This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/dwxKXYq5F0w7--7RCrBYQ23c5iY.roa File: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (raw, json) Hash identifier: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I= Subject key identifier: 77:0C:4A:5D:8A:B9:17:4C:3B:FB:EE:D1:0A:B0:58:43:6D:DC:E6:26 Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87 Certificate serial: 019B7910D3FD416F53B6F8192083BC1A4544 Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/dwxKXYq5F0w7--7RCrBYQ23c5iY.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8643 IP address blocks: 87.239.232.0/21 maxlen: 21 88.197.0.0/17 maxlen: 24 195.134.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d3:fd:41:6f:53:b6:f8:19:20:83:bc:1a:45:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=770c4a5d8ab9174c3bfbeed10ab058436ddce626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:b7:77:28:53:ad:fc:34:6e:b9:ae:9d:4f: 81:be:34:97:ce:52:2f:77:74:a0:4b:e5:53:8b:96: 79:77:d6:a7:13:05:a6:e2:d1:a4:c6:39:aa:80:4c: 2f:b1:2d:77:28:1d:8a:c9:7e:9f:db:91:08:10:19: 4a:98:ad:32:ba:6c:28:d6:b9:eb:80:92:8b:5e:bf: 93:2b:93:f6:23:51:80:67:cd:74:fc:9c:6b:c1:ce: 77:ab:7a:12:e0:87:14:e5:05:9b:27:56:9c:d7:25: 2c:44:80:f8:e9:fe:7b:07:15:7a:5b:ff:fe:6f:d6: 8c:b7:4e:51:f1:70:22:ac:d2:5e:0d:db:c9:c5:c3: b3:04:c7:91:cd:74:ed:70:e1:ad:f2:b8:b0:65:27: 7f:8d:8c:56:81:73:a6:78:5c:a0:12:65:39:a6:d5: b5:bf:fa:cb:93:1a:7a:fd:a6:04:71:10:0f:89:4e: 44:cc:9e:ad:3f:79:e2:dc:71:ff:50:91:66:0b:b3: 53:f5:01:fb:9c:b3:a1:a7:10:8b:be:db:4f:91:c8: f9:60:e7:a7:6b:e1:af:ff:04:68:34:37:0b:a2:96: 23:7d:e4:d3:be:0d:e0:33:cf:57:7d:8e:2d:1a:1b: c6:41:dc:6a:d4:95:15:d2:62:0b:8a:9f:38:0e:12: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0C:4A:5D:8A:B9:17:4C:3B:FB:EE:D1:0A:B0:58:43:6D:DC:E6:26 X509v3 Authority Key Identifier: keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/dwxKXYq5F0w7--7RCrBYQ23c5iY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.232.0/21 88.197.0.0/17 195.134.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3c:76:95:bd:d1:da:a4:9c:8c:c5:ce:31:51:6b:94:8c:ba:95: c0:61:c6:53:b5:b2:dc:64:7c:86:18:af:cb:4b:77:f9:2e:bc: 21:62:91:9f:46:87:80:7e:b2:08:a0:0a:3e:b6:3e:ff:f5:ee: a5:d7:f8:d0:36:e4:1a:33:38:1e:58:72:46:1e:f1:92:c6:3a: 70:03:ad:68:25:06:11:c0:fe:0c:86:3c:07:23:20:d2:f1:f2: e7:2d:2f:ed:2e:c9:c6:93:53:87:8f:ef:35:7d:30:2c:ea:e9: 72:65:4b:e2:8c:86:46:22:b5:2f:fe:e8:22:6b:78:26:e7:1f: d6:dc:87:eb:a3:00:3b:28:af:e3:c8:b8:c7:ad:3b:08:50:39: f6:e0:15:1c:67:5b:5a:7c:62:f5:fb:92:ca:22:2a:06:e5:c3: 7a:0f:52:5b:03:85:a0:20:79:2b:74:2e:a0:58:70:a2:ea:b7: f3:c1:2b:dd:da:16:1c:02:35:53:9e:05:1a:af:ef:79:e8:d0: 6b:c7:be:25:f3:5f:36:37:4e:55:8b:76:d7:5b:65:2a:54:d6: e8:ee:2b:e4:4a:85:bf:d7:42:f1:db:d9:c7:15:30:63:45:1c: 0f:ed:28:19:0f:50:14:67:22:2f:ad:a2:22:4d:14:06:7b:b0: 25:56:6a:a0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ENP9QW9TtvgZIIO8GkVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjdmODE3YWI1MTQxYjVlMTM4MjgwY2RmNjE5MDE2NmJi OWNiODcwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzBjNGE1ZDhhYjkxNzRjM2JmYmVlZDEwYWIwNTg0MzZkZGNlNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNG3dyhTrfw0brmunU+BvjSXzlIv d3SgS+VTi5Z5d9anEwWm4tGkxjmqgEwvsS13KB2KyX6f25EIEBlKmK0yumwo1rnr gJKLXr+TK5P2I1GAZ810/Jxrwc53q3oS4IcU5QWbJ1ac1yUsRID46f57BxV6W//+ b9aMt05R8XAirNJeDdvJxcOzBMeRzXTtcOGt8riwZSd/jYxWgXOmeFygEmU5ptW1 v/rLkxp6/aYEcRAPiU5EzJ6tP3ni3HH/UJFmC7NT9QH7nLOhpxCLvttPkcj5YOen a+Gv/wRoNDcLopYjfeTTvg3gM89XfY4tGhvGQdxq1JUV0mILip84DhKVnwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHcMSl2KuRdMO/vu0QqwWENt3OYmMB8GA1UdIwQY MBaAFGi3+BerUUG14TgoDN9hkBZrucuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMt MTY1MTcxMjZjMTMyLzEvZHd4S1hZcTVGMHc3LS03UkNyQllRMjNjNWlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMtMTY1MTcxMjZjMTMy LzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDV+/oAwQH WMUAAwQGw4ZAMA0GCSqGSIb3DQEBCwUAA4IBAQA8dpW90dqknIzFzjFRa5SMupXA YcZTtbLcZHyGGK/LS3f5LrwhYpGfRoeAfrIIoAo+tj7/9e6l1/jQNuQaMzgeWHJG HvGSxjpwA61oJQYRwP4MhjwHIyDS8fLnLS/tLsnGk1OHj+81fTAs6ulyZUvijIZG IrUv/ugia3gm5x/W3IfrowA7KK/jyLjHrTsIUDn24BUcZ1tafGL1+5LKIioG5cN6 D1JbA4WgIHkrdC6gWHCi6rfzwSvd2hYcAjVTngUar+956NBrx74l8182N05Vi3bX W2UqVNbo7ivkSoW/10Lx29nHFTBjRRwP7SgZD1AUZyIvraIiTRQGe7AlVmqg -----END CERTIFICATE-----Generated at Mon Feb 2 14:10:42 2026 by rpki-client