This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/djMikuYz3yCm97P-DzPXL9TYHjc.roa File: djMikuYz3yCm97P-DzPXL9TYHjc.roa (raw, json) Hash identifier: 0IBcSqAWmogWwXBfEY0I/B7VyxtvIhIyNl18CRYGvtc= Subject key identifier: 76:33:22:92:E6:33:DF:20:A6:F7:B3:FE:0F:33:D7:2F:D4:D8:1E:37 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019A9016FF6F9DBE70CCA7C5F28038A66AB4 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/djMikuYz3yCm97P-DzPXL9TYHjc.roa Signing time: Mon 17 Nov 2025 04:33:37 +0000 ROA not before: Mon 17 Nov 2025 04:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62048 IP address blocks: 109.122.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:16:ff:6f:9d:be:70:cc:a7:c5:f2:80:38:a6:6a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Nov 17 04:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=76332292e633df20a6f7b3fe0f33d72fd4d81e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:62:ba:7c:e1:74:de:cc:30:2e:fb:77:b2:60: 96:a3:7c:de:f5:e5:3c:f1:e7:d7:ed:2a:dc:34:18: 38:7a:c3:21:d9:65:44:d2:d1:ed:ed:eb:2f:fd:f7: 3a:75:84:ba:b8:db:7c:72:d5:54:15:a4:ab:7e:7d: 21:8e:8c:b8:3b:1c:c8:53:b0:0e:d7:6e:12:a7:bd: 80:c8:83:3a:a1:0a:52:76:20:18:e8:9f:4f:1c:be: b1:43:d2:7f:e1:fa:ee:b7:25:09:f6:8e:e5:c6:f5: 59:60:ce:14:7b:ef:5d:72:87:91:ba:98:66:7f:81: b3:92:e8:4d:1f:b6:df:b3:90:71:f4:3e:f8:cc:ef: 26:e4:70:ce:bf:8c:d7:b8:54:7c:1b:1b:d7:51:53: ba:64:5f:a5:e0:30:8b:6c:50:3a:f2:01:cd:5f:22: 4a:46:0d:cd:fb:07:f2:7b:5c:74:b9:dc:a9:b8:59: 02:d2:3c:45:26:fc:29:b1:f0:cd:21:4c:64:f9:ee: 29:f8:4d:74:53:01:fc:37:5d:6f:6f:bc:45:c5:bc: 7e:91:58:d4:7a:a5:89:d2:35:0f:a0:8c:9e:4b:c3: fe:73:a8:63:99:18:77:b9:75:3b:82:b8:4f:a6:d8: 42:2a:f4:5c:c1:e6:33:c6:dd:87:1d:b4:21:d0:cd: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:33:22:92:E6:33:DF:20:A6:F7:B3:FE:0F:33:D7:2F:D4:D8:1E:37 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/djMikuYz3yCm97P-DzPXL9TYHjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.240.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:ca:95:d5:0a:0a:06:52:95:4f:65:75:d0:bb:ad:3f:b9:53: 9f:88:ac:eb:c7:46:7c:60:81:75:c3:40:51:fb:ba:66:28:c4: 4e:04:7e:62:08:08:39:1a:30:e5:12:43:bf:90:4c:fd:aa:8d: c9:56:6b:35:3a:67:8f:97:5d:69:03:a0:83:fe:f8:e7:7a:fe: e3:c4:99:e6:5c:3e:8e:6a:9d:f2:86:d8:51:08:1d:9a:5d:7c: 0a:d0:f0:7f:31:b6:5d:5b:ee:3e:9d:73:fc:fb:65:a4:e6:04: e3:9e:c1:0e:10:2d:4a:67:cb:0c:30:76:c5:62:d0:3d:d5:67: 0c:8e:7d:6e:36:10:88:23:d0:04:08:7a:c3:2d:11:a5:66:5f: 57:f9:7a:f5:e8:5e:5c:73:d0:83:f0:b9:88:0a:3d:1b:67:c7: 7b:fc:3c:fe:64:73:25:8c:e6:47:e6:5d:e3:0c:22:eb:c3:1c: 81:ad:e6:e1:65:aa:b7:6e:1d:ea:38:4f:4a:2b:9e:ac:72:37: f1:fb:3f:93:1d:9b:f1:43:e4:56:0f:a4:01:b7:0e:2f:c9:f5: 94:e4:58:17:3f:28:8c:46:37:43:02:15:e3:93:d3:82:83:1c: 00:98:74:40:cc:2c:ad:4a:6c:cc:7a:c1:0a:df:3b:e7:ee:de: 8d:58:72:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqQFv9vnb5wzKfF8oA4pmq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjUxMTE3MDQzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjMzMjI5MmU2MzNkZjIwYTZmN2IzZmUwZjMzZDcyZmQ0ZDgxZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGK6fOF03swwLvt3smCWo3ze9eU8 8efX7SrcNBg4esMh2WVE0tHt7esv/fc6dYS6uNt8ctVUFaSrfn0hjoy4OxzIU7AO 124Sp72AyIM6oQpSdiAY6J9PHL6xQ9J/4frutyUJ9o7lxvVZYM4Ue+9dcoeRuphm f4GzkuhNH7bfs5Bx9D74zO8m5HDOv4zXuFR8GxvXUVO6ZF+l4DCLbFA68gHNXyJK Rg3N+wfye1x0udypuFkC0jxFJvwpsfDNIUxk+e4p+E10UwH8N11vb7xFxbx+kVjU eqWJ0jUPoIyeS8P+c6hjmRh3uXU7grhPpthCKvRcweYzxt2HHbQh0M1NhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYzIpLmM98gpvez/g8z1y/U2B43MB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvZGpNaWt1WXozeUNtOTdQLUR6UFhMOVRZSGpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrwMA0G CSqGSIb3DQEBCwUAA4IBAQBaypXVCgoGUpVPZXXQu60/uVOfiKzrx0Z8YIF1w0BR +7pmKMROBH5iCAg5GjDlEkO/kEz9qo3JVms1OmePl11pA6CD/vjnev7jxJnmXD6O ap3yhthRCB2aXXwK0PB/MbZdW+4+nXP8+2Wk5gTjnsEOEC1KZ8sMMHbFYtA91WcM jn1uNhCII9AECHrDLRGlZl9X+Xr16F5cc9CD8LmICj0bZ8d7/Dz+ZHMljOZH5l3j DCLrwxyBrebhZaq3bh3qOE9KK56scjfx+z+THZvxQ+RWD6QBtw4vyfWU5FgXPyiM RjdDAhXjk9OCgxwAmHRAzCytSmzMesEK3zvn7t6NWHKt -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:20 2025 by rpki-client