This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/rDwGu9ius0Iys44GbQFnwlznBbg.roa File: rDwGu9ius0Iys44GbQFnwlznBbg.roa (raw, json) Hash identifier: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A= Subject key identifier: AC:3C:06:BB:D8:AE:B3:42:32:B3:8E:06:6D:01:67:C2:5C:E7:05:B8 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFDB07D6DE0E094AE2528A6504E23 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/rDwGu9ius0Iys44GbQFnwlznBbg.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43415 IP address blocks: 79.127.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fd:b0:7d:6d:e0:e0:94:ae:25:28:a6:50:4e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac3c06bbd8aeb34232b38e066d0167c25ce705b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:e3:63:ff:5d:ef:3a:af:52:35:26:0e:e3: 65:49:34:ba:d9:d0:6b:a8:13:6b:95:fb:13:48:60: ad:bb:08:a8:a8:99:aa:71:05:ee:f9:70:95:b8:c1: 44:ca:1f:f7:e2:17:2d:63:d1:6b:ba:6e:c5:d7:e0: 13:ef:f0:1d:6b:37:45:fc:c8:11:de:da:33:6a:98: 5a:4d:c2:12:98:bb:d5:31:3b:e4:9d:f4:07:ab:4c: 6f:4a:aa:e0:83:cc:ab:be:8a:39:4c:b6:18:70:31: d4:cc:0a:e4:ac:c5:98:90:e5:6d:57:70:62:3f:a0: 91:40:76:c5:45:94:56:f9:59:b8:bf:b9:ae:8b:cd: fa:1b:b3:6f:1b:86:9b:29:5d:18:39:8a:7d:2d:23: 66:71:8b:21:6e:7c:61:b4:9b:24:1d:9c:20:7d:a0: 6e:1b:e6:f3:a6:b3:83:a3:52:57:5f:5c:6c:b7:1e: 95:42:7d:58:8c:48:67:71:fa:ef:18:59:6c:56:d5: 48:02:a4:01:11:7c:0d:c6:61:52:b6:31:53:ad:ba: 40:1c:94:35:84:0c:72:29:59:c7:f4:a6:63:c6:fc: b4:76:01:e0:b9:43:67:1e:28:46:bc:1a:73:48:d4: aa:35:11:89:33:75:04:8d:d2:b0:40:fd:b7:e3:2f: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3C:06:BB:D8:AE:B3:42:32:B3:8E:06:6D:01:67:C2:5C:E7:05:B8 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/rDwGu9ius0Iys44GbQFnwlznBbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.127.46.0/24 Signature Algorithm: sha256WithRSAEncryption 04:32:00:ca:4d:47:e1:21:16:1d:9b:b0:ce:45:74:57:40:72: a1:e8:4c:08:ea:b6:41:b5:2d:2c:37:8b:68:27:b9:09:40:27: e3:7e:34:cc:d4:43:2d:53:97:57:2a:12:87:30:23:53:44:18: 83:52:29:35:d2:f7:6f:90:ab:ef:f6:ae:76:30:00:57:66:d4: ae:68:f9:8f:03:5c:48:0f:d5:fc:5c:02:5d:53:4c:d2:4b:a8: 17:26:09:ee:bd:c9:fe:31:68:2f:a7:4b:7e:0f:aa:0b:c0:f2: 7e:a5:01:74:19:2e:0b:5b:69:99:22:84:57:e5:94:3a:7c:bf: f1:8a:1a:93:1b:f6:29:b0:56:7d:68:f8:20:b0:0c:bb:38:b4: dc:2d:5f:38:06:50:71:32:fd:10:e6:17:58:c9:17:10:6a:e0: af:e8:24:4f:f9:71:16:56:36:32:e3:2f:e4:5f:32:e9:f2:61: 75:64:ad:d5:10:b8:ba:2e:78:29:ae:3f:ba:fc:86:60:5a:a4: 7d:12:6b:81:6d:10:d8:94:8d:65:89:ae:ca:81:56:5f:5b:e0: b7:86:c7:5d:27:f6:b9:c7:ee:46:68:f2:4c:2d:d4:00:38:4f: d6:5c:4c:8e:33:e4:69:a4:ea:68:57:80:3b:6d:52:f6:00:3c: 31:6b:1f:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP2wfW3g4JSuJSimUE4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzNjMDZiYmQ4YWViMzQyMzJiMzhlMDY2ZDAxNjdjMjVjZTcwNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp7jY/9d7zqvUjUmDuNlSTS62dBr qBNrlfsTSGCtuwioqJmqcQXu+XCVuMFEyh/34hctY9Frum7F1+AT7/AdazdF/MgR 3tozaphaTcISmLvVMTvknfQHq0xvSqrgg8yrvoo5TLYYcDHUzArkrMWYkOVtV3Bi P6CRQHbFRZRW+Vm4v7mui836G7NvG4abKV0YOYp9LSNmcYshbnxhtJskHZwgfaBu G+bzprODo1JXX1xstx6VQn1YjEhncfrvGFlsVtVIAqQBEXwNxmFStjFTrbpAHJQ1 hAxyKVnH9KZjxvy0dgHguUNnHihGvBpzSNSqNRGJM3UEjdKwQP234y9L6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKw8BrvYrrNCMrOOBm0BZ8Jc5wW4MB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvckR3R3U5aXVzMEl5czQ0R2JRRm53bHpuQmJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT38uMA0G CSqGSIb3DQEBCwUAA4IBAQAEMgDKTUfhIRYdm7DORXRXQHKh6EwI6rZBtS0sN4to J7kJQCfjfjTM1EMtU5dXKhKHMCNTRBiDUik10vdvkKvv9q52MABXZtSuaPmPA1xI D9X8XAJdU0zSS6gXJgnuvcn+MWgvp0t+D6oLwPJ+pQF0GS4LW2mZIoRX5ZQ6fL/x ihqTG/YpsFZ9aPggsAy7OLTcLV84BlBxMv0Q5hdYyRcQauCv6CRP+XEWVjYy4y/k XzLp8mF1ZK3VELi6Lngprj+6/IZgWqR9EmuBbRDYlI1lia7KgVZfW+C3hsddJ/a5 x+5GaPJMLdQAOE/WXEyOM+RppOpoV4A7bVL2ADwxax8A -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:57 2026 by rpki-client