This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dwc98g5fGUgPAWxFG8AQgkdTGUE.roa File: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (raw, json) Hash identifier: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So= Subject key identifier: 77:07:3D:F2:0E:5F:19:48:0F:01:6C:45:1B:C0:10:82:47:53:19:41 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B78A2FE62DBD6294FF4568D2A444EBF84 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dwc98g5fGUgPAWxFG8AQgkdTGUE.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.91.148.0/24 maxlen: 24 185.155.103.0/24 maxlen: 24 194.62.16.0/24 maxlen: 24 213.109.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fe:62:db:d6:29:4f:f4:56:8d:2a:44:4e:bf:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77073df20e5f19480f016c451bc0108247531941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:bd:d3:5b:1a:07:a6:39:f9:d3:70:0e:e5: c8:e5:06:b3:d8:88:01:50:79:38:8b:c0:e5:6b:87: 37:5e:e4:ce:6c:85:22:be:5c:3c:e2:80:8b:0c:81: 18:04:37:c2:e4:73:74:6b:68:a8:8e:be:4c:62:36: 13:00:24:26:89:ca:b8:7b:f7:c9:64:fd:35:32:f1: 7e:30:f8:d8:bc:97:8c:5b:76:7d:b6:f6:57:ac:00: 2c:90:44:3e:8d:24:5c:72:bc:c2:ba:40:60:9f:7c: 0d:bf:1d:96:37:10:d6:70:fe:01:c3:16:68:c0:9b: fb:f1:88:5d:10:c3:4c:36:5a:82:d3:84:67:00:e0: 35:69:3d:07:7c:ba:05:22:34:c2:f2:b6:91:a2:35: ee:79:5b:b3:f1:bb:94:00:5f:9c:29:eb:50:c9:ee: fc:bf:ee:35:33:34:d0:88:b1:d2:5b:f5:3f:18:62: 13:3a:e3:a4:c3:8a:fe:75:9d:d6:b0:01:97:6a:ec: 02:e8:87:39:a0:40:d4:9a:db:0a:85:3b:0e:a2:47: a9:a0:b4:dd:f7:a9:b0:78:5d:c8:b4:02:79:db:9d: 07:cd:80:7e:3a:80:e1:2d:a9:70:15:e7:44:d3:65: a3:9b:62:f9:e2:83:c3:30:84:d5:fb:d1:87:ef:35: 42:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:07:3D:F2:0E:5F:19:48:0F:01:6C:45:1B:C0:10:82:47:53:19:41 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dwc98g5fGUgPAWxFG8AQgkdTGUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.148.0/24 185.155.103.0/24 194.62.16.0/24 213.109.152.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ac:ad:fd:98:f8:7c:80:11:45:47:1c:9d:93:19:cd:38:62: 4b:be:e9:9b:0a:7b:6d:76:2d:b4:2b:36:90:3f:b7:89:46:25: 4e:44:98:8a:ef:2f:0a:80:ff:6e:85:3b:78:e1:e0:57:d9:ce: a9:7d:2e:d7:b5:0e:1c:df:6a:89:56:b4:eb:84:17:47:05:c9: 28:3a:88:44:cd:d6:8c:d6:ec:28:bd:b1:c4:b5:b1:99:86:af: 5f:ad:8f:76:96:10:ea:94:d8:35:ef:db:8e:3c:d7:8a:22:b8: 62:c1:4a:3d:25:03:63:62:97:bd:ed:c7:e1:c1:5f:c0:60:c1: cf:1a:99:e7:5d:3b:b1:cf:35:43:5e:9f:93:ee:b2:eb:91:7b: 51:28:77:87:ea:7e:30:64:38:71:f7:59:75:6f:a9:2e:63:70: 72:1f:60:55:44:b2:f3:f2:4d:65:64:a3:0e:77:b7:e3:41:d6: 04:cc:d1:20:b0:8a:28:50:ba:2f:8f:67:9e:a3:23:8d:8d:13: 44:20:6d:0c:b0:a2:5c:84:61:95:fa:86:63:2c:60:b7:af:86: 9a:1c:4d:4f:1d:0a:ca:66:f3:61:67:25:16:9b:be:e1:67:2e: 73:ce:8a:28:87:2a:88:26:e9:7b:4a:50:91:0f:ee:af:f4:10: 0b:ac:46:f1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4ov5i29YpT/RWjSpETr+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzA3M2RmMjBlNWYxOTQ4MGYwMTZjNDUxYmMwMTA4MjQ3NTMxOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMe901saB6Y5+dNwDuXI5Qaz2IgB UHk4i8Dla4c3XuTObIUivlw84oCLDIEYBDfC5HN0a2iojr5MYjYTACQmicq4e/fJ ZP01MvF+MPjYvJeMW3Z9tvZXrAAskEQ+jSRccrzCukBgn3wNvx2WNxDWcP4BwxZo wJv78YhdEMNMNlqC04RnAOA1aT0HfLoFIjTC8raRojXueVuz8buUAF+cKetQye78 v+41MzTQiLHSW/U/GGITOuOkw4r+dZ3WsAGXauwC6Ic5oEDUmtsKhTsOokepoLTd 96mweF3ItAJ5250HzYB+OoDhLalwFedE02Wjm2L54oPDMITV+9GH7zVC1QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHcHPfIOXxlIDwFsRRvAEIJHUxlBMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZHdjOThnNWZHVWdQQVd4Rkc4QVFna2RUR1VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVuUAwQA uZtnAwQAwj4QAwQA1W2YMA0GCSqGSIb3DQEBCwUAA4IBAQCYrK39mPh8gBFFRxyd kxnNOGJLvumbCnttdi20KzaQP7eJRiVORJiK7y8KgP9uhTt44eBX2c6pfS7XtQ4c 32qJVrTrhBdHBckoOohEzdaM1uwovbHEtbGZhq9frY92lhDqlNg179uOPNeKIrhi wUo9JQNjYpe97cfhwV/AYMHPGpnnXTuxzzVDXp+T7rLrkXtRKHeH6n4wZDhx91l1 b6kuY3ByH2BVRLLz8k1lZKMOd7fjQdYEzNEgsIooULovj2eeoyONjRNEIG0MsKJc hGGV+oZjLGC3r4aaHE1PHQrKZvNhZyUWm77hZy5zzooohyqIJul7SlCRD+6v9BAL rEbx -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:42 2026 by rpki-client