This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/dJeU2d3NWjx1lsl1DJGshHnRCGI.roa File: dJeU2d3NWjx1lsl1DJGshHnRCGI.roa (raw, json) Hash identifier: Ej+gk8v3uPhQQghNflw4x1l6EEeEieQHfKZUGqRTvJ8= Subject key identifier: 74:97:94:D9:DD:CD:5A:3C:75:96:C9:75:0C:91:AC:84:79:D1:08:62 Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 019B7C12789949227164282D7174D7D0F1BF Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/dJeU2d3NWjx1lsl1DJGshHnRCGI.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 185.10.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:78:99:49:22:71:64:28:2d:71:74:d7:d0:f1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=749794d9ddcd5a3c7596c9750c91ac8479d10862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:5f:0f:df:3e:f0:ce:ba:ed:f4:2f:97:aa: a7:0b:ce:36:9d:8c:16:54:68:92:30:e6:8b:8f:0d: c6:22:e8:60:f4:e6:a7:d1:5d:9c:79:b4:54:d1:6b: 18:36:62:74:be:ab:c4:00:fa:4a:f1:8c:71:0e:4b: e4:a0:06:f3:d3:8f:0e:5f:25:c2:e3:4c:cc:4a:38: e3:fd:21:47:54:7f:37:71:b9:a0:b1:a0:18:6e:7e: 76:ea:6d:3b:93:55:d4:e2:c4:ec:67:e7:5c:d8:57: 08:4b:c9:58:88:a7:2a:fb:0f:4a:30:56:e8:25:37: ed:fd:e1:95:d0:02:c8:52:b0:5d:27:ad:0c:68:f0: 4c:39:f6:27:8c:9d:c9:6e:f9:de:d9:80:be:fb:e0: c4:39:9c:eb:e9:95:57:cb:9c:ff:7d:f7:1b:41:dd: 9b:6f:63:68:c7:e1:98:fc:bc:e8:6c:df:d0:50:87: bc:a1:13:c0:b5:29:fe:bd:20:c5:1f:9e:20:e8:6a: fb:8a:bc:99:45:8f:c6:52:b3:ff:5e:bc:9a:30:42: 71:bf:1d:8c:94:1c:e4:da:28:bf:fe:08:28:da:09: 87:ca:12:56:b6:ce:fe:d2:19:05:ee:65:c6:c1:db: 95:38:7f:b2:ed:a3:05:42:b2:f9:e7:2e:4f:b7:83: 37:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:97:94:D9:DD:CD:5A:3C:75:96:C9:75:0C:91:AC:84:79:D1:08:62 X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/dJeU2d3NWjx1lsl1DJGshHnRCGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.120.0/23 Signature Algorithm: sha256WithRSAEncryption 90:cd:33:b2:aa:bb:b7:12:fb:bf:f4:0c:c5:6e:e3:13:4c:02: fe:a6:fb:21:69:03:3d:7c:a3:b3:70:e9:bb:f7:7a:94:a9:da: 91:7e:cf:bc:9c:64:67:38:9b:89:6a:f8:d6:58:49:f7:2b:1f: 65:aa:8b:76:5e:0f:c3:f7:df:56:53:e9:63:03:22:d1:98:fa: b3:e0:ce:d7:fc:c2:4e:b9:be:e5:6a:1e:86:df:05:41:df:31: 98:d9:53:56:8d:b0:a4:9b:5f:3c:00:e3:bf:0f:ca:e3:25:a7: a0:52:a6:2c:3a:d0:60:7b:2b:e7:7b:8e:db:46:01:34:71:53: 71:f5:1d:21:f5:cb:be:32:ab:6b:76:7f:f8:c8:99:98:64:41: c2:ec:32:f8:e4:20:08:02:03:bf:f7:15:9a:76:9a:13:76:b3: 8e:b7:23:e1:fc:69:66:ab:d4:2c:22:53:79:4a:a2:7c:e6:61: b0:a7:5e:9c:05:4b:19:83:44:77:c0:9d:88:a1:a8:a5:28:8c: b1:3e:42:55:18:09:8f:3c:04:7a:9d:fd:dd:db:65:ec:da:b1: ac:32:51:60:5a:c2:96:d4:13:2b:55:0e:55:3f:42:dd:01:d9: 55:e2:ee:1e:50:e6:85:b4:16:1e:ea:89:5c:43:d4:18:d2:f2: 81:c3:c3:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EniZSSJxZCgtcXTX0PG/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDk3OTRkOWRkY2Q1YTNjNzU5NmM5NzUwYzkxYWM4NDc5ZDEwODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1BfD98+8M667fQvl6qnC842nYwW VGiSMOaLjw3GIuhg9Oan0V2cebRU0WsYNmJ0vqvEAPpK8YxxDkvkoAbz048OXyXC 40zMSjjj/SFHVH83cbmgsaAYbn526m07k1XU4sTsZ+dc2FcIS8lYiKcq+w9KMFbo JTft/eGV0ALIUrBdJ60MaPBMOfYnjJ3Jbvne2YC+++DEOZzr6ZVXy5z/ffcbQd2b b2Nox+GY/LzobN/QUIe8oRPAtSn+vSDFH54g6Gr7iryZRY/GUrP/XryaMEJxvx2M lBzk2ii//ggo2gmHyhJWts7+0hkF7mXGwduVOH+y7aMFQrL55y5Pt4M3LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSXlNndzVo8dZbJdQyRrIR50QhiMB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvZEplVTJkM05XangxbHNsMURKR3NoSG5SQ0dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQp4MA0G CSqGSIb3DQEBCwUAA4IBAQCQzTOyqru3Evu/9AzFbuMTTAL+pvshaQM9fKOzcOm7 93qUqdqRfs+8nGRnOJuJavjWWEn3Kx9lqot2Xg/D999WU+ljAyLRmPqz4M7X/MJO ub7lah6G3wVB3zGY2VNWjbCkm188AOO/D8rjJaegUqYsOtBgeyvne47bRgE0cVNx 9R0h9cu+Mqtrdn/4yJmYZEHC7DL45CAIAgO/9xWadpoTdrOOtyPh/Glmq9QsIlN5 SqJ85mGwp16cBUsZg0R3wJ2IoailKIyxPkJVGAmPPAR6nf3d22Xs2rGsMlFgWsKW 1BMrVQ5VP0LdAdlV4u4eUOaFtBYe6olcQ9QY0vKBw8O8 -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:35 2026 by rpki-client