This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/DZwHMXwbO-Y69Y52Kdfxo1JSwhA.roa File: DZwHMXwbO-Y69Y52Kdfxo1JSwhA.roa (raw, json) Hash identifier: yGwWb/UU7XWPTrPTRm1qWs6X4Ilop1csSaOmaiZRhQY= Subject key identifier: 0D:9C:07:31:7C:1B:3B:E6:3A:F5:8E:76:29:D7:F1:A3:52:52:C2:10 Certificate issuer: /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d Certificate serial: 019B79ED266BB53EAD374DE92DB8D4766D4B Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/DZwHMXwbO-Y69Y52Kdfxo1JSwhA.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210753 IP address blocks: 193.3.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:26:6b:b5:3e:ad:37:4d:e9:2d:b8:d4:76:6d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d9c07317c1b3be63af58e7629d7f1a35252c210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:07:85:09:27:5f:35:d0:7a:f6:f7:5b:e2: a0:3d:a2:7d:ce:9e:05:2b:8c:cb:78:e7:5a:e7:2f: 4c:27:4e:99:b2:34:3d:d9:d1:12:e6:c4:78:41:58: 26:94:dc:49:25:fe:5a:3a:39:8c:09:36:e0:bb:b8: ce:b4:0c:d3:39:04:bb:6c:6b:e4:f7:54:ed:85:5b: fc:63:c1:06:d4:34:e7:80:62:d2:03:a4:e8:39:e5: 7a:81:e2:44:84:ec:00:b9:72:5d:d5:89:aa:f5:e5: ab:d0:7c:be:53:87:3c:07:32:46:15:77:57:49:86: a4:e5:0b:42:a9:57:2a:27:66:b2:ac:e2:41:6c:6b: df:86:55:68:8b:59:9d:08:88:e9:89:59:9e:7a:a1: 56:2b:43:3a:48:2b:9f:1b:04:75:bb:aa:02:4f:cd: ed:81:66:c7:02:f9:5e:48:9f:67:33:d2:8c:30:f6: af:71:1c:75:cf:2f:ae:38:8d:a7:f1:21:d5:a1:82: f0:60:dc:0e:5c:6c:57:5f:b4:20:e7:d3:6d:9a:17: 44:31:55:09:31:b7:01:6e:a9:ac:43:ed:b6:f3:30: 11:49:7d:4e:73:5e:91:30:30:02:11:cb:58:8f:5d: 29:9c:46:7b:8e:58:14:6e:86:79:10:a4:11:5b:99: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9C:07:31:7C:1B:3B:E6:3A:F5:8E:76:29:D7:F1:A3:52:52:C2:10 X509v3 Authority Key Identifier: keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/DZwHMXwbO-Y69Y52Kdfxo1JSwhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.17.0/24 Signature Algorithm: sha256WithRSAEncryption 54:15:b0:ca:88:e5:f0:ac:ee:a6:39:b5:4f:15:93:fb:c2:ba: 74:13:c7:9a:bd:fe:45:35:18:1a:75:2d:ca:a5:0b:50:3d:a8: 18:66:b6:7a:56:4c:ab:3b:3b:ed:c4:8a:b6:83:21:12:f6:79: 79:e1:10:9b:0f:8d:dc:c3:c0:75:fd:d9:6a:74:97:de:8c:79: 9f:83:0c:f0:5b:23:30:47:5c:2f:b8:f4:26:1f:f6:10:fd:a0: 50:36:01:88:d8:ed:6b:60:02:84:13:b3:1c:66:d3:3b:30:bb: 92:45:c2:70:f5:41:af:23:3b:69:a3:03:a9:6f:25:f5:74:f6: 08:a5:dd:e5:b4:2a:32:2f:4f:90:e1:ec:5a:89:75:7a:de:25: 7d:14:f0:19:2d:8c:78:1c:6f:48:0b:14:2a:1f:5c:82:f1:a6: 3c:cd:9b:4f:7a:80:d8:bf:ce:45:a0:b3:6f:e8:a9:33:9d:88: 66:55:da:3b:fc:3c:ab:ba:eb:1b:fc:ac:dd:7b:81:70:28:c8: c2:02:15:7e:19:fb:89:60:de:0b:92:8a:aa:e3:38:f4:d1:63: 73:dc:43:84:5f:1a:da:d8:a2:6f:dc:d1:e5:75:92:aa:41:da: 4f:cb:a0:c7:7c:be:bd:73:64:5f:9f:e3:a8:2b:2c:b9:7e:37: b8:fb:06:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SZrtT6tN03pLbjUdm1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGEyYmI4ODEzYjc0ZDc4MjgzYjE3MjhmZGI5YmJjNWQ1 Nzg0NWQwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDljMDczMTdjMWIzYmU2M2FmNThlNzYyOWQ3ZjFhMzUyNTJjMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJAHhQknXzXQevb3W+KgPaJ9zp4F K4zLeOda5y9MJ06ZsjQ92dES5sR4QVgmlNxJJf5aOjmMCTbgu7jOtAzTOQS7bGvk 91TthVv8Y8EG1DTngGLSA6ToOeV6geJEhOwAuXJd1Ymq9eWr0Hy+U4c8BzJGFXdX SYak5QtCqVcqJ2ayrOJBbGvfhlVoi1mdCIjpiVmeeqFWK0M6SCufGwR1u6oCT83t gWbHAvleSJ9nM9KMMPavcRx1zy+uOI2n8SHVoYLwYNwOXGxXX7Qg59NtmhdEMVUJ MbcBbqmsQ+228zARSX1Oc16RMDACEctYj10pnEZ7jlgUboZ5EKQRW5lhOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2cBzF8GzvmOvWOdinX8aNSUsIQMB8GA1UdIwQY MBaAFI8KK7iBO3TXgoOxco/bm7xdV4RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2Mt YWEyYjNiZWEwOGJmLzEvRFp3SE1Yd2JPLVk2OVk1MktkZnhvMUpTd2hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2MtYWEyYjNiZWEwOGJm LzEvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMRMA0G CSqGSIb3DQEBCwUAA4IBAQBUFbDKiOXwrO6mObVPFZP7wrp0E8eavf5FNRgadS3K pQtQPagYZrZ6VkyrOzvtxIq2gyES9nl54RCbD43cw8B1/dlqdJfejHmfgwzwWyMw R1wvuPQmH/YQ/aBQNgGI2O1rYAKEE7McZtM7MLuSRcJw9UGvIztpowOpbyX1dPYI pd3ltCoyL0+Q4exaiXV63iV9FPAZLYx4HG9ICxQqH1yC8aY8zZtPeoDYv85FoLNv 6KkznYhmVdo7/Dyruusb/Kzde4FwKMjCAhV+GfuJYN4Lkoqq4zj00WNz3EOEXxra 2KJv3NHldZKqQdpPy6DHfL69c2Rfn+OoKyy5fje4+wZq -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:40 2026 by rpki-client