This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa File: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (raw, json) Hash identifier: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU= Subject key identifier: 0E:AC:20:12:9C:BC:B7:34:3C:31:3D:D8:23:34:93:98:C9:EC:6A:85 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019B79ECE2238DFA767A2EB4A52558881511 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa Signing time: Thu 01 Jan 2026 14:18:46 +0000 ROA not before: Thu 01 Jan 2026 14:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63339 IP address blocks: 193.23.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e2:23:8d:fa:76:7a:2e:b4:a5:25:58:88:15:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jan 1 14:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eac20129cbcb7343c313dd823349398c9ec6a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:e2:ad:05:cc:48:14:11:03:b9:82:15:48: 01:be:e1:a5:1c:47:85:b5:ab:7d:11:b7:65:38:c7: 57:52:1f:cb:e7:84:eb:31:1d:76:fd:0c:5c:66:9b: e3:eb:b6:c6:95:21:86:75:76:06:10:1a:61:42:11: ea:91:5e:c0:ed:e4:53:00:bb:3c:c4:07:b5:ae:25: 46:de:fa:ff:67:0e:5d:69:12:1f:5d:42:cb:ef:75: c9:3c:e8:c7:05:ff:57:8a:1d:6b:65:95:f8:9e:9d: 15:b1:3f:c2:ab:59:34:f8:76:09:ba:47:a8:0f:cc: fa:fc:42:10:a8:c6:79:0e:dd:1c:0f:5a:f6:09:ef: 53:59:ec:fa:93:34:bc:59:b5:a0:e7:c0:5e:d4:b4: a9:96:e5:66:92:a0:cf:15:2b:0d:03:c1:e3:85:be: 9b:04:68:85:34:8b:2e:b5:11:62:0f:b0:6a:07:55: aa:8f:d2:f3:d5:7d:f1:65:38:19:4a:11:04:4e:59: 3a:73:52:6f:75:28:8f:76:e4:35:5e:87:ac:d4:6d: 6d:e0:7d:52:41:9b:d0:58:13:38:86:72:46:4a:31: fb:d9:6a:5f:c7:c1:74:74:73:75:85:06:a4:6a:aa: e6:77:9f:5d:5a:30:d9:d1:cc:b4:3d:ed:3f:cf:39: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AC:20:12:9C:BC:B7:34:3C:31:3D:D8:23:34:93:98:C9:EC:6A:85 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.118.0/24 Signature Algorithm: sha256WithRSAEncryption 65:97:83:56:96:01:e4:c0:db:9c:5b:2d:9d:cd:95:e3:88:d2: ef:45:f5:72:f0:07:f7:04:5d:53:16:91:4a:70:a9:4b:d2:1e: 20:cf:30:ab:96:46:3d:0c:4d:ef:12:2e:ef:36:b3:32:86:01: 48:70:9e:1e:68:20:45:8a:d9:2c:90:d8:4c:47:1c:cb:84:fc: 33:ee:51:f6:c0:7f:fc:74:68:01:45:b9:0a:74:f3:ca:5f:ae: cd:ae:4f:4e:e2:7a:db:20:6e:36:41:17:ef:ec:e0:6e:39:6b: ee:71:5c:36:b7:f1:eb:e9:75:1c:4b:7c:d2:ea:e1:ea:35:1a: 96:eb:72:16:78:5e:d3:a0:aa:e8:7e:c0:37:22:7f:cb:88:6b: d4:cb:13:85:ab:cc:31:44:a6:93:bc:18:f4:50:f2:d6:3d:39: 9a:be:e6:3a:a5:09:65:5e:57:02:7e:fd:dd:df:8b:89:92:91: 1f:6c:8f:bb:b7:46:96:6e:df:2e:ee:88:30:08:c2:10:91:96: c9:79:68:b2:b6:a9:46:1f:ed:5c:a4:4c:84:a2:69:1f:b1:8b: 70:4c:fe:9e:4f:72:de:d4:b0:f3:75:5f:d0:4b:84:e0:c3:98: c3:b4:e5:77:99:60:e3:6d:13:28:e5:f2:8b:bb:0f:8b:48:2b: 78:1d:e5:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57OIjjfp2ei60pSVYiBURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwMTAxMTQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWFjMjAxMjljYmNiNzM0M2MzMTNkZDgyMzM0OTM5OGM5ZWM2YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+DirQXMSBQRA7mCFUgBvuGlHEeF tat9EbdlOMdXUh/L54TrMR12/QxcZpvj67bGlSGGdXYGEBphQhHqkV7A7eRTALs8 xAe1riVG3vr/Zw5daRIfXULL73XJPOjHBf9Xih1rZZX4np0VsT/Cq1k0+HYJukeo D8z6/EIQqMZ5Dt0cD1r2Ce9TWez6kzS8WbWg58Be1LSpluVmkqDPFSsNA8Hjhb6b BGiFNIsutRFiD7BqB1Wqj9Lz1X3xZTgZShEETlk6c1JvdSiPduQ1Xoes1G1t4H1S QZvQWBM4hnJGSjH72Wpfx8F0dHN1hQakaqrmd59dWjDZ0cy0Pe0/zznI4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6sIBKcvLc0PDE92CM0k5jJ7GqFMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRHF3Z0VweTh0elE4TVQzWUl6U1RtTW5zYW9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRd2MA0G CSqGSIb3DQEBCwUAA4IBAQBll4NWlgHkwNucWy2dzZXjiNLvRfVy8Af3BF1TFpFK cKlL0h4gzzCrlkY9DE3vEi7vNrMyhgFIcJ4eaCBFitkskNhMRxzLhPwz7lH2wH/8 dGgBRbkKdPPKX67Nrk9O4nrbIG42QRfv7OBuOWvucVw2t/Hr6XUcS3zS6uHqNRqW 63IWeF7ToKrofsA3In/LiGvUyxOFq8wxRKaTvBj0UPLWPTmavuY6pQllXlcCfv3d 34uJkpEfbI+7t0aWbt8u7ogwCMIQkZbJeWiytqlGH+1cpEyEomkfsYtwTP6eT3Le 1LDzdV/QS4Tgw5jDtOV3mWDjbRMo5fKLuw+LSCt4HeXf -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:06 2026 by rpki-client