This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dWT4N5FqFxJ2zc-Hjm6l3fFZaFU.roa File: dWT4N5FqFxJ2zc-Hjm6l3fFZaFU.roa (raw, json) Hash identifier: Ap1K+A+EOw7l8AsVcoRClYxTB5W9oQY8NGMS8rIJpOg= Subject key identifier: 75:64:F8:37:91:6A:17:12:76:CD:CF:87:8E:6E:A5:DD:F1:59:68:55 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A67BE85322BEE57BEF5D421A1BA5 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dWT4N5FqFxJ2zc-Hjm6l3fFZaFU.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43680 IP address blocks: 185.67.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a6:7b:e8:53:22:be:e5:7b:ef:5d:42:1a:1b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7564f837916a171276cdcf878e6ea5ddf1596855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:fa:57:d4:4d:46:ef:76:3b:87:43:f7:80: a7:34:4e:08:9f:ae:b7:b1:e7:93:d9:c7:fd:9c:69: b8:50:a6:60:0d:b3:c1:e0:e6:34:00:ab:7a:a1:79: fb:6b:25:87:b9:db:14:03:ec:cc:59:e1:4a:05:71: 46:31:15:67:6d:55:a9:68:62:7a:4d:2e:ff:ac:80: 0f:3a:bc:fe:4f:f2:26:15:ff:ca:d4:93:99:2b:e5: 3b:9a:a5:f8:f5:32:03:06:c4:c0:93:4b:c6:44:5e: 21:70:1c:c9:60:04:8f:5f:7a:e2:f2:57:a4:4f:9e: ca:d1:d7:37:48:32:e6:38:7a:3c:6a:07:f5:63:03: 20:59:c6:37:16:b0:7c:8f:78:15:88:07:1a:a0:d8: ad:16:79:33:2f:1a:df:8d:fe:87:29:fc:ff:96:c3: 28:f5:4b:8f:5b:a9:eb:0f:77:11:2c:ac:63:11:2d: 8c:fb:d7:93:65:5f:ef:da:1b:c4:1d:df:b8:4c:10: 26:d3:03:75:21:38:fa:2d:31:b5:27:c3:4c:3b:a2: be:30:79:22:bf:18:e5:f6:72:2d:03:37:21:60:a5: 2e:a1:d8:ab:94:7a:96:05:56:95:1e:01:e9:19:63: 5f:7b:1a:a5:85:13:cb:71:f3:00:3f:b1:8d:cc:59: 38:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:64:F8:37:91:6A:17:12:76:CD:CF:87:8E:6E:A5:DD:F1:59:68:55 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dWT4N5FqFxJ2zc-Hjm6l3fFZaFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.254.0/23 Signature Algorithm: sha256WithRSAEncryption 56:1c:4d:59:a1:7c:d6:aa:70:29:a2:5e:26:8a:17:92:68:a1: c0:84:e6:b2:71:0c:de:32:08:8d:60:06:6d:b2:80:8e:b8:ed: 95:66:a8:76:87:5c:7b:6d:50:f5:12:1f:db:42:c2:78:a5:bd: e3:4e:6b:b9:82:82:6d:01:23:ed:fa:30:3f:93:26:61:e2:a3: 74:76:11:5c:17:7b:44:c8:17:78:d3:bb:2a:da:8d:40:70:6f: bc:71:8e:66:ad:6f:54:c8:14:40:da:d6:f9:44:43:57:c5:60: a6:51:2b:54:44:09:07:2d:38:35:95:6c:34:c8:b0:00:08:ec: bd:4e:72:bc:83:44:2f:a6:23:80:71:fb:9a:b0:a9:71:1b:1c: 45:64:de:bb:d5:cf:31:27:8d:d3:dd:e9:fe:14:cd:58:7e:90: 5e:22:7d:cb:e3:7a:0b:a8:95:ff:d7:34:a9:c2:93:14:74:9b: e5:03:a6:71:02:a7:8c:a0:95:02:b1:ff:c5:d6:79:25:21:45: ce:72:c8:38:29:7b:8c:f7:da:45:e7:b2:dd:05:ed:29:4a:76: e3:27:5b:5d:5f:d1:ed:09:7b:fb:28:08:a0:89:8f:ea:83:60: 93:dc:c7:6f:06:b6:96:43:6f:49:12:9c:42:e8:29:f5:8b:5d: 5f:c8:d1:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKZ76FMivuV7711CGhulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTY0ZjgzNzkxNmExNzEyNzZjZGNmODc4ZTZlYTVkZGYxNTk2ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+36V9RNRu92O4dD94CnNE4In663 seeT2cf9nGm4UKZgDbPB4OY0AKt6oXn7ayWHudsUA+zMWeFKBXFGMRVnbVWpaGJ6 TS7/rIAPOrz+T/ImFf/K1JOZK+U7mqX49TIDBsTAk0vGRF4hcBzJYASPX3ri8lek T57K0dc3SDLmOHo8agf1YwMgWcY3FrB8j3gViAcaoNitFnkzLxrfjf6HKfz/lsMo 9UuPW6nrD3cRLKxjES2M+9eTZV/v2hvEHd+4TBAm0wN1ITj6LTG1J8NMO6K+MHki vxjl9nItAzchYKUuodirlHqWBVaVHgHpGWNfexqlhRPLcfMAP7GNzFk48QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHVk+DeRahcSds3Ph45upd3xWWhVMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZFdUNE41RnFGeEoyemMtSGptNmwzZkZaYUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUP+MA0G CSqGSIb3DQEBCwUAA4IBAQBWHE1ZoXzWqnApol4miheSaKHAhOaycQzeMgiNYAZt soCOuO2VZqh2h1x7bVD1Eh/bQsJ4pb3jTmu5goJtASPt+jA/kyZh4qN0dhFcF3tE yBd407sq2o1AcG+8cY5mrW9UyBRA2tb5RENXxWCmUStURAkHLTg1lWw0yLAACOy9 TnK8g0QvpiOAcfuasKlxGxxFZN671c8xJ43T3en+FM1YfpBeIn3L43oLqJX/1zSp wpMUdJvlA6ZxAqeMoJUCsf/F1nklIUXOcsg4KXuM99pF57LdBe0pSnbjJ1tdX9Ht CXv7KAigiY/qg2CT3MdvBraWQ29JEpxC6Cn1i11fyNGw -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:21 2026 by rpki-client