This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa File: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (raw, json) Hash identifier: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU= Subject key identifier: 0C:97:6A:89:21:0D:28:61:59:27:59:38:09:02:74:AA:15:63:F8:D5 Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d Certificate serial: 019B7A5B991DBED50313117F2F8288635EEE Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 193.160.1.0/24 maxlen: 24 193.160.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:99:1d:be:d5:03:13:11:7f:2f:82:88:63:5e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c976a89210d286159275938090274aa1563f8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:ff:c5:76:82:6b:c1:6e:d2:10:f8:d1:1f: f1:83:fc:15:2c:17:09:fc:5b:f0:6b:1a:db:d6:8e: 1f:5b:4f:08:cb:70:a8:71:f6:eb:75:69:2a:9c:5e: cf:b2:5a:e9:04:ca:13:35:cc:a1:a6:d4:a8:f6:fb: 67:18:be:b4:58:2a:84:a4:d3:70:61:21:60:7f:84: 11:d7:76:cc:d4:a2:b3:fe:37:40:7f:04:45:09:d0: d4:3a:37:5c:76:ef:fc:09:b4:45:8c:57:1b:89:d8: 7b:42:a3:02:16:be:0d:42:14:ed:0d:aa:93:51:b0: 4e:c3:82:14:71:a1:4a:20:03:c5:90:fa:a7:ed:52: fc:6a:c9:bd:f0:fb:d4:07:45:d1:77:1a:d7:d7:04: d3:a1:ab:d1:20:b0:d6:b9:af:89:fc:bb:cb:f2:ba: 29:71:4e:f5:78:f9:ab:d2:73:d3:5d:97:18:0a:b3: da:60:ee:a5:b0:fc:43:42:c6:d7:75:a3:25:a9:7b: 31:2e:8c:e6:78:e6:6f:d4:38:8c:3d:31:09:1a:07: 62:0d:8b:ad:b0:e4:fc:e5:1d:c6:b0:a8:3f:64:0c: 52:48:69:81:a1:9d:a9:4e:e1:b5:9c:ee:17:c7:26: 0c:06:30:29:dc:ec:9d:0b:97:c0:f0:4c:8b:b6:6d: b3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:97:6A:89:21:0D:28:61:59:27:59:38:09:02:74:AA:15:63:F8:D5 X509v3 Authority Key Identifier: keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.1.0-193.160.3.255 Signature Algorithm: sha256WithRSAEncryption ac:a5:64:18:92:0c:02:4d:fc:11:b6:ea:84:f4:03:db:d8:ad: 9d:36:2a:30:ef:9b:b9:d6:23:37:68:aa:7f:41:ea:eb:d1:cf: 37:9e:bf:94:4e:34:01:67:9d:0c:b4:88:d4:51:57:e9:fa:4b: cb:31:b8:45:c7:3c:7e:d0:0f:ce:17:9d:fb:12:3e:84:e1:e6: 3a:33:a8:0e:80:d8:63:d7:6e:e8:00:f5:7a:b6:c9:31:a0:fa: 1d:9e:7c:4f:7a:59:f8:cc:85:3a:cd:1b:eb:9a:d6:12:a2:0f: 66:4f:2d:7b:87:9b:90:37:cc:16:f4:45:4d:6e:e3:eb:48:38: 8f:f7:49:09:7d:1f:74:2b:79:6e:aa:e2:28:4a:67:3d:43:64: 9d:db:49:73:09:ae:1f:25:4b:7b:78:19:07:5b:1d:7b:e8:ca: d8:b7:e4:a2:43:46:dc:10:83:0d:a9:96:a9:ad:6d:d4:34:cd: 00:09:45:06:20:63:76:3c:4b:69:dc:97:fa:7f:11:e1:6d:52: 40:48:16:b6:8b:a2:10:5e:e5:19:1d:e6:51:b2:66:41:b1:6c: 34:f7:3a:59:6e:53:96:eb:cd:02:48:69:2b:c4:2a:74:ba:9e: bf:a8:ac:40:40:49:57:ae:01:23:ea:46:8e:11:a0:1b:26:0c: ce:6d:b9:cd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6W5kdvtUDExF/L4KIY17uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjdiYTgyMDdiODFjMWI0NzI2M2IxZmRlOGY3OWI5OTU5 NzAzN2QwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzk3NmE4OTIxMGQyODYxNTkyNzU5MzgwOTAyNzRhYTE1NjNmOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzH/xXaCa8Fu0hD40R/xg/wVLBcJ /Fvwaxrb1o4fW08Iy3CocfbrdWkqnF7PslrpBMoTNcyhptSo9vtnGL60WCqEpNNw YSFgf4QR13bM1KKz/jdAfwRFCdDUOjdcdu/8CbRFjFcbidh7QqMCFr4NQhTtDaqT UbBOw4IUcaFKIAPFkPqn7VL8asm98PvUB0XRdxrX1wTToavRILDWua+J/LvL8rop cU71ePmr0nPTXZcYCrPaYO6lsPxDQsbXdaMlqXsxLozmeOZv1DiMPTEJGgdiDYut sOT85R3GsKg/ZAxSSGmBoZ2pTuG1nO4XxyYMBjAp3OydC5fA8EyLtm2zpQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAyXaokhDShhWSdZOAkCdKoVY/jVMB8GA1UdIwQY MBaAFD5nuoIHuBwbRyY7H96PebmVlwN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTIt NGMyNWZjYmRlZGQxLzEvREpkcWlTRU5LR0ZaSjFrNENRSjBxaFZqLU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTItNGMyNWZjYmRlZGQx LzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBoAED BALBoAAwDQYJKoZIhvcNAQELBQADggEBAKylZBiSDAJN/BG26oT0A9vYrZ02KjDv m7nWIzdoqn9B6uvRzzeev5RONAFnnQy0iNRRV+n6S8sxuEXHPH7QD84XnfsSPoTh 5jozqA6A2GPXbugA9Xq2yTGg+h2efE96WfjMhTrNG+ua1hKiD2ZPLXuHm5A3zBb0 RU1u4+tIOI/3SQl9H3QreW6q4ihKZz1DZJ3bSXMJrh8lS3t4GQdbHXvoyti35KJD RtwQgw2plqmtbdQ0zQAJRQYgY3Y8S2ncl/p/EeFtUkBIFraLohBe5Rkd5lGyZkGx bDT3OlluU5brzQJIaSvEKnS6nr+orEBASVeuASPqRo4RoBsmDM5tuc0= -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:05 2026 by rpki-client