This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/DHWxwhm5BstgQrswTpmXlNRqB68.roa File: DHWxwhm5BstgQrswTpmXlNRqB68.roa (raw, json) Hash identifier: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY= Subject key identifier: 0C:75:B1:C2:19:B9:06:CB:60:42:BB:30:4E:99:97:94:D4:6A:07:AF Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae Certificate serial: 019BA2584C697A346B1DC4D2F03EEE3BA4C7 Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/DHWxwhm5BstgQrswTpmXlNRqB68.roa Signing time: Fri 09 Jan 2026 10:40:54 +0000 ROA not before: Fri 09 Jan 2026 10:40:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 185.68.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:58:4c:69:7a:34:6b:1d:c4:d2:f0:3e:ee:3b:a4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae Validity Not Before: Jan 9 10:40:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c75b1c219b906cb6042bb304e999794d46a07af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:e2:88:e6:f9:0f:c0:cf:40:8f:dd:a8:8c: ed:e7:07:b2:a9:fd:15:f9:54:0e:5e:89:4a:8d:22: 37:ce:c5:db:66:3f:26:9a:ae:54:18:4c:87:42:08: b0:8a:b8:bd:2f:cc:27:ee:1b:64:9a:72:24:1e:a9: 28:21:75:c6:4d:02:fd:18:a1:5f:bf:09:87:56:44: 72:36:49:ad:57:43:f3:3d:bd:16:07:9b:0d:94:7b: 47:1c:53:9a:69:1b:d0:47:3f:3e:85:ca:8d:85:bf: d0:dc:c6:03:d8:f1:21:01:e5:8a:5d:a3:8d:a9:0b: c8:99:10:92:40:86:bb:c4:ad:55:52:57:99:80:81: c2:7b:38:82:88:ef:5a:62:e2:5c:9a:9b:6f:c1:c8: 3d:cf:5d:9e:e0:75:de:0d:57:48:a2:8c:ef:14:6a: d3:70:c9:c8:3e:50:35:29:15:6c:96:20:7a:7f:79: 7f:60:d6:a9:88:e8:0e:3c:24:3e:2c:3c:8a:76:50: bd:e3:35:6c:af:0b:fd:51:36:4d:77:6d:7c:f1:da: 1f:3b:40:1f:4f:75:98:2f:f7:fe:d9:19:d5:cc:7b: ba:f6:1f:ea:9d:62:10:81:95:ec:28:67:86:85:43: f1:70:52:53:0a:da:90:05:d3:af:46:2a:33:cf:58: 59:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:75:B1:C2:19:B9:06:CB:60:42:BB:30:4E:99:97:94:D4:6A:07:AF X509v3 Authority Key Identifier: keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/DHWxwhm5BstgQrswTpmXlNRqB68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.222.0/23 Signature Algorithm: sha256WithRSAEncryption 53:64:76:81:40:f5:77:a2:ff:94:b7:1c:3c:dd:71:4c:fe:bf: 74:ff:9f:ee:9b:fe:96:87:11:b6:ea:fe:ed:03:b7:3b:b0:fd: 88:41:af:42:27:24:c8:ab:1e:63:a0:f8:54:71:3b:88:ab:ea: 36:83:e5:4f:e8:8a:4f:d4:ca:4c:47:17:14:f0:4d:0c:98:86: 3f:b6:93:c4:17:d3:c1:d0:c4:8d:dd:5c:dd:fd:88:50:21:c1: a2:96:ab:1d:86:9f:a7:96:04:2c:83:08:80:55:42:3c:ca:75: 5c:bd:71:00:e9:3e:ee:a0:c0:79:31:32:e8:3a:40:f0:f6:39: 1d:e2:ed:f5:63:62:59:5b:e5:27:9f:af:15:0e:c6:ce:51:9e: 6a:29:af:7d:8b:07:3a:5c:0a:2c:77:bf:37:59:de:ce:ca:c0: c1:9e:70:35:d6:7a:32:41:90:3f:14:e8:3d:5c:28:56:5e:3b: 95:26:93:5f:ab:d2:29:62:81:ff:f1:d0:ea:83:b8:a6:9a:d1: 39:93:9a:4a:86:65:29:f2:69:d3:37:94:0d:62:54:4a:a4:11: 86:1c:d2:97:d8:c6:87:96:1f:97:2f:9f:58:ca:85:4a:64:12: 18:6b:4f:4d:3a:b4:76:97:59:a3:59:ac:49:31:33:7f:d9:1f: 11:ae:b5:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuiWExpejRrHcTS8D7uO6THMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDYwMjM4ZDA2NjhkNDVhMDQxNjE4YWM1ZGY3NjdmNTlh MGM0YWUwHhcNMjYwMTA5MTA0MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzc1YjFjMjE5YjkwNmNiNjA0MmJiMzA0ZTk5OTc5NGQ0NmEwN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YriiOb5D8DPQI/dqIzt5weyqf0V +VQOXolKjSI3zsXbZj8mmq5UGEyHQgiwiri9L8wn7htkmnIkHqkoIXXGTQL9GKFf vwmHVkRyNkmtV0PzPb0WB5sNlHtHHFOaaRvQRz8+hcqNhb/Q3MYD2PEhAeWKXaON qQvImRCSQIa7xK1VUleZgIHCeziCiO9aYuJcmptvwcg9z12e4HXeDVdIoozvFGrT cMnIPlA1KRVsliB6f3l/YNapiOgOPCQ+LDyKdlC94zVsrwv9UTZNd2188dofO0Af T3WYL/f+2RnVzHu69h/qnWIQgZXsKGeGhUPxcFJTCtqQBdOvRiozz1hZ6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAx1scIZuQbLYEK7ME6Zl5TUagevMB8GA1UdIwQY MBaAFM0GAjjQZo1FoEFhisXfdn9ZoMSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYt N2ZiNmVhODk2MzdmLzEvREhXeHdobTVCc3RnUXJzd1RwbVhsTlJxQjY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYtN2ZiNmVhODk2Mzdm LzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUTeMA0G CSqGSIb3DQEBCwUAA4IBAQBTZHaBQPV3ov+Utxw83XFM/r90/5/um/6WhxG26v7t A7c7sP2IQa9CJyTIqx5joPhUcTuIq+o2g+VP6IpP1MpMRxcU8E0MmIY/tpPEF9PB 0MSN3Vzd/YhQIcGilqsdhp+nlgQsgwiAVUI8ynVcvXEA6T7uoMB5MTLoOkDw9jkd 4u31Y2JZW+Unn68VDsbOUZ5qKa99iwc6XAosd783Wd7OysDBnnA11noyQZA/FOg9 XChWXjuVJpNfq9IpYoH/8dDqg7immtE5k5pKhmUp8mnTN5QNYlRKpBGGHNKX2MaH lh+XL59YyoVKZBIYa09NOrR2l1mjWaxJMTN/2R8RrrXY -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:03 2026 by rpki-client