This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/dwKvi-B2ZQX6gRhuM9-iaMM_WYg.roa File: dwKvi-B2ZQX6gRhuM9-iaMM_WYg.roa (raw, json) Hash identifier: d357UZrxqtoD/uKcbAujVU8Zr9YkZh05q80AX1/cYA4= Subject key identifier: 77:02:AF:8B:E0:76:65:05:FA:81:18:6E:33:DF:A2:68:C3:3F:59:88 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019B797EA318BB24CA0E653B04815A8457B9 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/dwKvi-B2ZQX6gRhuM9-iaMM_WYg.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49690 IP address blocks: 159.151.0.0/18 maxlen: 18 192.109.140.0/24 maxlen: 24 192.109.141.0/24 maxlen: 24 2a07:8140::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a3:18:bb:24:ca:0e:65:3b:04:81:5a:84:57:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7702af8be0766505fa81186e33dfa268c33f5988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:9b:5c:20:41:0c:d6:96:f8:3d:bb:b1:2d: dd:72:71:a7:ca:0a:95:a4:6f:2e:d3:43:b8:63:01: 99:e8:6c:2e:f6:d3:6c:92:5e:05:b2:80:30:d5:3b: 30:b1:b2:35:7b:6d:2b:17:d0:7c:64:6b:c2:fa:4e: a2:c9:92:17:38:61:3a:00:9d:9e:5c:59:f6:1f:08: ec:37:12:e0:60:f4:e5:d3:96:e5:45:06:ec:70:ef: aa:00:c6:e3:ed:81:2e:a6:33:e9:60:d6:0a:6c:52: 1d:4e:ec:e2:73:21:03:5c:74:60:75:9c:dd:c6:83: 84:bb:ec:9c:1e:cd:7f:46:8b:36:d4:bc:a4:d8:1d: 3f:a3:51:78:20:d8:2e:1a:7e:fe:97:6c:9d:7d:a2: 80:95:d0:81:0e:51:77:d5:6b:67:cd:58:c1:50:13: a2:2f:98:3c:4d:b0:0d:f7:0f:35:98:92:48:00:b0: a9:bb:c9:76:c9:13:4c:a9:f9:8e:ec:97:87:2a:62: 7f:3e:eb:24:0e:2c:55:6b:4e:92:34:73:8b:e9:9b: a3:31:29:2c:c1:cb:f2:a4:1c:bc:f4:a0:5d:05:5d: 61:d0:22:d6:64:bb:07:b7:0d:8f:b8:2c:77:fe:f2: 55:eb:5f:2f:f1:36:6a:f3:a6:38:b5:66:ed:9d:f4: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:02:AF:8B:E0:76:65:05:FA:81:18:6E:33:DF:A2:68:C3:3F:59:88 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/dwKvi-B2ZQX6gRhuM9-iaMM_WYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.151.0.0/18 192.109.140.0/23 IPv6: 2a07:8140::/36 Signature Algorithm: sha256WithRSAEncryption 10:d8:37:65:b6:a7:e9:9d:46:24:97:74:5c:18:4e:ee:4f:87: cb:20:b5:23:a6:e1:52:8d:0c:4a:e2:90:0f:2d:a8:25:a0:43: 53:91:c7:6b:b2:22:81:10:09:04:d3:ff:c4:6f:c1:d8:03:fa: 4a:1d:f7:4d:94:db:2a:ed:d8:92:01:68:c6:f1:b1:41:12:cf: 1c:9b:10:f9:d9:05:fa:09:bf:6c:92:2c:3c:b8:ea:c4:67:85: a7:85:44:2c:01:9b:8e:6f:87:7b:73:a3:73:cc:41:c5:c2:af: 63:80:94:a1:ac:67:5e:ab:43:3d:db:46:a8:cc:e9:4e:46:d3: d1:2b:28:10:f0:eb:85:04:11:5f:38:90:86:b5:26:37:4f:26: 15:71:b3:0a:4e:95:82:5e:d7:88:a6:d4:66:61:b0:fb:56:17: 27:99:90:6e:72:e0:14:fd:32:be:30:64:6f:06:65:36:2d:9d: 73:df:1e:78:c3:f5:81:32:a6:62:4d:f6:8c:ca:44:94:54:88: fe:63:d9:b5:b5:89:a2:0a:fb:1e:3a:2a:a8:92:f9:e6:03:69: 44:a1:96:8a:f3:b4:34:c8:15:a1:34:4e:92:09:df:99:fa:11: ea:85:d4:38:f3:5f:87:4b:85:c5:bb:18:0a:ed:2c:07:eb:8b: 3f:2f:36:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt5fqMYuyTKDmU7BIFahFe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzAyYWY4YmUwNzY2NTA1ZmE4MTE4NmUzM2RmYTI2OGMzM2Y1OTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueKbXCBBDNaW+D27sS3dcnGnygqV pG8u00O4YwGZ6Gwu9tNskl4FsoAw1TswsbI1e20rF9B8ZGvC+k6iyZIXOGE6AJ2e XFn2HwjsNxLgYPTl05blRQbscO+qAMbj7YEupjPpYNYKbFIdTuzicyEDXHRgdZzd xoOEu+ycHs1/Ros21Lyk2B0/o1F4INguGn7+l2ydfaKAldCBDlF31WtnzVjBUBOi L5g8TbAN9w81mJJIALCpu8l2yRNMqfmO7JeHKmJ/PuskDixVa06SNHOL6ZujMSks wcvypBy89KBdBV1h0CLWZLsHtw2PuCx3/vJV618v8TZq86Y4tWbtnfR4ewIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFHcCr4vgdmUF+oEYbjPfomjDP1mIMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvZHdLdmktQjJaUVg2Z1JodU05LWlhTU1fV1lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQGn5cAAwQB wG2MMA4EAgACMAgDBgQqB4FAADANBgkqhkiG9w0BAQsFAAOCAQEAENg3Zban6Z1G JJd0XBhO7k+HyyC1I6bhUo0MSuKQDy2oJaBDU5HHa7IigRAJBNP/xG/B2AP6Sh33 TZTbKu3YkgFoxvGxQRLPHJsQ+dkF+gm/bJIsPLjqxGeFp4VELAGbjm+He3Ojc8xB xcKvY4CUoaxnXqtDPdtGqMzpTkbT0SsoEPDrhQQRXziQhrUmN08mFXGzCk6Vgl7X iKbUZmGw+1YXJ5mQbnLgFP0yvjBkbwZlNi2dc98eeMP1gTKmYk32jMpElFSI/mPZ tbWJogr7HjoqqJL55gNpRKGWivO0NMgVoTROkgnfmfoR6oXUOPNfh0uFxbsYCu0s B+uLPy823w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:27 2026 by rpki-client