This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/DSJIzkN5q_rXnrR_sSD03uwjKLk.roa File: DSJIzkN5q_rXnrR_sSD03uwjKLk.roa (raw, json) Hash identifier: RgGL0auNuSKpj8cmVmNM1N0Gw/VXT4lpjwBiD7OAxgM= Subject key identifier: 0D:22:48:CE:43:79:AB:FA:D7:9E:B4:7F:B1:20:F4:DE:EC:23:28:B9 Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Certificate serial: 019B7D5CACB7DCFB9F71EA90DC5D27F074F8 Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/DSJIzkN5q_rXnrR_sSD03uwjKLk.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21419 IP address blocks: 178.21.160.0/21 maxlen: 21 178.21.161.0/24 maxlen: 24 178.21.162.0/24 maxlen: 24 178.21.163.0/24 maxlen: 24 178.21.164.0/24 maxlen: 24 178.21.166.0/24 maxlen: 24 178.21.167.0/24 maxlen: 26 185.4.1.0/24 maxlen: 24 185.4.2.0/24 maxlen: 24 185.4.3.0/24 maxlen: 24 2a02:6440::/32 maxlen: 32 2a02:6440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ac:b7:dc:fb:9f:71:ea:90:dc:5d:27:f0:74:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d2248ce4379abfad79eb47fb120f4deec2328b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:d0:34:9e:83:b8:66:32:15:e9:9a:fb:4d: e8:90:7c:72:21:70:ca:7b:7a:23:15:b4:c1:67:c5: 77:4c:07:48:11:a8:77:c4:da:4b:50:62:a1:eb:d7: 6b:0c:ca:13:3c:51:dd:20:1d:67:d7:ae:ce:40:64: fa:56:b0:a7:7a:33:3f:dc:0d:20:0b:f2:73:60:f6: b2:cd:3a:75:9f:93:be:59:7b:bb:4a:19:cb:40:ff: 31:93:0d:e6:b5:10:e2:1a:57:cd:83:58:d6:1f:57: 55:8d:5f:85:e0:91:76:33:8e:30:65:1e:13:25:83: bb:66:80:24:6e:a6:aa:8a:9e:5c:39:7b:1e:73:18: c0:57:93:eb:70:55:36:78:f9:83:f2:1d:22:5f:04: 3f:fa:b1:ed:14:d0:35:14:90:5c:d1:a5:32:65:05: 75:28:a3:a3:87:50:6d:27:4d:18:17:76:08:1e:fa: de:37:69:d9:47:3b:c4:70:54:79:aa:51:02:c6:a1: 43:56:72:88:b3:b8:ff:6f:5b:87:0c:d2:86:6c:99: d3:1a:e8:83:98:f6:1b:ed:21:eb:7a:88:15:fa:0d: f3:56:da:e1:83:90:fe:fb:de:ec:7c:9d:cb:10:95: e1:70:74:d7:b9:7d:0e:94:6a:97:7e:64:f0:05:a3: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:22:48:CE:43:79:AB:FA:D7:9E:B4:7F:B1:20:F4:DE:EC:23:28:B9 X509v3 Authority Key Identifier: keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/DSJIzkN5q_rXnrR_sSD03uwjKLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.160.0/21 185.4.1.0-185.4.3.255 IPv6: 2a02:6440::/32 Signature Algorithm: sha256WithRSAEncryption ab:95:c0:25:11:f4:7a:13:6e:36:a4:da:be:42:b0:d3:4d:de: 62:0c:36:4d:b1:29:00:12:d8:15:88:19:d4:3a:1c:b2:da:89: c4:41:ec:96:fc:4d:a3:09:d8:e5:ff:40:ff:e1:52:f9:87:59: 93:48:1a:3b:c2:7d:c9:52:d5:91:b0:85:1e:87:70:23:eb:59: 63:cc:2e:3b:fa:3b:e6:93:fa:90:1e:f2:b1:98:68:77:b4:8a: 73:b7:fb:2d:7b:84:1b:35:84:1c:18:94:aa:a0:69:9d:4e:f9: 54:7d:46:12:f8:95:e9:ae:f6:05:6f:d8:7a:8d:c6:90:56:49: 49:03:c9:44:8b:94:01:e1:24:21:6f:e8:78:e3:13:43:84:1f: 2b:2d:72:54:5f:53:b9:ac:19:a4:0f:04:60:60:ee:bf:d3:6e: ea:65:c0:b0:82:30:eb:29:c2:43:47:09:9b:9e:8b:e7:09:d2: 56:c8:4b:7d:21:24:6b:54:4d:7e:7c:72:a2:33:fb:2d:d9:32: cf:fe:97:41:5d:e6:85:a0:20:e3:5a:2c:18:d8:66:e6:70:b7: b8:67:af:0d:16:65:27:52:17:11:6d:00:6b:c7:b0:13:9d:e8: 53:7c:24:a2:28:a8:b7:41:49:29:8f:9a:da:e9:4f:f4:83:f7: c9:09:ad:cd -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9XKy33PufceqQ3F0n8HT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOWNkOGM3MWE2ZTMzMjgyYzA0NWQ4Zjg4YzNiMzc4YWNm NDFiZDkwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDIyNDhjZTQzNzlhYmZhZDc5ZWI0N2ZiMTIwZjRkZWVjMjMyOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrzQNJ6DuGYyFema+03okHxyIXDK e3ojFbTBZ8V3TAdIEah3xNpLUGKh69drDMoTPFHdIB1n167OQGT6VrCnejM/3A0g C/JzYPayzTp1n5O+WXu7ShnLQP8xkw3mtRDiGlfNg1jWH1dVjV+F4JF2M44wZR4T JYO7ZoAkbqaqip5cOXsecxjAV5PrcFU2ePmD8h0iXwQ/+rHtFNA1FJBc0aUyZQV1 KKOjh1BtJ00YF3YIHvreN2nZRzvEcFR5qlECxqFDVnKIs7j/b1uHDNKGbJnTGuiD mPYb7SHreogV+g3zVtrhg5D++97sfJ3LEJXhcHTXuX0OlGqXfmTwBaOrGQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFA0iSM5Deav61560f7Eg9N7sIyi5MB8GA1UdIwQY MBaAFKCc2McabjMoLARdj4jDs3is9BvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMt NmU4ZTA3ZDY2YzliLzEvRFNKSXprTjVxX3JYbnJSX3NTRDAzdXdqS0xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMtNmU4ZTA3ZDY2Yzli LzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQDshWgMAwD BAC5BAEDBAK5BAAwDQQCAAIwBwMFACoCZEAwDQYJKoZIhvcNAQELBQADggEBAKuV wCUR9HoTbjak2r5CsNNN3mIMNk2xKQAS2BWIGdQ6HLLaicRB7Jb8TaMJ2OX/QP/h UvmHWZNIGjvCfclS1ZGwhR6HcCPrWWPMLjv6O+aT+pAe8rGYaHe0inO3+y17hBs1 hBwYlKqgaZ1O+VR9RhL4lemu9gVv2HqNxpBWSUkDyUSLlAHhJCFv6HjjE0OEHyst clRfU7msGaQPBGBg7r/TbuplwLCCMOspwkNHCZuei+cJ0lbIS30hJGtUTX58cqIz +y3ZMs/+l0Fd5oWgIONaLBjYZuZwt7hnrw0WZSdSFxFtAGvHsBOd6FN8JKIoqLdB SSmPmtrpT/SD98kJrc0= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:24 2026 by rpki-client