This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/DWHyFvHwr99MtfkrMpHq2IQ1WQs.roa File: DWHyFvHwr99MtfkrMpHq2IQ1WQs.roa (raw, json) Hash identifier: lZuuHU909ornFrQMygRPUOgb1PqH+8YBfhZUUM9nw/s= Subject key identifier: 0D:61:F2:16:F1:F0:AF:DF:4C:B5:F9:2B:32:91:EA:D8:84:35:59:0B Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e Certificate serial: 019B78A2DB8FE4B09D2C198912F035B9D2A6 Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/DWHyFvHwr99MtfkrMpHq2IQ1WQs.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56695 IP address blocks: 195.128.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:db:8f:e4:b0:9d:2c:19:89:12:f0:35:b9:d2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d61f216f1f0afdf4cb5f92b3291ead88435590b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:31:4d:34:16:90:a7:aa:1c:9b:c3:b1:32: 99:0a:68:9f:7b:73:8f:6b:8e:18:bd:c7:11:f7:f1: 0c:fe:77:00:67:be:b2:4c:3c:16:f4:db:9f:c2:57: 80:11:d2:11:77:43:3c:3e:bb:6e:4a:cb:a3:ce:e9: 55:0d:2a:5e:ef:a8:5a:33:bb:6a:9c:2c:2c:a9:30: da:8d:ce:61:fb:15:c2:54:c7:99:2b:24:c7:21:34: 79:d4:c3:50:6d:b7:ee:4f:54:86:4f:17:ed:6d:6e: 15:80:95:21:73:95:b1:30:fb:35:f2:39:3c:47:d0: 69:df:55:ba:a7:ff:6e:21:92:cf:1c:cd:f1:33:09: 2d:fa:14:f0:df:6c:2d:c8:8b:77:81:d2:06:b8:c3: 9b:25:72:cd:b2:4b:0e:2a:a7:fe:0c:cc:51:7d:95: 86:45:60:9b:9a:5c:a3:8f:f1:5b:3a:03:95:e6:ee: 5a:4d:23:1f:4b:28:05:42:99:d7:c9:02:da:11:02: 73:2f:fc:a7:d6:0d:04:9c:0f:4f:a6:dd:8e:9f:28: 89:39:ad:33:8c:e3:b3:56:f3:13:1c:24:11:59:6d: c3:d2:4c:5c:67:ca:fe:1c:80:f8:e3:9b:55:51:a7: a6:09:2f:5d:44:10:5b:4b:a2:b8:8e:b7:70:50:e7: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:61:F2:16:F1:F0:AF:DF:4C:B5:F9:2B:32:91:EA:D8:84:35:59:0B X509v3 Authority Key Identifier: keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/DWHyFvHwr99MtfkrMpHq2IQ1WQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.128.128.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ab:95:02:71:3c:a3:36:ed:00:b6:53:dc:28:27:6d:1c:86: 38:95:fa:0a:e3:fa:9a:c1:3d:d7:92:c5:55:dc:14:a8:39:61: e7:8c:72:16:55:54:15:dd:c7:71:22:a4:96:be:b5:de:32:b1: 9d:d9:4e:7e:02:06:1f:47:12:f3:b7:8c:0d:69:98:ed:78:eb: 16:17:13:e5:04:27:e6:64:88:78:25:4f:07:fc:8e:67:48:ea: 90:eb:9b:f1:e8:58:bc:3b:5f:2a:45:6a:19:8e:93:e2:16:15: 69:4d:01:e7:6d:f0:de:26:fb:bd:03:14:4f:c6:4c:3a:28:9e: 9c:1d:f0:d4:6a:4b:74:87:29:2e:5b:d8:a2:a2:4e:94:2b:3c: c2:9a:ab:e7:c1:1d:c0:ba:2f:d8:10:4e:59:4c:3c:41:b4:24: 1f:1d:d5:5f:51:cb:ee:b0:e5:77:88:58:50:04:c5:81:96:40: 5f:e8:b8:18:c1:6b:45:e7:e9:cb:ad:af:89:ba:0e:f5:b8:89: fc:6b:10:82:24:cf:f5:b9:bd:fc:7f:4f:05:83:4d:1c:6c:4b: a0:de:5b:14:29:1f:93:b3:3b:f1:01:43:fd:9b:f1:ff:76:28: 8d:36:83:58:ca:51:24:b0:26:15:44:9b:5d:d0:dd:0c:45:7e: d6:dc:80:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otuP5LCdLBmJEvA1udKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMmM4ZmZjNTA2MDllYzBkOGI0YTcyODA1Yzg5OTBhNjRh YWU3MWUwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDYxZjIxNmYxZjBhZmRmNGNiNWY5MmIzMjkxZWFkODg0MzU1OTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxoxTTQWkKeqHJvDsTKZCmife3OP a44YvccR9/EM/ncAZ76yTDwW9NufwleAEdIRd0M8PrtuSsujzulVDSpe76haM7tq nCwsqTDajc5h+xXCVMeZKyTHITR51MNQbbfuT1SGTxftbW4VgJUhc5WxMPs18jk8 R9Bp31W6p/9uIZLPHM3xMwkt+hTw32wtyIt3gdIGuMObJXLNsksOKqf+DMxRfZWG RWCbmlyjj/FbOgOV5u5aTSMfSygFQpnXyQLaEQJzL/yn1g0EnA9Ppt2OnyiJOa0z jOOzVvMTHCQRWW3D0kxcZ8r+HID445tVUaemCS9dRBBbS6K4jrdwUOfGIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1h8hbx8K/fTLX5KzKR6tiENVkLMB8GA1UdIwQY MBaAFAIsj/xQYJ7A2LSnKAXImQpkquceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82ZjhhNzctYjI2Yy00ZDI0LWJiNDQt MTViMGMzNDQ5OTA3LzEvRFdIeUZ2SHdyOTlNdGZrck1wSHEySVExV1FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My82ZjhhNzctYjI2Yy00ZDI0LWJiNDQtMTViMGMzNDQ5OTA3 LzEvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4CAMA0G CSqGSIb3DQEBCwUAA4IBAQAMq5UCcTyjNu0AtlPcKCdtHIY4lfoK4/qawT3XksVV 3BSoOWHnjHIWVVQV3cdxIqSWvrXeMrGd2U5+AgYfRxLzt4wNaZjteOsWFxPlBCfm ZIh4JU8H/I5nSOqQ65vx6Fi8O18qRWoZjpPiFhVpTQHnbfDeJvu9AxRPxkw6KJ6c HfDUakt0hykuW9iiok6UKzzCmqvnwR3Aui/YEE5ZTDxBtCQfHdVfUcvusOV3iFhQ BMWBlkBf6LgYwWtF5+nLra+Jug71uIn8axCCJM/1ub38f08Fg00cbEug3lsUKR+T szvxAUP9m/H/diiNNoNYylEksCYVRJtd0N0MRX7W3IBh -----END CERTIFICATE-----Generated at Tue Feb 10 08:41:29 2026 by rpki-client