This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/dcwzVtxFMl-uycadjDp2YPHFIfY.roa File: dcwzVtxFMl-uycadjDp2YPHFIfY.roa (raw, json) Hash identifier: ci5fz0WaMOXPmIodLOVUNbGP6z8z3MQcOEOaQoctOyY= Subject key identifier: 75:CC:33:56:DC:45:32:5F:AE:C9:C6:9D:8C:3A:76:60:F1:C5:21:F6 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF5BE09F4C4DD2FD806B26BF9320A Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/dcwzVtxFMl-uycadjDp2YPHFIfY.roa Signing time: Fri 02 Jan 2026 04:17:42 +0000 ROA not before: Fri 02 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5408 IP address blocks: 37.32.128.0/17 maxlen: 17 62.217.64.0/18 maxlen: 24 83.212.0.0/16 maxlen: 24 91.227.108.0/24 maxlen: 24 185.5.76.0/22 maxlen: 22 185.81.196.0/22 maxlen: 22 193.105.109.0/24 maxlen: 24 194.42.50.0/23 maxlen: 23 194.42.52.0/23 maxlen: 23 194.42.54.0/24 maxlen: 24 194.177.192.0/19 maxlen: 24 195.130.64.0/18 maxlen: 24 195.251.0.0/16 maxlen: 24 195.251.2.0/24 maxlen: 24 2001:648::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f5:be:09:f4:c4:dd:2f:d8:06:b2:6b:f9:32:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75cc3356dc45325faec9c69d8c3a7660f1c521f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1f:66:39:70:d9:f2:6d:91:cc:c5:6e:18:55: 2d:b7:53:9d:e6:d8:88:fa:07:ea:59:64:73:c2:30: 14:89:60:78:59:0c:7e:6e:1a:ac:36:63:ae:df:b2: d4:40:d4:37:84:c0:55:b9:4b:6f:f7:00:24:b0:53: 23:2b:1a:30:e5:45:31:bf:95:81:df:8f:0d:db:40: 37:81:fb:2b:82:40:72:07:b9:23:e4:16:0d:77:0d: d1:0f:4c:48:b1:4b:65:a1:57:f4:62:1d:30:a4:eb: c1:34:52:70:86:7d:fa:35:6c:2b:00:26:9b:1e:07: 5c:1c:96:81:09:14:f2:22:9d:0f:7f:a0:5c:2d:54: 1e:2b:b0:aa:6b:85:49:2c:bb:8b:9e:77:d1:03:6c: 26:08:ee:25:b9:82:2c:6f:81:20:67:ca:7e:43:20: 62:0f:00:fa:d9:1f:da:37:c2:10:2b:44:e7:20:5c: 0a:1a:fb:40:74:13:33:f5:12:29:67:4b:11:ed:a0: 2f:fb:14:b7:aa:c7:a8:db:0f:12:50:ea:92:c1:ef: e9:6e:4b:ca:1e:bb:64:b5:55:da:8c:21:89:41:27: aa:2f:ed:c5:30:25:f2:3b:96:99:3e:b5:4f:84:da: 8b:7f:eb:0a:c8:8b:f3:59:1c:e5:81:d5:57:b6:e3: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CC:33:56:DC:45:32:5F:AE:C9:C6:9D:8C:3A:76:60:F1:C5:21:F6 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/dcwzVtxFMl-uycadjDp2YPHFIfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.128.0/17 62.217.64.0/18 83.212.0.0/16 91.227.108.0/24 185.5.76.0/22 185.81.196.0/22 