This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/Du-XM-c7cfjHmKd00CKR9makRlg.roa File: Du-XM-c7cfjHmKd00CKR9makRlg.roa (raw, json) Hash identifier: bZdNBjpYg86yMRtuooKH77vDZynRPwu50M4bVcyHluQ= Subject key identifier: 0E:EF:97:33:E7:3B:71:F8:C7:98:A7:74:D0:22:91:F6:66:A4:46:58 Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d Certificate serial: 019B76EAF6D38B074EB5A2E31D979F3035A6 Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/Du-XM-c7cfjHmKd00CKR9makRlg.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13170 IP address blocks: 46.254.96.0/21 maxlen: 21 62.145.160.0/19 maxlen: 19 77.223.32.0/19 maxlen: 19 85.29.64.0/18 maxlen: 18 185.69.36.0/22 maxlen: 22 185.69.72.0/22 maxlen: 22 212.116.32.0/19 maxlen: 19 213.143.160.0/19 maxlen: 19 213.145.192.0/19 maxlen: 19 2a04:25c0::/29 maxlen: 29 2a05:1f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f6:d3:8b:07:4e:b5:a2:e3:1d:97:9f:30:35:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eef9733e73b71f8c798a774d02291f666a44658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:7a:78:ed:8a:5b:2b:39:c2:3d:f5:6d:bb: ad:38:ce:00:d3:c2:9b:53:62:c5:dc:62:0f:93:9a: 9a:39:cd:77:43:d6:ec:1b:f3:78:30:ac:11:ef:e4: da:19:c2:fe:f0:70:c7:21:71:19:cc:d7:78:c6:85: a9:b9:e8:3e:87:55:c1:07:51:48:84:9d:b5:c2:da: 72:ac:aa:af:1a:34:ef:89:fe:0f:29:51:a6:8c:10: 88:91:e4:7a:a4:5d:d9:e6:84:85:0d:c0:0a:2e:27: ea:b5:c7:83:c7:2c:6c:29:c6:cf:f2:4d:56:d9:71: 5d:f9:74:ef:51:21:a4:fa:b5:42:5e:ef:23:3d:8f: bb:1c:62:c2:7e:30:72:78:19:36:1b:28:ac:df:4c: e3:25:dc:bc:84:a3:48:7e:76:59:43:87:d5:02:41: 96:cb:5b:73:6f:1f:52:a6:1c:75:e6:da:4e:aa:db: 51:65:64:fc:70:c1:bd:89:04:69:8a:3c:82:23:30: 64:ce:dc:57:8b:13:87:f6:de:d0:a4:34:ec:02:40: af:9c:35:41:30:da:83:97:ed:f7:80:eb:a8:53:32: b0:7e:61:d5:00:e4:3f:15:17:b1:c8:9d:32:40:cb: 1e:c4:09:bc:df:5e:df:3a:0a:95:97:17:c1:ad:40: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EF:97:33:E7:3B:71:F8:C7:98:A7:74:D0:22:91:F6:66:A4:46:58 X509v3 Authority Key Identifier: keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/Du-XM-c7cfjHmKd00CKR9makRlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.96.0/21 62.145.160.0/19 77.223.32.0/19 85.29.64.0/18 185.69.36.0/22 185.69.72.0/22 212.116.32.0/19 213.143.160.0/19 213.145.192.0/19 IPv6: 2a04:25c0::/29 2a05:1f40::/29 Signature Algorithm: sha256WithRSAEncryption 