This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/DJdhUMC3KGFFZZ5lCKkYIdqzjBM.roa File: DJdhUMC3KGFFZZ5lCKkYIdqzjBM.roa (raw, json) Hash identifier: X7w8hr+E7n1YVto9nQ09eEPyzlLrAcr5q43Gop780I8= Subject key identifier: 0C:97:61:50:C0:B7:28:61:45:65:9E:65:08:A9:18:21:DA:B3:8C:13 Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Certificate serial: 019B77C7321A27E1C43D5CD276E48994A4C0 Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/DJdhUMC3KGFFZZ5lCKkYIdqzjBM.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213473 IP address blocks: 77.92.160.0/21 maxlen: 21 77.92.160.0/24 maxlen: 24 77.92.161.0/24 maxlen: 24 77.92.162.0/24 maxlen: 24 77.92.163.0/24 maxlen: 24 77.92.164.0/24 maxlen: 24 77.92.165.0/24 maxlen: 24 77.92.166.0/24 maxlen: 24 77.92.167.0/24 maxlen: 24 185.225.56.0/22 maxlen: 22 185.225.56.0/24 maxlen: 24 185.225.57.0/24 maxlen: 24 185.225.58.0/24 maxlen: 24 185.225.59.0/24 maxlen: 24 2a14:e500::/29 maxlen: 29 2a14:e500::/30 maxlen: 30 2a14:e504::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:32:1a:27:e1:c4:3d:5c:d2:76:e4:89:94:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c976150c0b7286145659e6508a91821dab38c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:e0:f5:bb:1b:61:4a:8d:a9:86:42:88:d7: 06:3b:97:3d:9d:31:ce:e3:12:54:e4:e7:a9:7d:3d: 2a:db:e0:6f:64:21:a5:a7:f7:ef:3a:34:87:ff:34: 18:d9:cf:49:dc:78:99:da:1a:dc:63:24:96:84:43: a0:cc:af:29:40:8c:b9:af:de:6d:ef:6a:14:91:50: b9:aa:3b:87:90:8b:55:85:78:be:b8:90:01:6a:51: 45:cf:f0:ed:79:0d:2f:9a:d7:95:8d:ab:05:54:64: 04:8f:44:43:ce:c9:8a:20:33:62:b5:2b:40:e2:f6: 32:77:0f:84:5c:2e:c3:8e:c5:34:6a:06:64:64:4e: 8c:52:37:2c:16:9c:98:65:62:37:b8:e0:02:e7:60: 22:f6:0e:95:2f:17:e7:fc:0b:ed:42:ce:23:ce:88: cc:a6:cb:1b:58:fc:6b:18:f2:37:3f:ec:20:57:50: d8:6d:ec:c6:ea:fb:d6:f3:8e:f7:da:f5:37:11:e8: 62:5a:a7:ee:f7:b5:63:64:c1:b2:07:96:c4:81:a2: f4:f9:48:a1:13:83:7d:56:97:2d:94:38:af:24:43: 61:0c:4d:7c:38:a7:f2:f4:11:85:ae:61:3c:05:23: 2e:a1:cd:58:5f:4e:29:a6:28:a9:f5:57:57:fc:54: e8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:97:61:50:C0:B7:28:61:45:65:9E:65:08:A9:18:21:DA:B3:8C:13 X509v3 Authority Key Identifier: keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/DJdhUMC3KGFFZZ5lCKkYIdqzjBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.160.0/21 185.225.56.0/22 IPv6: 2a14:e500::/29 Signature Algorithm: sha256WithRSAEncryption 76:95:a5:b3:06:d4:64:09:6a:49:75:7b:48:8c:46:90:13:4c: 45:77:ee:4d:8a:f9:aa:71:26:ab:07:74:29:48:27:16:1c:36: 37:9a:3c:dd:42:12:d8:76:e2:34:3d:44:f4:7a:2f:c5:55:12: 8e:56:97:52:87:1a:c9:f8:62:58:3f:b0:3e:81:d2:5c:40:7b: 47:0c:34:7a:91:f7:83:b8:27:67:9b:36:a6:2c:91:aa:e4:ad: f6:6b:37:aa:89:5d:4e:fd:6f:79:d9:ae:99:f0:5a:35:0e:38: fc:2b:30:d6:f9:72:0b:e8:03:ca:07:0d:67:0e:d9:03:e2:32: 82:2c:fd:cd:4d:d7:13:7f:66:2f:2a:b0:78:06:de:5c:c9:02: 27:74:b7:ee:c9:fa:c6:c4:b1:45:72:8d:cd:e3:57:fe:3e:07: 30:bb:1a:0e:3a:17:3f:ec:7d:a1:73:e7:6f:05:d0:f4:8f:11: 81:5b:9c:25:e4:f1:1f:f4:01:f4:a3:7f:30:fd:15:07:99:ea: 1c:48:bc:4e:65:89:5d:58:18:99:03:59:02:2f:5e:51:ce:b1: a4:c7:b4:1e:aa:bd:5f:e3:4f:dd:e2:b6:9d:56:55:16:e4:7d: 8c:eb:f6:b9:ba:b4:c4:54:2e:da:48:bb:2b:73:68:ba:dd:28: a1:bd:5d:cb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xzIaJ+HEPVzSduSJlKTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZmY5NzQ5ZWUyMmYwMDkyNTdiODlkODM0MGNjNjRmYjQw YmZjOTEwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzk3NjE1MGMwYjcyODYxNDU2NTllNjUwOGE5MTgyMWRhYjM4YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM3g9bsbYUqNqYZCiNcGO5c9nTHO 4xJU5OepfT0q2+BvZCGlp/fvOjSH/zQY2c9J3HiZ2hrcYySWhEOgzK8pQIy5r95t 72oUkVC5qjuHkItVhXi+uJABalFFz/DteQ0vmteVjasFVGQEj0RDzsmKIDNitStA 4vYydw+EXC7DjsU0agZkZE6MUjcsFpyYZWI3uOAC52Ai9g6VLxfn/AvtQs4jzojM pssbWPxrGPI3P+wgV1DYbezG6vvW84732vU3EehiWqfu97VjZMGyB5bEgaL0+Uih E4N9VpctlDivJENhDE18OKfy9BGFrmE8BSMuoc1YX04ppiip9VdX/FToJwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAyXYVDAtyhhRWWeZQipGCHas4wTMB8GA1UdIwQY MBaAFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmIt MDBmYWVjYWM3ZGViLzEvREpkaFVNQzNLR0ZGWlo1bENLa1lJZHF6akJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmItMDBmYWVjYWM3ZGVi LzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTVygAwQC ueE4MA0EAgACMAcDBQMqFOUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2laWzBtRkCWpJ dXtIjEaQE0xFd+5NivmqcSarB3QpSCcWHDY3mjzdQhLYduI0PUT0ei/FVRKOVpdS hxrJ+GJYP7A+gdJcQHtHDDR6kfeDuCdnmzamLJGq5K32azeqiV1O/W952a6Z8Fo1 Djj8KzDW+XIL6APKBw1nDtkD4jKCLP3NTdcTf2YvKrB4Bt5cyQIndLfuyfrGxLFF co3N41f+PgcwuxoOOhc/7H2hc+dvBdD0jxGBW5wl5PEf9AH0o38w/RUHmeocSLxO ZYldWBiZA1kCL15RzrGkx7Qeqr1f40/d4radVlUW5H2M6/a5urTEVC7aSLsrc2i6 3SihvV3L -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:37 2026 by rpki-client