This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DZQMWTwJCaLKa2Bm5iGiXQFgI2s.roa File: DZQMWTwJCaLKa2Bm5iGiXQFgI2s.roa (raw, json) Hash identifier: K3P7ViA1k3Ej16iDBQX60WHyz7GHvcBk5Q1jr8kAGUg= Subject key identifier: 0D:94:0C:59:3C:09:09:A2:CA:6B:60:66:E6:21:A2:5D:01:60:23:6B Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC695F419C3CAF7D8B21F1F306A1E3 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DZQMWTwJCaLKa2Bm5iGiXQFgI2s.roa Signing time: Thu 01 Jan 2026 14:18:15 +0000 ROA not before: Thu 01 Jan 2026 14:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205089 IP address blocks: 77.239.124.0/24 maxlen: 24 144.31.24.0/24 maxlen: 24 144.31.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:69:5f:41:9c:3c:af:7d:8b:21:f1:f3:06:a1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d940c593c0909a2ca6b6066e621a25d0160236b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:b9:08:88:4d:d6:92:4f:e5:c3:38:a3:dc: 71:cc:7c:6e:da:71:4d:e6:c1:98:8c:56:be:2d:40: cf:49:fe:9d:a5:b9:a6:14:b9:6c:34:00:30:41:6c: f9:d5:3d:db:4a:d2:d0:5f:a8:db:84:b0:85:ea:77: 07:1d:7f:ae:85:89:1e:c9:74:98:97:4c:1b:4d:98: 19:eb:fd:70:90:80:d7:c1:e2:86:5e:d9:2b:93:3f: 8f:cb:c8:a1:e2:a5:bb:8a:e1:4d:d9:c3:36:89:05: 6e:ad:e6:13:2b:fc:d7:02:4f:26:2c:2d:be:5f:65: 9b:66:7b:1e:b9:cb:f4:d7:8d:7b:3c:63:e7:7b:17: e6:17:47:8a:6a:c3:6a:5d:5f:3c:50:5d:81:18:42: 91:e7:6a:b0:19:72:00:ff:6d:3a:ed:00:fb:44:88: d9:27:1e:0c:44:c3:e3:fc:d3:ec:36:90:3d:a6:a8: c3:5a:a5:85:85:d3:19:f5:ed:f2:d6:4b:a6:17:59: 75:f6:e2:99:59:a5:29:d0:db:a3:4c:d3:01:3c:8c: 59:2b:ad:f6:fe:75:46:84:ec:8d:cc:a8:9e:db:0e: 5a:24:59:ff:88:7d:d1:ee:35:b7:e5:85:f6:82:11: 33:f1:8b:04:0e:59:8a:2b:3c:a7:07:f8:53:38:6c: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:94:0C:59:3C:09:09:A2:CA:6B:60:66:E6:21:A2:5D:01:60:23:6B X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DZQMWTwJCaLKa2Bm5iGiXQFgI2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.239.124.0/24 144.31.24.0/24 144.31.223.0/24 Signature Algorithm: sha256WithRSAEncryption 50:3b:04:89:2f:db:ed:e9:0b:ec:68:e4:01:73:d2:a2:68:00: 86:1d:76:e7:3b:cf:b3:90:f4:48:30:4c:7c:9b:fc:ab:bd:d2: 66:b6:f4:68:31:b0:7f:86:87:f6:1b:4b:5a:1c:1e:75:a4:a2: 75:ff:01:05:49:4a:52:0b:d2:9e:98:ff:2a:ec:49:be:2a:49: 58:c8:b0:42:7a:6a:f8:73:b4:9f:be:7a:80:b3:0d:5b:09:85: c8:40:f6:33:9f:12:71:73:80:10:53:0f:20:93:d1:7d:83:0f: 55:c5:5f:18:4c:82:42:78:4e:de:1e:e5:c5:67:8c:8b:98:e9: 94:29:e6:48:86:4b:8c:b5:91:57:ff:61:1c:f9:a2:7a:5f:95: 52:01:18:f1:db:db:0c:87:0c:c3:04:88:79:e5:05:31:ff:f2: 94:0f:c0:33:8a:9a:16:55:f9:e7:e0:0f:e1:c2:67:2d:f9:0e: 45:d8:d9:87:d5:4a:4e:3d:74:65:6d:7e:6c:06:e1:eb:82:81: bd:98:80:24:56:48:71:14:48:ae:76:80:dc:a7:c8:b5:9c:e6: e5:fd:b1:a5:b7:9f:f9:6a:a1:99:e1:d1:c5:5f:f2:48:ad:f3: 7b:a2:de:a2:9e:d4:09:0f:4a:76:71:e3:21:a2:63:46:67:7b: 75:ec:19:cb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57GlfQZw8r32LIfHzBqHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDk0MGM1OTNjMDkwOWEyY2E2YjYwNjZlNjIxYTI1ZDAxNjAyMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBK5CIhN1pJP5cM4o9xxzHxu2nFN 5sGYjFa+LUDPSf6dpbmmFLlsNAAwQWz51T3bStLQX6jbhLCF6ncHHX+uhYkeyXSY l0wbTZgZ6/1wkIDXweKGXtkrkz+Py8ih4qW7iuFN2cM2iQVureYTK/zXAk8mLC2+ X2WbZnseucv01417PGPnexfmF0eKasNqXV88UF2BGEKR52qwGXIA/2067QD7RIjZ Jx4MRMPj/NPsNpA9pqjDWqWFhdMZ9e3y1kumF1l19uKZWaUp0NujTNMBPIxZK632 /nVGhOyNzKie2w5aJFn/iH3R7jW35YX2ghEz8YsEDlmKKzynB/hTOGw04wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA2UDFk8CQmiymtgZuYhol0BYCNrMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvRFpRTVdUd0pDYUxLYTJCbTVpR2lYUUZnSTJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATe98AwQA kB8YAwQAkB/fMA0GCSqGSIb3DQEBCwUAA4IBAQBQOwSJL9vt6QvsaOQBc9KiaACG HXbnO8+zkPRIMEx8m/yrvdJmtvRoMbB/hof2G0taHB51pKJ1/wEFSUpSC9KemP8q 7Em+KklYyLBCemr4c7SfvnqAsw1bCYXIQPYznxJxc4AQUw8gk9F9gw9VxV8YTIJC eE7eHuXFZ4yLmOmUKeZIhkuMtZFX/2Ec+aJ6X5VSARjx29sMhwzDBIh55QUx//KU D8AzipoWVfnn4A/hwmct+Q5F2NmH1UpOPXRlbX5sBuHrgoG9mIAkVkhxFEiudoDc p8i1nObl/bGlt5/5aqGZ4dHFX/JIrfN7ot6intQJD0p2ceMhomNGZ3t17BnL -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:40 2026 by rpki-client