This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/DJtPMCH1_eiwDT79e8HqwTlL5Do.roa File: DJtPMCH1_eiwDT79e8HqwTlL5Do.roa (raw, json) Hash identifier: X+r4syN6QZd0tX31W/SeV5RknE2K5CdhB+d8e4upXrM= Subject key identifier: 0C:9B:4F:30:21:F5:FD:E8:B0:0D:3E:FD:7B:C1:EA:C1:39:4B:E4:3A Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c Certificate serial: 019B78A318573A9C32023F7F48CAA71E29E4 Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/DJtPMCH1_eiwDT79e8HqwTlL5Do.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 185.147.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:18:57:3a:9c:32:02:3f:7f:48:ca:a7:1e:29:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c9b4f3021f5fde8b00d3efd7bc1eac1394be43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:99:d5:7a:fa:70:a9:b0:d8:c5:b8:74:a5: ea:ba:00:ed:f8:48:01:79:ae:e5:74:7a:1c:e2:98: cf:a3:36:60:6c:31:68:ab:53:bb:c1:65:14:8e:78: 74:77:bf:a9:8e:a4:46:c4:14:94:18:71:10:e2:14: f3:0c:7f:12:85:5f:a1:ff:9f:b8:61:4d:4a:42:a1: 3f:2c:85:4a:d7:43:89:79:3f:ce:8d:85:12:f9:5b: 9b:25:21:5f:fe:6d:97:2a:25:5c:80:77:01:5c:24: f0:83:d0:c9:8d:9e:98:75:b1:96:00:28:17:1a:36: 0c:46:e5:25:d8:d2:06:b5:3b:28:3a:dd:9c:fd:26: 4a:ec:6a:5b:94:56:44:76:9a:e9:a4:0c:c8:ac:0e: 90:11:ee:71:5e:ae:ee:70:72:cf:ad:fe:7b:63:2e: 74:c9:87:b5:8d:8b:d5:4e:5a:fd:ca:03:58:56:1a: 30:f1:4d:d9:44:8f:f3:28:94:fd:c7:1b:8c:5a:65: b6:f5:2c:fa:9f:c2:9e:ca:0b:c1:86:44:56:8a:92: ad:9b:ff:63:71:f0:3d:8f:29:6b:ec:7d:f0:62:c4: a8:00:98:8a:32:12:75:b3:9e:37:ff:b5:ba:14:5b: 9d:47:d9:41:74:10:fb:73:9a:f1:95:ca:ad:f4:7a: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9B:4F:30:21:F5:FD:E8:B0:0D:3E:FD:7B:C1:EA:C1:39:4B:E4:3A X509v3 Authority Key Identifier: keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/DJtPMCH1_eiwDT79e8HqwTlL5Do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.55.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:24:fb:bb:66:e0:7b:0d:70:67:e7:b5:e9:61:f3:69:4c:2a: f4:1a:87:4a:e4:76:66:a3:42:fa:b6:d5:55:b3:81:35:e9:fa: 72:49:1e:5e:49:b5:2e:02:44:e8:80:0a:5b:75:9a:c3:3f:01: 8d:cc:10:ed:1f:d9:ce:f6:dc:3f:2e:11:af:5e:39:a7:be:09: aa:e2:5e:0a:d5:48:f5:b6:5d:a6:13:f4:d9:2e:62:f6:cf:13: 33:e8:9a:2b:6d:37:fc:59:dd:34:ec:ce:6b:44:22:c5:fc:2b: 6d:a6:30:6e:1a:8e:57:15:8a:a9:26:e9:7a:b7:eb:b2:22:72: 57:19:ee:68:ef:27:64:fa:96:eb:42:e4:f8:d4:be:a5:b7:2a: 27:c0:ea:47:61:ac:fd:4f:77:77:0c:7a:a1:c9:94:09:60:8c: 67:b4:ae:09:16:a8:6c:c8:c4:36:67:1b:ed:9a:3f:51:6a:cd: 61:98:bb:e6:91:f7:9b:4b:ae:95:e3:a4:90:95:2e:52:97:97: 55:7a:09:aa:62:eb:23:50:41:54:56:8a:e0:c7:55:cb:b4:90: d8:95:8b:57:de:a4:52:88:6a:8a:52:44:e3:b8:e1:14:9c:43: 68:9d:14:ec:53:4e:5e:7c:2a:91:10:16:8b:c8:02:27:42:d5: e1:bc:9a:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxhXOpwyAj9/SMqnHinkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNWE2YmEyZDIyNDhiYzQ3ODJhYzBmZGIzYzY0Yjk0NjY0 MGIwOWMwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzliNGYzMDIxZjVmZGU4YjAwZDNlZmQ3YmMxZWFjMTM5NGJlNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLeZ1Xr6cKmw2MW4dKXqugDt+EgB ea7ldHoc4pjPozZgbDFoq1O7wWUUjnh0d7+pjqRGxBSUGHEQ4hTzDH8ShV+h/5+4 YU1KQqE/LIVK10OJeT/OjYUS+VubJSFf/m2XKiVcgHcBXCTwg9DJjZ6YdbGWACgX GjYMRuUl2NIGtTsoOt2c/SZK7GpblFZEdprppAzIrA6QEe5xXq7ucHLPrf57Yy50 yYe1jYvVTlr9ygNYVhow8U3ZRI/zKJT9xxuMWmW29Sz6n8KeygvBhkRWipKtm/9j cfA9jylr7H3wYsSoAJiKMhJ1s543/7W6FFudR9lBdBD7c5rxlcqt9HpC3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAybTzAh9f3osA0+/XvB6sE5S+Q6MB8GA1UdIwQY MBaAFO1aa6LSJIvEeCrA/bPGS5RmQLCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUt MTA3YThkODViZDMwLzEvREp0UE1DSDFfZWl3RFQ3OWU4SHF3VGxMNURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUtMTA3YThkODViZDMw LzEvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZM3MA0G CSqGSIb3DQEBCwUAA4IBAQBqJPu7ZuB7DXBn57XpYfNpTCr0GodK5HZmo0L6ttVV s4E16fpySR5eSbUuAkTogApbdZrDPwGNzBDtH9nO9tw/LhGvXjmnvgmq4l4K1Uj1 tl2mE/TZLmL2zxMz6JorbTf8Wd007M5rRCLF/CttpjBuGo5XFYqpJul6t+uyInJX Ge5o7ydk+pbrQuT41L6ltyonwOpHYaz9T3d3DHqhyZQJYIxntK4JFqhsyMQ2Zxvt mj9Ras1hmLvmkfebS66V46SQlS5Sl5dVegmqYusjUEFUVorgx1XLtJDYlYtX3qRS iGqKUkTjuOEUnENonRTsU05efCqREBaLyAInQtXhvJon -----END CERTIFICATE-----Generated at Fri Jan 2 14:41:00 2026 by rpki-client