This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/Dj9CJFUsImKBU9U_mhefNRwvbIo.roa File: Dj9CJFUsImKBU9U_mhefNRwvbIo.roa (raw, json) Hash identifier: jfaVbt4D0tQv1/8oA/TsxoFyvLDfmm01xPEsZK7MAww= Subject key identifier: 0E:3F:42:24:55:2C:22:62:81:53:D5:3F:9A:17:9F:35:1C:2F:6C:8A Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a Certificate serial: 019B7F147ADB404E13E5FA7137BD47D2563D Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/Dj9CJFUsImKBU9U_mhefNRwvbIo.roa Signing time: Fri 02 Jan 2026 14:20:07 +0000 ROA not before: Fri 02 Jan 2026 14:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31651 IP address blocks: 81.88.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:7a:db:40:4e:13:e5:fa:71:37:bd:47:d2:56:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a Validity Not Before: Jan 2 14:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e3f4224552c22628153d53f9a179f351c2f6c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:51:35:19:ed:a9:fa:8a:98:a8:37:0b:50: 0f:db:b5:71:f0:d7:62:b3:ca:04:75:95:af:ff:06: 74:c4:c0:78:55:ae:b6:d7:4b:de:2b:db:a4:ee:58: 99:22:c7:d3:8a:da:1d:31:06:71:36:84:89:d6:c1: 65:f5:62:0e:3e:2b:41:7e:6e:b4:8d:f9:a1:a1:b1: 8b:7b:85:50:f4:af:49:85:7a:f0:58:b7:19:91:c9: 1a:c9:22:f5:a7:1a:23:8a:22:e0:34:b5:f0:98:90: 8c:7a:c2:55:75:69:0c:80:5b:1e:c0:c7:10:43:53: cc:7d:31:72:20:b7:86:3f:73:7f:c1:24:09:e2:26: 2c:91:20:6f:e7:b9:4a:6f:db:40:f0:1c:38:d5:36: ff:6c:1c:68:25:d8:02:0e:6b:4f:ae:31:1c:66:be: 74:69:4b:85:24:03:3c:cb:53:a3:50:5b:38:1c:23: 01:b6:3b:25:f5:3a:41:0a:7d:64:62:88:69:46:cf: 3c:ef:a5:c3:8c:38:31:fb:5d:0d:78:9a:21:d2:76: 1f:89:f3:a1:34:81:88:19:90:a3:f9:c7:48:f3:26: aa:0b:17:7b:a3:b8:12:50:ba:78:3d:ad:c3:16:10: 3a:bf:9f:4f:e1:70:56:b5:e8:fc:b6:71:92:d5:f0: 18:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3F:42:24:55:2C:22:62:81:53:D5:3F:9A:17:9F:35:1C:2F:6C:8A X509v3 Authority Key Identifier: keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/Dj9CJFUsImKBU9U_mhefNRwvbIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.108.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:4d:20:d1:16:02:95:5c:a6:61:f0:69:99:98:60:f7:e0:8e: bf:44:5b:46:fc:52:0f:7d:cc:30:5d:63:a0:28:7a:bd:11:64: ff:92:25:af:b8:87:68:19:03:fe:ba:f1:79:19:be:e3:03:e9: a9:f8:79:f6:cf:51:95:a0:fd:75:84:bd:f8:82:ee:5d:56:e3: 14:4b:d6:01:f6:fd:7e:25:13:98:e7:9d:03:2d:3e:3c:4b:bd: 42:05:1b:61:1f:0d:a6:c2:ca:39:95:50:53:c9:fe:f6:06:05: 1f:ce:c8:c2:f7:c7:ef:32:c0:20:02:bd:69:07:25:25:8b:07: c0:1b:83:27:ba:a5:6b:91:70:b0:56:0d:c4:b5:7a:eb:9a:84: 57:bd:ab:3b:fa:5e:28:f3:97:6a:9a:fc:ee:b6:9f:cf:ba:42: 90:95:e3:ce:7f:57:e1:bb:e0:26:28:20:5f:61:03:fa:3d:17: 96:6f:14:56:06:1a:c2:3d:aa:bc:c5:43:fa:f1:82:20:0f:23: 4a:5f:dc:07:a9:46:8f:57:85:71:08:b5:2e:ba:1a:eb:dd:26: 03:2a:10:06:85:fe:59:0a:e9:7b:1a:15:e3:3e:59:66:49:31: 5c:a8:59:7f:8a:d7:e2:f5:8d:2a:ac:eb:7a:e2:2b:f4:b3:51: 84:37:40:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FHrbQE4T5fpxN71H0lY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjZmNDc2ZDYwODYyNWFkMWZlMDZlNTJiOTc0YTlmNjZm MDE0MWEwHhcNMjYwMTAyMTQyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTNmNDIyNDU1MmMyMjYyODE1M2Q1M2Y5YTE3OWYzNTFjMmY2YzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaJRNRntqfqKmKg3C1AP27Vx8Ndi s8oEdZWv/wZ0xMB4Va6210veK9uk7liZIsfTitodMQZxNoSJ1sFl9WIOPitBfm60 jfmhobGLe4VQ9K9JhXrwWLcZkckaySL1pxojiiLgNLXwmJCMesJVdWkMgFsewMcQ Q1PMfTFyILeGP3N/wSQJ4iYskSBv57lKb9tA8Bw41Tb/bBxoJdgCDmtPrjEcZr50 aUuFJAM8y1OjUFs4HCMBtjsl9TpBCn1kYohpRs8876XDjDgx+10NeJoh0nYfifOh NIGIGZCj+cdI8yaqCxd7o7gSULp4Pa3DFhA6v59P4XBWtej8tnGS1fAYqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4/QiRVLCJigVPVP5oXnzUcL2yKMB8GA1UdIwQY MBaAFIom9HbWCGJa0f4G5SuXSp9m8BQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It ZDg0NmQxMDZiNWY3LzEvRGo5Q0pGVXNJbUtCVTlVX21oZWZOUnd2YklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3 LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUVhsMA0G CSqGSIb3DQEBCwUAA4IBAQBcTSDRFgKVXKZh8GmZmGD34I6/RFtG/FIPfcwwXWOg KHq9EWT/kiWvuIdoGQP+uvF5Gb7jA+mp+Hn2z1GVoP11hL34gu5dVuMUS9YB9v1+ JROY550DLT48S71CBRthHw2mwso5lVBTyf72BgUfzsjC98fvMsAgAr1pByUliwfA G4MnuqVrkXCwVg3EtXrrmoRXvas7+l4o85dqmvzutp/PukKQlePOf1fhu+AmKCBf YQP6PReWbxRWBhrCPaq8xUP68YIgDyNKX9wHqUaPV4VxCLUuuhrr3SYDKhAGhf5Z Cul7GhXjPllmSTFcqFl/itfi9Y0qrOt64iv0s1GEN0Bn -----END CERTIFICATE-----Generated at Mon Jan 26 12:37:16 2026 by rpki-client