This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/DijJx3m0K8IF-fNdq8vdHLvoRm0.roa File: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (raw, json) Hash identifier: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8= Subject key identifier: 0E:28:C9:C7:79:B4:2B:C2:05:F9:F3:5D:AB:CB:DD:1C:BB:E8:46:6D Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Certificate serial: 019B76EB1D7E9515060A090CB7B0B33FE10A Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/DijJx3m0K8IF-fNdq8vdHLvoRm0.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59836 IP address blocks: 185.69.116.0/24 maxlen: 24 185.69.118.0/24 maxlen: 24 194.35.0.0/24 maxlen: 24 194.35.1.0/24 maxlen: 24 194.35.4.0/24 maxlen: 24 194.35.5.0/24 maxlen: 24 194.35.8.0/24 maxlen: 24 194.35.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1d:7e:95:15:06:0a:09:0c:b7:b0:b3:3f:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e28c9c779b42bc205f9f35dabcbdd1cbbe8466d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:e3:54:69:05:0f:28:cb:01:cf:ff:66:68: cf:47:00:96:f3:8e:36:6e:18:13:27:f7:5e:ab:b7: b2:d9:d0:59:6f:99:2c:dc:e0:08:be:55:94:39:c2: 13:0a:53:ef:bd:53:36:f2:8c:6c:c7:d2:80:03:ce: 1d:d2:c2:ed:d2:8c:fa:1b:bb:f5:72:b7:d7:d6:7f: 89:85:60:b0:67:08:35:f7:5a:0b:90:18:2b:ec:ee: 94:a6:1f:02:aa:6a:55:22:32:9e:f8:5d:7a:f9:93: 62:77:fb:86:ab:74:cd:08:83:af:a7:4d:e5:0f:ca: 3b:c8:16:60:e9:b8:1d:95:99:02:06:37:75:50:3b: 9a:e3:c9:7f:fb:f1:9f:b9:5c:7f:b5:43:0f:27:d1: 2a:da:a7:43:2f:25:39:51:db:a1:b5:7b:45:93:1e: ca:1d:63:a2:67:df:08:3e:11:b1:a3:b1:d1:f0:61: e5:5b:12:bd:c6:1d:f3:24:71:70:56:8d:41:ef:13: a5:13:aa:b6:63:3f:03:68:62:d1:0b:80:ef:95:ce: 2d:38:d1:94:3a:f9:4f:4d:5b:73:95:bc:7b:ee:dd: 60:a1:06:af:e9:dc:1c:02:c0:20:13:c2:4b:ac:99: 44:ef:2a:a7:4b:fb:f9:86:d1:16:15:68:d1:99:9a: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:28:C9:C7:79:B4:2B:C2:05:F9:F3:5D:AB:CB:DD:1C:BB:E8:46:6D X509v3 Authority Key Identifier: keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/DijJx3m0K8IF-fNdq8vdHLvoRm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.116.0/24 185.69.118.0/24 194.35.0.0/23 194.35.4.0/23 194.35.8.0/23 Signature Algorithm: sha256WithRSAEncryption 25:ee:4f:32:31:cf:13:31:6a:21:78:b9:b5:ff:3f:4f:9b:31: 38:fa:c3:d9:6f:15:90:f3:52:e1:a3:32:13:d6:cd:3c:ef:b1: 02:84:bc:83:f4:c8:8b:3b:90:b5:f8:2b:e7:3a:db:e4:49:61: 35:0a:d2:8c:1b:29:d2:cd:ea:04:80:95:4e:ec:0c:ff:8a:5e: dd:e1:0d:f6:47:7a:ff:13:0b:27:5b:ab:58:8f:90:8f:a3:b5: 9d:77:09:35:ad:c0:c7:42:be:37:6a:95:23:bb:b6:e2:96:ff: 7d:73:c9:a0:e2:2e:71:b3:60:ef:fb:57:d6:8c:36:2b:53:7e: e9:c8:91:6e:8b:ae:ff:e8:4e:df:86:fb:91:82:16:92:e8:a5: f7:d1:89:3b:1b:2f:a8:9a:e2:7b:bf:ec:f3:5a:8d:d6:c9:55: fd:3c:d1:d2:c7:34:0b:3d:a8:ee:10:b4:98:93:5f:df:9a:62: 7e:8b:48:1f:52:9d:a5:4d:2a:23:d9:d0:65:10:d5:34:fb:89: f4:de:9b:9d:33:01:af:f0:25:f2:16:9a:5e:3f:96:4c:c5:6f: b8:af:67:bf:a1:e0:95:a8:d0:25:54:10:c7:10:6a:d4:99:b1: ae:47:ee:83:a9:f6:55:3e:e1:43:a0:e5:2c:dc:b3:eb:3c:dc: de:cb:a0:31 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt26x1+lRUGCgkMt7CzP+EKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5 NWIyNjgwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTI4YzljNzc5YjQyYmMyMDVmOWYzNWRhYmNiZGQxY2JiZTg0NjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjXjVGkFDyjLAc//ZmjPRwCW8442 bhgTJ/deq7ey2dBZb5ks3OAIvlWUOcITClPvvVM28oxsx9KAA84d0sLt0oz6G7v1 crfX1n+JhWCwZwg191oLkBgr7O6Uph8CqmpVIjKe+F16+ZNid/uGq3TNCIOvp03l D8o7yBZg6bgdlZkCBjd1UDua48l/+/GfuVx/tUMPJ9Eq2qdDLyU5UduhtXtFkx7K HWOiZ98IPhGxo7HR8GHlWxK9xh3zJHFwVo1B7xOlE6q2Yz8DaGLRC4Dvlc4tONGU OvlPTVtzlbx77t1goQav6dwcAsAgE8JLrJlE7yqnS/v5htEWFWjRmZruLwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFA4oycd5tCvCBfnzXavL3Ry76EZtMB8GA1UdIwQY MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt YmNjZDMyYWY5N2ZlLzEvRGlqSngzbTBLOElGLWZOZHE4dmRITHZvUm0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuUV0AwQA uUV2AwQBwiMAAwQBwiMEAwQBwiMIMA0GCSqGSIb3DQEBCwUAA4IBAQAl7k8yMc8T MWoheLm1/z9PmzE4+sPZbxWQ81LhozIT1s0877EChLyD9MiLO5C1+CvnOtvkSWE1 CtKMGynSzeoEgJVO7Az/il7d4Q32R3r/EwsnW6tYj5CPo7Wddwk1rcDHQr43apUj u7bilv99c8mg4i5xs2Dv+1fWjDYrU37pyJFui67/6E7fhvuRghaS6KX30Yk7Gy+o muJ7v+zzWo3WyVX9PNHSxzQLPajuELSYk1/fmmJ+i0gfUp2lTSoj2dBlENU0+4n0 3pudMwGv8CXyFppeP5ZMxW+4r2e/oeCVqNAlVBDHEGrUmbGuR+6DqfZVPuFDoOUs 3LPrPNzey6Ax -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:14 2026 by rpki-client