This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dwtUnHqHDoSiWqel4sX-mlkpwQ4.roa File: dwtUnHqHDoSiWqel4sX-mlkpwQ4.roa (raw, json) Hash identifier: ZScWFuS4KGzwUz79yRpSucc2FHkannPAwaqADbp+ACg= Subject key identifier: 77:0B:54:9C:7A:87:0E:84:A2:5A:A7:A5:E2:C5:FE:9A:59:29:C1:0E Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3612B2E11C9D098091CCFF64DDCA0F Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dwtUnHqHDoSiWqel4sX-mlkpwQ4.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 45.15.239.0/24 maxlen: 24 45.129.1.0/24 maxlen: 24 45.132.39.0/24 maxlen: 24 45.135.35.0/24 maxlen: 24 45.138.7.0/24 maxlen: 24 45.138.156.0/24 maxlen: 24 45.138.212.0/24 maxlen: 24 45.138.215.0/24 maxlen: 24 45.140.65.0/24 maxlen: 24 45.149.130.0/24 maxlen: 24 45.149.131.0/24 maxlen: 24 45.152.118.0/24 maxlen: 24 45.152.119.0/24 maxlen: 24 62.192.136.0/24 maxlen: 24 62.192.139.0/24 maxlen: 24 83.138.51.0/24 maxlen: 24 83.138.52.0/24 maxlen: 24 84.246.82.0/24 maxlen: 24 91.206.69.0/24 maxlen: 24 91.224.140.0/24 maxlen: 24 91.237.104.0/24 maxlen: 24 91.237.105.0/24 maxlen: 24 91.242.240.0/24 maxlen: 24 92.119.194.0/23 maxlen: 23 176.116.2.0/24 maxlen: 24 176.116.5.0/24 maxlen: 24 176.116.9.0/24 maxlen: 24 176.116.20.0/24 maxlen: 24 176.116.23.0/24 maxlen: 24 176.126.109.0/24 maxlen: 24 176.126.112.0/24 maxlen: 24 176.126.115.0/24 maxlen: 24 178.211.140.0/24 maxlen: 24 193.0.245.0/24 maxlen: 24 193.0.246.0/24 maxlen: 24 193.5.1.0/24 maxlen: 24 193.33.67.0/24 maxlen: 24 193.58.171.0/24 maxlen: 24 193.58.178.0/24 maxlen: 24 194.26.216.0/24 maxlen: 24 194.34.251.0/24 maxlen: 24 195.96.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:12:b2:e1:1c:9d:09:80:91:cc:ff:64:dd:ca:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=770b549c7a870e84a25aa7a5e2c5fe9a5929c10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:b2:af:47:49:ea:d4:a6:d3:d2:c9:27:f0: 6b:0b:1d:38:2f:19:e6:be:ed:c3:fc:80:f0:72:a7: fb:d7:71:6b:35:c5:3a:16:63:ca:77:d8:16:bf:10: 11:97:ea:0c:18:07:87:6e:3b:b9:fc:d4:67:b0:19: b8:8e:8a:d0:dd:3c:32:47:5e:2a:93:f6:30:42:f2: f2:9e:f0:38:c2:37:a9:f4:56:51:0d:17:96:8b:64: 6e:1f:d9:17:0f:5e:e7:6f:6a:ec:17:fd:33:3c:8a: 69:c3:a7:4d:93:a8:de:e1:83:3e:52:5a:dd:f2:62: ea:e9:4d:83:f0:da:eb:cc:36:51:a1:a8:09:30:7b: 19:14:2f:ce:89:a1:64:ad:b4:67:f5:29:50:f4:17: 07:a5:a1:b1:55:ab:8a:6f:b3:e3:bf:fd:0e:0c:3b: 36:a5:48:b4:23:22:44:aa:ce:c0:66:3b:3c:b3:d0: cc:74:fb:0e:6d:22:1b:04:28:5a:fb:97:52:42:66: 2d:93:6b:a2:04:e3:ea:10:d1:1d:07:2d:61:f3:39: 7b:6c:91:39:ad:6a:be:2e:1c:48:c1:97:10:f9:e3: 8e:d5:ac:51:e5:ed:8b:df:ac:c9:f7:f7:2a:62:0f: 6a:88:d1:bb:b3:b9:82:e4:cc:b6:52:37:b8:e0:fa: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0B:54:9C:7A:87:0E:84:A2:5A:A7:A5:E2:C5:FE:9A:59:29:C1:0E X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dwtUnHqHDoSiWqel4sX-mlkpwQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.239.0/24 45.129.1.0/24 45.132.39.0/24 45.135.35.0/24 45.138.7.0/24 