This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa
File: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (raw, json)
Hash identifier: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=
Subject key identifier: 0C:85:53:2B:4E:53:F1:57:61:C2:3A:7B:83:4C:FB:32:71:75:4D:04
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019B7834F9267D6DF9391A1435BB58694A22
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa
Signing time: Thu 01 Jan 2026 06:18:16 +0000
ROA not before: Thu 01 Jan 2026 06:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43241
IP address blocks: 194.107.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:f9:26:7d:6d:f9:39:1a:14:35:bb:58:69:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 1 06:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c85532b4e53f15761c23a7b834cfb3271754d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:e7:e0:4f:a3:70:83:43:fc:e3:e3:8e:d7:
36:75:9a:23:b5:08:86:8f:91:90:33:93:97:d2:84:
3c:17:d5:f3:64:d9:a0:75:5b:3b:06:b6:b6:7f:9a:
3f:fc:7a:79:1a:d8:be:46:d7:50:1f:f4:b8:b1:b5:
72:a0:ad:24:2b:0c:6f:6c:06:09:d9:f4:8a:ab:e3:
10:99:97:95:7c:5a:33:f2:83:2f:10:af:26:4c:d8:
db:a3:cd:64:4f:08:61:b7:6b:47:40:78:d1:a7:62:
19:64:9d:af:05:71:9c:74:ac:6f:57:61:cc:44:24:
4d:d6:90:36:d6:e1:7f:95:f2:5b:70:a2:19:b9:0f:
31:f1:76:cd:58:98:48:8d:9a:e7:38:5f:d9:28:23:
0c:61:7b:e1:88:0b:60:b3:20:b4:9d:8e:47:03:b8:
e3:4f:8e:79:86:6f:f2:c2:0a:23:ac:57:df:bb:0c:
9e:85:fe:c5:30:27:4e:d8:cd:b8:c6:59:1f:f8:62:
d4:9b:15:f3:66:16:80:5b:e2:0f:35:39:dc:67:6d:
ff:8b:2b:99:b2:b7:2b:77:b1:9f:42:4b:66:bf:ac:
2e:0e:73:a8:b1:a0:03:5a:0b:19:97:5e:1c:e1:b9:
55:cc:90:c6:8c:25:56:44:cc:21:e0:dd:e1:c5:9c:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:53:2B:4E:53:F1:57:61:C2:3A:7B:83:4C:FB:32:71:75:4D:04
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.128.0/24
Signature Algorithm: sha256WithRSAEncryption
32:da:b6:6a:82:3a:82:84:7c:33:f7:73:31:96:45:28:49:87:
9e:49:b0:18:66:53:4b:57:63:76:9a:23:5b:73:6a:d6:11:1b:
32:f1:bf:84:e3:d6:2a:fc:72:28:30:54:ef:d8:b7:03:31:46:
73:8f:43:81:92:63:45:50:1d:49:54:9a:e6:74:e8:e3:a3:52:
68:26:a1:23:6b:1c:60:1a:21:94:ae:80:eb:88:6d:6a:20:54:
d0:05:d3:5c:fc:07:d7:1f:3b:a7:c0:2e:b6:c7:19:f7:27:6a:
1c:0f:62:1c:f9:c3:96:95:1a:95:b9:27:b7:09:b0:8a:d8:11:
4b:8b:b6:5c:f6:0c:c3:10:85:33:fa:c7:7b:96:7b:bc:23:49:
ff:a5:e6:9e:db:e7:86:72:2a:cd:f0:cd:ad:9c:a4:84:86:41:
db:91:fe:a9:42:ec:e1:f1:1d:0d:12:ca:6c:92:d6:92:9e:c7:
df:70:5e:95:7f:4b:0f:12:df:5d:be:79:45:a3:cd:60:df:5f:
c5:84:8e:48:0c:e9:cc:da:cb:5a:29:e8:09:1c:d4:aa:5d:a3:
7a:b0:f1:59:c6:da:7a:79:cf:3c:f5:1c:e0:ed:dc:7a:9b:a3:
04:be:fb:a0:c8:b2:9e:60:a5:08:1e:30:b4:74:bb:41:ff:08:
f5:3c:bc:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NPkmfW35ORoUNbtYaUoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzg1NTMyYjRlNTNmMTU3NjFjMjNhN2I4MzRjZmIzMjcxNzU0ZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Xn4E+jcIND/OPjjtc2dZojtQiG
j5GQM5OX0oQ8F9XzZNmgdVs7Bra2f5o//Hp5Gti+RtdQH/S4sbVyoK0kKwxvbAYJ
2fSKq+MQmZeVfFoz8oMvEK8mTNjbo81kTwhht2tHQHjRp2IZZJ2vBXGcdKxvV2HM
RCRN1pA21uF/lfJbcKIZuQ8x8XbNWJhIjZrnOF/ZKCMMYXvhiAtgsyC0nY5HA7jj
T455hm/ywgojrFffuwyehf7FMCdO2M24xlkf+GLUmxXzZhaAW+IPNTncZ23/iyuZ
srcrd7GfQktmv6wuDnOosaADWgsZl14c4blVzJDGjCVWRMwh4N3hxZwJoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyFUytOU/FXYcI6e4NM+zJxdU0EMB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvRElWVEswNVQ4VmRod2pwN2cwejdNbkYxVFFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmuAMA0G
CSqGSIb3DQEBCwUAA4IBAQAy2rZqgjqChHwz93MxlkUoSYeeSbAYZlNLV2N2miNb
c2rWERsy8b+E49Yq/HIoMFTv2LcDMUZzj0OBkmNFUB1JVJrmdOjjo1JoJqEjaxxg
GiGUroDriG1qIFTQBdNc/AfXHzunwC62xxn3J2ocD2Ic+cOWlRqVuSe3CbCK2BFL
i7Zc9gzDEIUz+sd7lnu8I0n/peae2+eGcirN8M2tnKSEhkHbkf6pQuzh8R0NEsps
ktaSnsffcF6Vf0sPEt9dvnlFo81g31/FhI5IDOnM2staKegJHNSqXaN6sPFZxtp6
ec889Rzg7dx6m6MEvvugyLKeYKUIHjC0dLtB/wj1PLzw
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:36 2026 by rpki-client