This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DCxG0trw8rjx1ht5oAnRCaWeRUo.roa File: DCxG0trw8rjx1ht5oAnRCaWeRUo.roa (raw, json) Hash identifier: O6SS53Ih3mBRNRHzfhTeZGWxNIkboZHCZenoX8TP2uk= Subject key identifier: 0C:2C:46:D2:DA:F0:F2:B8:F1:D6:1B:79:A0:09:D1:09:A5:9E:45:4A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A350CF7444D5C3C178A0911C3CB49A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DCxG0trw8rjx1ht5oAnRCaWeRUo.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215590 IP address blocks: 83.143.113.0/24 maxlen: 24 85.209.135.0/24 maxlen: 24 87.120.88.0/24 maxlen: 24 87.121.218.0/24 maxlen: 24 185.246.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:50:cf:74:44:d5:c3:c1:78:a0:91:1c:3c:b4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c2c46d2daf0f2b8f1d61b79a009d109a59e454a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:59:a7:c2:66:02:01:b8:8c:fd:29:a6:90: a6:b9:29:70:af:17:7a:1d:ca:c5:33:a4:5b:e6:92: e0:fb:f4:f8:8f:77:07:45:dc:15:45:e1:18:75:f4: e6:39:d5:82:d7:2e:9e:78:f8:33:34:2d:21:38:6d: 63:f9:2e:9d:2e:e5:46:ad:b4:94:d6:77:a5:df:5d: 34:84:a2:15:52:2a:e7:61:5b:ec:32:f8:24:69:9f: e2:1c:e0:d9:5a:8e:7c:53:33:db:e9:77:55:b8:87: db:13:40:74:93:db:5a:45:0d:0a:6c:5c:18:2b:52: 7c:82:d7:7f:45:8b:d2:31:05:9b:96:db:55:b8:75: e1:81:b7:ed:7c:c9:86:f7:f2:25:46:1f:f7:a3:50: b8:21:f6:e3:11:5d:48:1f:fa:48:d9:49:48:87:6d: 92:12:cd:ea:e5:a2:9c:8c:d8:0a:92:ea:26:d4:9a: 90:1b:27:c1:2a:b6:a5:23:8e:db:c6:5d:ff:c4:fa: 32:20:88:ad:0c:95:ac:41:60:ba:4d:2c:4f:bd:5e: ad:7b:50:2b:57:44:ad:e6:a7:2f:c3:da:f9:35:cf: d8:01:40:a6:25:e6:42:f8:93:f6:97:ec:f8:8b:6b: 6a:bb:47:bc:4d:4f:1b:76:8a:64:5b:78:50:d1:62: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:46:D2:DA:F0:F2:B8:F1:D6:1B:79:A0:09:D1:09:A5:9E:45:4A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DCxG0trw8rjx1ht5oAnRCaWeRUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.113.0/24 85.209.135.0/24 87.120.88.0/24 87.121.218.0/24 185.246.222.0/24 Signature Algorithm: sha256WithRSAEncryption 88:3d:66:2c:e3:d5:25:2b:bd:8d:65:9d:8b:e0:53:58:09:2c: 6a:da:c6:48:90:8f:7c:95:9a:2a:94:2d:7d:3b:9f:3b:41:07: 77:56:51:b5:fa:d1:8b:5a:88:78:73:af:69:a4:fd:3b:ea:1f: 66:b3:3c:92:18:24:98:e0:9a:52:05:07:9e:2b:3f:37:e1:b5: 76:70:ed:0e:97:e9:4e:1b:2b:62:bf:0c:ae:bf:c3:16:b6:09: bc:31:c8:88:2f:20:2f:0f:6f:06:ed:de:af:4a:08:37:ab:45: 02:bc:2f:0a:82:23:63:ad:f3:aa:7c:58:c2:58:f2:b4:f2:42: d3:af:23:c9:3c:28:e8:a1:5b:51:4c:6f:0a:cd:ba:ab:7b:0f: 2a:5c:4f:8b:be:82:65:e8:6d:a7:37:92:28:1a:f1:7c:9c:ab: 74:03:57:70:b8:18:a4:52:d2:cd:f3:2b:54:8b:40:e1:e5:89: 1d:7c:d2:a1:90:19:4b:a8:06:71:f6:2f:6b:26:47:7f:77:6b: a9:56:88:95:c2:f5:6e:00:da:5e:8d:a4:4a:09:fe:64:8b:5f: 7a:e2:89:a8:40:7f:bd:a7:37:4b:4c:5e:b1:c5:20:52:ce:44: 51:34:62:da:50:37:44:93:0b:8f:ea:e7:2b:50:d4:2e:f0:da: bc:b3:5c:e9 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4o1DPdETVw8F4oJEcPLSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzJjNDZkMmRhZjBmMmI4ZjFkNjFiNzlhMDA5ZDEwOWE1OWU0NTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34VZp8JmAgG4jP0pppCmuSlwrxd6 HcrFM6Rb5pLg+/T4j3cHRdwVReEYdfTmOdWC1y6eePgzNC0hOG1j+S6dLuVGrbSU 1nel3100hKIVUirnYVvsMvgkaZ/iHODZWo58UzPb6XdVuIfbE0B0k9taRQ0KbFwY K1J8gtd/RYvSMQWblttVuHXhgbftfMmG9/IlRh/3o1C4IfbjEV1IH/pI2UlIh22S Es3q5aKcjNgKkuom1JqQGyfBKralI47bxl3/xPoyIIitDJWsQWC6TSxPvV6te1Ar V0St5qcvw9r5Nc/YAUCmJeZC+JP2l+z4i2tqu0e8TU8bdopkW3hQ0WJ5nQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAwsRtLa8PK48dYbeaAJ0QmlnkVKMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvREN4RzB0cnc4cmp4MWh0NW9BblJDYVdlUlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAU49xAwQA VdGHAwQAV3hYAwQAV3naAwQAufbeMA0GCSqGSIb3DQEBCwUAA4IBAQCIPWYs49Ul K72NZZ2L4FNYCSxq2sZIkI98lZoqlC19O587QQd3VlG1+tGLWoh4c69ppP076h9m szySGCSY4JpSBQeeKz834bV2cO0Ol+lOGytivwyuv8MWtgm8MciILyAvD28G7d6v Sgg3q0UCvC8KgiNjrfOqfFjCWPK08kLTryPJPCjooVtRTG8Kzbqrew8qXE+LvoJl 6G2nN5IoGvF8nKt0A1dwuBikUtLN8ytUi0Dh5YkdfNKhkBlLqAZx9i9rJkd/d2up VoiVwvVuANpejaRKCf5ki1964omoQH+9pzdLTF6xxSBSzkRRNGLaUDdEkwuP6ucr UNQu8Nq8s1zp -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:50 2026 by rpki-client