This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dWqM8CrizfCmRSvop3a4WjBIR5c.roa File: dWqM8CrizfCmRSvop3a4WjBIR5c.roa (raw, json) Hash identifier: k/t2x60Cm7WkuVvdKKHjbtkmUbInhQQVQg7HkZV5mwY= Subject key identifier: 75:6A:8C:F0:2A:E2:CD:F0:A6:45:2B:E8:A7:76:B8:5A:30:48:47:97 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C131CDF5F4CA2F15824095DBA4B5034 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dWqM8CrizfCmRSvop3a4WjBIR5c.roa Signing time: Fri 02 Jan 2026 00:19:45 +0000 ROA not before: Fri 02 Jan 2026 00:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27989 IP address blocks: 2.59.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1c:df:5f:4c:a2:f1:58:24:09:5d:ba:4b:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=756a8cf02ae2cdf0a6452be8a776b85a30484797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c3:12:e0:7f:01:77:24:94:24:61:ef:69:4f: c5:dc:f9:14:93:04:1f:52:53:2f:dc:aa:55:4b:5a: 5b:24:a7:84:26:ba:d8:ea:d4:1f:da:1a:ae:d3:b7: 4f:19:b8:ee:2e:d1:dc:fb:99:16:0c:e2:c2:b5:2b: dc:93:29:fc:b7:60:8f:4e:7e:0a:d8:06:42:4d:00: a9:cd:5a:66:68:21:1b:bf:74:05:22:0c:8f:3f:4c: 68:a3:a3:13:a6:14:fd:8b:3a:79:c0:e1:f7:55:95: a9:d9:bd:fe:ca:71:ce:72:06:1e:cf:bc:75:e5:fd: 4a:e8:26:f1:2e:2c:db:e0:61:e9:aa:e4:de:84:b9: 9a:80:89:25:14:13:10:49:cc:72:10:85:29:f1:da: 69:74:da:64:d3:b7:77:58:c7:41:d1:57:61:35:80: 70:2b:60:87:29:35:e5:f2:1b:8d:a2:db:bb:32:2e: 33:7d:eb:58:57:b3:23:80:20:06:7d:3b:28:17:17: a6:6f:ad:b0:a5:50:ff:ab:e8:16:34:aa:e2:a3:20: 5a:ca:aa:59:48:8e:44:75:e8:c1:e0:bf:4e:1b:0f: 6d:e1:d1:8e:5f:9b:f2:7e:10:fa:93:72:b5:e8:32: e6:76:49:42:0f:63:6c:ed:e5:61:85:d8:88:e7:f0: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6A:8C:F0:2A:E2:CD:F0:A6:45:2B:E8:A7:76:B8:5A:30:48:47:97 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dWqM8CrizfCmRSvop3a4WjBIR5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.193.0/24 Signature Algorithm: sha256WithRSAEncryption 90:50:0d:d5:0a:91:df:0e:bc:ff:ee:ab:8b:7a:f3:b3:ed:58: b3:e8:57:39:87:b0:1c:41:2b:00:d5:ed:8d:bd:a8:a4:2e:18: 00:39:38:be:1d:06:ba:d2:9c:eb:61:1d:b0:51:e6:75:f6:2e: 65:08:9b:c3:81:98:85:fe:9b:ba:2e:f3:ae:17:86:03:3d:36: a8:98:61:aa:96:f4:13:81:aa:aa:95:32:8e:62:bb:43:ca:f5: ec:8e:2b:cb:f8:0c:c2:a0:c4:66:42:f0:bb:9f:b0:36:65:2a: ec:bc:26:58:27:d7:93:84:e7:8b:82:da:7f:35:42:5c:8c:fa: 9a:51:a3:ed:d8:93:20:f5:5f:cb:a5:3c:e6:6d:89:98:c6:44: 23:e3:0f:a2:44:02:c3:49:e6:22:a2:a2:93:f6:8f:23:25:fd: ce:bf:19:4f:ef:e2:82:33:69:be:3a:a8:fc:d0:2d:2f:97:13: a5:db:17:c5:5d:4e:a1:53:47:73:2e:5d:ab:e8:20:e0:62:ff: fa:21:87:4e:06:e0:11:5a:97:ac:c7:23:f9:58:6b:b6:62:1f: 19:38:a6:14:b3:00:0e:7c:12:f4:51:cc:eb:68:09:4e:36:6e: 8b:d5:06:8a:33:b0:ed:c8:a1:df:0b:73:4d:73:8e:94:22:3b: 10:e9:46:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExzfX0yi8VgkCV26S1A0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTZhOGNmMDJhZTJjZGYwYTY0NTJiZThhNzc2Yjg1YTMwNDg0Nzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18MS4H8BdySUJGHvaU/F3PkUkwQf UlMv3KpVS1pbJKeEJrrY6tQf2hqu07dPGbjuLtHc+5kWDOLCtSvckyn8t2CPTn4K 2AZCTQCpzVpmaCEbv3QFIgyPP0xoo6MTphT9izp5wOH3VZWp2b3+ynHOcgYez7x1 5f1K6CbxLizb4GHpquTehLmagIklFBMQScxyEIUp8dppdNpk07d3WMdB0VdhNYBw K2CHKTXl8huNotu7Mi4zfetYV7MjgCAGfTsoFxemb62wpVD/q+gWNKrioyBayqpZ SI5EdejB4L9OGw9t4dGOX5vyfhD6k3K16DLmdklCD2Ns7eVhhdiI5/BgLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHVqjPAq4s3wpkUr6Kd2uFowSEeXMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvZFdxTThDcml6ZkNtUlN2b3AzYTRXakJJUjVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjvBMA0G CSqGSIb3DQEBCwUAA4IBAQCQUA3VCpHfDrz/7quLevOz7Viz6Fc5h7AcQSsA1e2N vaikLhgAOTi+HQa60pzrYR2wUeZ19i5lCJvDgZiF/pu6LvOuF4YDPTaomGGqlvQT gaqqlTKOYrtDyvXsjivL+AzCoMRmQvC7n7A2ZSrsvCZYJ9eThOeLgtp/NUJcjPqa UaPt2JMg9V/LpTzmbYmYxkQj4w+iRALDSeYioqKT9o8jJf3OvxlP7+KCM2m+Oqj8 0C0vlxOl2xfFXU6hU0dzLl2r6CDgYv/6IYdOBuARWpesxyP5WGu2Yh8ZOKYUswAO fBL0UczraAlONm6L1QaKM7DtyKHfC3NNc46UIjsQ6UY9 -----END CERTIFICATE-----Generated at Wed Jan 21 08:59:52 2026 by rpki-client