0f:69:a4:63:1e:b4:c0:8c:51:28:b9:9e:2c:03:22:3c:29:7e: b2:56:16:5a:c1:02:52:c7:78:4a:b3:94:c0:1b:45:65:94:7a: 10:c0:62:66:f8:84:43:be:ef:39:da:dd:dc:b4:25:c3:5c:80: da:24:0b:19:7d:80:b1:d2:71:10:5a:54:e1:94:b4:ba:a2:52: 84:c2:95:4a:6b:4e:98:4a:28:86:0c:2c:ab:44:7d:eb:3e:1d: 37:6f:3c:93:27:96:c8:7b:9d:e1:9d:06:75:6e:c4:b7:25:d8: ef:c3:d6:f6:4c:e9:f5:dd:e7:cd:77:24:7f:d6:4d:18:35:11: 84:b0:2c:3e:b8:2f:c3:a5:c3:4a:74:9b:1c:06:4a:28:89:75: e0:89:88:32:41:d4:67:f5:38:7e:6d:51:96:3e:36:43:4f:4e: 52:44:08:ac:d1:9d:5a:b0:b3:c6:f6:40:a6:77:d9:b1:94:af: a8:d6:4b:a2:42:05:26:a4:1b:be:ef:c7:1b:0b:09:e3:7a:cd: 0e:d0:25:82:ee:1a:b9:02:1f:a3:4b:d7:04:ec:d5:b6:b7:09: 01:54:15:02:44:bb:75:52:f6:fe:e7:2f:1d:3a:8d:05:60:b2: b2:92:7d:d7:e5:8c:ea:22:fe:37:e4:81:22:8a:aa:18:f2:29: d0:28:67:98 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt26vbTiwdOtaLjHZefMDWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YWJlNjdiMjFkMzIzYjJiMmI0NDJjNmIwNmFlMzJjYzI4 MDM1OGQwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWVmOTczM2U3M2I3MWY4Yzc5OGE3NzRkMDIyOTFmNjY2YTQ0NjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXF6eO2KWys5wj31bbutOM4A08Kb U2LF3GIPk5qaOc13Q9bsG/N4MKwR7+TaGcL+8HDHIXEZzNd4xoWpueg+h1XBB1FI hJ21wtpyrKqvGjTvif4PKVGmjBCIkeR6pF3Z5oSFDcAKLifqtceDxyxsKcbP8k1W 2XFd+XTvUSGk+rVCXu8jPY+7HGLCfjByeBk2Gyis30zjJdy8hKNIfnZZQ4fVAkGW y1tzbx9Sphx15tpOqttRZWT8cMG9iQRpijyCIzBkztxXixOH9t7QpDTsAkCvnDVB MNqDl+33gOuoUzKwfmHVAOQ/FRexyJ0yQMsexAm8317fOgqVlxfBrUB+8QIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFA7vlzPnO3H4x5indNAikfZmpEZYMB8GA1UdIwQY MBaAFCWr5nsh0yOysrRCxrBq4yzCgDWNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjIt NzIxOGEzMTc5MGYzLzEvRHUtWE0tYzdjZmpIbUtkMDBDS1I5bWFrUmxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjItNzIxOGEzMTc5MGYz LzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQDLv5gAwQF PpGgAwQFTd8gAwQGVR1AAwQCuUUkAwQCuUVIAwQF1HQgAwQF1Y+gAwQF1ZHAMBQE AgACMA4DBQMqBCXAAwUDKgUfQDANBgkqhkiG9w0BAQsFAAOCAQEAD2mkYx60wIxR KLmeLAMiPCl+slYWWsECUsd4SrOUwBtFZZR6EMBiZviEQ77vOdrd3LQlw1yA2iQL GX2AsdJxEFpU4ZS0uqJShMKVSmtOmEoohgwsq0R96z4dN288kyeWyHud4Z0GdW7E tyXY78PW9kzp9d3nzXckf9ZNGDURhLAsPrgvw6XDSnSbHAZKKIl14ImIMkHUZ/U4 fm1Rlj42Q09OUkQIrNGdWrCzxvZApnfZsZSvqNZLokIFJqQbvu/HGwsJ43rNDtAl gu4auQIfo0vXBOzVtrcJAVQVAkS7dVL2/ucvHTqNBWCyspJ91+WM6iL+N+SBIoqq GPIp0ChnmA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:12 2026 by rpki-client