This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/daxj-MhkiZarWyN8EVbWUahA0Nw.roa File: daxj-MhkiZarWyN8EVbWUahA0Nw.roa (raw, json) Hash identifier: DXI6WwfxF6esJ4bJvCIfH7p2ed5ZUha18BtslnvRoss= Subject key identifier: 75:AC:63:F8:C8:64:89:96:AB:5B:23:7C:11:56:D6:51:A8:40:D0:DC Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Certificate serial: 019B7EA5073318AD656030196560212BD664 Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/daxj-MhkiZarWyN8EVbWUahA0Nw.roa Signing time: Fri 02 Jan 2026 12:18:23 +0000 ROA not before: Fri 02 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 185.36.40.0/24 maxlen: 24 185.36.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:07:33:18:ad:65:60:30:19:65:60:21:2b:d6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Validity Not Before: Jan 2 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75ac63f8c8648996ab5b237c1156d651a840d0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:48:44:6b:c3:c2:1a:f4:f8:23:f2:79:bd:0a: 28:15:0c:dc:54:d0:7e:9b:3a:56:1a:9c:29:bf:ac: a2:48:e4:e2:d4:55:e5:a0:e4:20:65:05:ae:1b:55: a6:98:0b:ed:60:f3:a0:99:34:10:50:f6:d7:ee:3f: cf:7c:c4:74:ae:91:fc:1e:82:00:05:b0:6f:19:dd: 74:41:0b:c4:21:93:ab:5c:60:b1:7c:29:60:a3:66: e5:35:da:c2:5f:47:f8:6c:14:91:46:03:c3:52:a5: e5:3f:4a:09:1f:33:12:22:c2:2b:26:97:31:a2:6a: 20:af:5c:ca:84:40:ca:ad:56:c4:02:a7:34:87:61: 54:fe:87:3e:de:88:cc:41:1e:04:b5:3c:95:c5:f2: 5a:da:12:cc:b9:d8:21:1d:97:89:c4:e0:4f:e1:6b: b6:ee:5f:c2:b8:5f:23:b0:ae:32:b7:a0:48:32:47: d8:85:e2:04:06:93:a9:c1:76:3b:12:bd:72:f9:ac: d7:5d:18:0b:f9:ea:22:c5:6b:32:80:21:5f:2f:07: 9c:79:b7:5f:04:cf:7f:cb:40:3d:8e:91:1a:bb:37: ee:ab:47:38:cd:de:85:08:8a:68:cd:63:a0:56:ba: d9:b7:5f:6a:19:07:17:bd:20:0e:45:00:f7:ed:73: 1f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AC:63:F8:C8:64:89:96:AB:5B:23:7C:11:56:D6:51:A8:40:D0:DC X509v3 Authority Key Identifier: keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/daxj-MhkiZarWyN8EVbWUahA0Nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.40.0/23 Signature Algorithm: sha256WithRSAEncryption 53:d6:9c:37:c9:e2:8c:74:9c:5b:a7:ef:96:c2:b3:eb:1f:4c: eb:a2:88:ce:b9:06:fb:fe:d5:4a:db:17:66:61:c6:42:98:3a: 80:47:b5:6e:95:3e:82:ac:6d:c2:cb:53:5b:42:cf:1a:aa:db: 77:8b:68:02:4f:02:4d:f5:6b:aa:86:cd:69:c5:51:bf:61:1f: b6:9b:9b:b2:3c:93:76:fd:20:18:bd:81:81:f5:a2:b5:d1:23: 5f:29:e4:a8:50:1e:75:fe:43:dc:a2:66:3b:9a:fa:14:eb:20: 73:76:b9:16:fc:10:46:f6:c4:59:45:9e:c3:12:21:a9:45:28: 8b:03:e6:4a:8b:55:64:d6:40:eb:98:de:2f:2e:d4:be:82:26: 4b:22:40:8c:77:d8:31:3f:1c:d4:ec:3a:ba:c1:8f:6e:1d:69: e6:d1:c5:7d:58:97:eb:83:be:62:f6:87:4d:be:04:d7:b6:82: cb:27:97:71:f7:80:22:51:e6:7e:b1:1c:3b:84:a0:74:00:79: 49:ef:53:1a:1f:5b:fb:f4:02:dc:76:21:d0:6e:d4:0d:e2:b6: 69:47:05:d8:26:c3:c1:33:f7:00:dd:53:1e:7b:24:17:5d:69: 8e:0c:34:8c:1c:b2:a1:25:a1:40:35:c2:32:2c:f0:cc:d9:d5: ee:bb:c6:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pQczGK1lYDAZZWAhK9ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0 MjNlYjgwHhcNMjYwMTAyMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWFjNjNmOGM4NjQ4OTk2YWI1YjIzN2MxMTU2ZDY1MWE4NDBkMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUhEa8PCGvT4I/J5vQooFQzcVNB+ mzpWGpwpv6yiSOTi1FXloOQgZQWuG1WmmAvtYPOgmTQQUPbX7j/PfMR0rpH8HoIA BbBvGd10QQvEIZOrXGCxfClgo2blNdrCX0f4bBSRRgPDUqXlP0oJHzMSIsIrJpcx omogr1zKhEDKrVbEAqc0h2FU/oc+3ojMQR4EtTyVxfJa2hLMudghHZeJxOBP4Wu2 7l/CuF8jsK4yt6BIMkfYheIEBpOpwXY7Er1y+azXXRgL+eoixWsygCFfLwecebdf BM9/y0A9jpEauzfuq0c4zd6FCIpozWOgVrrZt19qGQcXvSAORQD37XMfgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWsY/jIZImWq1sjfBFW1lGoQNDcMB8GA1UdIwQY MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct MmU4NGI4ZDE4ZTRlLzEvZGF4ai1NaGtpWmFyV3lOOEVWYldVYWhBME53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSQoMA0G CSqGSIb3DQEBCwUAA4IBAQBT1pw3yeKMdJxbp++WwrPrH0zroojOuQb7/tVK2xdm YcZCmDqAR7VulT6CrG3Cy1NbQs8aqtt3i2gCTwJN9Wuqhs1pxVG/YR+2m5uyPJN2 /SAYvYGB9aK10SNfKeSoUB51/kPcomY7mvoU6yBzdrkW/BBG9sRZRZ7DEiGpRSiL A+ZKi1Vk1kDrmN4vLtS+giZLIkCMd9gxPxzU7Dq6wY9uHWnm0cV9WJfrg75i9odN vgTXtoLLJ5dx94AiUeZ+sRw7hKB0AHlJ71MaH1v79ALcdiHQbtQN4rZpRwXYJsPB M/cA3VMeeyQXXWmODDSMHLKhJaFANcIyLPDM2dXuu8Zz -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:49 2026 by rpki-client