: dgjnO-Fn5Gjk4CbFXXO8VN6dPAQ.roa (raw, json) Hash identifier: ys+6Cfmu/d9hbe9sFZ3m/XsVlUaFcLCrrpCG/gS8pEk= Subject key identifier: 76:08:E7:3B:E1:67:E4:68:E4:E0:26:C5:5D:73:BC:54:DE:9D:3C:04 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDED5F97033A3F272C28C4DD15A43B Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dgjnO-Fn5Gjk4CbFXXO8VN6dPAQ.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 81.21.3.0/24 maxlen: 24 176.57.49.0/24 maxlen: 24 176.57.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ed:5f:97:03:3a:3f:27:2c:28:c4:dd:15:a4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7608e73be167e468e4e026c55d73bc54de9d3c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:fc:1d:e8:9d:f3:25:9f:f8:c0:fd:af:81: 4e:e1:28:1a:6c:d3:27:c9:87:79:6d:e3:16:93:dc: 3f:e5:6b:a2:c1:5e:88:44:1a:80:38:80:4e:e2:e1: 52:4b:be:5e:4f:86:9e:c0:f2:80:e6:89:a3:aa:4f: 8a:96:ea:03:fc:7f:f1:dc:c1:2a:6c:36:01:be:e1: 0f:4f:1d:f0:f5:8c:5d:26:2c:7a:3c:6e:15:7d:d0: 63:e5:c7:d2:e7:a1:6e:8f:fd:b9:b9:ec:0e:5b:05: 57:33:d8:5c:83:89:26:0d:75:a7:e2:ed:34:30:ef: 70:6a:6f:5e:fa:61:0c:c5:1c:8c:37:e4:ed:fe:3c: 68:24:8e:90:0d:4e:6a:d6:42:b8:ac:7d:41:bb:d9: 84:88:0b:1b:8a:d8:ac:bc:69:53:65:1b:90:3b:ce: cb:d7:ea:63:ef:0f:cd:66:50:ba:9f:6c:d6:97:2b: cc:13:ac:de:04:40:30:3b:f8:93:66:3c:70:dd:73: 5c:b0:4c:9b:22:b6:19:e8:bf:69:26:1f:05:5a:9b: 4a:a3:78:76:14:cc:f8:83:44:72:5b:58:8f:d6:a3: 5a:94:61:53:91:6a:d4:eb:81:66:c7:49:b9:bf:2e: 7e:fe:f5:5e:49:5e:11:7c:4a:05:ce:9c:f4:07:b3: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:E7:3B:E1:67:E4:68:E4:E0:26:C5:5D:73:BC:54:DE:9D:3C:04 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dgjnO-Fn5Gjk4CbFXXO8VN6dPAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.3.0/24 176.57.49.0/24 176.57.58.0/24 Signature Algorithm: sha256WithRSAEncryption 40:71:7f:50:94:90:57:98:bc:0e:45:f9:9e:68:21:df:5d:92: 7f:0f:43:b6:b9:e4:5a:7d:18:79:19:fe:b5:1d:9a:6d:ba:65: cf:dc:39:ee:ac:59:8c:9d:73:de:7e:61:b1:5f:9e:b2:29:fe: f8:fe:75:ac:12:56:c4:7e:69:b6:2f:01:23:2f:75:ab:24:83: 4c:44:a0:f6:46:72:15:ab:1c:ed:ac:42:7b:c9:16:ab:16:57: 94:e6:41:97:80:3c:cf:66:5a:4e:9b:19:38:5a:fd:88:3a:5f: bd:a0:95:69:8b:a2:62:93:f4:ab:1b:1e:89:dc:21:2d:18:fc: 70:26:e4:b9:13:ae:9d:3e:99:6a:a5:23:d5:79:36:cb:d6:03: f5:97:2c:b6:88:e5:bd:f1:24:8d:d9:5c:e8:e3:24:a7:6d:c3: 58:ef:f6:c9:2f:94:ec:1e:86:36:a6:ee:44:53:56:8f:0d:5b: 3b:b6:a4:49:eb:20:7c:ad:c5:28:94:f1:ce:95:2f:f6:5f:f4: e3:e7:d1:67:24:d6:94:bb:75:dc:68:ab:63:bd:37:0c:de:23: c2:67:43:7b:10:87:0f:b9:83:8a:85:86:04:05:f6:3f:af:52: 11:63:80:60:39:21:04:29:46:88:41:83:8d:1b:23:51:59:42: 7e:51:41:d1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87e1flwM6PycsKMTdFaQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjA4ZTczYmUxNjdlNDY4ZTRlMDI2YzU1ZDczYmM1NGRlOWQzYzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqP8Heid8yWf+MD9r4FO4SgabNMn yYd5beMWk9w/5WuiwV6IRBqAOIBO4uFSS75eT4aewPKA5omjqk+KluoD/H/x3MEq bDYBvuEPTx3w9YxdJix6PG4VfdBj5cfS56Fuj/25uewOWwVXM9hcg4kmDXWn4u00 MO9wam9e+mEMxRyMN+Tt/jxoJI6QDU5q1kK4rH1Bu9mEiAsbitisvGlTZRuQO87L 1+pj7w/NZlC6n2zWlyvME6zeBEAwO/iTZjxw3XNcsEybIrYZ6L9pJh8FWptKo3h2 FMz4g0RyW1iP1qNalGFTkWrU64Fmx0m5vy5+/vVeSV4RfEoFzpz0B7PyfwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHYI5zvhZ+Ro5OAmxV1zvFTenTwEMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvZGdqbk8tRm41R2prNENiRlhYTzhWTjZkUEFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAURUDAwQA sDkxAwQAsDk6MA0GCSqGSIb3DQEBCwUAA4IBAQBAcX9QlJBXmLwORfmeaCHfXZJ/ D0O2ueRafRh5Gf61HZptumXP3DnurFmMnXPefmGxX56yKf74/nWsElbEfmm2LwEj L3WrJINMRKD2RnIVqxztrEJ7yRarFleU5kGXgDzPZlpOmxk4Wv2IOl+9oJVpi6Ji k/SrGx6J3CEtGPxwJuS5E66dPplqpSPVeTbL1gP1lyy2iOW98SSN2Vzo4ySnbcNY 7/bJL5TsHoY2pu5EU1aPDVs7tqRJ6yB8rcUolPHOlS/2X/Tj59FnJNaUu3XcaKtj vTcM3iPCZ0N7EIcPuYOKhYYEBfY/r1IRY4BgOSEEKUaIQYONGyNRWUJ+UUHR -----END CERTIFICATE-----Generated at Fri Jan 2 14:42:28 2026 by rpki-client