This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/5DjiJIuHgalU2c4XOG5eAUcUxaE.roa File: 5DjiJIuHgalU2c4XOG5eAUcUxaE.roa (raw, json) Hash identifier: qfrWwPsFK8Bx8ACwGyPtVrfj5WDqWP0E0oplV4zQLik= Subject key identifier: E4:38:E2:24:8B:87:81:A9:54:D9:CE:17:38:6E:5E:01:47:14:C5:A1 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F845EBE60EAB26C456DF5FAD1881EB6 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/5DjiJIuHgalU2c4XOG5eAUcUxaE.roa Signing time: Fri 02 Jan 2026 16:22:20 +0000 ROA not before: Fri 02 Jan 2026 16:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33960 IP address blocks: 212.252.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5e:be:60:ea:b2:6c:45:6d:f5:fa:d1:88:1e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e438e2248b8781a954d9ce17386e5e014714c5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:2b:e9:38:8f:20:b0:ac:f4:5a:c9:12:4f: d1:02:6c:0a:5e:c3:c8:5d:b4:27:ad:d6:8f:92:c4: fb:d7:97:bb:48:c8:11:2f:26:f5:ab:8b:3c:aa:99: 95:c5:70:5f:d3:ee:81:ce:ea:66:cc:c9:df:44:d4: ef:e5:18:81:61:79:85:f0:1e:fc:ca:a0:2c:e4:7d: 74:d1:4e:9f:2f:77:fd:81:1c:58:46:5d:f6:69:89: 7c:84:17:73:fb:f3:f4:e9:c6:98:c0:26:54:89:d4: 6a:56:17:1a:a2:2a:72:61:b2:df:65:09:cd:10:6c: b6:cc:34:0d:fc:d2:f1:5b:19:16:ae:7a:e2:41:9b: 1f:d9:89:6e:9a:8b:68:09:56:3f:94:0a:0c:4c:af: ce:6c:d0:6c:28:b2:bb:12:43:c8:b4:9a:0c:ea:e4: f0:90:e3:4c:82:5a:31:19:a7:19:b8:94:b8:87:b8: 6a:27:3d:af:1f:d2:10:f9:58:5b:0e:b3:00:73:5d: 50:5c:76:29:93:36:c1:fb:10:a5:a6:f6:92:7f:65: 95:d0:dc:cd:89:6f:11:25:ac:c4:e6:a0:40:63:ac: 99:ff:79:ba:5f:01:d5:85:b4:36:0f:84:5b:9e:96: 9a:a2:01:f3:4e:37:a0:f0:69:ea:05:89:cf:5c:4c: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:38:E2:24:8B:87:81:A9:54:D9:CE:17:38:6E:5E:01:47:14:C5:A1 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/5DjiJIuHgalU2c4XOG5eAUcUxaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.252.202.0/24 Signature Algorithm: sha256WithRSAEncryption 23:dd:eb:dd:e5:1a:6c:31:f7:90:a4:ab:ed:9c:91:6c:7f:04: 17:d3:59:33:ae:86:e4:05:d3:c5:af:95:55:53:c3:67:2d:69: 5c:00:7c:3b:f5:0e:6c:ba:50:79:63:3f:3b:7a:f7:55:0c:db: 32:79:e5:47:b4:5b:0e:77:56:e9:69:70:c6:e5:9f:91:ec:6e: 5a:53:d8:32:f3:51:4e:95:69:fe:42:cc:48:b8:1b:64:ad:12: 58:b9:38:57:0c:a2:53:95:80:ca:6b:4f:41:94:0d:35:5b:d2: 69:33:82:14:e9:3b:cc:e6:aa:be:c1:01:1a:0c:e8:1e:05:1d: c1:f9:04:79:19:98:af:3d:8b:fe:1f:3f:69:41:1e:db:bb:dd: 8d:b0:b1:00:96:bc:1f:12:5d:f8:60:1e:69:d4:c4:37:7e:09: e8:99:75:54:6a:bc:79:64:eb:46:f9:16:87:34:4d:05:7f:79: 94:35:eb:86:1c:12:ae:4b:ab:4c:1c:bd:b7:93:74:5b:6d:06: 66:95:9c:cb:8f:a8:e0:30:d7:12:8c:fd:c5:b2:11:52:b7:4d: 37:31:d5:ec:75:48:72:36:b8:c5:d2:db:29:4c:ea:4f:52:fc: fe:04:c3:95:c4:f5:ae:b1:df:df:8d:ee:93:ab:c4:33:18:58: c3:c6:38:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hF6+YOqybEVt9frRiB62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDM4ZTIyNDhiODc4MWE5NTRkOWNlMTczODZlNWUwMTQ3MTRjNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPYr6TiPILCs9FrJEk/RAmwKXsPI XbQnrdaPksT715e7SMgRLyb1q4s8qpmVxXBf0+6BzupmzMnfRNTv5RiBYXmF8B78 yqAs5H100U6fL3f9gRxYRl32aYl8hBdz+/P06caYwCZUidRqVhcaoipyYbLfZQnN EGy2zDQN/NLxWxkWrnriQZsf2YlumotoCVY/lAoMTK/ObNBsKLK7EkPItJoM6uTw kONMgloxGacZuJS4h7hqJz2vH9IQ+VhbDrMAc11QXHYpkzbB+xClpvaSf2WV0NzN iW8RJazE5qBAY6yZ/3m6XwHVhbQ2D4RbnpaaogHzTjeg8GnqBYnPXEycoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQ44iSLh4GpVNnOFzhuXgFHFMWhMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvNURqaUpJdUhnYWxVMmM0WE9HNWVBVWNVeGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PzKMA0G CSqGSIb3DQEBCwUAA4IBAQAj3evd5RpsMfeQpKvtnJFsfwQX01kzrobkBdPFr5VV U8NnLWlcAHw79Q5sulB5Yz87evdVDNsyeeVHtFsOd1bpaXDG5Z+R7G5aU9gy81FO lWn+QsxIuBtkrRJYuThXDKJTlYDKa09BlA01W9JpM4IU6TvM5qq+wQEaDOgeBR3B +QR5GZivPYv+Hz9pQR7bu92NsLEAlrwfEl34YB5p1MQ3fgnomXVUarx5ZOtG+RaH NE0Ff3mUNeuGHBKuS6tMHL23k3RbbQZmlZzLj6jgMNcSjP3FshFSt003MdXsdUhy NrjF0tspTOpPUvz+BMOVxPWusd/fje6Tq8QzGFjDxjgv -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:44 2026 by rpki-client