45.138.156.0/24 45.138.212.0/24 45.138.215.0/24 45.140.65.0/24 45.149.130.0/23 45.152.118.0/23 62.192.136.0/24 62.192.139.0/24 83.138.51.0-83.138.52.255 84.246.82.0/24 91.206.69.0/24 91.224.140.0/24 91.237.104.0/23 91.242.240.0/24 92.119.194.0/23 176.116.2.0/24 176.116.5.0/24 176.116.9.0/24 176.116.20.0/24 176.116.23.0/24 176.126.109.0/24 176.126.112.0/24 176.126.115.0/24 178.211.140.0/24 193.0.245.0-193.0.246.255 193.5.1.0/24 193.33.67.0/24 193.58.171.0/24 193.58.178.0/24 194.26.216.0/24 194.34.251.0/24 195.96.155.0/24 Signature Algorithm: sha256WithRSAEncryption 09:4f:85:03:36:45:52:d0:37:c5:71:9d:dd:9b:b2:50:0d:a8: 35:4c:3e:2b:d4:9f:60:ca:64:f1:57:c7:1a:6e:ea:eb:b4:31: 71:63:b4:67:7f:f3:89:3e:9a:c9:f9:23:72:af:40:7d:59:7e: 2b:42:55:01:a8:dc:81:f6:b6:74:07:d7:21:e5:6b:9b:ba:7b: 98:12:e1:eb:ff:a5:7f:b7:5a:8b:70:c5:84:34:c9:c5:95:df: ae:13:bc:11:16:89:84:a3:49:d8:75:db:ca:1f:b5:43:a9:11: 85:da:90:46:9a:93:07:90:62:48:89:66:49:15:6d:1e:f0:bb: 11:a3:41:2a:48:12:fa:b0:ea:50:84:63:dc:ea:17:5f:60:3f: 4b:2d:77:00:02:a3:23:38:5b:73:8b:49:92:ee:33:a7:b1:89: 7e:44:10:67:24:81:80:81:f0:0b:e0:6e:df:d2:fa:30:b4:57: 87:0c:e6:9e:1c:b5:ac:4e:5c:dc:6a:47:ca:25:97:cf:a5:0e: 59:88:1c:ee:a6:ba:1f:52:c5:31:ba:74:cf:65:78:25:ca:1a: ac:60:54:99:d3:73:50:b6:b9:77:e5:9b:c5:2f:75:7d:5a:74: 9d:1e:eb:df:11:16:26:54:16:09:b9:ff:98:e2:09:0d:e4:1c: 3e:bc:8e:54 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZt7NhKy4RydCYCRzP9k3coPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzBiNTQ5YzdhODcwZTg0YTI1YWE3YTVlMmM1ZmU5YTU5MjljMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M6yr0dJ6tSm09LJJ/BrCx04Lxnm vu3D/IDwcqf713FrNcU6FmPKd9gWvxARl+oMGAeHbju5/NRnsBm4jorQ3TwyR14q k/YwQvLynvA4wjep9FZRDReWi2RuH9kXD17nb2rsF/0zPIppw6dNk6je4YM+Ulrd 8mLq6U2D8NrrzDZRoagJMHsZFC/OiaFkrbRn9SlQ9BcHpaGxVauKb7Pjv/0ODDs2 pUi0IyJEqs7AZjs8s9DMdPsObSIbBCha+5dSQmYtk2uiBOPqENEdBy1h8zl7bJE5 rWq+LhxIwZcQ+eOO1axR5e2L36zJ9/cqYg9qiNG7s7mC5My2Uje44PoBRQIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFHcLVJx6hw6EolqnpeLF/ppZKcEOMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvZHd0VW5IcUhEb1NpV3FlbDRzWC1tbGtwd1E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQA LQ/vAwQALYEBAwQALYQnAwQALYcjAwQALYoHAwQALYqcAwQALYrUAwQALYrXAwQA LYxBAwQBLZWCAwQBLZh2AwQAPsCIAwQAPsCLMAwDBABTijMDBABTijQDBABU9lID BABbzkUDBABb4IwDBAFb7WgDBABb8vADBAFcd8IDBACwdAIDBACwdAUDBACwdAkD BACwdBQDBACwdBcDBACwfm0DBACwfnADBACwfnMDBACy04wwDAMEAMEA9QMEAMEA 9gMEAMEFAQMEAMEhQwMEAME6qwMEAME6sgMEAMIa2AMEAMIi+wMEAMNgmzANBgkq hkiG9w0BAQsFAAOCAQEACU+FAzZFUtA3xXGd3ZuyUA2oNUw+K9SfYMpk8VfHGm7q 67QxcWO0Z3/ziT6ayfkjcq9AfVl+K0JVAajcgfa2dAfXIeVrm7p7mBLh6/+lf7da i3DFhDTJxZXfrhO8ERaJhKNJ2HXbyh+1Q6kRhdqQRpqTB5BiSIlmSRVtHvC7EaNB KkgS+rDqUIRj3OoXX2A/Sy13AAKjIzhbc4tJku4zp7GJfkQQZySBgIHwC+Bu39L6 MLRXhwzmnhy1rE5c3GpHyiWXz6UOWYgc7qa6H1LFMbp0z2V4JcoarGBUmdNzULa5 d+WbxS91fVp0nR7r3xEWJlQWCbn/mOIJDeQcPryOVA== -----END CERTIFICATE-----Generated at Thu Jan 15 13:19:19 2026 by rpki-client