This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/Dwg7mV_Kk349Hx2uwnSelAcm4l4.roa File: Dwg7mV_Kk349Hx2uwnSelAcm4l4.roa (raw, json) Hash identifier: HAFxCbMHModo07GuduGAJFaqDWKdwV/Hk88Fcs0pQvI= Subject key identifier: 0F:08:3B:99:5F:CA:93:7E:3D:1F:1D:AE:C2:74:9E:94:07:26:E2:5E Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Certificate serial: 019B7CED70555D133F757C8A5A3810103FCC Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/Dwg7mV_Kk349Hx2uwnSelAcm4l4.roa Signing time: Fri 02 Jan 2026 04:18:14 +0000 ROA not before: Fri 02 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213565 IP address blocks: 2a14:a900:bad0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:70:55:5d:13:3f:75:7c:8a:5a:38:10:10:3f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f083b995fca937e3d1f1daec2749e940726e25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:99:50:68:22:5d:1e:49:6b:fe:a9:55:e8: 4d:1c:f3:28:4d:2b:89:c7:c3:2c:19:70:50:c8:cf: e2:45:fe:53:67:8c:15:6b:a0:58:fc:50:d3:fa:84: 66:1b:e5:e7:cf:8c:d8:81:fe:d5:da:f2:c0:85:60: 9c:a2:d8:89:d6:b7:0e:f7:1c:9a:c6:17:c9:91:d3: f2:c5:97:ee:14:68:2d:53:21:0c:98:3c:b8:c0:05: 3e:96:35:12:36:6b:15:35:6c:5e:35:03:0c:b1:37: 58:89:a7:d0:35:78:41:07:2a:e8:87:d2:db:22:5b: c5:62:b9:ca:e1:fe:e9:a4:93:9d:ac:42:28:50:11: 6d:5d:c6:33:07:f3:8d:ec:38:d5:15:7b:9d:95:92: f9:3a:8f:94:47:69:60:f4:6c:79:fb:67:77:31:0b: d3:c8:04:b2:dc:93:57:23:a9:27:ed:b2:b7:0b:4a: ca:7b:a4:c4:b7:b9:51:76:3b:7e:d4:05:db:13:c3: 1d:6c:8b:64:6a:55:d1:25:58:37:6b:cc:78:95:b0: 9f:eb:93:5f:9e:73:be:78:6e:f2:f0:a9:af:3b:36: fe:11:3b:c1:9c:c9:8f:00:9a:d5:62:09:9a:96:e5: b8:8e:83:ad:59:2c:89:fb:cf:57:f8:c7:d5:b2:01: 10:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:08:3B:99:5F:CA:93:7E:3D:1F:1D:AE:C2:74:9E:94:07:26:E2:5E X509v3 Authority Key Identifier: keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/Dwg7mV_Kk349Hx2uwnSelAcm4l4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:a900:bad0::/48 Signature Algorithm: sha256WithRSAEncryption 36:14:ff:4c:ba:cf:b0:ba:d0:03:15:56:40:05:45:f2:f9:f6: c2:6e:1a:d6:dc:57:6c:b9:fc:42:42:9e:5c:10:af:63:bf:45: 63:b1:d3:e4:43:ae:a5:e1:03:94:55:c5:fc:49:91:11:94:68: f8:7f:47:38:97:fb:26:b9:60:5e:48:ae:97:27:8f:a6:7b:02: ae:a4:35:51:9f:9a:38:03:60:a1:45:d9:e1:b7:2a:62:3a:88: db:75:23:de:eb:33:46:cd:6e:8d:d1:83:df:97:6f:a6:97:de: 62:c6:1b:d2:60:0f:65:41:48:61:fa:91:ec:cd:47:7e:6f:46: 0e:24:a2:d6:e6:76:73:93:5e:56:ce:6a:8b:ec:b2:b3:97:21: ea:39:56:45:56:cf:12:82:5c:ea:46:a0:67:e4:ef:72:f8:df: 77:8a:b8:83:1a:ed:61:42:ad:7b:91:3b:d9:e1:96:9a:63:d2: b6:f5:88:f6:44:d4:c5:f7:3a:93:f5:d8:d3:4e:5f:05:92:49: 43:45:98:de:fb:37:85:33:40:b8:13:38:02:81:32:1f:22:7f: 1f:cf:89:a4:43:88:53:8b:c4:24:10:0a:76:fc:e5:6f:dc:1b: 03:40:96:c3:a2:1a:be:79:f5:66:a2:80:24:8a:6e:e8:8f:c5: bd:a8:b7:41 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87XBVXRM/dXyKWjgQED/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2M2EyNDQ4MGYwNGQxMzE4YmYxYTcwZGFiZmZhNGIyN2Vm MzJkYTIwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjA4M2I5OTVmY2E5MzdlM2QxZjFkYWVjMjc0OWU5NDA3MjZlMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWiZUGgiXR5Ja/6pVehNHPMoTSuJ x8MsGXBQyM/iRf5TZ4wVa6BY/FDT+oRmG+Xnz4zYgf7V2vLAhWCcotiJ1rcO9xya xhfJkdPyxZfuFGgtUyEMmDy4wAU+ljUSNmsVNWxeNQMMsTdYiafQNXhBByroh9Lb IlvFYrnK4f7ppJOdrEIoUBFtXcYzB/ON7DjVFXudlZL5Oo+UR2lg9Gx5+2d3MQvT yASy3JNXI6kn7bK3C0rKe6TEt7lRdjt+1AXbE8MdbItkalXRJVg3a8x4lbCf65Nf nnO+eG7y8KmvOzb+ETvBnMmPAJrVYgmaluW4joOtWSyJ+89X+MfVsgEQBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA8IO5lfypN+PR8drsJ0npQHJuJeMB8GA1UdIwQY MBaAFGY6JEgPBNExi/GnDav/pLJ+8y2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt Nzc1ZjVmNzRkNTgxLzEvRHdnN21WX0trMzQ5SHgydXduU2VsQWNtNGw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx LzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSpALrQ MA0GCSqGSIb3DQEBCwUAA4IBAQA2FP9Mus+wutADFVZABUXy+fbCbhrW3FdsufxC Qp5cEK9jv0VjsdPkQ66l4QOUVcX8SZERlGj4f0c4l/smuWBeSK6XJ4+mewKupDVR n5o4A2ChRdnhtypiOojbdSPe6zNGzW6N0YPfl2+ml95ixhvSYA9lQUhh+pHszUd+ b0YOJKLW5nZzk15WzmqL7LKzlyHqOVZFVs8SglzqRqBn5O9y+N93iriDGu1hQq17 kTvZ4ZaaY9K29Yj2RNTF9zqT9djTTl8FkklDRZje+zeFM0C4EzgCgTIfIn8fz4mk Q4hTi8QkEAp2/OVv3BsDQJbDohq+efVmooAkim7oj8W9qLdB -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:00 2026 by rpki-client