This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/djDUS_Dp1clYmZIjyKII50PHWfk.roa File: djDUS_Dp1clYmZIjyKII50PHWfk.roa (raw, json) Hash identifier: vJJCn0Gst4uVO2l5ZPOKkOm7N8sHDzQxxWFRYaz0dr8= Subject key identifier: 76:30:D4:4B:F0:E9:D5:C9:58:99:92:23:C8:A2:08:E7:43:C7:59:F9 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B775973A34FA642AE2E0426EFB9F6DE47 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/djDUS_Dp1clYmZIjyKII50PHWfk.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44209 IP address blocks: 193.53.252.0/24 maxlen: 24 193.53.253.0/24 maxlen: 24 193.56.12.0/24 maxlen: 24 193.56.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:73:a3:4f:a6:42:ae:2e:04:26:ef:b9:f6:de:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7630d44bf0e9d5c958999223c8a208e743c759f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d0:9d:08:bd:5d:52:ec:26:d0:7c:be:04:c8: 19:11:84:60:f7:10:a2:4a:94:f1:40:4d:ab:95:42: 4d:7a:a4:70:fe:45:82:a9:77:53:72:48:9f:90:c1: 78:cb:4e:f2:f9:ee:23:d6:2e:25:89:b7:d7:12:fb: 29:4e:ec:6d:b0:26:ac:25:13:7d:f6:da:93:b4:28: 45:72:4c:a2:f3:eb:99:0c:78:3b:02:6a:96:aa:9a: b5:c5:61:db:84:f4:0e:03:4f:bd:28:f4:2d:f9:c4: 6b:d2:2b:05:ce:51:21:95:13:83:f8:ec:af:ff:26: 95:11:a0:3d:38:32:0f:27:c4:32:03:4f:8d:a7:da: 43:cb:f9:22:ad:33:34:0d:9c:40:0a:20:f3:bd:87: cb:75:24:ee:84:90:b7:22:c3:86:c6:02:ed:7f:c5: 1a:bf:dc:e3:b9:8d:43:01:55:3e:40:b9:b2:3e:31: 2f:9f:5a:f5:5a:fe:1f:0b:04:6e:10:63:29:e4:13: 02:1d:dc:27:02:2e:01:e0:f5:1b:dd:ba:8a:c1:80: b1:71:68:33:c8:aa:a1:b0:41:bf:64:80:80:e8:d3: a4:d3:20:cb:d5:76:c6:8a:5e:b8:8e:26:5f:72:a6: 1a:96:f0:01:e1:b5:c6:57:97:ed:54:30:84:04:82: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:30:D4:4B:F0:E9:D5:C9:58:99:92:23:C8:A2:08:E7:43:C7:59:F9 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/djDUS_Dp1clYmZIjyKII50PHWfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.252.0/23 193.56.12.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:4f:29:c2:e1:a9:0f:ea:e1:b3:ad:da:71:d1:4c:9e:45:0b: bb:94:91:a2:6e:c0:be:22:54:ff:23:88:2c:c1:b8:86:c8:35: f1:e7:0b:0f:b1:1a:a1:63:53:db:ed:f7:bd:0d:5a:bd:fd:80: 4a:38:9d:cb:60:c6:86:f1:62:e2:61:ee:99:c8:1c:e1:df:5f: a8:a4:07:a8:72:ce:3a:18:61:84:17:b7:87:86:5f:62:c7:90: 6b:2a:06:d6:00:88:be:8d:4e:d5:77:c6:c8:d3:87:e7:f7:5b: ee:76:52:6f:5c:c7:ba:7c:ad:91:c1:58:61:0b:01:5b:10:93: 1a:21:9e:86:40:6a:db:b0:d0:f6:d5:d1:17:ff:8e:51:4b:53: 32:5b:20:ac:5e:ed:e4:a2:11:3f:40:0a:82:cd:9e:9b:96:ca: 38:95:82:5d:e9:04:6b:02:17:a7:83:f2:40:d7:ad:45:48:c1: 00:04:6d:c7:cf:0e:d5:1a:fc:76:7b:97:c2:32:0a:b7:9b:58: 03:88:e1:fe:60:93:f0:09:3e:e9:32:dc:da:3f:30:d7:58:2d: c7:db:d8:33:03:28:1d:6c:90:05:dd:35:bb:10:b0:7f:29:e7: 60:27:2a:7d:19:93:e3:a9:9a:1a:e5:e0:fc:f0:de:be:7f:22: 77:b1:13:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WXOjT6ZCri4EJu+59t5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjMwZDQ0YmYwZTlkNWM5NTg5OTkyMjNjOGEyMDhlNzQzYzc1OWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tCdCL1dUuwm0Hy+BMgZEYRg9xCi SpTxQE2rlUJNeqRw/kWCqXdTckifkMF4y07y+e4j1i4libfXEvspTuxtsCasJRN9 9tqTtChFckyi8+uZDHg7AmqWqpq1xWHbhPQOA0+9KPQt+cRr0isFzlEhlROD+Oyv /yaVEaA9ODIPJ8QyA0+Np9pDy/kirTM0DZxACiDzvYfLdSTuhJC3IsOGxgLtf8Ua v9zjuY1DAVU+QLmyPjEvn1r1Wv4fCwRuEGMp5BMCHdwnAi4B4PUb3bqKwYCxcWgz yKqhsEG/ZICA6NOk0yDL1XbGil64jiZfcqYalvAB4bXGV5ftVDCEBIJsrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHYw1Evw6dXJWJmSI8iiCOdDx1n5MB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvZGpEVVNfRHAxY2xZbVpJanlLSUk1MFBIV2ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwTX8AwQB wTgMMA0GCSqGSIb3DQEBCwUAA4IBAQAcTynC4akP6uGzrdpx0UyeRQu7lJGibsC+ IlT/I4gswbiGyDXx5wsPsRqhY1Pb7fe9DVq9/YBKOJ3LYMaG8WLiYe6ZyBzh31+o pAeocs46GGGEF7eHhl9ix5BrKgbWAIi+jU7Vd8bI04fn91vudlJvXMe6fK2RwVhh CwFbEJMaIZ6GQGrbsND21dEX/45RS1MyWyCsXu3kohE/QAqCzZ6blso4lYJd6QRr Aheng/JA161FSMEABG3Hzw7VGvx2e5fCMgq3m1gDiOH+YJPwCT7pMtzaPzDXWC3H 29gzAygdbJAF3TW7ELB/KedgJyp9GZPjqZoa5eD88N6+fyJ3sRNs -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:18 2026 by rpki-client