This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RdjG25Om88neQYhmjs8kPRw9Idg.roa File: RdjG25Om88neQYhmjs8kPRw9Idg.roa (raw, json) Hash identifier: tzpxhfkjsBPLi7d9CSUw5dO13EOn7Vadnc8Ff5qm3jI= Subject key identifier: 45:D8:C6:DB:93:A6:F3:C9:DE:41:88:66:8E:CF:24:3D:1C:3D:21:D8 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68CEBC981A5248B7B6140D6C993BB Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RdjG25Om88neQYhmjs8kPRw9Idg.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198192 IP address blocks: 84.232.124.0/24 maxlen: 24 88.148.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8c:eb:c9:81:a5:24:8b:7b:61:40:d6:c9:93:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45d8c6db93a6f3c9de4188668ecf243d1c3d21d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:60:72:2b:73:1e:72:36:92:e0:61:07:d2: 37:5b:8b:5e:79:c7:4b:a9:ce:10:63:58:81:d2:dc: 63:7d:51:00:ba:54:36:24:92:e6:f5:e9:fd:71:12: 8d:85:e7:42:b8:52:b8:9b:74:5d:ec:ba:37:63:c5: 55:65:7d:86:88:84:41:1e:9e:ea:ed:57:06:77:72: 80:70:73:8b:27:a2:d6:77:82:3b:b1:82:a8:f1:79: 5a:da:6b:80:32:da:80:89:cc:90:6b:ac:b7:70:61: 4d:e1:43:ca:c8:72:9e:f6:ec:fb:e3:29:e0:00:1d: 9b:8e:6f:55:44:b3:30:47:3c:b2:4d:4d:29:57:a3: 40:a2:9d:f7:9a:43:f4:7c:6f:c2:7c:7f:3d:23:85: 0d:a6:15:89:e5:25:3f:79:40:d6:e9:ce:e6:13:db: 8f:aa:c9:aa:79:ec:1a:42:28:e8:21:4c:ba:81:d4: 77:db:13:57:62:0f:b8:bc:a2:ee:71:8c:54:87:64: 9a:fb:05:71:46:15:af:6c:79:22:ed:24:4f:af:56: b9:10:43:24:e7:0d:5a:5d:3f:84:37:2b:a8:a6:95: 6c:61:59:27:c1:82:10:bd:60:f1:5c:87:22:c8:bc: 6d:53:55:cd:32:57:bd:98:0b:d1:0b:07:18:e7:e3: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:C6:DB:93:A6:F3:C9:DE:41:88:66:8E:CF:24:3D:1C:3D:21:D8 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RdjG25Om88neQYhmjs8kPRw9Idg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.124.0/24 88.148.74.0/24 Signature Algorithm: sha256WithRSAEncryption 13:47:c7:d6:4f:2e:18:b0:b0:d8:ce:67:cb:22:d5:1a:12:17: 79:13:33:45:f4:55:a7:78:3f:a9:ee:3f:b6:07:f0:d0:dd:bd: e2:ad:f0:30:b0:c3:77:b5:f9:33:ce:58:ca:8b:48:0d:7b:0e: 20:0e:be:32:eb:d7:d0:90:7d:38:58:34:a6:b0:2b:fa:7a:0c: 76:bc:9a:69:0f:2b:32:65:3c:b4:10:f4:87:e7:37:cc:c8:a1: 22:3b:49:c7:c0:ae:44:9e:3e:6e:af:1f:09:7d:be:bd:33:4f: a8:72:bf:82:fb:76:ba:22:9a:37:f4:17:55:d5:77:7e:5a:23: 41:6a:11:33:8d:5c:4f:ef:23:c8:98:44:ae:b8:85:a0:ab:e9: fd:4f:01:1d:79:01:36:9c:02:e2:d7:98:04:f7:af:e5:dd:f1: 89:b0:e0:25:d8:ec:73:15:2d:fe:b0:bf:9d:ae:cb:65:0e:2a: 3e:be:53:d3:4f:3a:57:6b:f0:a9:7b:cd:ce:37:b4:91:3f:1f: 95:19:70:61:6c:78:8d:fe:21:3a:a6:79:fd:ca:4e:4b:90:c4: 2c:fc:fa:88:0e:9b:9f:04:f2:db:12:2a:5b:37:ba:1f:5b:11: 56:06:cf:25:d6:9d:fc:37:74:5c:37:96:2c:25:c5:63:89:92: 08:06:22:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xozryYGlJIt7YUDWyZO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWQ4YzZkYjkzYTZmM2M5ZGU0MTg4NjY4ZWNmMjQzZDFjM2QyMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7FgcitzHnI2kuBhB9I3W4teecdL qc4QY1iB0txjfVEAulQ2JJLm9en9cRKNhedCuFK4m3Rd7Lo3Y8VVZX2GiIRBHp7q 7VcGd3KAcHOLJ6LWd4I7sYKo8Xla2muAMtqAicyQa6y3cGFN4UPKyHKe9uz74yng AB2bjm9VRLMwRzyyTU0pV6NAop33mkP0fG/CfH89I4UNphWJ5SU/eUDW6c7mE9uP qsmqeewaQijoIUy6gdR32xNXYg+4vKLucYxUh2Sa+wVxRhWvbHki7SRPr1a5EEMk 5w1aXT+ENyuoppVsYVknwYIQvWDxXIciyLxtU1XNMle9mAvRCwcY5+O5iwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEXYxtuTpvPJ3kGIZo7PJD0cPSHYMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvUmRqRzI1T204OG5lUVlobWpzOGtQUnc5SWRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVOh8AwQA WJRKMA0GCSqGSIb3DQEBCwUAA4IBAQATR8fWTy4YsLDYzmfLItUaEhd5EzNF9FWn eD+p7j+2B/DQ3b3irfAwsMN3tfkzzljKi0gNew4gDr4y69fQkH04WDSmsCv6egx2 vJppDysyZTy0EPSH5zfMyKEiO0nHwK5Enj5urx8Jfb69M0+ocr+C+3a6Ipo39BdV 1Xd+WiNBahEzjVxP7yPImESuuIWgq+n9TwEdeQE2nALi15gE96/l3fGJsOAl2Oxz FS3+sL+drstlDio+vlPTTzpXa/Cpe83ON7SRPx+VGXBhbHiN/iE6pnn9yk5LkMQs /PqIDpufBPLbEipbN7ofWxFWBs8l1p38N3RcN5YsJcVjiZIIBiJr -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:14 2026 by rpki-client