This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa File: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (raw, json) Hash identifier: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw= Subject key identifier: 0D:62:4B:4A:4A:D3:05:05:40:D6:62:8F:04:72:63:43:45:18:C1:4A Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B7D5C47EE1B9325F4F7085AEBD7869A7A Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa Signing time: Fri 02 Jan 2026 06:19:18 +0000 ROA not before: Fri 02 Jan 2026 06:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212843 IP address blocks: 212.86.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:47:ee:1b:93:25:f4:f7:08:5a:eb:d7:86:9a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 2 06:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d624b4a4ad3050540d6628f047263434518c14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:96:35:11:22:d8:b5:de:11:3b:7f:81:0f:ef: 16:49:7b:0c:9b:7d:6e:07:8f:6f:29:f6:d9:f4:34: 6a:a1:bf:dc:b0:eb:b8:61:13:d9:85:b9:62:80:74: d6:7c:8b:2d:dc:47:3a:7c:c5:e5:fe:24:61:09:95: de:ad:61:c6:0e:9f:55:fc:eb:d7:2e:37:a1:26:05: 1e:82:d7:76:7d:e5:7f:ba:65:be:10:d5:38:fa:d9: 42:4a:57:ae:b1:91:25:92:bd:4e:9a:f3:39:7c:72: f7:a7:35:48:1c:d6:ad:1d:98:62:4d:1b:68:4a:6b: c3:e4:fb:da:78:ef:4e:33:4d:af:0b:cb:5c:96:90: 05:9d:80:ec:0d:36:c8:08:fe:92:5c:6e:6a:4d:1a: 80:fd:42:b4:60:0d:eb:08:c0:8e:8a:7c:2a:8b:10: 0a:db:e7:a1:cc:6e:b1:b4:31:db:cb:ab:b7:8b:28: ee:c4:80:30:b9:51:f9:6b:09:a1:5a:98:78:58:f6: 04:a1:ff:97:11:d9:de:69:c5:81:30:08:6a:5d:fa: 3f:fe:7a:3c:0a:e7:f3:0d:84:25:fd:69:17:0f:db: ba:fe:85:25:fa:dc:6c:03:5e:4a:c6:3c:ec:13:c1: 01:08:d0:4e:44:c4:f1:59:7b:04:15:86:1a:18:01: ea:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:62:4B:4A:4A:D3:05:05:40:D6:62:8F:04:72:63:43:45:18:C1:4A X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.86.97.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c9:06:77:a8:54:d2:0c:30:43:ad:53:8e:9c:94:47:63:b1: 4a:f5:9e:a1:cd:6b:ca:b4:6b:b4:83:6c:37:60:68:c2:bc:59: 35:18:14:c7:a5:82:cf:e2:94:7d:d4:45:16:67:b4:5b:50:a3: 7b:0e:f9:c2:44:3a:60:fc:0c:28:f1:9c:1c:bc:27:a2:ae:5d: d9:88:3e:cd:82:ff:01:a4:b6:89:eb:12:82:af:d3:48:1b:b7: 4c:87:11:9d:80:eb:e4:2d:74:bf:7f:0c:2c:49:27:cf:b5:04: f2:1f:91:40:e5:3a:b2:b3:7f:61:0d:20:4e:05:61:be:9b:2d: 70:71:a2:1d:b5:fd:26:19:d7:c5:37:ad:6f:6e:bf:b7:e4:80: 68:e1:06:82:7e:c5:e4:e9:fd:1b:e9:17:ea:29:ff:49:99:a1: e9:18:5d:d5:e7:25:f4:60:ea:2b:21:57:40:22:a7:23:a7:71: 80:62:c9:2f:1e:63:5d:9f:37:6b:40:fa:bd:cb:37:da:41:14: f4:16:8c:4d:63:2d:48:c8:62:c8:d0:b6:31:7c:a9:72:35:d1: d6:f1:61:41:0e:e4:39:ba:8d:42:79:f2:aa:ff:45:a6:b3:9e: b3:da:96:ae:4f:b3:bc:c1:c0:db:2f:17:04:29:41:00:ba:00: 0d:33:83:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XEfuG5Ml9PcIWuvXhpp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTAyMDYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDYyNGI0YTRhZDMwNTA1NDBkNjYyOGYwNDcyNjM0MzQ1MThjMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJY1ESLYtd4RO3+BD+8WSXsMm31u B49vKfbZ9DRqob/csOu4YRPZhbligHTWfIst3Ec6fMXl/iRhCZXerWHGDp9V/OvX LjehJgUegtd2feV/umW+ENU4+tlCSleusZElkr1OmvM5fHL3pzVIHNatHZhiTRto SmvD5PvaeO9OM02vC8tclpAFnYDsDTbICP6SXG5qTRqA/UK0YA3rCMCOinwqixAK 2+ehzG6xtDHby6u3iyjuxIAwuVH5awmhWph4WPYEof+XEdneacWBMAhqXfo//no8 CufzDYQl/WkXD9u6/oUl+txsA15KxjzsE8EBCNBORMTxWXsEFYYaGAHqYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1iS0pK0wUFQNZijwRyY0NFGMFKMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvRFdKTFNrclRCUVZBMW1LUEJISmpRMFVZd1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FZhMA0G CSqGSIb3DQEBCwUAA4IBAQAJyQZ3qFTSDDBDrVOOnJRHY7FK9Z6hzWvKtGu0g2w3 YGjCvFk1GBTHpYLP4pR91EUWZ7RbUKN7DvnCRDpg/Awo8ZwcvCeirl3ZiD7Ngv8B pLaJ6xKCr9NIG7dMhxGdgOvkLXS/fwwsSSfPtQTyH5FA5Tqys39hDSBOBWG+my1w caIdtf0mGdfFN61vbr+35IBo4QaCfsXk6f0b6RfqKf9JmaHpGF3V5yX0YOorIVdA Iqcjp3GAYskvHmNdnzdrQPq9yzfaQRT0FoxNYy1IyGLI0LYxfKlyNdHW8WFBDuQ5 uo1CefKq/0Wms56z2pauT7O8wcDbLxcEKUEAugANM4MM -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:09 2026 by rpki-client