This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/DaJESnUPstRnvc8gyVuGJJGAc7Y.roa File: DaJESnUPstRnvc8gyVuGJJGAc7Y.roa (raw, json) Hash identifier: XZbUEMnqmV6tcLHU8cRnDGbe97bObMl8R2ndAHcyFi8= Subject key identifier: 0D:A2:44:4A:75:0F:B2:D4:67:BD:CF:20:C9:5B:86:24:91:80:73:B6 Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Certificate serial: 019B7E37360B7886618FB249AF9ACF0DBB88 Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/DaJESnUPstRnvc8gyVuGJJGAc7Y.roa Signing time: Fri 02 Jan 2026 10:18:26 +0000 ROA not before: Fri 02 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31144 IP address blocks: 217.118.240.0/20 maxlen: 20 217.118.244.0/24 maxlen: 24 217.118.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:36:0b:78:86:61:8f:b2:49:af:9a:cf:0d:bb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Validity Not Before: Jan 2 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0da2444a750fb2d467bdcf20c95b8624918073b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:51:50:40:61:f1:02:e7:a6:22:bb:91:1b: 5d:34:04:e0:46:c9:90:e1:f3:a8:0d:b1:39:36:22: 89:68:b9:a4:2a:92:4d:9a:4b:aa:b1:8e:b0:3e:5f: d0:86:01:12:40:6b:37:9d:3a:f8:ab:44:19:bf:65: 8f:0f:d5:3d:a6:41:32:f7:75:e9:93:12:26:5f:35: 6a:1f:d2:52:6d:f0:ce:b7:bd:3c:3d:46:26:9b:b2: aa:7e:74:8b:98:ae:d5:72:69:ec:b9:f4:fb:37:fa: e4:ce:d5:93:ad:30:91:a0:29:c8:9b:47:ce:54:e9: d1:02:c5:3f:2c:bb:2f:5f:da:34:66:ef:b2:e8:f1: 08:c9:99:29:7f:7e:7b:af:54:88:5f:e9:fd:2e:7a: 6a:1f:12:b4:2f:1d:e9:81:5c:23:b2:fa:b2:ab:c8: 79:4c:d8:db:4a:58:b8:dc:ed:b9:2b:5f:48:68:1f: eb:15:fa:8a:aa:0e:c4:f1:ab:87:ce:ad:8b:e5:30: ef:2b:42:ba:a3:0c:42:99:ff:77:af:8b:e4:6e:b3: 76:cf:56:7d:f8:2e:72:01:66:41:c7:d1:b3:a7:e8: 3d:1b:37:a7:ce:04:86:da:06:19:c5:e6:37:7e:97: af:6b:0a:37:78:60:18:c8:7d:36:f7:7e:22:a8:a2: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A2:44:4A:75:0F:B2:D4:67:BD:CF:20:C9:5B:86:24:91:80:73:B6 X509v3 Authority Key Identifier: keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/DaJESnUPstRnvc8gyVuGJJGAc7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.118.240.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:c5:5c:56:2e:8c:5f:91:e0:58:60:84:88:43:2b:e1:bc:75: 87:87:59:31:21:c4:12:e8:d6:ef:3f:62:b4:05:81:60:b0:43: 40:4a:39:15:2a:de:84:df:7e:e6:22:5c:dc:20:c3:b6:a9:f4: e3:8f:29:28:6e:85:8b:07:66:b1:8c:97:0f:00:66:d9:f8:90: fb:06:9e:9c:53:4d:d6:79:fb:79:3b:c8:3b:49:b0:62:33:1a: fc:05:48:63:17:00:23:f3:93:4d:cb:68:6f:f4:a8:dc:85:bc: 56:15:25:2d:d7:bb:64:14:f2:26:f3:c2:c9:2d:1e:65:0f:48: ac:31:47:3e:3a:05:48:7c:de:72:10:76:26:66:15:91:62:0b: 58:f9:dd:9e:20:74:50:ed:bc:83:b5:b5:4a:3c:90:26:a5:26: e4:c6:d5:21:35:4b:70:2b:27:e0:b1:a5:f0:df:a1:18:9c:9b: 66:a4:9d:67:71:c4:1d:f9:c5:da:3f:6f:d7:1b:1b:b0:fc:f4: a8:37:f7:41:aa:d8:1b:22:9d:63:76:e0:d3:ae:17:0d:73:98: d8:64:2c:81:cd:8e:4b:ce:f6:80:fe:72:53:19:48:a0:2f:a1: f5:09:4a:b3:94:86:99:8b:ab:79:1e:c6:ad:80:6b:3e:7e:03: 05:94:18:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NzYLeIZhj7JJr5rPDbuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2IzNWMwOGJhNDkzMDFhNmNjNDMwYWRhOTQ5M2NlZDdl ZDQyMTgwHhcNMjYwMTAyMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGEyNDQ0YTc1MGZiMmQ0NjdiZGNmMjBjOTViODYyNDkxODA3M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcVRUEBh8QLnpiK7kRtdNATgRsmQ 4fOoDbE5NiKJaLmkKpJNmkuqsY6wPl/QhgESQGs3nTr4q0QZv2WPD9U9pkEy93Xp kxImXzVqH9JSbfDOt708PUYmm7KqfnSLmK7VcmnsufT7N/rkztWTrTCRoCnIm0fO VOnRAsU/LLsvX9o0Zu+y6PEIyZkpf357r1SIX+n9LnpqHxK0Lx3pgVwjsvqyq8h5 TNjbSli43O25K19IaB/rFfqKqg7E8auHzq2L5TDvK0K6owxCmf93r4vkbrN2z1Z9 +C5yAWZBx9Gzp+g9GzenzgSG2gYZxeY3fpevawo3eGAYyH02934iqKLpnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2iREp1D7LUZ73PIMlbhiSRgHO2MB8GA1UdIwQY MBaAFG97NcCLpJMBpsxDCtqUk87X7UIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEt ZDI0YzM1ZGZhYzk0LzEvRGFKRVNuVVBzdFJudmM4Z3lWdUdKSkdBYzdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEtZDI0YzM1ZGZhYzk0 LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2XbwMA0G CSqGSIb3DQEBCwUAA4IBAQA9xVxWLoxfkeBYYISIQyvhvHWHh1kxIcQS6NbvP2K0 BYFgsENASjkVKt6E337mIlzcIMO2qfTjjykoboWLB2axjJcPAGbZ+JD7Bp6cU03W eft5O8g7SbBiMxr8BUhjFwAj85NNy2hv9KjchbxWFSUt17tkFPIm88LJLR5lD0is MUc+OgVIfN5yEHYmZhWRYgtY+d2eIHRQ7byDtbVKPJAmpSbkxtUhNUtwKyfgsaXw 36EYnJtmpJ1nccQd+cXaP2/XGxuw/PSoN/dBqtgbIp1jduDTrhcNc5jYZCyBzY5L zvaA/nJTGUigL6H1CUqzlIaZi6t5HsatgGs+fgMFlBij -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:07 2026 by rpki-client