This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/DwjBds5b0bny3-dZb3jOPo6oE6o.roa File: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (raw, json) Hash identifier: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I= Subject key identifier: 0F:08:C1:76:CE:5B:D1:B9:F2:DF:E7:59:6F:78:CE:3E:8E:A8:13:AA Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab Certificate serial: 019B79102CD5B1AC232D977B0E6DBB5C99D5 Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/DwjBds5b0bny3-dZb3jOPo6oE6o.roa Signing time: Thu 01 Jan 2026 10:17:41 +0000 ROA not before: Thu 01 Jan 2026 10:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205199 IP address blocks: 45.134.120.0/22 maxlen: 22 45.136.156.0/22 maxlen: 22 45.138.140.0/22 maxlen: 22 45.144.116.0/22 maxlen: 22 45.150.160.0/22 maxlen: 22 185.157.168.0/22 maxlen: 22 185.241.172.0/22 maxlen: 22 193.42.219.0/24 maxlen: 24 193.43.14.0/24 maxlen: 24 193.43.28.0/24 maxlen: 24 193.43.37.0/24 maxlen: 24 194.35.78.0/24 maxlen: 24 194.35.92.0/24 maxlen: 24 194.35.95.0/24 maxlen: 24 194.35.182.0/24 maxlen: 24 194.147.242.0/23 maxlen: 23 194.147.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2c:d5:b1:ac:23:2d:97:7b:0e:6d:bb:5c:99:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f08c176ce5bd1b9f2dfe7596f78ce3e8ea813aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:e3:c3:26:d5:cb:82:86:11:40:38:aa:cd: c0:25:34:eb:01:d2:6c:a5:b5:92:45:ce:a1:16:df: 91:68:36:a9:90:29:2d:f1:54:0a:c7:22:7c:29:f6: 32:22:df:4a:3a:f2:a5:16:7d:f5:43:3e:82:e6:40: 63:2d:fc:70:a8:41:11:33:33:b4:d6:5b:18:3f:48: 2a:27:a8:f6:ba:d2:97:58:8b:c4:21:3d:b8:78:46: 29:a3:e3:7f:09:03:19:23:ec:4f:87:e3:d2:4b:85: fe:f0:fc:79:6a:05:c3:30:10:83:98:d8:01:e9:d1: 3e:94:e3:56:e1:9e:4e:3e:5d:ff:d8:bb:75:32:81: a9:46:98:41:40:7d:f2:e6:ac:4d:0b:73:7d:12:cd: 76:66:b5:b7:64:48:e0:f5:98:e9:33:a5:56:5e:3c: a6:13:1a:cd:18:c4:aa:8e:91:75:f8:a2:8b:1d:55: 77:8b:73:8f:16:48:11:a4:93:7b:25:74:5e:da:90: 2c:f3:79:bb:e0:37:d5:63:99:35:e6:95:a9:de:a0: 48:20:3d:40:bc:7a:9d:1c:ce:6a:0a:b0:63:a5:77: 26:42:dd:03:92:73:44:00:e6:13:87:67:f5:00:a8: d7:c2:aa:7a:99:59:1e:83:a3:00:03:59:dd:98:5e: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:08:C1:76:CE:5B:D1:B9:F2:DF:E7:59:6F:78:CE:3E:8E:A8:13:AA X509v3 Authority Key Identifier: keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/DwjBds5b0bny3-dZb3jOPo6oE6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.120.0/22 45.136.156.0/22 45.138.140.0/22 45.144.116.0/22 45.150.160.0/22 185.157.168.0/22 