This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/1w-DEGovWlGeUvxZrEhAkhZFri0.roa File: 1w-DEGovWlGeUvxZrEhAkhZFri0.roa (raw, json) Hash identifier: erRkVrb3pyj6Yu2qx5hIETEqq580z4OTzTDEWJgauCE= Subject key identifier: D7:0F:83:10:6A:2F:5A:51:9E:52:FC:59:AC:48:40:92:16:45:AE:2D Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Certificate serial: 019B797ECADE0E9C68623DC076E6F2D2D522 Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/1w-DEGovWlGeUvxZrEhAkhZFri0.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6786 IP address blocks: 185.156.224.0/22 maxlen: 24 192.166.192.0/21 maxlen: 24 192.166.200.0/23 maxlen: 24 217.74.192.0/20 maxlen: 24 2a07:a240::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ca:de:0e:9c:68:62:3d:c0:76:e6:f2:d2:d5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d70f83106a2f5a519e52fc59ac4840921645ae2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:e2:89:9c:ee:07:05:ad:29:ef:47:f9:31: 49:a8:5e:1b:75:79:93:4c:43:1b:28:1a:14:ff:41: 53:78:22:53:bc:78:09:0e:11:80:c8:0f:8b:78:4a: 5b:b4:a1:fd:d2:31:61:a1:52:59:8a:bf:7c:1f:65: 4a:6d:7d:be:0b:fe:94:60:29:cd:19:c4:50:a8:e8: 41:45:22:8d:9f:bf:30:23:98:31:3c:6e:65:a6:f5: 3c:63:70:c1:90:32:0a:82:3f:10:ab:2a:5a:6e:d2: e8:eb:f6:a9:52:c6:e0:c3:e6:af:55:cc:0f:5f:4c: 49:8a:09:ea:5c:5f:b1:1a:88:cc:28:b9:8d:1a:5c: 6d:82:90:90:60:2e:62:51:8d:00:b2:ed:8d:86:71: f8:5b:94:b7:92:f1:4b:15:7e:22:f1:9a:a3:7e:c8: 0a:40:db:5e:dc:20:45:3f:c7:9d:c5:a8:b4:dd:e0: b3:38:15:08:ee:fe:e6:49:49:07:43:86:5b:b6:ef: 7a:dc:e4:25:6f:84:0c:4c:18:97:6f:f0:4f:c5:c7: 67:23:1d:85:26:d5:92:44:e9:96:c3:a8:2a:2d:be: ef:b1:40:15:28:e4:96:39:4e:6e:20:cc:4d:87:21: 0a:68:04:86:f8:5f:48:f7:30:25:bb:df:9f:31:8a: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0F:83:10:6A:2F:5A:51:9E:52:FC:59:AC:48:40:92:16:45:AE:2D X509v3 Authority Key Identifier: keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/1w-DEGovWlGeUvxZrEhAkhZFri0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.224.0/22 192.166.192.0-192.166.201.255 217.74.192.0/20 IPv6: 2a07:a240::/29 Signature Algorithm: sha256WithRSAEncryption 96:ad:28:fe:f8:64:54:5a:79:c1:00:04:6f:1d:90:8b:c1:4e: 8c:75:12:2c:a6:6b:b8:35:9b:8d:25:b5:fe:d9:80:f9:22:81: 71:17:47:8d:73:5d:4b:2b:45:9b:0e:ab:b3:9d:a1:41:ff:05: ac:cc:18:39:a7:c4:5e:ec:20:e8:6f:ed:b7:15:fa:d2:87:35: 3f:9a:50:ae:8b:17:93:be:25:3f:b7:af:52:8d:7d:81:ee:07: 8a:49:03:6d:9d:e5:45:30:63:64:d8:86:18:5e:30:f3:d2:a9: a8:67:18:c9:30:89:fd:05:3f:28:89:7c:c8:5e:19:8d:84:00: d0:18:d9:05:23:2b:9b:97:f4:67:fc:13:48:51:49:ce:7e:9c: 31:63:51:27:97:c8:b2:53:4e:74:1c:a5:77:e5:ee:9a:15:95: b1:6d:4a:fb:86:a6:04:fd:23:0d:4e:db:24:e7:04:75:d1:5e: 9b:99:ac:d3:53:d6:d2:44:1d:b5:e3:dd:76:a0:38:63:05:2d: 45:e7:6b:fd:89:db:9f:09:72:eb:49:b4:1f:8b:cb:62:97:8a: 32:2e:75:00:09:f7:aa:84:ac:96:39:d9:71:1f:e4:70:a7:9e: a2:ca:d2:0f:be:5b:c7:77:8b:a8:f5:30:8c:c5:11:fc:68:3a: ff:5d:63:66 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt5fsreDpxoYj3Aduby0tUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm YTkwMmMwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzBmODMxMDZhMmY1YTUxOWU1MmZjNTlhYzQ4NDA5MjE2NDVhZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23viiZzuBwWtKe9H+TFJqF4bdXmT TEMbKBoU/0FTeCJTvHgJDhGAyA+LeEpbtKH90jFhoVJZir98H2VKbX2+C/6UYCnN GcRQqOhBRSKNn78wI5gxPG5lpvU8Y3DBkDIKgj8QqypabtLo6/apUsbgw+avVcwP X0xJignqXF+xGojMKLmNGlxtgpCQYC5iUY0Asu2NhnH4W5S3kvFLFX4i8ZqjfsgK QNte3CBFP8edxai03eCzOBUI7v7mSUkHQ4Zbtu963OQlb4QMTBiXb/BPxcdnIx2F JtWSROmWw6gqLb7vsUAVKOSWOU5uIMxNhyEKaASG+F9I9zAlu9+fMYqkTwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFNcPgxBqL1pRnlL8WaxIQJIWRa4tMB8GA1UdIwQY MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt YzMxMGVjYTNjMDdiLzEvMXctREVHb3ZXbEdlVXZ4WnJFaEFraFpGcmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCuZzgMAwD BAbApsADBAHApsgDBATZSsAwDQQCAAIwBwMFAyoHokAwDQYJKoZIhvcNAQELBQAD ggEBAJatKP74ZFRaecEABG8dkIvBTox1Eiyma7g1m40ltf7ZgPkigXEXR41zXUsr RZsOq7OdoUH/BazMGDmnxF7sIOhv7bcV+tKHNT+aUK6LF5O+JT+3r1KNfYHuB4pJ A22d5UUwY2TYhhheMPPSqahnGMkwif0FPyiJfMheGY2EANAY2QUjK5uX9Gf8E0hR Sc5+nDFjUSeXyLJTTnQcpXfl7poVlbFtSvuGpgT9Iw1O2yTnBHXRXpuZrNNT1tJE HbXj3XagOGMFLUXna/2J258JcutJtB+Ly2KXijIudQAJ96qErJY52XEf5HCnnqLK 0g++W8d3i6j1MIzFEfxoOv9dY2Y= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:58 2026 by rpki-client