This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/dJMaiK8yGg6KlcWx0LEaKvEQdBk.roa File: dJMaiK8yGg6KlcWx0LEaKvEQdBk.roa (raw, json) Hash identifier: O0jveRym6VZpPje/Kb/PD73BXm0mXLB3Kv7qRMR7Lq0= Subject key identifier: 74:93:1A:88:AF:32:1A:0E:8A:95:C5:B1:D0:B1:1A:2A:F1:10:74:19 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019B7B35F0BE4BC6C9F13706D5187EB75513 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/dJMaiK8yGg6KlcWx0LEaKvEQdBk.roa Signing time: Thu 01 Jan 2026 20:18:11 +0000 ROA not before: Thu 01 Jan 2026 20:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213676 IP address blocks: 45.133.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f0:be:4b:c6:c9:f1:37:06:d5:18:7e:b7:55:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jan 1 20:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74931a88af321a0e8a95c5b1d0b11a2af1107419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:31:06:bf:5e:34:52:ae:7f:2c:0d:b6:7f: f5:91:31:7e:af:5b:6a:fd:c1:cb:2d:a7:0b:ed:9e: 6e:c8:25:99:0a:7f:09:f9:d9:dd:ab:a2:23:7c:e3: c3:fa:95:ec:c6:7f:a9:7b:9d:6b:86:9f:28:32:27: 9a:3d:f3:cf:a9:5f:e4:6a:c9:ad:07:7e:e1:ec:8d: f9:4e:4a:f3:b2:9d:37:ba:e7:89:3a:3c:22:7b:29: d3:c3:19:23:87:fc:e3:bd:fc:0c:12:f7:ed:ba:09: 4a:42:b4:55:4e:ab:5e:92:df:1b:51:01:7a:77:1a: 6b:2c:ce:53:ac:cc:c8:85:db:ef:84:61:cd:cf:a8: ca:cd:93:9a:eb:51:67:11:9e:fd:8c:57:aa:b5:f0: de:1c:0b:6b:a1:12:e2:23:9b:e6:fc:24:0b:05:7b: a9:ed:e4:f8:6c:be:86:87:a2:b8:7a:dd:54:f7:95: 75:7f:79:8b:f8:44:90:54:ab:6f:fd:c9:4f:cc:8e: d9:5d:a6:1b:bc:8a:d1:01:aa:97:3f:3c:a6:0c:00: a3:d3:67:95:cb:2d:15:ab:c1:80:49:73:cb:7c:3d: 54:49:ad:b6:bf:05:25:b1:b8:01:9b:91:cc:7d:ce: b4:10:52:35:a1:a1:22:c3:34:eb:8a:96:88:a2:93: db:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:93:1A:88:AF:32:1A:0E:8A:95:C5:B1:D0:B1:1A:2A:F1:10:74:19 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/dJMaiK8yGg6KlcWx0LEaKvEQdBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.38.0/24 Signature Algorithm: sha256WithRSAEncryption 51:4a:5f:1c:e3:09:65:2e:22:34:d0:27:af:b5:c3:4a:56:c6: b5:04:34:55:f2:cd:b5:08:28:99:43:64:a2:b7:a8:1a:8c:d5: f0:e2:76:c5:bd:5c:07:d3:e9:45:1c:aa:a6:01:7c:19:5e:87: 96:e7:d5:cb:23:71:f3:76:cb:e7:a0:a9:6a:ff:88:39:5b:af: 65:ab:8a:a6:76:b1:d8:61:e3:5f:90:ee:99:bd:76:b5:ee:98: 7f:02:3b:2f:c8:3d:7a:94:63:2d:e5:8b:f9:e3:e8:5c:bf:6b: 35:a0:e4:9c:0b:1d:d5:2d:89:f6:19:80:13:c9:5e:ad:87:20: cb:46:93:45:9a:aa:b4:75:a6:d7:a2:09:df:45:05:6b:ae:28: 7b:0e:cd:be:29:fb:d5:4e:89:a1:fc:74:43:5b:b1:1c:08:44: cf:29:bc:58:65:c4:2b:21:55:cf:1d:b8:a6:2f:26:ef:a9:17: 7e:f1:56:d7:cd:bb:06:a4:2d:21:0b:2a:40:12:c8:0c:47:6a: ab:44:3a:b2:ee:ba:ab:e9:a8:1f:b5:b2:8a:08:4b:6d:12:b5: 05:44:f6:71:92:12:48:8c:0c:09:1a:fd:a7:64:a2:b5:81:2e: ac:e8:09:91:f7:ac:95:a3:53:20:75:42:94:d9:db:3c:13:bf: 8f:98:06:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfC+S8bJ8TcG1Rh+t1UTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwMTAxMjAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDkzMWE4OGFmMzIxYTBlOGE5NWM1YjFkMGIxMWEyYWYxMTA3NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ExBr9eNFKufywNtn/1kTF+r1tq /cHLLacL7Z5uyCWZCn8J+dndq6IjfOPD+pXsxn+pe51rhp8oMieaPfPPqV/kasmt B37h7I35Tkrzsp03uueJOjwieynTwxkjh/zjvfwMEvftuglKQrRVTqtekt8bUQF6 dxprLM5TrMzIhdvvhGHNz6jKzZOa61FnEZ79jFeqtfDeHAtroRLiI5vm/CQLBXup 7eT4bL6Gh6K4et1U95V1f3mL+ESQVKtv/clPzI7ZXaYbvIrRAaqXPzymDACj02eV yy0Vq8GASXPLfD1USa22vwUlsbgBm5HMfc60EFI1oaEiwzTripaIopPb8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSTGoivMhoOipXFsdCxGirxEHQZMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvZEpNYWlLOHlHZzZLbGNXeDBMRWFLdkVRZEJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYUmMA0G CSqGSIb3DQEBCwUAA4IBAQBRSl8c4wllLiI00CevtcNKVsa1BDRV8s21CCiZQ2Si t6gajNXw4nbFvVwH0+lFHKqmAXwZXoeW59XLI3HzdsvnoKlq/4g5W69lq4qmdrHY YeNfkO6ZvXa17ph/AjsvyD16lGMt5Yv54+hcv2s1oOScCx3VLYn2GYATyV6thyDL RpNFmqq0dabXognfRQVrrih7Ds2+KfvVTomh/HRDW7EcCETPKbxYZcQrIVXPHbim LybvqRd+8VbXzbsGpC0hCypAEsgMR2qrRDqy7rqr6agftbKKCEttErUFRPZxkhJI jAwJGv2nZKK1gS6s6AmR96yVo1MgdUKU2ds8E7+PmAZI -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:41 2026 by rpki-client