This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Dw5HIPmtdG7VuiUZ8uJBn6zJ5Dw.roa File: Dw5HIPmtdG7VuiUZ8uJBn6zJ5Dw.roa (raw, json) Hash identifier: NxO6biAFaVRQwHUqOM7YS/VZn3USU60iHvPmbihvb2A= Subject key identifier: 0F:0E:47:20:F9:AD:74:6E:D5:BA:25:19:F2:E2:41:9F:AC:C9:E4:3C Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791071BBD25DDAB00366591DBB1DC09E Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Dw5HIPmtdG7VuiUZ8uJBn6zJ5Dw.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214854 IP address blocks: 77.92.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:71:bb:d2:5d:da:b0:03:66:59:1d:bb:1d:c0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f0e4720f9ad746ed5ba2519f2e2419facc9e43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:cd:0a:9c:8e:0e:ed:d4:b5:58:ea:2c:cb: ed:d1:7a:9e:95:23:03:42:a8:6c:a0:e8:fa:6e:7e: 95:35:6e:51:1b:06:b4:c0:80:aa:27:a6:18:9a:74: 74:7b:b1:59:75:58:b4:13:93:38:37:37:30:48:34: 23:74:21:ab:df:45:4c:5d:95:23:14:33:cf:cb:de: ad:ac:bb:5e:1c:43:a8:11:0f:8f:09:d4:e0:d8:ec: 43:f8:16:b3:fb:8b:84:c0:4e:62:03:18:fd:ee:3c: 98:bd:e6:39:4f:4e:cb:ca:b7:06:4b:9c:c8:8b:a4: 26:c3:a3:80:6e:55:09:6e:28:ea:5e:4e:f4:4c:ad: 6f:a1:1d:63:4d:0d:28:b9:6a:04:6b:66:73:35:22: 81:b2:b6:dc:df:8a:cb:4a:e5:e6:72:40:f6:2c:fb: 79:de:74:e5:f6:26:75:2f:1e:b8:4f:33:4d:34:e7: 10:92:cf:5a:35:aa:69:82:fd:3c:b2:e7:bb:a7:25: b8:b7:b4:0a:2c:4e:c6:b5:6b:14:2a:70:ba:95:0b: 62:aa:22:ad:d2:92:ba:40:51:b5:02:15:6e:61:5e: 0c:e0:8e:ed:81:2c:7b:c8:32:e4:21:91:3c:2a:25: b7:c1:5a:f5:26:05:c6:9a:78:7b:30:8e:4a:1d:79: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0E:47:20:F9:AD:74:6E:D5:BA:25:19:F2:E2:41:9F:AC:C9:E4:3C X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Dw5HIPmtdG7VuiUZ8uJBn6zJ5Dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.144.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:47:1e:8f:78:42:be:e1:06:f3:6e:f2:38:5f:d7:a5:a8:de: 14:cd:45:1a:f3:3d:87:99:37:5b:01:38:ef:0e:b2:d1:e0:85: b3:6b:db:c3:f8:4e:e1:67:f9:81:87:50:6c:83:c0:b4:1a:55: 87:bf:50:af:90:7d:27:e4:7b:d9:dc:19:68:3b:bd:35:22:4c: 5d:2d:41:93:ea:e3:e3:ae:d8:e7:53:f4:c4:f8:39:c4:74:83: 3a:c9:ca:26:17:c1:6f:74:b5:ad:99:97:6a:2d:8a:6c:6c:41: 14:16:2e:16:ff:1f:08:7a:31:4c:03:ce:2d:05:36:21:db:3b: eb:b4:b6:d3:2b:37:0e:23:23:62:b0:98:8d:26:49:6b:72:f0: 39:27:0f:2d:0d:64:eb:d0:b8:01:e6:4d:e6:04:5e:cf:9b:c6: 07:73:49:dd:78:b4:10:a5:07:f1:a8:00:fc:7d:78:51:19:c9: 01:55:08:a8:78:00:bc:54:a9:42:7b:30:20:e6:b5:fb:75:0d: 6a:b4:18:5e:49:bf:84:93:7d:24:52:c1:56:d0:cc:72:ac:98: cf:96:63:39:3b:f6:76:c4:af:b1:a4:2b:f3:1d:07:69:7b:1b: 87:76:60:50:22:2e:8c:8c:cc:5c:e2:06:e8:8f:72:3f:92:5d: ab:d9:a7:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHG70l3asANmWR27HcCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjBlNDcyMGY5YWQ3NDZlZDViYTI1MTlmMmUyNDE5ZmFjYzllNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/TNCpyODu3UtVjqLMvt0XqelSMD QqhsoOj6bn6VNW5RGwa0wICqJ6YYmnR0e7FZdVi0E5M4NzcwSDQjdCGr30VMXZUj FDPPy96trLteHEOoEQ+PCdTg2OxD+Baz+4uEwE5iAxj97jyYveY5T07LyrcGS5zI i6Qmw6OAblUJbijqXk70TK1voR1jTQ0ouWoEa2ZzNSKBsrbc34rLSuXmckD2LPt5 3nTl9iZ1Lx64TzNNNOcQks9aNappgv08sue7pyW4t7QKLE7GtWsUKnC6lQtiqiKt 0pK6QFG1AhVuYV4M4I7tgSx7yDLkIZE8KiW3wVr1JgXGmnh7MI5KHXlV5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8ORyD5rXRu1bolGfLiQZ+syeQ8MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvRHc1SElQbXRkRzdWdWlVWjh1SkJuNnpKNUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyQMA0G CSqGSIb3DQEBCwUAA4IBAQB8Rx6PeEK+4QbzbvI4X9elqN4UzUUa8z2HmTdbATjv DrLR4IWza9vD+E7hZ/mBh1Bsg8C0GlWHv1CvkH0n5HvZ3BloO701IkxdLUGT6uPj rtjnU/TE+DnEdIM6ycomF8FvdLWtmZdqLYpsbEEUFi4W/x8IejFMA84tBTYh2zvr tLbTKzcOIyNisJiNJklrcvA5Jw8tDWTr0LgB5k3mBF7Pm8YHc0ndeLQQpQfxqAD8 fXhRGckBVQioeAC8VKlCezAg5rX7dQ1qtBheSb+Ek30kUsFW0MxyrJjPlmM5O/Z2 xK+xpCvzHQdpexuHdmBQIi6MjMxc4gboj3I/kl2r2aci -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:56 2026 by rpki-client