This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/DW0L4TMX0k7NIxwBqURjmrgnl7k.roa File: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (raw, json) Hash identifier: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM= Subject key identifier: 0D:6D:0B:E1:33:17:D2:4E:CD:23:1C:01:A9:44:63:9A:B8:27:97:B9 Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144 Certificate serial: 019B7910691318FF0A415BDDEBBD0D45A031 Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/DW0L4TMX0k7NIxwBqURjmrgnl7k.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38965 IP address blocks: 193.178.197.0/24 maxlen: 24 2a04:4345:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:69:13:18:ff:0a:41:5b:dd:eb:bd:0d:45:a0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d6d0be13317d24ecd231c01a944639ab82797b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:4a:f3:c3:25:26:3c:5c:6a:63:61:8f:d2: aa:07:41:27:ff:f1:5d:cc:23:a8:9c:42:ae:3a:44: ac:72:50:f5:77:21:e8:57:7a:7d:d5:9b:9d:db:53: aa:a0:59:9a:62:13:2f:ae:26:21:af:ba:39:52:5f: 21:a2:30:39:0d:f2:40:ac:8d:9f:57:13:c8:90:94: fd:f0:79:ac:b7:6c:91:df:b7:37:17:9f:33:ac:eb: 34:67:05:57:a0:70:37:f2:27:36:9b:7e:99:4c:79: 22:ca:a5:83:54:00:89:e2:3d:9f:26:4d:2d:bc:8f: f1:88:ca:c5:37:ec:12:53:b1:c8:7a:ae:fa:3b:20: 90:56:18:c4:b2:4e:8c:e7:fc:92:1a:1f:2a:b9:9e: eb:89:b7:4f:fe:b8:a1:ce:8c:94:fa:db:0c:2a:4e: 60:c4:10:d9:ba:df:d9:e8:ae:a3:65:66:59:4f:aa: 5a:06:5c:2f:98:bf:c7:99:74:6b:91:4c:c7:00:03: 82:28:75:d8:e9:21:b5:48:99:71:12:99:ee:55:df: 0b:b1:87:9e:1a:7d:76:90:0d:a2:7c:b3:b6:73:25: 36:a0:14:b8:86:8b:b4:b8:b3:47:0e:44:80:b2:ad: 29:bd:98:75:09:7f:ec:b8:06:58:15:4a:79:2c:16: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6D:0B:E1:33:17:D2:4E:CD:23:1C:01:A9:44:63:9A:B8:27:97:B9 X509v3 Authority Key Identifier: keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/DW0L4TMX0k7NIxwBqURjmrgnl7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.197.0/24 IPv6: 2a04:4345:10::/44 Signature Algorithm: sha256WithRSAEncryption f2:31:b0:d4:05:bf:90:40:33:a6:d0:f6:65:dc:ed:a3:0e:e2: 50:3e:76:06:77:82:34:ed:52:d0:25:53:28:ac:13:f3:4b:39: ee:17:96:eb:06:1d:68:e1:25:61:ab:be:a1:5f:bc:1d:05:99: d5:33:72:23:53:45:4f:8f:2a:10:ce:20:9c:14:25:2c:d6:8b: 53:64:bd:93:09:1d:18:d7:d7:17:c8:6c:27:bf:aa:f8:9a:2c: 45:76:72:c8:01:97:cf:af:f0:c3:27:0e:98:79:17:b8:be:fd: 10:f5:33:a6:79:ea:eb:21:93:84:95:0f:0f:fe:9b:00:9d:c9: 95:94:aa:bd:24:c9:ee:53:ef:ea:2a:26:d8:73:74:9f:ad:3f: 70:e3:eb:94:d8:a6:97:d0:45:30:76:53:9b:68:70:7a:b6:23: dc:b3:f4:df:96:8a:d9:39:30:4b:96:ec:65:7b:5c:cb:4f:de: 4b:3e:ba:18:53:20:07:cf:19:c0:8e:4c:73:56:0d:c0:44:b7: ed:cb:85:87:43:55:50:2c:ec:1e:26:20:e3:40:c1:4f:85:27: b6:27:f3:35:13:05:fb:ae:6b:fa:93:fc:06:ea:da:a0:8c:47: f1:e3:da:7f:ae:ce:4d:52:3c:dd:a0:e6:3d:65:3c:29:59:7a: a5:07:e4:f4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EGkTGP8KQVvd670NRaAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjRlNDNjNzViZGM1MTFkNTI0ZjBjODVkMDA5Y2JhNzY5 NTYxNDQwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDZkMGJlMTMzMTdkMjRlY2QyMzFjMDFhOTQ0NjM5YWI4Mjc5N2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0lK88MlJjxcamNhj9KqB0En//Fd zCOonEKuOkSsclD1dyHoV3p91Zud21OqoFmaYhMvriYhr7o5Ul8hojA5DfJArI2f VxPIkJT98Hmst2yR37c3F58zrOs0ZwVXoHA38ic2m36ZTHkiyqWDVACJ4j2fJk0t vI/xiMrFN+wSU7HIeq76OyCQVhjEsk6M5/ySGh8quZ7ribdP/rihzoyU+tsMKk5g xBDZut/Z6K6jZWZZT6paBlwvmL/HmXRrkUzHAAOCKHXY6SG1SJlxEpnuVd8LsYee Gn12kA2ifLO2cyU2oBS4hou0uLNHDkSAsq0pvZh1CX/suAZYFUp5LBZNKQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA1tC+EzF9JOzSMcAalEY5q4J5e5MB8GA1UdIwQY MBaAFI1k5Dx1vcUR1STwyF0AnLp2lWFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3Yzct NzI0NDgzNTJiODA3LzEvRFcwTDRUTVgwazdOSXh3QnFVUmptcmdubDdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3YzctNzI0NDgzNTJiODA3 LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwbLFMA8E AgACMAkDBwQqBENFABAwDQYJKoZIhvcNAQELBQADggEBAPIxsNQFv5BAM6bQ9mXc 7aMO4lA+dgZ3gjTtUtAlUyisE/NLOe4XlusGHWjhJWGrvqFfvB0FmdUzciNTRU+P KhDOIJwUJSzWi1NkvZMJHRjX1xfIbCe/qviaLEV2csgBl8+v8MMnDph5F7i+/RD1 M6Z56ushk4SVDw/+mwCdyZWUqr0kye5T7+oqJthzdJ+tP3Dj65TYppfQRTB2U5to cHq2I9yz9N+Witk5MEuW7GV7XMtP3ks+uhhTIAfPGcCOTHNWDcBEt+3LhYdDVVAs 7B4mIONAwU+FJ7Yn8zUTBfuua/qT/Abq2qCMR/Hj2n+uzk1SPN2g5j1lPClZeqUH 5PQ= -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:48 2026 by rpki-client