This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/djz1F_dy6bHmHqubW6DKbd3NWi8.roa File: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (raw, json) Hash identifier: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE= Subject key identifier: 76:3C:F5:17:F7:72:E9:B1:E6:1E:AB:9B:5B:A0:CA:6D:DD:CD:5A:2F Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f Certificate serial: 019B7FF1479E30F793DAB51822F905A09120 Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/djz1F_dy6bHmHqubW6DKbd3NWi8.roa Signing time: Fri 02 Jan 2026 18:21:17 +0000 ROA not before: Fri 02 Jan 2026 18:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211568 IP address blocks: 185.224.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:47:9e:30:f7:93:da:b5:18:22:f9:05:a0:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f Validity Not Before: Jan 2 18:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=763cf517f772e9b1e61eab9b5ba0ca6dddcd5a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:43:6e:b9:5c:73:c9:f5:21:03:ab:57:81: 98:bb:14:d8:58:5c:50:51:d1:37:32:ee:5f:08:bd: e4:45:b7:6d:08:fc:89:6a:cd:1b:82:87:b2:be:d0: 3c:d8:cf:2b:e4:8d:44:c9:6b:89:3e:3e:b8:f2:32: be:48:ae:96:f8:9b:35:97:83:af:1d:73:69:75:bb: b8:4f:f5:93:31:14:37:d3:8d:7a:0a:8b:c5:a7:b1: 01:c5:4c:23:d2:a6:b7:f5:fb:1f:b0:bd:87:9c:33: 56:1e:19:ba:ec:b1:71:c2:17:f1:9a:de:8e:96:13: 3c:94:e4:2f:41:d8:d2:25:a0:2b:72:5a:ce:3e:de: df:74:b5:d2:3e:86:ff:fd:88:0b:46:43:cf:66:9e: f3:7b:68:0e:86:0e:e6:af:10:f6:df:d9:2f:83:04: fb:61:91:18:8a:b7:ac:d8:48:b4:b8:a3:5f:0a:52: b8:e5:b8:4f:fd:84:c4:bc:29:62:42:75:7b:af:8a: 83:aa:33:17:e7:2a:b6:01:16:2e:ee:15:66:47:da: f3:41:4d:c7:0d:5d:7f:22:e9:87:dc:2a:6f:89:69: 0e:a7:1c:96:25:d3:60:f2:fa:d4:c4:4b:27:82:f2: 7b:00:f4:a9:01:df:17:bb:a4:b1:96:fb:be:d9:a5: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3C:F5:17:F7:72:E9:B1:E6:1E:AB:9B:5B:A0:CA:6D:DD:CD:5A:2F X509v3 Authority Key Identifier: keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/djz1F_dy6bHmHqubW6DKbd3NWi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.242.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:5d:73:4c:c4:3e:8a:b7:2c:b9:67:c6:9f:b0:1e:d0:5c:ef: f0:40:c0:81:75:4f:4d:9a:2e:ea:db:25:7c:ed:c1:4a:9a:30: bb:c9:06:61:d5:20:4b:5e:c4:4a:b4:1c:d2:c7:f8:73:1c:61: 98:c1:b5:ed:88:45:a3:f4:31:1e:21:97:b8:bc:aa:9c:a8:ac: a9:9b:12:2b:b7:b6:37:a0:3e:32:7c:f1:6c:2c:48:ff:d5:1e: f8:27:fe:6f:22:bb:c5:1b:b0:a9:cf:f7:82:25:fc:57:03:5a: e6:68:7d:e6:f3:4d:01:01:b4:e3:8b:e8:bd:41:48:53:30:d3: d4:b1:b3:9e:61:1e:b7:01:03:e9:ed:3b:77:43:12:d2:7b:1b: 70:93:eb:c1:45:b0:e1:83:a7:d4:e2:12:7f:96:cc:48:74:6f: ef:7b:e7:2d:6f:a6:9d:2f:60:0f:ec:ce:cb:18:4b:be:70:cb: 43:e0:f1:5c:c2:8c:a6:5a:76:09:cc:7c:45:95:80:82:26:4a: 91:6e:d1:91:0c:83:6a:b7:56:6f:2c:37:70:42:ba:08:b7:9c: 34:4b:4a:64:00:bc:41:37:75:38:2d:c1:35:3e:c2:57:dd:49: 52:93:ad:aa:3d:4c:c9:13:ff:29:f6:11:85:9a:37:26:d2:66: ae:9c:2b:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8UeeMPeT2rUYIvkFoJEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YjA4Y2EyYzY0YmE3MzVmNGIxNDUyMTZkZDE0ZDk5ZjA4 MjlmMGYwHhcNMjYwMTAyMTgyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjNjZjUxN2Y3NzJlOWIxZTYxZWFiOWI1YmEwY2E2ZGRkY2Q1YTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kdDbrlcc8n1IQOrV4GYuxTYWFxQ UdE3Mu5fCL3kRbdtCPyJas0bgoeyvtA82M8r5I1EyWuJPj648jK+SK6W+Js1l4Ov HXNpdbu4T/WTMRQ30416CovFp7EBxUwj0qa39fsfsL2HnDNWHhm67LFxwhfxmt6O lhM8lOQvQdjSJaArclrOPt7fdLXSPob//YgLRkPPZp7ze2gOhg7mrxD239kvgwT7 YZEYires2Ei0uKNfClK45bhP/YTEvCliQnV7r4qDqjMX5yq2ARYu7hVmR9rzQU3H DV1/IumH3CpviWkOpxyWJdNg8vrUxEsngvJ7APSpAd8Xu6Sxlvu+2aWkTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHY89Rf3cumx5h6rm1ugym3dzVovMB8GA1UdIwQY MBaAFDmwjKLGS6c19LFFIW3RTZnwgp8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUt MzQxNjA0NGUzNThlLzEvZGp6MUZfZHk2YkhtSHF1Ylc2REtiZDNOV2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUtMzQxNjA0NGUzNThl LzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueDyMA0G CSqGSIb3DQEBCwUAA4IBAQBdXXNMxD6Ktyy5Z8afsB7QXO/wQMCBdU9Nmi7q2yV8 7cFKmjC7yQZh1SBLXsRKtBzSx/hzHGGYwbXtiEWj9DEeIZe4vKqcqKypmxIrt7Y3 oD4yfPFsLEj/1R74J/5vIrvFG7Cpz/eCJfxXA1rmaH3m800BAbTji+i9QUhTMNPU sbOeYR63AQPp7Tt3QxLSextwk+vBRbDhg6fU4hJ/lsxIdG/ve+ctb6adL2AP7M7L GEu+cMtD4PFcwoymWnYJzHxFlYCCJkqRbtGRDINqt1ZvLDdwQroIt5w0S0pkALxB N3U4LcE1PsJX3UlSk62qPUzJE/8p9hGFmjcm0maunCvT -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:34 2026 by rpki-client