This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Dja78ruX4o7MO5yCfGzKSVMuXBo.roa File: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (raw, json) Hash identifier: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk= Subject key identifier: 0E:36:BB:F2:BB:97:E2:8E:CC:3B:9C:82:7C:6C:CA:49:53:2E:5C:1A Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364ACAE4B1D558F9CB9E95D315F85E Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Dja78ruX4o7MO5yCfGzKSVMuXBo.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.8.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4a:ca:e4:b1:d5:58:f9:cb:9e:95:d3:15:f8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e36bbf2bb97e28ecc3b9c827c6cca49532e5c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:99:12:bf:8a:41:31:d2:f5:30:11:6d:46: 43:51:d5:08:8f:72:79:89:2f:ba:88:fb:94:d0:87: 85:cf:8c:8f:bd:ee:19:3c:66:7d:8f:c0:0a:a3:8f: 89:15:be:78:27:2a:f3:77:05:27:e0:de:8c:23:6a: bd:07:24:7a:ac:ee:4e:28:93:b2:50:81:53:05:45: 57:24:51:38:47:e9:25:9a:16:59:18:bc:cb:49:51: eb:24:72:60:33:f6:74:81:26:27:81:4d:37:3b:24: ce:68:d0:1e:01:b5:0c:50:38:48:a1:a8:39:06:8e: 67:6d:72:8a:82:57:e5:8f:fd:b0:db:35:1d:12:41: 3b:82:a7:72:db:30:5e:9d:73:5a:95:7a:9f:96:62: b0:ef:e3:f6:61:b8:91:d0:d4:89:53:89:b6:13:c5: 67:ce:ba:76:3a:f2:44:7d:99:40:c4:8d:11:10:26: b6:94:de:66:42:8b:f4:f0:0e:38:5d:0a:5c:19:52: 92:8a:43:ed:3f:ac:ef:c8:9c:d0:37:3b:fe:57:39: 02:3e:95:65:9b:81:00:2b:bf:73:fd:fb:77:dc:fa: 02:4d:ed:43:6e:88:a9:f9:fd:a4:09:35:1e:88:06: 57:b5:3c:32:58:99:5a:d7:d4:e5:ab:dd:18:1f:5f: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:BB:F2:BB:97:E2:8E:CC:3B:9C:82:7C:6C:CA:49:53:2E:5C:1A X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Dja78ruX4o7MO5yCfGzKSVMuXBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.16.0/24 Signature Algorithm: sha256WithRSAEncryption 22:24:60:86:f8:ab:3b:21:81:a5:0a:e9:7b:36:97:e5:c7:c5: 27:d9:da:80:18:eb:0e:9b:73:70:06:d8:36:9c:47:db:e9:fb: 94:40:17:b2:d8:b7:59:eb:91:8e:5a:ab:47:ce:b6:66:c4:a6: c1:a4:3f:63:a3:9f:93:b9:ed:e8:89:fd:28:14:2b:ce:3c:22: e6:12:e1:94:1d:01:6b:ef:73:91:e9:26:1e:4f:69:71:d9:cb: 71:50:25:fe:0e:ef:42:e9:8c:54:1f:b0:6e:05:d0:0a:df:f8: a3:f8:c5:1d:8a:e4:f9:c4:a0:b9:83:a2:9e:be:09:44:d4:5f: bb:ef:a6:dd:38:fc:7e:90:89:bb:00:c2:ff:6a:8a:a3:83:c0: 3a:35:4b:14:a3:6b:a2:c4:20:5b:04:bb:aa:53:cc:51:56:33: f5:a8:d2:46:d0:d9:b7:4f:25:59:2a:37:0a:e6:30:61:56:67: 08:bd:66:1b:5c:1c:3b:30:bf:1e:ad:6a:93:8c:b4:aa:83:92: e2:44:ea:40:08:70:64:63:1b:51:77:2f:76:72:bf:56:b2:30: fc:c2:97:f9:51:23:3f:c1:3d:6a:1b:ac:ba:1b:98:88:7c:be: 01:3e:db:51:cf:9a:20:9e:cd:e8:50:b1:fd:15:99:fc:e6:c3: 85:88:d9:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkrK5LHVWPnLnpXTFfheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTM2YmJmMmJiOTdlMjhlY2MzYjljODI3YzZjY2E0OTUzMmU1YzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthaZEr+KQTHS9TARbUZDUdUIj3J5 iS+6iPuU0IeFz4yPve4ZPGZ9j8AKo4+JFb54JyrzdwUn4N6MI2q9ByR6rO5OKJOy UIFTBUVXJFE4R+klmhZZGLzLSVHrJHJgM/Z0gSYngU03OyTOaNAeAbUMUDhIoag5 Bo5nbXKKglflj/2w2zUdEkE7gqdy2zBenXNalXqflmKw7+P2YbiR0NSJU4m2E8Vn zrp2OvJEfZlAxI0RECa2lN5mQov08A44XQpcGVKSikPtP6zvyJzQNzv+VzkCPpVl m4EAK79z/ft33PoCTe1Dboip+f2kCTUeiAZXtTwyWJla19Tlq90YH185pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA42u/K7l+KOzDucgnxsyklTLlwaMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvRGphNzhydVg0bzdNTzV5Q2ZHektTVk11WEJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgQMA0G CSqGSIb3DQEBCwUAA4IBAQAiJGCG+Ks7IYGlCul7Npflx8Un2dqAGOsOm3NwBtg2 nEfb6fuUQBey2LdZ65GOWqtHzrZmxKbBpD9jo5+Tue3oif0oFCvOPCLmEuGUHQFr 73OR6SYeT2lx2ctxUCX+Du9C6YxUH7BuBdAK3/ij+MUdiuT5xKC5g6KevglE1F+7 76bdOPx+kIm7AML/aoqjg8A6NUsUo2uixCBbBLuqU8xRVjP1qNJG0Nm3TyVZKjcK 5jBhVmcIvWYbXBw7ML8erWqTjLSqg5LiROpACHBkYxtRdy92cr9WsjD8wpf5USM/ wT1qG6y6G5iIfL4BPttRz5ogns3oULH9FZn85sOFiNnI -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:32 2026 by rpki-client