This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa File: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (raw, json) Hash identifier: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo= Subject key identifier: 0C:9E:A7:37:73:52:77:56:0E:F2:AE:6D:FF:34:FB:6C:FB:A1:40:84 Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019B7F831956AB533441C9546C5190194EE5 Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa Signing time: Fri 02 Jan 2026 16:20:56 +0000 ROA not before: Fri 02 Jan 2026 16:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216468 IP address blocks: 62.108.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:19:56:ab:53:34:41:c9:54:6c:51:90:19:4e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Jan 2 16:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c9ea737735277560ef2ae6dff34fb6cfba14084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ff:5f:5b:4c:32:a5:76:37:af:ad:93:54:88: 61:e5:a4:5c:fc:74:f2:ed:5b:c3:be:aa:17:21:a8: 2c:de:c1:48:1d:6e:99:92:3d:a4:28:d4:05:98:6b: 61:ad:d9:31:c0:d6:16:7a:f2:09:96:cf:f7:d4:df: c0:8f:f9:7e:f1:e6:b0:98:71:ea:e8:c9:c6:22:6a: d3:09:2b:5a:f8:41:91:ed:e5:a1:5c:21:a7:4b:5e: 10:93:e2:82:2b:ed:34:1f:af:6d:75:d5:44:e0:c5: 60:30:a2:c2:df:97:72:54:50:f9:d7:00:93:5d:63: 31:23:a2:79:06:7b:74:7f:2f:ec:f9:3d:be:7f:fe: 2a:40:38:43:4e:94:61:08:db:10:8d:aa:48:0d:b8: c1:dc:84:6f:05:71:30:b5:d8:cf:8a:a3:b2:8f:31: 41:f2:c9:b3:ed:43:71:6b:27:da:f0:5b:e8:94:aa: a2:a4:3d:9f:f3:74:ca:a2:29:2d:d6:61:7b:f9:95: 54:96:df:38:07:e6:77:14:75:08:d7:7d:bc:7a:3e: e9:88:10:fc:93:05:fe:ca:2f:ac:27:69:b5:4e:a1: 8a:0c:dd:4f:8a:16:09:14:eb:51:86:02:c3:56:ba: 14:64:ad:48:5c:2b:33:ee:62:76:bd:89:5e:3d:42: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9E:A7:37:73:52:77:56:0E:F2:AE:6D:FF:34:FB:6C:FB:A1:40:84 X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.104.0/24 Signature Algorithm: sha256WithRSAEncryption 80:68:b4:8b:54:73:13:e1:c0:10:2a:1a:7c:f2:af:08:86:cf: ed:93:0e:ca:7d:3b:36:1f:a0:1f:fc:c2:ba:58:05:6c:9b:2a: 8c:75:88:93:b7:27:2b:84:f8:0a:22:13:3a:11:78:c3:0e:6b: e9:9d:e3:02:0c:0c:d7:63:c3:e4:e4:cd:da:e6:cd:71:17:32: 67:91:83:3f:88:6b:e8:27:f9:9a:a0:f6:9b:d7:3f:22:b5:cc: f3:74:5f:c2:e0:7b:c1:26:87:0e:36:da:dc:59:21:98:3c:a3: e0:b2:33:40:04:31:4b:c2:6a:66:d5:d1:46:ee:ce:53:fe:45: 54:fd:37:87:95:97:cc:dd:93:c1:ff:63:87:30:64:87:20:16: 4b:32:e6:b5:ec:f9:06:50:ca:a6:91:1f:30:cb:4a:29:c9:af: 97:35:ce:c6:01:49:8a:6a:a7:3d:5f:4f:12:64:99:18:1b:91: 74:66:0b:b8:8d:c0:b7:3d:c4:34:e1:d9:4c:0a:f7:57:9f:7d: 1a:62:fd:16:e8:41:b5:04:14:c0:66:c8:e3:b3:1a:56:d2:95: fe:ff:cc:47:fc:79:34:4c:51:06:7f:8e:3d:8e:d5:83:eb:b6: 86:e7:fa:94:a2:18:2f:60:e9:ec:57:38:ad:33:19:e1:8d:0e: af:b6:14:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxlWq1M0QclUbFGQGU7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjYwMTAyMTYyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzllYTczNzczNTI3NzU2MGVmMmFlNmRmZjM0ZmI2Y2ZiYTE0MDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P9fW0wypXY3r62TVIhh5aRc/HTy 7VvDvqoXIags3sFIHW6Zkj2kKNQFmGthrdkxwNYWevIJls/31N/Aj/l+8eawmHHq 6MnGImrTCSta+EGR7eWhXCGnS14Qk+KCK+00H69tddVE4MVgMKLC35dyVFD51wCT XWMxI6J5Bnt0fy/s+T2+f/4qQDhDTpRhCNsQjapIDbjB3IRvBXEwtdjPiqOyjzFB 8smz7UNxayfa8FvolKqipD2f83TKoikt1mF7+ZVUlt84B+Z3FHUI1328ej7piBD8 kwX+yi+sJ2m1TqGKDN1PihYJFOtRhgLDVroUZK1IXCsz7mJ2vYlePUJ8hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAyepzdzUndWDvKubf80+2z7oUCEMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvREo2bk4zTlNkMVlPOHE1dF96VDdiUHVoUUlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmxoMA0G CSqGSIb3DQEBCwUAA4IBAQCAaLSLVHMT4cAQKhp88q8Ihs/tkw7KfTs2H6Af/MK6 WAVsmyqMdYiTtycrhPgKIhM6EXjDDmvpneMCDAzXY8Pk5M3a5s1xFzJnkYM/iGvo J/maoPab1z8itczzdF/C4HvBJocONtrcWSGYPKPgsjNABDFLwmpm1dFG7s5T/kVU /TeHlZfM3ZPB/2OHMGSHIBZLMua17PkGUMqmkR8wy0opya+XNc7GAUmKaqc9X08S ZJkYG5F0Zgu4jcC3PcQ04dlMCvdXn30aYv0W6EG1BBTAZsjjsxpW0pX+/8xH/Hk0 TFEGf449jtWD67aG5/qUohgvYOnsVzitMxnhjQ6vthSD -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:55 2026 by rpki-client