This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/w0AIzL_yXPCHkJImPTgRwJJtTaU.roa File: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (raw, json) Hash identifier: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI= Subject key identifier: C3:40:08:CC:BF:F2:5C:F0:87:90:92:26:3D:38:11:C0:92:6D:4D:A5 Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Certificate serial: 019B7FF219AEA1855A57EEFEA6DBF364FDD7 Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/w0AIzL_yXPCHkJImPTgRwJJtTaU.roa Signing time: Fri 02 Jan 2026 18:22:11 +0000 ROA not before: Fri 02 Jan 2026 18:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21069 IP address blocks: 46.231.200.0/21 maxlen: 24 80.74.128.0/20 maxlen: 24 80.74.144.0/20 maxlen: 24 81.173.82.0/23 maxlen: 24 81.173.84.0/22 maxlen: 24 94.126.16.0/21 maxlen: 24 185.46.56.0/22 maxlen: 24 2a00:1128::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:19:ae:a1:85:5a:57:ee:fe:a6:db:f3:64:fd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c34008ccbff25cf0879092263d3811c0926d4da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:4f:70:b0:51:43:9e:e8:1d:e0:0c:16:7f: af:8e:d2:6b:03:ce:d1:d2:17:0f:93:ec:0e:41:0a: 24:77:bf:49:fa:60:8e:a9:a9:4d:f1:5c:05:6d:24: 11:cb:e2:17:38:d1:37:0d:c0:10:43:06:15:08:a2: de:ea:b2:4c:64:80:d7:03:b8:0f:7e:92:03:cb:e2: a8:43:71:b5:74:b8:84:40:bf:da:7c:13:89:95:86: c4:89:a3:fc:f1:bc:77:a1:4c:f6:81:1f:e2:a7:14: fc:f8:ee:8f:67:e3:90:0c:a4:2e:27:00:bd:e9:a7: 37:c2:3f:a1:1e:74:41:5d:b8:63:4b:aa:39:d1:de: 3a:14:d3:01:d8:ea:b6:fd:5e:2b:7d:ae:15:85:36: 8f:ce:3f:94:56:2d:be:c5:1c:b7:3b:6c:bb:68:4d: 55:c2:a0:01:cf:53:f1:59:fa:e6:a2:99:2a:60:d7: 3c:c4:e4:eb:c0:25:66:50:6b:4b:75:94:08:8c:9c: 9b:10:9c:c8:2e:88:19:80:ad:b6:e1:86:ad:7b:a4: 4f:22:e8:e5:ee:6d:df:e6:4e:2f:89:23:48:12:f0: 6b:52:fb:85:dc:b3:c7:0c:50:24:aa:e5:54:70:93: cb:6e:c9:f9:19:cc:23:02:e6:74:65:f4:dc:48:83: 37:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:40:08:CC:BF:F2:5C:F0:87:90:92:26:3D:38:11:C0:92:6D:4D:A5 X509v3 Authority Key Identifier: keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/w0AIzL_yXPCHkJImPTgRwJJtTaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.200.0/21 80.74.128.0/19 81.173.82.0-81.173.87.255 94.126.16.0/21 185.46.56.0/22 IPv6: 2a00:1128::/32 Signature Algorithm: sha256WithRSAEncryption 66:75:33:42:bd:7f:ae:21:54:6d:72:95:fe:a1:69:b4:5a:ed: 3e:3b:b2:d0:cb:5f:56:25:0a:15:7e:83:91:ba:f7:9e:70:b1: 27:ac:82:a3:0f:61:b2:46:80:6c:25:f5:ba:9d:8f:c2:5d:ad: fa:a6:c3:42:94:05:fb:f5:68:1e:3e:51:71:c3:be:57:cc:1b: 2a:73:2c:75:b9:73:b4:ce:73:8d:23:25:cb:8a:aa:be:04:b7: 0f:f6:fd:32:95:8e:e6:b9:67:ae:07:07:c6:e1:30:18:19:b2: 45:1f:16:27:5b:ff:67:0b:e4:b2:c7:31:13:52:97:f0:c7:dc: 4b:1d:52:1a:44:40:1f:9a:fe:48:e7:7d:10:74:e5:d4:67:96: 39:73:d7:0a:fa:b0:8a:4c:88:24:da:9d:fc:52:13:09:f4:18: ae:6a:33:49:25:6e:29:a0:33:7b:e8:f5:ed:81:b3:a2:a1:37: dc:5b:a8:65:b9:47:b6:8d:ae:fb:7c:fa:47:d2:6d:61:12:f3: 06:8c:2b:5b:19:3d:31:8c:7d:6b:d0:88:9b:90:d4:3d:04:23: 05:4f:78:c0:c5:98:3c:56:71:78:42:c3:67:6d:79:45:80:6c: 01:22:fb:a2:32:09:b8:c4:75:92:30:a2:7e:96:68:47:5f:10: 88:b6:16:59 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt/8hmuoYVaV+7+ptvzZP3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTUzNWVmMjE2ZWJlNmY3ZmM1NWNmYmRjMzE1MzJiOTEy ZDhlNjMwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQwMDhjY2JmZjI1Y2YwODc5MDkyMjYzZDM4MTFjMDkyNmQ0ZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb1PcLBRQ57oHeAMFn+vjtJrA87R 0hcPk+wOQQokd79J+mCOqalN8VwFbSQRy+IXONE3DcAQQwYVCKLe6rJMZIDXA7gP fpIDy+KoQ3G1dLiEQL/afBOJlYbEiaP88bx3oUz2gR/ipxT8+O6PZ+OQDKQuJwC9 6ac3wj+hHnRBXbhjS6o50d46FNMB2Oq2/V4rfa4VhTaPzj+UVi2+xRy3O2y7aE1V wqABz1PxWfrmopkqYNc8xOTrwCVmUGtLdZQIjJybEJzILogZgK224Yate6RPIujl 7m3f5k4viSNIEvBrUvuF3LPHDFAkquVUcJPLbsn5GcwjAuZ0ZfTcSIM3YQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFMNACMy/8lzwh5CSJj04EcCSbU2lMB8GA1UdIwQY MBaAFNblNe8hbr5vf8Vc+9wxUyuRLY5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2Qt MDc3MTFlZDAyYjc1LzEvdzBBSXpMX3lYUENIa0pJbVBUZ1J3Skp0VGFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2QtMDc3MTFlZDAyYjc1 LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQDLufIAwQF UEqAMAwDBAFRrVIDBANRrVADBANefhADBAK5LjgwDQQCAAIwBwMFACoAESgwDQYJ KoZIhvcNAQELBQADggEBAGZ1M0K9f64hVG1ylf6habRa7T47stDLX1YlChV+g5G6 955wsSesgqMPYbJGgGwl9bqdj8Jdrfqmw0KUBfv1aB4+UXHDvlfMGypzLHW5c7TO c40jJcuKqr4Etw/2/TKVjua5Z64HB8bhMBgZskUfFidb/2cL5LLHMRNSl/DH3Esd UhpEQB+a/kjnfRB05dRnljlz1wr6sIpMiCTanfxSEwn0GK5qM0klbimgM3vo9e2B s6KhN9xbqGW5R7aNrvt8+kfSbWES8waMK1sZPTGMfWvQiJuQ1D0EIwVPeMDFmDxW cXhCw2dteUWAbAEi+6IyCbjEdZIwon6WaEdfEIi2Flk= -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:40 2026 by rpki-client