This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/DjR-5E2s61dWiz4CrJWhikXnilc.roa File: DjR-5E2s61dWiz4CrJWhikXnilc.roa (raw, json) Hash identifier: L2CETFlv7+g9GBoVeqBtuvkWfA/GwQy/MUq9/ODGq8M= Subject key identifier: 0E:34:7E:E4:4D:AC:EB:57:56:8B:3E:02:AC:95:A1:8A:45:E7:8A:57 Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b Certificate serial: 019B2C5BC350BADFA6D33B5D63D92429EF7C Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/DjR-5E2s61dWiz4CrJWhikXnilc.roa Signing time: Wed 17 Dec 2025 12:49:29 +0000 ROA not before: Wed 17 Dec 2025 12:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203329 IP address blocks: 2a00:b404:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:5b:c3:50:ba:df:a6:d3:3b:5d:63:d9:24:29:ef:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b Validity Not Before: Dec 17 12:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e347ee44daceb57568b3e02ac95a18a45e78a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:b0:a7:18:ec:49:34:41:2e:cd:97:d1:2b: 34:68:e1:60:3d:b8:17:65:c9:ad:06:db:2f:98:00: df:52:ed:e4:14:65:da:58:a0:b5:97:88:76:ad:62: 3b:c6:8e:59:dd:6f:dc:93:74:87:1b:eb:d7:0f:b6: ef:33:ca:6e:22:48:97:32:d6:a6:fb:68:1a:e5:27: e5:68:87:ce:f8:f9:e2:c6:4d:0f:d7:9f:e5:8a:20: 8f:0e:a6:02:48:ab:16:1a:d4:2a:a2:c7:32:02:64: e0:84:30:2c:07:d6:3d:2e:fe:a8:f3:0b:d8:55:00: bf:ed:af:a0:80:4b:c4:97:36:69:25:f1:6e:f7:ff: 66:91:e4:47:cd:43:57:be:b9:cb:57:ea:cd:87:ee: 65:5a:0b:87:4f:c4:22:2b:69:d5:50:42:49:47:c2: 9e:d2:6c:4f:b0:5c:0c:7f:c8:56:21:a0:16:86:70: 3a:51:ea:a7:82:c4:3f:d9:1d:3d:23:94:3d:78:c9: 23:90:80:1a:e0:4e:81:c5:4a:43:a4:c8:4d:41:74: b1:96:70:43:df:f4:21:e2:f4:3d:d1:c7:88:62:f7: 2d:bd:02:bd:5b:07:56:65:98:cb:99:24:ac:e1:22: e8:24:f8:08:92:b7:3e:01:12:e1:0e:69:b0:26:73: e1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:34:7E:E4:4D:AC:EB:57:56:8B:3E:02:AC:95:A1:8A:45:E7:8A:57 X509v3 Authority Key Identifier: keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/DjR-5E2s61dWiz4CrJWhikXnilc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:b404:e000::/36 Signature Algorithm: sha256WithRSAEncryption 69:ec:f8:7f:d7:03:5a:fc:99:3d:d3:96:c2:3d:76:3a:cd:e7: 9a:11:4c:b9:eb:83:55:10:b5:8a:fd:ac:97:ba:ad:e6:67:46: 05:4b:6c:19:24:09:71:38:25:52:8d:3f:1f:3f:52:56:9d:c4: 19:78:38:d7:7e:aa:d5:49:e8:96:54:2d:1e:2a:2f:db:2f:5f: 98:24:6f:ff:f4:68:6a:c9:3e:be:06:3c:49:75:1c:40:b4:63: 52:11:62:cd:43:4f:c7:b1:de:2c:7a:23:7b:72:3c:ad:4b:45: c6:fb:9f:17:8d:12:c8:99:63:9d:6c:e5:bf:7a:43:de:4d:ba: 38:8f:52:35:c9:51:04:55:da:c9:5d:65:f8:8f:30:68:10:40: 95:1f:99:26:31:0e:be:9f:9f:72:82:a5:8a:53:3e:b3:76:11: 45:2a:35:92:47:6d:eb:18:4b:d5:8d:34:51:10:ca:4c:54:8f: d6:90:66:42:a3:df:fa:00:b0:c0:63:0f:09:71:b3:08:a3:64: 4b:ce:0d:71:73:62:32:87:29:55:81:c6:ed:e5:54:ee:f4:a0: 94:f1:8e:e4:f4:87:66:b4:60:b9:eb:6e:3b:6a:f5:ab:ff:3a: c2:70:12:87:c3:79:3a:d5:c1:35:81:70:ff:75:61:ba:49:2d: cb:9a:23:af -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZssW8NQut+m0ztdY9kkKe98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl MzM5N2IwHhcNMjUxMjE3MTI0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTM0N2VlNDRkYWNlYjU3NTY4YjNlMDJhYzk1YTE4YTQ1ZTc4YTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GKwpxjsSTRBLs2X0Ss0aOFgPbgX ZcmtBtsvmADfUu3kFGXaWKC1l4h2rWI7xo5Z3W/ck3SHG+vXD7bvM8puIkiXMtam +2ga5SflaIfO+Pnixk0P15/liiCPDqYCSKsWGtQqoscyAmTghDAsB9Y9Lv6o8wvY VQC/7a+ggEvElzZpJfFu9/9mkeRHzUNXvrnLV+rNh+5lWguHT8QiK2nVUEJJR8Ke 0mxPsFwMf8hWIaAWhnA6UeqngsQ/2R09I5Q9eMkjkIAa4E6BxUpDpMhNQXSxlnBD 3/Qh4vQ90ceIYvctvQK9WwdWZZjLmSSs4SLoJPgIkrc+ARLhDmmwJnPhiwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFA40fuRNrOtXVos+AqyVoYpF54pXMB8GA1UdIwQY MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt Yjg5YTUxMWMzYmJkLzEvRGpSLTVFMnM2MWRXaXo0Q3JKV2hpa1huaWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgC0BOAw DQYJKoZIhvcNAQELBQADggEBAGns+H/XA1r8mT3TlsI9djrN55oRTLnrg1UQtYr9 rJe6reZnRgVLbBkkCXE4JVKNPx8/UladxBl4ONd+qtVJ6JZULR4qL9svX5gkb//0 aGrJPr4GPEl1HEC0Y1IRYs1DT8ex3ix6I3tyPK1LRcb7nxeNEsiZY51s5b96Q95N ujiPUjXJUQRV2sldZfiPMGgQQJUfmSYxDr6fn3KCpYpTPrN2EUUqNZJHbesYS9WN NFEQykxUj9aQZkKj3/oAsMBjDwlxswijZEvODXFzYjKHKVWBxu3lVO70oJTxjuT0 h2a0YLnrbjtq9av/OsJwEofDeTrVwTWBcP91YbpJLcuaI68= -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:11 2025 by rpki-client