This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa File: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (raw, json) Hash identifier: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw= Subject key identifier: 0D:66:7B:1E:34:91:08:B1:12:52:0A:3B:8B:D6:67:BF:71:7C:58:F2 Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Certificate serial: 019B7EA4E002D9D1951A10C3CEFD3730A2DE Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa Signing time: Fri 02 Jan 2026 12:18:13 +0000 ROA not before: Fri 02 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216024 IP address blocks: 217.65.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:e0:02:d9:d1:95:1a:10:c3:ce:fd:37:30:a2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Validity Not Before: Jan 2 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d667b1e349108b112520a3b8bd667bf717c58f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:f7:93:8d:ae:92:76:e5:b3:40:e1:03:76: 45:0d:2b:f6:8b:88:f9:24:19:73:7c:51:f6:fb:61: 82:e2:32:4f:38:ce:79:ec:ff:73:7b:93:0e:de:8c: fe:d7:e8:53:f7:01:a6:e1:13:d5:05:52:2d:43:86: ad:f2:be:f0:bb:51:49:63:81:4b:65:01:20:9d:97: 19:af:17:c7:2f:b4:c2:8e:fc:b5:cf:6d:7c:44:49: 8e:2d:bc:66:0c:4c:e0:ce:9d:cb:b8:59:8a:0d:6f: 91:6f:14:3d:cf:b9:2f:df:3d:31:d8:51:5c:05:72: 0d:cf:07:23:1c:43:78:f8:13:9b:fb:b3:7c:e5:61: 12:54:24:c0:57:64:59:3e:f4:9f:84:91:90:c7:b7: 16:43:5e:12:e3:6d:a3:ab:ce:e5:cf:15:8e:b2:5b: fd:01:f8:1c:60:a5:b6:6e:66:0b:dd:3f:7e:e0:8d: ee:3f:88:fa:b9:26:37:69:f0:6d:8b:d9:f3:92:70: 89:ae:41:41:6a:d7:88:61:3e:9d:23:82:4d:3b:96: 8a:87:1e:53:7b:08:6a:07:ec:73:30:bb:c1:8e:5f: f7:e2:21:3f:79:7f:44:b0:42:1a:73:f8:e0:e2:3c: dd:a5:96:f4:a6:30:ac:a5:44:ac:44:c0:37:7d:f6: 2a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:66:7B:1E:34:91:08:B1:12:52:0A:3B:8B:D6:67:BF:71:7C:58:F2 X509v3 Authority Key Identifier: keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.65.79.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:ef:ab:73:27:b0:f7:ae:91:08:d9:ec:ee:70:6f:d3:5d:19: e1:08:a2:26:4a:96:7a:56:32:76:45:26:0c:31:74:42:57:ce: 4c:38:3e:40:3d:ef:d6:9f:16:01:56:19:5e:fc:d7:1e:62:dd: 5c:14:4b:7a:ec:d6:75:e6:88:b0:d1:c3:ad:90:c2:aa:2e:e7: 2f:4f:cf:36:ac:e8:8a:b8:cc:9f:75:1a:91:3b:69:94:12:b4: a2:a5:df:76:20:87:87:9b:26:23:38:46:90:81:04:2d:53:43: 13:9b:02:61:56:e6:00:86:08:2d:d4:cf:56:5f:1a:e3:81:65: 9a:ef:0b:d3:ef:42:c4:75:fb:19:49:b8:2c:7b:c1:82:50:e4: 76:21:fb:09:a4:5c:e3:5b:14:4b:42:bf:42:ca:e2:29:98:61: 49:48:2b:0f:9b:d8:7c:ba:ff:1c:32:73:ae:61:a2:c9:54:63: 88:b2:7b:87:86:18:95:08:20:96:56:af:22:7e:fc:62:6c:7c: c4:69:6f:af:30:cc:cb:13:cc:22:fe:80:6c:32:42:f8:dd:db: 2e:15:25:c4:e1:ce:b5:b1:85:42:90:1e:7a:de:7c:50:4a:6c: 91:15:9e:40:68:c2:cd:a6:46:34:34:13:39:f8:2e:77:fb:c5: b1:82:47:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pOAC2dGVGhDDzv03MKLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2 NTFiZjcwHhcNMjYwMTAyMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDY2N2IxZTM0OTEwOGIxMTI1MjBhM2I4YmQ2NjdiZjcxN2M1OGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzP3k42uknbls0DhA3ZFDSv2i4j5 JBlzfFH2+2GC4jJPOM557P9ze5MO3oz+1+hT9wGm4RPVBVItQ4at8r7wu1FJY4FL ZQEgnZcZrxfHL7TCjvy1z218REmOLbxmDEzgzp3LuFmKDW+RbxQ9z7kv3z0x2FFc BXINzwcjHEN4+BOb+7N85WESVCTAV2RZPvSfhJGQx7cWQ14S422jq87lzxWOslv9 AfgcYKW2bmYL3T9+4I3uP4j6uSY3afBti9nzknCJrkFBateIYT6dI4JNO5aKhx5T ewhqB+xzMLvBjl/34iE/eX9EsEIac/jg4jzdpZb0pjCspUSsRMA3ffYqdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1mex40kQixElIKO4vWZ79xfFjyMB8GA1UdIwQY MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct OGE5NjY3ZDc2MmE1LzEvRFdaN0hqU1JDTEVTVWdvN2k5Wm52M0Y4V1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1 LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UFPMA0G CSqGSIb3DQEBCwUAA4IBAQCM76tzJ7D3rpEI2ezucG/TXRnhCKImSpZ6VjJ2RSYM MXRCV85MOD5APe/WnxYBVhle/NceYt1cFEt67NZ15oiw0cOtkMKqLucvT882rOiK uMyfdRqRO2mUErSipd92IIeHmyYjOEaQgQQtU0MTmwJhVuYAhggt1M9WXxrjgWWa 7wvT70LEdfsZSbgse8GCUOR2IfsJpFzjWxRLQr9CyuIpmGFJSCsPm9h8uv8cMnOu YaLJVGOIsnuHhhiVCCCWVq8ifvxibHzEaW+vMMzLE8wi/oBsMkL43dsuFSXE4c61 sYVCkB563nxQSmyRFZ5AaMLNpkY0NBM5+C53+8Wxgke/ -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:39 2026 by rpki-client