This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/DaMOJU-jBrrr4RoMTTYusmitb4Y.roa File: DaMOJU-jBrrr4RoMTTYusmitb4Y.roa (raw, json) Hash identifier: JaWn7XzXCxX7Vb9+fDuk+/iiSPUdUFQByfCjt0a4ezU= Subject key identifier: 0D:A3:0E:25:4F:A3:06:BA:EB:E1:1A:0C:4D:36:2E:B2:68:AD:6F:86 Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Certificate serial: 019B8DC2E186ABB99B3F850502039F276532 Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/DaMOJU-jBrrr4RoMTTYusmitb4Y.roa Signing time: Mon 05 Jan 2026 10:45:17 +0000 ROA not before: Mon 05 Jan 2026 10:45:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6663 IP address blocks: 31.210.8.0/21 maxlen: 21 86.106.122.0/23 maxlen: 23 89.43.132.0/22 maxlen: 22 128.0.4.0/22 maxlen: 22 128.0.4.0/24 maxlen: 24 128.0.5.0/24 maxlen: 24 128.0.6.0/24 maxlen: 24 185.74.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:c2:e1:86:ab:b9:9b:3f:85:05:02:03:9f:27:65:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Validity Not Before: Jan 5 10:45:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0da30e254fa306baebe11a0c4d362eb268ad6f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0b:3f:a0:ce:81:d3:ce:0e:35:a2:5b:b3:d9: 33:13:15:a5:f3:24:09:bc:4a:33:40:57:85:63:b7: ed:5e:ef:4f:e9:f5:f3:fc:97:d2:4d:49:c8:d4:36: 8b:1c:2f:74:66:85:ca:11:be:47:79:be:91:62:e6: 39:49:07:c6:8d:0a:57:d0:cf:29:14:0e:de:38:90: 42:ca:0f:13:10:3f:02:bf:73:fe:98:2a:ce:da:48: 46:88:1e:69:ef:0a:07:1b:35:e6:4f:7d:35:a8:e5: a3:2c:f8:e4:a7:74:f3:2c:25:d7:6b:c2:95:45:54: 94:cb:10:c6:42:d8:70:b6:64:fe:70:18:bb:c8:5b: d2:e0:34:23:97:44:0d:34:6a:e7:ce:56:eb:b9:55: ff:3a:b4:f3:8d:b2:b6:c1:93:24:41:d4:23:aa:4f: 14:1b:14:7a:53:6e:a1:ca:dc:44:f5:d5:9d:5c:a2: 84:74:a4:4b:73:b6:71:88:ab:84:7e:d3:38:1b:45: 75:0e:4e:47:6a:fb:1d:29:27:13:ec:1c:9f:ac:e4: c2:c3:fa:18:f2:e3:b6:be:72:2e:64:ee:5a:2d:26: c5:06:2b:c1:63:25:be:ba:8c:2f:79:f9:25:91:e0: fe:78:4a:11:ac:df:24:2b:92:ce:b8:c5:8d:1c:9e: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A3:0E:25:4F:A3:06:BA:EB:E1:1A:0C:4D:36:2E:B2:68:AD:6F:86 X509v3 Authority Key Identifier: keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/DaMOJU-jBrrr4RoMTTYusmitb4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.8.0/21 86.106.122.0/23 89.43.132.0/22 128.0.4.0/22 185.74.20.0/22 Signature Algorithm: sha256WithRSAEncryption a1:fb:84:56:ad:4b:00:67:0e:80:34:d3:85:34:a3:ac:72:ee: 9a:e5:f2:8d:f0:8e:68:b4:44:02:a7:49:93:ba:28:39:c9:ad: 76:da:16:3b:78:9a:a6:c9:35:16:92:83:1e:b5:10:00:6d:4d: 23:c3:72:04:d3:48:fd:76:ee:d3:13:bf:47:7f:ae:cb:35:42: 51:1c:d9:a7:4a:1d:f1:5c:63:67:91:12:d0:ca:3c:b4:25:2e: 9c:81:76:fe:69:13:84:50:e3:8c:7d:ee:08:68:aa:3d:ad:0d: f5:66:6b:4b:9c:45:29:b3:d3:eb:b2:66:93:f1:07:0b:38:d1: 62:e2:61:0c:1c:13:74:51:cc:da:4b:a3:ad:9e:24:39:03:7a: 5d:38:fd:f2:5b:92:f4:e3:82:b3:2a:b3:d1:e7:7d:df:8b:dd: 46:3f:fb:b2:eb:c8:4a:91:9f:ce:c7:a0:63:62:58:54:ff:71: 74:76:9c:0a:91:14:81:9d:b5:d3:02:3b:bd:2a:f4:16:6e:46: 40:f7:94:36:6f:4e:9c:a3:a9:95:7a:49:d0:c7:26:bd:64:23: 5c:70:75:e4:0d:1f:cc:78:e7:b3:4c:93:80:e8:95:c6:be:da: 11:ab:f7:7b:da:77:55:5e:93:47:da:2a:cf:c0:99:13:5d:94: 7d:06:f4:11 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZuNwuGGq7mbP4UFAgOfJ2UyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0 YjdkNDcwHhcNMjYwMTA1MTA0NTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGEzMGUyNTRmYTMwNmJhZWJlMTFhMGM0ZDM2MmViMjY4YWQ2Zjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjws/oM6B084ONaJbs9kzExWl8yQJ vEozQFeFY7ftXu9P6fXz/JfSTUnI1DaLHC90ZoXKEb5Heb6RYuY5SQfGjQpX0M8p FA7eOJBCyg8TED8Cv3P+mCrO2khGiB5p7woHGzXmT301qOWjLPjkp3TzLCXXa8KV RVSUyxDGQthwtmT+cBi7yFvS4DQjl0QNNGrnzlbruVX/OrTzjbK2wZMkQdQjqk8U GxR6U26hytxE9dWdXKKEdKRLc7ZxiKuEftM4G0V1Dk5HavsdKScT7ByfrOTCw/oY 8uO2vnIuZO5aLSbFBivBYyW+uowvefklkeD+eEoRrN8kK5LOuMWNHJ7XAQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFA2jDiVPowa66+EaDE02LrJorW+GMB8GA1UdIwQY MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt ODM2Mzg0NzVkOGFiLzEvRGFNT0pVLWpCcnJyNFJvTVRUWXVzbWl0YjRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDH9IIAwQB Vmp6AwQCWSuEAwQCgAAEAwQCuUoUMA0GCSqGSIb3DQEBCwUAA4IBAQCh+4RWrUsA Zw6ANNOFNKOscu6a5fKN8I5otEQCp0mTuig5ya122hY7eJqmyTUWkoMetRAAbU0j w3IE00j9du7TE79Hf67LNUJRHNmnSh3xXGNnkRLQyjy0JS6cgXb+aROEUOOMfe4I aKo9rQ31ZmtLnEUps9PrsmaT8QcLONFi4mEMHBN0UczaS6OtniQ5A3pdOP3yW5L0 44KzKrPR533fi91GP/uy68hKkZ/Ox6BjYlhU/3F0dpwKkRSBnbXTAju9KvQWbkZA 95Q2b06co6mVeknQxya9ZCNccHXkDR/MeOezTJOA6JXGvtoRq/d72ndVXpNH2irP wJkTXZR9BvQR -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:46 2026 by rpki-client