193.105.109.0/24 194.42.50.0-194.42.54.255 194.177.192.0/19 195.130.64.0/18 195.251.0.0/16 IPv6: 2001:648::/29 Signature Algorithm: sha256WithRSAEncryption 25:24:60:12:45:72:12:a4:bd:38:08:06:b0:56:88:4d:38:a7: 3f:e3:87:78:eb:da:50:98:ce:26:d8:88:69:43:af:af:e2:00: 47:29:c9:15:d3:df:cc:f0:c2:e8:ce:99:62:dc:66:a2:b0:f0: 9f:51:77:3d:a7:f6:b8:b5:53:fe:18:de:ec:fd:8e:16:7c:aa: 4c:1f:9e:fb:ec:da:81:71:f8:50:e1:eb:69:33:86:cd:55:6d: 29:f3:a1:0b:00:25:71:39:2c:ff:8a:91:5b:f6:a0:78:b0:74: f9:f6:73:84:92:27:3e:9a:30:d2:8f:01:78:1f:2d:c9:c0:05: 72:d2:fe:a3:49:c9:2a:a7:f8:d6:b9:b0:18:f7:1e:01:d7:fe: b4:ae:1c:dd:84:95:f9:f3:03:f5:5c:f5:0f:80:85:90:8b:a5: f9:d4:3e:bd:68:04:4d:3e:a9:c7:23:17:3a:54:e2:0b:d2:0e: 0e:2d:dd:37:b8:ae:08:b2:9c:67:ff:4e:35:5d:d5:cd:67:f1: c8:1b:0f:4b:55:82:fc:9b:31:99:06:d0:e4:07:8c:4c:8f:56: 27:f4:17:96:76:c5:b7:2f:3b:61:5e:89:3a:af:e8:b1:90:15: 4b:34:36:97:d7:e6:09:67:20:ac:b0:80:08:48:58:9a:63:f5: fa:20:1f:ed -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt87PW+CfTE3S/YBrJr+TIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWNjMzM1NmRjNDUzMjVmYWVjOWM2OWQ4YzNhNzY2MGYxYzUyMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B9mOXDZ8m2RzMVuGFUtt1Od5tiI +gfqWWRzwjAUiWB4WQx+bhqsNmOu37LUQNQ3hMBVuUtv9wAksFMjKxow5UUxv5WB 348N20A3gfsrgkByB7kj5BYNdw3RD0xIsUtloVf0Yh0wpOvBNFJwhn36NWwrACab HgdcHJaBCRTyIp0Pf6BcLVQeK7Cqa4VJLLuLnnfRA2wmCO4luYIsb4EgZ8p+QyBi DwD62R/aN8IQK0TnIFwKGvtAdBMz9RIpZ0sR7aAv+xS3qseo2w8SUOqSwe/pbkvK HrtktVXajCGJQSeqL+3FMCXyO5aZPrVPhNqLf+sKyIvzWRzlgdVXtuNalQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFHXMM1bcRTJfrsnGnYw6dmDxxSH2MB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvZGN3elZ0eEZNbC11eWNhZGpEcDJZUEhGSWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQHJSCAAwQG PtlAAwMAU9QDBABb42wDBAK5BUwDBAK5UcQDBADBaW0wDAMEAcIqMgMEAMIqNgME BcKxwAMEBsOCQAMDAMP7MA0EAgACMAcDBQMgAQZIMA0GCSqGSIb3DQEBCwUAA4IB AQAlJGASRXISpL04CAawVohNOKc/44d469pQmM4m2IhpQ6+v4gBHKckV09/M8MLo zpli3GaisPCfUXc9p/a4tVP+GN7s/Y4WfKpMH5777NqBcfhQ4etpM4bNVW0p86EL ACVxOSz/ipFb9qB4sHT59nOEkic+mjDSjwF4Hy3JwAVy0v6jSckqp/jWubAY9x4B 1/60rhzdhJX58wP1XPUPgIWQi6X51D69aARNPqnHIxc6VOIL0g4OLd03uK4Ispxn /041XdXNZ/HIGw9LVYL8mzGZBtDkB4xMj1Yn9BeWdsW3LzthXok6r+ixkBVLNDaX 1+YJZyCssIAISFiaY/X6IB/t -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:32 2026 by rpki-client