This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/dDIM-ljTCDKhWIxv1515WUGeQvk.roa File: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (raw, json) Hash identifier: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc= Subject key identifier: 74:32:0C:FA:58:D3:08:32:A1:58:8C:6F:D7:9D:79:59:41:9E:42:F9 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 019B7DCB48739E84A8104A2EF20D17861A54 Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/dDIM-ljTCDKhWIxv1515WUGeQvk.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56995 IP address blocks: 188.161.104.0/21 maxlen: 21 188.161.104.0/24 maxlen: 24 188.161.105.0/24 maxlen: 24 188.161.106.0/24 maxlen: 24 188.161.107.0/24 maxlen: 24 188.161.108.0/24 maxlen: 24 188.161.109.0/24 maxlen: 24 188.161.110.0/24 maxlen: 24 188.161.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:48:73:9e:84:a8:10:4a:2e:f2:0d:17:86:1a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74320cfa58d30832a1588c6fd79d7959419e42f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bb:10:b9:01:09:78:cb:2a:04:c9:7a:66:cc: 71:fc:bb:fc:41:f0:12:a4:a0:b1:be:30:17:b6:22: b4:8c:6f:07:ea:b9:3f:68:1c:25:60:02:db:e8:ac: 1c:4f:71:17:ec:d5:30:2c:f3:f3:35:90:c8:53:66: 29:b9:35:1c:6b:d4:59:c5:a4:0e:33:58:fe:fb:7c: 6e:bc:54:b8:dd:14:36:0d:ce:89:4e:7f:31:48:5f: 84:18:e8:ab:04:ee:c9:e5:da:9d:ca:d1:35:07:80: e3:ba:b1:c0:66:44:bf:36:b1:2a:8d:0b:69:87:5f: 35:ee:68:f1:e2:c8:04:b0:e7:fa:a3:1a:79:ac:42: 81:96:6a:73:ae:6f:31:1b:67:63:05:a1:4f:cf:6b: af:ae:ab:11:fb:dc:dc:95:b9:5f:b5:d9:51:f4:86: aa:c6:16:92:03:34:e8:bd:25:fa:49:d6:4d:02:f6: 83:71:c9:17:c2:15:2e:b0:b0:5d:ed:3c:52:45:9c: 19:cc:e5:84:b4:07:e3:ef:11:75:e1:00:be:49:e3: 84:cf:33:66:9a:d7:ec:61:9b:13:26:e1:12:1b:80: 11:20:ed:d6:d6:05:82:d9:e0:25:8c:93:32:1d:b5: 0b:98:fc:be:ba:95:c0:2b:bb:fc:53:16:b7:0a:c8: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:32:0C:FA:58:D3:08:32:A1:58:8C:6F:D7:9D:79:59:41:9E:42:F9 X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/dDIM-ljTCDKhWIxv1515WUGeQvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.161.104.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:50:d8:c6:53:94:87:5c:c4:b1:d7:1c:0c:57:52:10:bc:95: 67:43:24:d9:04:72:e3:30:1f:f6:37:56:41:ce:f7:b9:e9:44: 73:31:48:6d:90:15:8d:65:93:0c:2c:be:7a:48:48:8e:ff:72: ae:ad:40:36:10:9c:de:6a:cb:0b:93:b3:f4:d2:96:ca:bc:bc: 6a:eb:3e:1f:78:49:d0:1b:bd:44:db:0b:d5:51:bf:6b:5c:7b: d7:e6:5e:9b:f8:20:6c:3e:b2:66:8d:87:59:bb:e2:9c:d8:92: ad:31:90:7f:2e:50:97:25:da:7d:e2:07:da:5d:7d:58:9c:4c: 73:74:06:4c:48:56:a5:45:11:f8:37:0c:b2:43:03:2b:de:46: 48:fe:92:79:c4:05:71:5d:65:a6:63:bb:88:5d:70:1b:6d:85: 6a:7e:ed:5d:c1:80:5f:d0:d0:72:4f:9e:ce:cc:a4:c1:3e:4f: c9:5b:b6:1e:f0:6c:61:b4:70:93:37:f7:b6:b5:d0:0e:0d:c7: 17:94:c1:92:e2:2c:69:ad:6a:cd:fb:66:1a:96:3e:6b:38:4e: 8d:cc:d7:6f:40:2c:08:11:6b:4d:eb:c1:d8:6b:ca:bb:61:4e: e6:09:b3:69:2e:c4:77:90:b6:39:11:e0:2f:5a:21:f5:0b:8c: 75:c7:90:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0hznoSoEEou8g0XhhpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDMyMGNmYTU4ZDMwODMyYTE1ODhjNmZkNzlkNzk1OTQxOWU0MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrsQuQEJeMsqBMl6Zsxx/Lv8QfAS pKCxvjAXtiK0jG8H6rk/aBwlYALb6KwcT3EX7NUwLPPzNZDIU2YpuTUca9RZxaQO M1j++3xuvFS43RQ2Dc6JTn8xSF+EGOirBO7J5dqdytE1B4DjurHAZkS/NrEqjQtp h1817mjx4sgEsOf6oxp5rEKBlmpzrm8xG2djBaFPz2uvrqsR+9zclblftdlR9Iaq xhaSAzTovSX6SdZNAvaDcckXwhUusLBd7TxSRZwZzOWEtAfj7xF14QC+SeOEzzNm mtfsYZsTJuESG4ARIO3W1gWC2eAljJMyHbULmPy+upXAK7v8Uxa3CsghjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQyDPpY0wgyoViMb9edeVlBnkL5MB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEvZERJTS1salRDREtoV0l4djE1MTVXVUdlUXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvKFoMA0G CSqGSIb3DQEBCwUAA4IBAQCNUNjGU5SHXMSx1xwMV1IQvJVnQyTZBHLjMB/2N1ZB zve56URzMUhtkBWNZZMMLL56SEiO/3KurUA2EJzeassLk7P00pbKvLxq6z4feEnQ G71E2wvVUb9rXHvX5l6b+CBsPrJmjYdZu+Kc2JKtMZB/LlCXJdp94gfaXX1YnExz dAZMSFalRRH4NwyyQwMr3kZI/pJ5xAVxXWWmY7uIXXAbbYVqfu1dwYBf0NByT57O zKTBPk/JW7Ye8GxhtHCTN/e2tdAODccXlMGS4ixprWrN+2Yalj5rOE6NzNdvQCwI EWtN68HYa8q7YU7mCbNpLsR3kLY5EeAvWiH1C4x1x5Ap -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:56 2026 by rpki-client