This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/dJqD19E6mk5uleQws4cS1vrhxjc.roa File: dJqD19E6mk5uleQws4cS1vrhxjc.roa (raw, json) Hash identifier: B93wH1HCjYPCakWp9euufDKeozgy2SCaB0olYXjrVtw= Subject key identifier: 74:9A:83:D7:D1:3A:9A:4E:6E:95:E4:30:B3:87:12:D6:FA:E1:C6:37 Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7 Certificate serial: 019B7CED7948111922D426695E4070EF76FA Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/dJqD19E6mk5uleQws4cS1vrhxjc.roa Signing time: Fri 02 Jan 2026 04:18:16 +0000 ROA not before: Fri 02 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41150 IP address blocks: 195.64.190.0/24 maxlen: 24 195.64.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:79:48:11:19:22:d4:26:69:5e:40:70:ef:76:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7 Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=749a83d7d13a9a4e6e95e430b38712d6fae1c637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:bd:4a:a0:00:0f:0b:6b:39:9c:c6:3d:76: 22:32:74:a4:f9:0d:41:1b:68:b0:6e:87:05:b4:ef: db:69:7a:a7:29:4e:dc:4d:75:ee:92:8f:6b:df:1b: bb:fd:de:83:cc:80:83:36:1d:fd:85:7e:16:13:43: 8b:12:d5:a0:36:ae:01:be:06:44:a4:1c:55:25:8d: 0f:a9:c7:bd:9d:bc:26:80:9d:6e:25:04:50:72:84: ea:20:18:ca:e3:94:a0:eb:4b:ae:c7:20:da:5c:e4: f2:21:83:24:e8:eb:42:2c:7d:f1:85:63:9a:3a:d9: 73:b6:cd:a5:17:c6:db:78:81:df:1a:9a:42:6d:90: 6d:7d:21:b8:72:ac:eb:d5:f1:16:c7:24:11:c4:89: 7a:dc:2a:0c:39:92:2c:6a:2c:f4:5b:11:82:93:d9: 2a:cb:60:ab:cb:ce:2b:e8:6b:b7:c6:0c:52:d0:2f: a5:20:c6:b7:bd:37:bb:a1:c8:c4:7a:d9:54:4c:0a: c1:cc:06:49:ba:86:ab:d0:15:13:dd:e5:cd:b2:e2: ac:80:b5:9e:a2:22:a7:5d:93:bb:ed:b6:85:18:6f: 07:a9:43:51:9d:89:b3:52:0d:d4:f6:0c:fb:0b:79: 0b:30:8e:40:9e:ab:2b:aa:4a:e6:4c:8a:00:5c:4c: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:83:D7:D1:3A:9A:4E:6E:95:E4:30:B3:87:12:D6:FA:E1:C6:37 X509v3 Authority Key Identifier: keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/dJqD19E6mk5uleQws4cS1vrhxjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.190.0/23 Signature Algorithm: sha256WithRSAEncryption 43:19:5a:bd:10:c7:2d:ac:9c:8c:a4:b6:b1:09:6d:50:d1:2f: dc:de:78:1e:24:12:28:f0:b8:85:f4:7f:ed:99:fa:0e:2a:84: f9:32:3a:80:82:19:b2:0b:fa:e2:f2:f1:f8:14:37:e0:36:ff: 72:00:85:95:31:76:4f:01:c1:96:08:11:b9:d9:8d:f1:7f:45: 30:e2:ad:0e:bf:78:fb:6d:f5:5a:bc:bf:5e:7b:c4:d9:a7:d9: 45:91:c8:fe:f3:cc:ba:98:5f:41:e3:c1:2a:49:c5:c8:58:8c: 95:10:09:d9:68:ec:42:d0:59:6c:b5:bb:71:fa:66:17:47:4d: 71:a8:0a:46:4a:5e:98:6d:92:b9:66:40:af:00:25:7f:76:4e: 02:82:50:99:d1:80:b7:ec:66:3c:db:0b:18:d2:0d:c8:1c:63: 18:76:c3:a7:93:ef:49:3d:fe:65:a5:a0:f3:25:4a:79:b3:a8: 35:eb:93:d8:a9:9f:71:78:55:f2:84:11:3a:a7:fd:60:bc:a3: 33:9d:3e:0c:1a:8a:6d:87:b7:f7:72:79:2e:62:d3:c1:0d:29: db:06:e4:8c:44:c7:26:7e:10:39:5a:4f:c4:14:70:4d:74:ad: 72:79:e5:c1:cc:c7:9b:fd:8a:1e:f6:41:ca:5b:df:cb:4e:54: 74:f7:8f:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87XlIERki1CZpXkBw73b6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MWZmZTdkMjk3ZWU0ZTFkNGQyMzMzNWE5YWI0YTAwODhj MDI1ZDcwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDlhODNkN2QxM2E5YTRlNmU5NWU0MzBiMzg3MTJkNmZhZTFjNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmi9SqAADwtrOZzGPXYiMnSk+Q1B G2iwbocFtO/baXqnKU7cTXXuko9r3xu7/d6DzICDNh39hX4WE0OLEtWgNq4BvgZE pBxVJY0Pqce9nbwmgJ1uJQRQcoTqIBjK45Sg60uuxyDaXOTyIYMk6OtCLH3xhWOa Otlzts2lF8bbeIHfGppCbZBtfSG4cqzr1fEWxyQRxIl63CoMOZIsaiz0WxGCk9kq y2Cry84r6Gu3xgxS0C+lIMa3vTe7ocjEetlUTArBzAZJuoar0BUT3eXNsuKsgLWe oiKnXZO77baFGG8HqUNRnYmzUg3U9gz7C3kLMI5AnqsrqkrmTIoAXEwsRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSag9fROppObpXkMLOHEtb64cY3MB8GA1UdIwQY MBaAFPQf/n0pfuTh1NIzNamrSgCIwCXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEt NDNkOGE2ZmQxZjQ1LzEvZEpxRDE5RTZtazV1bGVRd3M0Y1MxdnJoeGpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEtNDNkOGE2ZmQxZjQ1 LzEvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0C+MA0G CSqGSIb3DQEBCwUAA4IBAQBDGVq9EMctrJyMpLaxCW1Q0S/c3ngeJBIo8LiF9H/t mfoOKoT5MjqAghmyC/ri8vH4FDfgNv9yAIWVMXZPAcGWCBG52Y3xf0Uw4q0Ov3j7 bfVavL9ee8TZp9lFkcj+88y6mF9B48EqScXIWIyVEAnZaOxC0Flstbtx+mYXR01x qApGSl6YbZK5ZkCvACV/dk4CglCZ0YC37GY82wsY0g3IHGMYdsOnk+9JPf5lpaDz JUp5s6g165PYqZ9xeFXyhBE6p/1gvKMznT4MGopth7f3cnkuYtPBDSnbBuSMRMcm fhA5Wk/EFHBNdK1yeeXBzMeb/Yoe9kHKW9/LTlR0949q -----END CERTIFICATE-----Generated at Tue Jan 27 09:56:29 2026 by rpki-client