This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DjzjyfT0Zb-DGNg0-t_rHr0YeRY.roa File: DjzjyfT0Zb-DGNg0-t_rHr0YeRY.roa (raw, json) Hash identifier: /c/wFB1GBFmLSsN19h25lg2Vq54Eqd6Lz68kbt3FRIY= Subject key identifier: 0E:3C:E3:C9:F4:F4:65:BF:83:18:D8:34:FA:DF:EB:1E:BD:18:79:16 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B1CCE228A371819402F83BE3AF32FFDFB Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DjzjyfT0Zb-DGNg0-t_rHr0YeRY.roa Signing time: Sun 14 Dec 2025 12:20:29 +0000 ROA not before: Sun 14 Dec 2025 12:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 5.180.232.0/24 maxlen: 24 45.8.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:ce:22:8a:37:18:19:40:2f:83:be:3a:f3:2f:fd:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 14 12:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e3ce3c9f4f465bf8318d834fadfeb1ebd187916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b6:50:61:8f:ca:d6:ab:60:02:e8:3c:fd:88: 77:5e:d9:a7:c7:f6:92:21:c4:1c:69:1c:31:d5:bd: c4:d0:2d:56:c9:04:92:10:11:c8:95:98:3a:e4:72: ca:0b:06:4c:dd:9f:20:d2:ec:79:15:55:45:1e:a6: aa:23:38:41:f6:09:d6:04:6b:12:77:b9:fd:5b:47: 91:8c:8e:39:ac:79:51:16:67:bd:f6:87:f2:9d:c0: b8:04:3e:e4:f9:fa:bf:22:b4:b2:6a:8a:eb:d1:5c: 4f:6b:8c:a5:e6:93:2c:df:20:86:da:c0:21:93:09: a5:d8:35:d8:01:a2:13:5d:46:1a:d4:07:68:f8:1e: 6c:5c:a5:1f:be:76:ea:45:17:75:73:c2:09:e5:88: 42:02:17:0a:61:a9:19:fa:13:fa:59:3c:9d:07:af: 88:a2:cf:bb:02:4f:5c:88:0a:41:dc:3e:ce:f8:84: 36:52:5c:35:6d:fc:ca:22:03:9a:74:a9:30:92:3d: 90:1b:10:0b:b8:cc:06:8e:ae:5e:14:76:ff:34:a0: 36:50:17:d8:85:f0:fd:31:d9:55:07:c8:c2:70:ad: e1:b2:4f:4d:17:ef:33:d3:95:a2:ad:4b:2d:61:a2: b1:dc:c0:5d:d1:b0:7b:22:e8:b3:b4:b0:c5:84:36: a3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:E3:C9:F4:F4:65:BF:83:18:D8:34:FA:DF:EB:1E:BD:18:79:16 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DjzjyfT0Zb-DGNg0-t_rHr0YeRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.232.0/24 45.8.253.0/24 Signature Algorithm: sha256WithRSAEncryption c4:76:ff:68:3e:b5:ef:b4:5b:f2:79:57:15:f0:19:a0:23:89: 9c:71:36:5c:37:9c:92:f6:b1:50:57:15:1a:05:a1:e0:ed:32: 29:d2:fd:08:39:f0:bf:ba:f3:c4:0a:0b:05:fb:43:33:18:4a: 8a:eb:18:97:76:34:bc:e5:c2:59:db:c7:3b:45:14:6c:cf:37: a4:de:83:d6:af:cf:83:32:23:39:d8:04:e3:d5:b0:b0:37:c4: 85:aa:45:08:c5:a8:b1:cd:6d:80:1d:7d:05:34:cb:d0:fc:88: ef:05:f4:f3:4c:ad:f9:06:b9:a2:33:0a:c7:56:48:08:a6:2a: 99:04:9e:29:28:6a:4a:33:b1:d1:3f:37:61:76:ed:ee:c7:20: f1:7e:fe:1d:f4:50:5c:95:87:18:cb:08:45:79:53:52:d4:4d: 89:c0:ac:05:b4:87:66:18:7c:ec:4e:09:5c:57:12:ad:44:f7: 64:21:77:95:0c:5c:7b:c6:54:34:d3:d9:16:95:45:a3:fa:22: 2e:22:3e:13:9d:9c:bd:50:3c:07:d3:69:e6:3b:29:92:3e:46: dc:e8:7f:97:ff:0e:fc:c9:46:79:9c:c2:2a:c3:1c:ea:62:10: 28:8e:9a:8b:e1:de:0f:b8:67:b2:a6:e6:d4:55:b0:ae:1d:4f: b0:84:0f:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZscziKKNxgZQC+DvjrzL/37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjE0MTIyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTNjZTNjOWY0ZjQ2NWJmODMxOGQ4MzRmYWRmZWIxZWJkMTg3OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rZQYY/K1qtgAug8/Yh3Xtmnx/aS IcQcaRwx1b3E0C1WyQSSEBHIlZg65HLKCwZM3Z8g0ux5FVVFHqaqIzhB9gnWBGsS d7n9W0eRjI45rHlRFme99ofyncC4BD7k+fq/IrSyaorr0VxPa4yl5pMs3yCG2sAh kwml2DXYAaITXUYa1Ado+B5sXKUfvnbqRRd1c8IJ5YhCAhcKYakZ+hP6WTydB6+I os+7Ak9ciApB3D7O+IQ2Ulw1bfzKIgOadKkwkj2QGxALuMwGjq5eFHb/NKA2UBfY hfD9MdlVB8jCcK3hsk9NF+8z05WirUstYaKx3MBd0bB7IuiztLDFhDajQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA4848n09GW/gxjYNPrf6x69GHkWMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvRGp6anlmVDBaYi1ER05nMC10X3JIcjBZZVJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbToAwQA LQj9MA0GCSqGSIb3DQEBCwUAA4IBAQDEdv9oPrXvtFvyeVcV8BmgI4mccTZcN5yS 9rFQVxUaBaHg7TIp0v0IOfC/uvPECgsF+0MzGEqK6xiXdjS85cJZ28c7RRRszzek 3oPWr8+DMiM52ATj1bCwN8SFqkUIxaixzW2AHX0FNMvQ/IjvBfTzTK35BrmiMwrH VkgIpiqZBJ4pKGpKM7HRPzdhdu3uxyDxfv4d9FBclYcYywhFeVNS1E2JwKwFtIdm GHzsTglcVxKtRPdkIXeVDFx7xlQ009kWlUWj+iIuIj4TnZy9UDwH02nmOymSPkbc 6H+X/w78yUZ5nMIqwxzqYhAojpqL4d4PuGeypubUVbCuHU+whA9B -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:27 2025 by rpki-client