This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/DjRcKjGf481KpSn3dS8opbsCTRQ.roa File: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (raw, json) Hash identifier: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE= Subject key identifier: 0E:34:5C:2A:31:9F:E3:CD:4A:A5:29:F7:75:2F:28:A5:BB:02:4D:14 Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b Certificate serial: 019B7CEE38458E7B25BBF208139DBF5CE727 Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/DjRcKjGf481KpSn3dS8opbsCTRQ.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203164 IP address blocks: 185.150.60.0/22 maxlen: 22 185.150.60.0/23 maxlen: 23 185.150.60.0/24 maxlen: 24 185.150.61.0/24 maxlen: 24 185.150.62.0/23 maxlen: 23 185.150.62.0/24 maxlen: 24 185.150.63.0/24 maxlen: 24 2a07:6e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:38:45:8e:7b:25:bb:f2:08:13:9d:bf:5c:e7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e345c2a319fe3cd4aa529f7752f28a5bb024d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:39:3b:72:e2:a0:40:26:db:b7:8f:9a:a1:fc: d7:0b:80:98:6d:e8:7a:d9:ec:12:8d:c0:f0:51:7d: 8e:91:4d:8e:69:ec:0a:7d:e5:97:b8:6f:ac:66:3f: d3:28:61:a5:8c:86:78:ce:b2:78:f6:af:da:88:4c: fe:9f:8f:d4:f8:12:a6:cc:47:94:0c:fa:6a:75:06: 63:b8:46:43:dc:eb:45:c3:08:20:4e:da:fd:52:77: da:4f:bf:97:e0:33:25:9a:cd:f6:1c:ac:47:bd:cc: 70:3d:72:64:01:cd:57:ee:ab:dc:71:d0:20:50:75: a1:53:58:5d:bf:5d:a4:82:70:f0:2d:f8:96:a2:8b: a0:e3:80:d5:7b:76:30:6b:3a:be:8b:2e:16:45:de: 16:06:a9:fc:8d:0e:01:96:f7:8a:38:16:64:07:48: e7:6d:f7:ae:cd:22:aa:03:c8:3b:d3:0c:ad:a1:8c: 99:64:71:97:68:46:63:9c:7f:80:00:54:6a:75:58: f2:d7:79:2f:f0:5f:9f:58:b2:ee:a0:2a:ff:c3:9c: e9:d4:4a:33:41:10:7c:02:5b:36:aa:3f:76:ca:55: ec:72:e2:ca:9d:50:51:7c:98:2f:40:f7:67:3f:e1: ff:1f:d3:cd:a0:e3:02:63:64:c7:e4:15:82:7a:b4: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:34:5C:2A:31:9F:E3:CD:4A:A5:29:F7:75:2F:28:A5:BB:02:4D:14 X509v3 Authority Key Identifier: keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/DjRcKjGf481KpSn3dS8opbsCTRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.60.0/22 IPv6: 2a07:6e00::/29 Signature Algorithm: sha256WithRSAEncryption 54:c7:9a:6d:7b:ef:37:a1:8e:d5:b6:44:d5:c0:8d:3a:18:0b: ee:65:2f:b3:5a:9c:fa:37:da:19:1c:2f:82:56:1a:13:82:23: 7a:89:c1:9e:c3:40:4f:21:0a:c7:04:a9:02:8c:3a:72:5f:52: 39:c9:18:0a:f9:ff:36:4f:22:a4:be:1f:1d:70:b2:dc:f3:d5: 42:3a:34:02:71:e6:1c:3f:86:a0:dd:5d:da:3d:16:8f:6e:e3: 78:6c:01:3c:a5:6d:12:f0:fe:ac:57:9e:01:cf:9c:e2:e6:a6: 98:5e:57:6f:ab:de:d3:06:d5:4a:10:c3:bd:6b:01:0d:e1:ee: 4f:a0:a2:0d:09:00:2a:03:a5:d9:0a:bf:63:e1:4c:5a:86:11: 07:0d:99:8c:9c:e2:32:9e:4c:52:67:ba:d2:30:54:74:90:e1: 9d:04:f1:4f:0c:63:0d:cf:a4:f4:2c:19:54:8b:5b:3d:6c:a1: 1b:6f:1f:f5:1f:d3:07:c6:94:7d:33:84:20:24:5b:79:61:d9: 47:5a:37:6a:54:9b:9c:54:08:6e:2e:15:44:cf:51:ad:2e:9b: b6:27:06:ae:1f:a9:61:10:cc:a0:1f:14:a2:16:1a:5d:fa:9b: 55:9f:13:16:21:ed:99:d1:65:03:05:39:1b:9b:c9:ed:c9:e4: 92:48:5f:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87jhFjnslu/IIE52/XOcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YTkwZjY4OTY2Nzg0NDJhZmFlZTFiYWFhYTZiMmEyZGVj YWNkM2IwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTM0NWMyYTMxOWZlM2NkNGFhNTI5Zjc3NTJmMjhhNWJiMDI0ZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zk7cuKgQCbbt4+aofzXC4CYbeh6 2ewSjcDwUX2OkU2OaewKfeWXuG+sZj/TKGGljIZ4zrJ49q/aiEz+n4/U+BKmzEeU DPpqdQZjuEZD3OtFwwggTtr9UnfaT7+X4DMlms32HKxHvcxwPXJkAc1X7qvccdAg UHWhU1hdv12kgnDwLfiWooug44DVe3Ywazq+iy4WRd4WBqn8jQ4BlveKOBZkB0jn bfeuzSKqA8g70wytoYyZZHGXaEZjnH+AAFRqdVjy13kv8F+fWLLuoCr/w5zp1Eoz QRB8Als2qj92ylXscuLKnVBRfJgvQPdnP+H/H9PNoOMCY2TH5BWCerRwzwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA40XCoxn+PNSqUp93UvKKW7Ak0UMB8GA1UdIwQY MBaAFLSpD2iWZ4RCr67huqqmsqLeys07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNjE2MTQtZWJjNS00NzMxLTg1NjAt OWQxODEyOTk5YTM1LzEvRGpSY0tqR2Y0ODFLcFNuM2RTOG9wYnNDVFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lNjE2MTQtZWJjNS00NzMxLTg1NjAtOWQxODEyOTk5YTM1 LzEvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZY8MA0E AgACMAcDBQMqB24AMA0GCSqGSIb3DQEBCwUAA4IBAQBUx5pte+83oY7VtkTVwI06 GAvuZS+zWpz6N9oZHC+CVhoTgiN6icGew0BPIQrHBKkCjDpyX1I5yRgK+f82TyKk vh8dcLLc89VCOjQCceYcP4ag3V3aPRaPbuN4bAE8pW0S8P6sV54Bz5zi5qaYXldv q97TBtVKEMO9awEN4e5PoKINCQAqA6XZCr9j4UxahhEHDZmMnOIynkxSZ7rSMFR0 kOGdBPFPDGMNz6T0LBlUi1s9bKEbbx/1H9MHxpR9M4QgJFt5YdlHWjdqVJucVAhu LhVEz1GtLpu2JwauH6lhEMygHxSiFhpd+ptVnxMWIe2Z0WUDBTkbm8ntyeSSSF8u -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:42 2026 by rpki-client