This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/DjqIy3whY0iAK0V4OvhhtvGGxc8.roa File: DjqIy3whY0iAK0V4OvhhtvGGxc8.roa (raw, json) Hash identifier: J6ClKo6gWmtX41vPMMEGgdT0yE8BMDFvncNX4O6KPhY= Subject key identifier: 0E:3A:88:CB:7C:21:63:48:80:2B:45:78:3A:F8:61:B6:F1:86:C5:CF Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019B797E35C1ADC5B29C835F2052CBBC02A3 Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/DjqIy3whY0iAK0V4OvhhtvGGxc8.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199522 IP address blocks: 83.98.216.0/24 maxlen: 24 89.30.156.0/24 maxlen: 24 89.30.157.0/24 maxlen: 24 2001:16f8:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:35:c1:ad:c5:b2:9c:83:5f:20:52:cb:bc:02:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e3a88cb7c216348802b45783af861b6f186c5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:8f:a1:c9:8a:f5:94:26:f6:94:29:03:3a: 7a:3e:0c:c1:40:90:c7:77:bd:fe:31:98:bc:7f:69: 2c:ce:28:9d:a8:80:60:8e:85:be:f5:ae:61:35:3a: 02:01:a5:ca:c6:f4:41:f3:36:31:e2:4a:a1:1e:35: 84:e1:da:62:22:95:b3:39:b4:53:32:3e:be:eb:65: 27:9f:bb:78:c6:2b:6a:f7:bf:57:d8:79:d2:34:e4: c5:06:31:29:71:29:07:0a:16:ce:8e:ab:f2:6d:28: a2:23:8a:34:db:7f:95:42:4c:bc:c2:6b:e6:d4:70: a5:46:4f:f4:78:8b:2e:92:b4:fa:c4:dc:76:33:0c: 52:11:fa:d8:fb:f2:20:5a:4a:10:44:81:0d:68:95: e5:59:28:55:16:56:f9:87:84:d5:3d:b7:0a:d0:b7: 34:94:49:37:ea:55:8e:51:bc:18:72:e2:dd:f4:ba: e2:f9:0e:98:a3:69:ea:28:a8:e7:4f:19:74:34:a4: 5f:fb:04:22:90:8d:90:1c:a8:4a:98:a2:17:67:68: db:c8:fd:06:72:b7:45:76:2a:37:d1:49:06:84:4c: 13:d8:d3:02:ef:c4:fd:dd:08:71:56:0b:97:1c:55: 8e:04:35:94:c1:82:f3:db:5e:c0:d7:a8:cf:66:62: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:88:CB:7C:21:63:48:80:2B:45:78:3A:F8:61:B6:F1:86:C5:CF X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/DjqIy3whY0iAK0V4OvhhtvGGxc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.98.216.0/24 89.30.156.0/23 IPv6: 2001:16f8:4000::/48 Signature Algorithm: sha256WithRSAEncryption 3b:b3:2f:19:e9:7b:7e:52:ba:48:61:12:71:c9:f0:d4:49:1c: fb:20:df:48:c9:76:8d:45:9b:90:08:b5:f4:28:2b:ad:30:f4: d6:c9:0c:fd:97:dc:23:fa:02:47:4d:11:a2:b7:ef:a0:51:cd: fd:b1:52:88:61:d7:e8:e3:7d:43:41:aa:43:ca:8c:07:fa:f6: 28:59:42:b5:f8:53:21:2d:ba:92:0a:1c:89:4a:fe:0e:26:06: 98:3d:9c:c6:05:65:e8:6c:39:eb:05:5f:1d:0c:5f:fe:a7:4c: 79:a9:ae:fe:3e:03:de:c1:d3:51:96:4a:71:d1:57:fa:59:9c: f5:a0:4a:99:62:8e:43:86:f7:02:58:81:55:d4:f5:e3:db:e1: 85:a5:29:89:77:19:b0:e3:0b:a0:80:4a:80:d1:54:27:0c:e0: 06:92:2b:be:5d:ac:a2:54:11:e8:29:8e:9e:d6:6a:bb:fb:b7: ef:cd:43:11:7e:6c:db:22:eb:26:48:c2:56:55:0b:c9:cd:97: b6:f8:38:ba:6c:c5:b9:ad:21:a8:dd:c9:63:65:d6:97:51:b7: 42:42:36:ea:6e:e3:6d:77:21:21:39:d1:b2:d7:82:a4:6e:5f: 77:e4:eb:fc:6a:d5:16:a8:77:dc:14:73:a1:9b:db:69:51:fc: e0:95:d2:7c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fjXBrcWynINfIFLLvAKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTNhODhjYjdjMjE2MzQ4ODAyYjQ1NzgzYWY4NjFiNmYxODZjNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzuPocmK9ZQm9pQpAzp6PgzBQJDH d73+MZi8f2ksziidqIBgjoW+9a5hNToCAaXKxvRB8zYx4kqhHjWE4dpiIpWzObRT Mj6+62Unn7t4xitq979X2HnSNOTFBjEpcSkHChbOjqvybSiiI4o023+VQky8wmvm 1HClRk/0eIsukrT6xNx2MwxSEfrY+/IgWkoQRIENaJXlWShVFlb5h4TVPbcK0Lc0 lEk36lWOUbwYcuLd9Lri+Q6Yo2nqKKjnTxl0NKRf+wQikI2QHKhKmKIXZ2jbyP0G crdFdio30UkGhEwT2NMC78T93QhxVguXHFWOBDWUwYLz217A16jPZmKZqQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFA46iMt8IWNIgCtFeDr4YbbxhsXPMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvRGpxSXkzd2hZMGlBSzBWNE92aGh0dkdHeGM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAU2LYAwQB WR6cMA8EAgACMAkDBwAgARb4QAAwDQYJKoZIhvcNAQELBQADggEBADuzLxnpe35S ukhhEnHJ8NRJHPsg30jJdo1Fm5AItfQoK60w9NbJDP2X3CP6AkdNEaK376BRzf2x Uohh1+jjfUNBqkPKjAf69ihZQrX4UyEtupIKHIlK/g4mBpg9nMYFZehsOesFXx0M X/6nTHmprv4+A97B01GWSnHRV/pZnPWgSplijkOG9wJYgVXU9ePb4YWlKYl3GbDj C6CASoDRVCcM4AaSK75drKJUEegpjp7Warv7t+/NQxF+bNsi6yZIwlZVC8nNl7b4 OLpsxbmtIajdyWNl1pdRt0JCNupu4213ISE50bLXgqRuX3fk6/xq1Raod9wUc6Gb 22lR/OCV0nw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:54 2026 by rpki-client