This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/DXIDJwT32OV423k4TIWwn2iDwyg.roa File: DXIDJwT32OV423k4TIWwn2iDwyg.roa (raw, json) Hash identifier: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY= Subject key identifier: 0D:72:03:27:04:F7:D8:E5:78:DB:79:38:4C:85:B0:9F:68:83:C3:28 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B7B3673F00B0C4F7A343B55F684F88E4E Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/DXIDJwT32OV423k4TIWwn2iDwyg.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 185.4.88.0/22 maxlen: 24 193.92.8.0/22 maxlen: 22 193.92.8.0/24 maxlen: 24 193.92.9.0/24 maxlen: 24 193.92.10.0/24 maxlen: 24 193.92.11.0/24 maxlen: 24 194.219.218.0/23 maxlen: 24 213.16.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:73:f0:0b:0c:4f:7a:34:3b:55:f6:84:f8:8e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d72032704f7d8e578db79384c85b09f6883c328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:cb:b3:74:8a:59:21:39:c0:91:b1:d3:9e: 7b:e4:cb:e2:c0:5e:c8:1a:cd:ca:17:b1:0a:d7:97: a4:15:aa:c0:b9:7e:8d:9b:8f:15:83:64:98:a4:dd: 86:42:3c:a9:9a:b8:ab:60:f2:c2:a5:88:7d:f9:2a: 0f:85:8d:b4:58:14:67:4e:1f:cc:7a:49:2e:49:b7: e1:1c:76:4e:5e:85:20:b6:42:bc:a7:2f:18:c1:50: c8:b8:87:e5:88:b3:c2:2b:c9:b1:36:44:dc:4c:b3: a5:d6:41:3f:bf:66:36:df:39:0f:e7:5f:8a:72:55: c2:d1:d2:9d:55:29:b6:e5:f2:92:3b:07:08:57:79: f0:1f:db:e6:e0:02:f9:df:01:5b:b5:f0:24:a1:dc: 63:e4:2f:8d:9a:00:46:dc:8e:8f:26:e7:9c:5d:74: 47:8d:e2:7a:80:30:84:a1:97:90:69:3a:af:d5:0c: e2:c9:2f:00:36:6f:38:09:9f:a8:3d:b1:8b:35:9f: 9b:d6:c8:43:e5:00:27:67:0d:ca:5c:4c:9f:80:54: 38:ce:ac:02:2d:17:ae:27:73:ed:9e:2d:e5:74:7c: 02:3e:43:a7:c9:e6:97:96:61:ad:74:c4:ea:6c:05: 9c:17:23:f1:3c:37:25:17:cd:46:f5:32:50:b2:89: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:72:03:27:04:F7:D8:E5:78:DB:79:38:4C:85:B0:9F:68:83:C3:28 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/DXIDJwT32OV423k4TIWwn2iDwyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.88.0/22 193.92.8.0/22 194.219.218.0/23 213.16.192.0/20 Signature Algorithm: sha256WithRSAEncryption bf:a7:16:d0:fa:70:07:eb:ba:2e:3b:7f:7e:71:05:8e:28:e1: 8e:ac:1e:81:9a:a5:7a:e8:66:68:a7:1e:99:ad:8a:07:d0:f3: 2f:a6:50:98:4a:d2:2c:29:0c:0e:4d:f1:42:75:20:03:0c:c7: f3:be:c7:5c:d6:58:60:b3:e6:14:06:1f:e7:f7:24:83:f4:a6: 9d:87:8e:00:69:2b:a5:3c:52:24:e8:f2:8a:e7:cd:f2:05:8b: a6:1d:96:ac:95:f3:f2:51:4e:b4:e7:1f:1d:77:ff:75:d9:be: 43:48:62:5a:16:88:b4:20:6d:d7:99:28:ff:da:71:cc:e3:fe: af:df:87:1b:26:8d:d4:a6:f9:13:eb:dd:29:e6:ea:5a:c1:7f: af:e1:74:e0:82:c8:56:6d:d7:b1:54:c8:73:69:6c:4a:a1:6b: 6b:23:0c:35:57:a3:d1:8c:e6:2b:f4:73:ef:3b:16:07:e0:02: 56:16:d2:b2:54:30:ec:80:d7:31:11:0b:b2:02:4b:a4:cd:d9: b2:84:33:51:d2:37:61:d2:b6:89:d6:95:5e:5c:f5:28:57:38: bb:39:2e:0f:b3:52:6d:c8:d0:08:00:1d:16:c8:56:45:42:a4: 18:8c:04:4d:a5:93:51:6e:08:b7:87:b8:6e:4b:10:40:a0:d6: 9c:28:8e:7e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NnPwCwxPejQ7VfaE+I5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDcyMDMyNzA0ZjdkOGU1NzhkYjc5Mzg0Yzg1YjA5ZjY4ODNjMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptXLs3SKWSE5wJGx05575MviwF7I Gs3KF7EK15ekFarAuX6Nm48Vg2SYpN2GQjypmrirYPLCpYh9+SoPhY20WBRnTh/M ekkuSbfhHHZOXoUgtkK8py8YwVDIuIfliLPCK8mxNkTcTLOl1kE/v2Y23zkP51+K clXC0dKdVSm25fKSOwcIV3nwH9vm4AL53wFbtfAkodxj5C+NmgBG3I6PJuecXXRH jeJ6gDCEoZeQaTqv1QziyS8ANm84CZ+oPbGLNZ+b1shD5QAnZw3KXEyfgFQ4zqwC LReuJ3Ptni3ldHwCPkOnyeaXlmGtdMTqbAWcFyPxPDclF81G9TJQsolIowIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA1yAycE99jleNt5OEyFsJ9og8MoMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvRFhJREp3VDMyT1Y0MjNrNFRJV3duMmlEd3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuQRYAwQC wVwIAwQBwtvaAwQE1RDAMA0GCSqGSIb3DQEBCwUAA4IBAQC/pxbQ+nAH67ouO39+ cQWOKOGOrB6BmqV66GZopx6ZrYoH0PMvplCYStIsKQwOTfFCdSADDMfzvsdc1lhg s+YUBh/n9ySD9Kadh44AaSulPFIk6PKK583yBYumHZaslfPyUU605x8dd/912b5D SGJaFoi0IG3XmSj/2nHM4/6v34cbJo3UpvkT690p5upawX+v4XTggshWbdexVMhz aWxKoWtrIww1V6PRjOYr9HPvOxYH4AJWFtKyVDDsgNcxEQuyAkukzdmyhDNR0jdh 0raJ1pVeXPUoVzi7OS4Ps1JtyNAIAB0WyFZFQqQYjARNpZNRbgi3h7huSxBAoNac KI5+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:30 2026 by rpki-client