This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/DWHWORrS3BHCdKCom2SvJuOOFgQ.roa File: DWHWORrS3BHCdKCom2SvJuOOFgQ.roa (raw, json) Hash identifier: neZrwsmxWjbB3VimASaWthX1wVXWiR6atISt14XcKo0= Subject key identifier: 0D:61:D6:39:1A:D2:DC:11:C2:74:A0:A8:9B:64:AF:26:E3:8E:16:04 Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590 Certificate serial: 019B7C807F63BF5F6A1C3182932ADC771447 Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/DWHWORrS3BHCdKCom2SvJuOOFgQ.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198677 IP address blocks: 91.238.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7f:63:bf:5f:6a:1c:31:82:93:2a:dc:77:14:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d61d6391ad2dc11c274a0a89b64af26e38e1604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:5c:2a:c1:0c:c1:f8:6f:17:6e:a4:2b:70: f4:1c:b1:e9:8f:29:f2:12:2c:d7:bd:0f:6b:09:99: 15:8a:a0:23:49:34:38:f1:d0:f3:39:99:82:84:30: 7e:f7:36:3c:d5:c8:19:5f:c5:10:4b:5e:50:5c:a8: 8c:1a:00:2e:fc:0e:4f:62:e6:41:0a:35:e0:cc:a8: 96:62:ee:ad:a6:2a:dd:95:b9:92:b8:cf:00:3c:7e: 2f:eb:78:95:99:0c:af:39:9a:8f:34:80:59:f6:a4: 12:f4:00:c3:28:ca:ce:94:9e:76:3f:b2:1a:bc:31: 3e:86:8e:b2:79:ed:d4:24:d2:2b:f1:eb:a3:40:65: 4c:a5:69:31:f1:c4:ef:f1:12:e3:e0:4a:8a:1c:34: a6:d3:67:2a:c2:0c:fb:ad:3f:2a:cc:f1:eb:ee:b2: 99:94:82:49:fd:e3:bb:bd:5b:a4:01:6c:6d:3d:d4: bb:1e:f9:37:9b:89:14:26:32:94:e2:05:f5:60:d6: 17:ae:7a:ba:4f:3a:e6:43:5d:d0:c3:c4:be:80:a7: 8a:e8:4b:76:a8:c3:e3:1d:5e:ff:e2:cc:f7:ab:96: e6:d6:02:fe:74:52:84:2b:d4:90:c2:30:58:05:60: 3d:08:10:34:6f:3b:c4:23:e0:2f:1b:e5:40:16:4e: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:61:D6:39:1A:D2:DC:11:C2:74:A0:A8:9B:64:AF:26:E3:8E:16:04 X509v3 Authority Key Identifier: keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/DWHWORrS3BHCdKCom2SvJuOOFgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.122.0/24 Signature Algorithm: sha256WithRSAEncryption 64:6b:48:34:55:b3:c2:93:62:c9:42:15:91:fd:60:1c:d2:82: e1:b3:13:9e:1d:27:38:1b:34:c3:4a:f5:04:72:7c:13:20:e1: f5:00:41:45:a2:0a:84:5e:4f:88:e6:9b:f2:c9:45:4e:6d:55: 57:6c:65:0b:5b:86:3c:9a:58:2a:ba:70:33:e8:9e:82:09:7e: ee:6d:b0:6b:29:55:e0:cf:b6:a2:61:bf:be:65:2c:0b:b9:9f: 52:b6:4c:55:2a:56:65:cf:69:b1:81:ff:e1:9b:19:0c:02:73: ea:44:37:e3:28:1e:2e:bc:88:53:9b:66:8f:ed:f3:d1:aa:41: 02:ac:f5:90:95:29:79:9b:76:c6:29:fb:dc:c4:fd:08:42:41: 80:4f:e6:81:c1:06:c0:ea:25:ce:3d:0a:e0:2c:b1:83:c4:f6: 07:fa:7b:29:2e:49:25:09:cf:87:e0:90:a4:25:76:ba:36:bb: f4:1d:ec:64:ac:6f:49:33:62:92:4f:90:dc:0e:a7:30:5e:ca: 83:eb:23:1e:2a:6a:06:f0:5f:aa:da:0e:e9:94:90:69:51:1b: 94:3b:52:cf:2e:7e:6e:b4:14:c3:0f:5d:f8:a1:26:c2:d5:27: 58:d6:ef:9c:75:a7:a4:79:93:f3:8c:08:32:32:e8:87:3e:d2: d7:b8:21:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH9jv19qHDGCkyrcdxRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTZhMDEwN2Q2ODlhOTM3MGI2MjI5NTFhNDQ5NjQ2Y2Mz OGI1OTAwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDYxZDYzOTFhZDJkYzExYzI3NGEwYTg5YjY0YWYyNmUzOGUxNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt11cKsEMwfhvF26kK3D0HLHpjyny EizXvQ9rCZkViqAjSTQ48dDzOZmChDB+9zY81cgZX8UQS15QXKiMGgAu/A5PYuZB CjXgzKiWYu6tpirdlbmSuM8APH4v63iVmQyvOZqPNIBZ9qQS9ADDKMrOlJ52P7Ia vDE+ho6yee3UJNIr8eujQGVMpWkx8cTv8RLj4EqKHDSm02cqwgz7rT8qzPHr7rKZ lIJJ/eO7vVukAWxtPdS7Hvk3m4kUJjKU4gX1YNYXrnq6TzrmQ13Qw8S+gKeK6Et2 qMPjHV7/4sz3q5bm1gL+dFKEK9SQwjBYBWA9CBA0bzvEI+AvG+VAFk5V7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1h1jka0twRwnSgqJtkrybjjhYEMB8GA1UdIwQY MBaAFCDmoBB9aJqTcLYilRpElkbMOLWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUt MTI1ZWVkZjhkOWYxLzEvRFdIV09SclMzQkhDZEtDb20yU3ZKdU9PRmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUtMTI1ZWVkZjhkOWYx LzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+56MA0G CSqGSIb3DQEBCwUAA4IBAQBka0g0VbPCk2LJQhWR/WAc0oLhsxOeHSc4GzTDSvUE cnwTIOH1AEFFogqEXk+I5pvyyUVObVVXbGULW4Y8mlgqunAz6J6CCX7ubbBrKVXg z7aiYb++ZSwLuZ9StkxVKlZlz2mxgf/hmxkMAnPqRDfjKB4uvIhTm2aP7fPRqkEC rPWQlSl5m3bGKfvcxP0IQkGAT+aBwQbA6iXOPQrgLLGDxPYH+nspLkklCc+H4JCk JXa6Nrv0HexkrG9JM2KST5DcDqcwXsqD6yMeKmoG8F+q2g7plJBpURuUO1LPLn5u tBTDD134oSbC1SdY1u+cdaekeZPzjAgyMuiHPtLXuCE7 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:39 2026 by rpki-client