185.241.172.0/22 193.42.219.0/24 193.43.14.0/24 193.43.28.0/24 193.43.37.0/24 194.35.78.0/24 194.35.92.0/24 194.35.95.0/24 194.35.182.0/24 194.147.242.0/23 194.147.250.0/23 Signature Algorithm: sha256WithRSAEncryption 21:83:eb:6a:10:08:ca:63:8a:24:a3:75:8a:9e:c8:ca:66:44: ae:fe:95:43:9f:a6:22:b5:d7:8e:47:b0:f4:7b:06:84:1f:d9: d3:27:cc:95:62:2c:05:c4:3c:b4:ba:c8:99:14:51:a9:ae:f5: 2b:47:52:47:d9:c4:ae:be:39:b6:4f:aa:b0:65:25:34:72:7d: 3d:a8:a8:6b:96:98:5d:2f:19:c1:23:63:31:b7:c9:5c:32:cd: e6:f2:8f:94:f8:28:93:90:9b:22:2e:1a:e0:20:c8:32:13:60: f2:c0:a5:67:da:03:a1:b5:9b:ce:87:74:59:b4:8e:eb:61:19: 0a:ae:27:6d:fb:76:0b:be:5b:67:de:12:ac:05:70:32:fa:29: 95:f1:05:ee:69:26:4f:79:93:66:70:f0:c7:fe:c3:41:e6:16: 24:7b:72:29:92:32:08:14:ce:54:fb:db:ed:da:8c:c7:c2:33: e9:de:78:de:4d:7d:2c:f4:a0:b6:24:c1:83:d3:fa:d4:6e:d3: b4:dd:24:2f:f0:e3:17:2a:d5:67:a5:02:fb:dd:06:6c:26:d4: ff:f5:d7:53:72:26:48:a6:c9:1a:60:8f:09:13:eb:5e:c2:72: 94:53:82:93:31:63:40:29:9f:7c:7d:dc:5e:96:95:34:8d:49: e5:7e:cf:15 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt5ECzVsawjLZd7Dm27XJnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0 MzlkYWIwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjA4YzE3NmNlNWJkMWI5ZjJkZmU3NTk2Zjc4Y2UzZThlYTgxM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1TjwybVy4KGEUA4qs3AJTTrAdJs pbWSRc6hFt+RaDapkCkt8VQKxyJ8KfYyIt9KOvKlFn31Qz6C5kBjLfxwqEERMzO0 1lsYP0gqJ6j2utKXWIvEIT24eEYpo+N/CQMZI+xPh+PSS4X+8Px5agXDMBCDmNgB 6dE+lONW4Z5OPl3/2Lt1MoGpRphBQH3y5qxNC3N9Es12ZrW3ZEjg9ZjpM6VWXjym ExrNGMSqjpF1+KKLHVV3i3OPFkgRpJN7JXRe2pAs83m74DfVY5k15pWp3qBIID1A vHqdHM5qCrBjpXcmQt0DknNEAOYTh2f1AKjXwqp6mVkeg6MAA1ndmF5cXwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFA8IwXbOW9G58t/nWW94zj6OqBOqMB8GA1UdIwQY MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt MTJlNmEwZDQzMThhLzEvRHdqQmRzNWIwYm55My1kWmIzak9QbzZvRTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQCLYZ4AwQC LYicAwQCLYqMAwQCLZB0AwQCLZagAwQCuZ2oAwQCufGsAwQAwSrbAwQAwSsOAwQA wSscAwQAwSslAwQAwiNOAwQAwiNcAwQAwiNfAwQAwiO2AwQBwpPyAwQBwpP6MA0G CSqGSIb3DQEBCwUAA4IBAQAhg+tqEAjKY4oko3WKnsjKZkSu/pVDn6YitdeOR7D0 ewaEH9nTJ8yVYiwFxDy0usiZFFGprvUrR1JH2cSuvjm2T6qwZSU0cn09qKhrlphd LxnBI2Mxt8lcMs3m8o+U+CiTkJsiLhrgIMgyE2DywKVn2gOhtZvOh3RZtI7rYRkK ridt+3YLvltn3hKsBXAy+imV8QXuaSZPeZNmcPDH/sNB5hYke3IpkjIIFM5U+9vt 2ozHwjPp3njeTX0s9KC2JMGD0/rUbtO03SQv8OMXKtVnpQL73QZsJtT/9ddTciZI pskaYI8JE+tewnKUU4KTMWNAKZ98fdxelpU0jUnlfs8V -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:05 2026 by rpki-client