This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/DWxK7O4df_W8HA4KXmkc0bNeZRc.roa File: DWxK7O4df_W8HA4KXmkc0bNeZRc.roa (raw, json) Hash identifier: BoTdjcLNvInLjrHcqKbP+Q4OyLKz1VsHHG2lylnjHaU= Subject key identifier: 0D:6C:4A:EC:EE:1D:7F:F5:BC:1C:0E:0A:5E:69:1C:D1:B3:5E:65:17 Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f Certificate serial: 019B7F818CE00B980A3F6F2A3D75BE29BC64 Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/DWxK7O4df_W8HA4KXmkc0bNeZRc.roa Signing time: Fri 02 Jan 2026 16:19:15 +0000 ROA not before: Fri 02 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196879 IP address blocks: 193.106.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:8c:e0:0b:98:0a:3f:6f:2a:3d:75:be:29:bc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f Validity Not Before: Jan 2 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d6c4aecee1d7ff5bc1c0e0a5e691cd1b35e6517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:20:0a:54:0e:38:0b:13:fe:22:02:36:b6: 85:db:af:44:03:f6:17:0d:23:c0:e4:e5:d4:06:18: b6:6d:31:d0:0e:75:06:60:45:af:1b:c7:1f:ba:75: 4d:39:70:ab:8c:31:06:d7:2b:33:2c:0c:3d:7d:d0: cc:26:0e:91:36:9a:a2:06:6d:df:ea:8a:53:4f:89: 25:0e:3f:e1:f6:ac:e4:29:f2:e7:4a:a6:66:25:65: d2:75:c7:0a:92:f3:8c:0e:33:92:52:5f:82:af:99: 2d:0f:33:06:04:b5:ac:94:15:d8:53:31:30:69:f1: 4a:32:8d:5c:dc:3f:49:d8:a4:48:56:1f:2d:fe:7d: 67:70:d6:cf:cb:11:5b:96:e7:04:39:03:d5:65:b3: cc:ac:b8:ff:ea:ff:39:09:8b:75:e6:ca:cc:8b:17: 0b:f9:f2:47:b5:6f:01:12:a4:04:01:0a:3f:52:46: f8:b4:db:c3:5c:12:05:2a:a5:b8:c3:c9:1a:c0:0d: d2:57:02:73:d7:b4:31:20:17:05:b5:6c:05:0e:c1: bc:e7:a8:20:4c:20:88:30:8e:71:c5:96:92:d5:31: a6:89:65:f8:3a:3a:eb:9f:6b:51:a1:80:02:81:b2: 92:55:de:80:bb:8c:df:e4:9d:96:de:ed:aa:4a:56: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6C:4A:EC:EE:1D:7F:F5:BC:1C:0E:0A:5E:69:1C:D1:B3:5E:65:17 X509v3 Authority Key Identifier: keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/DWxK7O4df_W8HA4KXmkc0bNeZRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.108.0/22 Signature Algorithm: sha256WithRSAEncryption 49:68:2a:a7:21:b4:4b:d1:21:6c:f2:1c:ec:ba:e9:c1:28:0c: 35:06:5a:72:78:d9:e3:3b:98:58:6f:03:22:52:ff:4b:99:86: cd:1a:9c:98:bc:be:df:f2:6a:cc:a8:ef:29:4d:9e:e8:c4:f4: 01:c7:ad:2e:30:1d:79:39:d5:01:d0:0b:d4:95:73:0e:c5:70: 1d:05:11:76:38:5d:1d:e6:9e:d5:eb:72:19:af:93:8b:32:c5: 02:a7:92:39:e6:99:fd:06:59:f7:23:73:0d:c1:1e:3f:c4:04: 15:ad:d4:48:31:86:1e:5e:fe:50:00:83:06:e3:16:6e:3c:a9: 6f:b6:0a:37:d3:e0:a5:1e:f2:54:0e:aa:89:38:77:82:f4:b3: 5f:ef:9d:b4:7e:b0:81:fb:14:1d:44:7e:d6:8d:b8:1b:c7:04: d9:3e:f2:57:95:5f:1d:dd:28:86:02:f5:d1:26:62:ba:a1:91: 21:ea:fe:ea:58:19:01:f0:da:c9:72:4c:00:32:f2:ce:4e:86: ac:44:c4:9d:ec:cf:bd:4c:2d:bd:63:4c:12:9c:25:a5:b2:38: 9a:8a:7d:85:10:e0:65:4b:3f:bc:e2:7a:39:d6:71:39:fb:8a: 62:66:99:1f:ff:69:66:3c:81:95:19:48:1f:1f:45:6c:55:06: ea:17:41:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gYzgC5gKP28qPXW+KbxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjI0NGM4YTNlYjRhM2M2ZDc3NmQwNDZjZTkyYWJmMDFj NmMyMmYwHhcNMjYwMTAyMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDZjNGFlY2VlMWQ3ZmY1YmMxYzBlMGE1ZTY5MWNkMWIzNWU2NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6AgClQOOAsT/iICNraF269EA/YX DSPA5OXUBhi2bTHQDnUGYEWvG8cfunVNOXCrjDEG1yszLAw9fdDMJg6RNpqiBm3f 6opTT4klDj/h9qzkKfLnSqZmJWXSdccKkvOMDjOSUl+Cr5ktDzMGBLWslBXYUzEw afFKMo1c3D9J2KRIVh8t/n1ncNbPyxFblucEOQPVZbPMrLj/6v85CYt15srMixcL +fJHtW8BEqQEAQo/Ukb4tNvDXBIFKqW4w8kawA3SVwJz17QxIBcFtWwFDsG856gg TCCIMI5xxZaS1TGmiWX4Ojrrn2tRoYACgbKSVd6Au4zf5J2W3u2qSlYzIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1sSuzuHX/1vBwOCl5pHNGzXmUXMB8GA1UdIwQY MBaAFCsiRMij60o8bXdtBGzpKr8BxsIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83Y2M3YTctYWVmMS00MDhhLWExYzYt ZGYxY2NlNGU2OTUwLzEvRFd4SzdPNGRmX1c4SEE0S1hta2MwYk5lWlJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83Y2M3YTctYWVmMS00MDhhLWExYzYtZGYxY2NlNGU2OTUw LzEvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWpsMA0G CSqGSIb3DQEBCwUAA4IBAQBJaCqnIbRL0SFs8hzsuunBKAw1BlpyeNnjO5hYbwMi Uv9LmYbNGpyYvL7f8mrMqO8pTZ7oxPQBx60uMB15OdUB0AvUlXMOxXAdBRF2OF0d 5p7V63IZr5OLMsUCp5I55pn9Bln3I3MNwR4/xAQVrdRIMYYeXv5QAIMG4xZuPKlv tgo30+ClHvJUDqqJOHeC9LNf7520frCB+xQdRH7WjbgbxwTZPvJXlV8d3SiGAvXR JmK6oZEh6v7qWBkB8NrJckwAMvLOToasRMSd7M+9TC29Y0wSnCWlsjiain2FEOBl Sz+84no51nE5+4piZpkf/2lmPIGVGUgfH0VsVQbqF0E8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:20 2026 by rpki-client