This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/DD_WAIXT_d5Bi71Wp0F-YRqzAeY.roa File: DD_WAIXT_d5Bi71Wp0F-YRqzAeY.roa (raw, json) Hash identifier: TgYS7RvooVLjNCbehPFvkEOoQsy+7O0+z7H9lT2pLEo= Subject key identifier: 0C:3F:D6:00:85:D3:FD:DE:41:8B:BD:56:A7:41:7E:61:1A:B3:01:E6 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE31650037A5BE4D8A24E33EF56C8A Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/DD_WAIXT_d5Bi71Wp0F-YRqzAeY.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 37.34.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:31:65:00:37:a5:be:4d:8a:24:e3:3e:f5:6c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c3fd60085d3fdde418bbd56a7417e611ab301e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:d9:48:3c:77:98:3e:c8:76:7a:83:a9:3c: d3:9d:9d:12:db:c7:5d:92:a2:6e:5d:30:04:63:fb: 9e:a1:79:ae:e3:98:72:c1:06:50:ea:46:25:73:a5: be:f0:83:2c:7e:5a:9e:99:fc:5b:34:d9:b9:b1:d0: 8d:43:72:7f:4c:bc:c8:5e:de:d0:77:c2:ba:69:c0: 38:0a:1b:85:3c:b5:1f:2c:87:48:70:7e:74:23:ab: d2:ba:67:c5:1e:ee:b5:86:5c:48:dd:0a:d7:9c:c8: fc:f5:6c:33:0f:c5:f1:54:63:6e:78:18:e8:e7:61: b1:15:63:6b:a7:aa:4b:b9:08:fa:b6:67:4a:b7:71: 79:11:40:8e:ad:e6:36:6b:c9:6e:f2:62:f5:00:07: 42:6d:62:85:3d:51:52:68:67:6a:dc:33:57:a4:31: 33:16:8e:71:d5:f6:b5:59:64:65:04:14:13:57:44: 0d:80:0e:8c:58:63:7e:7c:77:db:fd:b2:b8:8a:96: 7c:fa:e0:0d:81:50:51:45:01:ef:87:3b:cc:83:dd: 66:13:d7:2c:ff:5e:c3:0f:d8:4d:e0:6b:19:41:28: ee:ee:14:15:44:28:f7:e7:8a:03:a4:bb:8c:7a:4d: 0b:7e:6e:29:12:dd:be:f9:1b:7d:79:f9:2b:46:ae: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3F:D6:00:85:D3:FD:DE:41:8B:BD:56:A7:41:7E:61:1A:B3:01:E6 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/DD_WAIXT_d5Bi71Wp0F-YRqzAeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.34.80.0/21 Signature Algorithm: sha256WithRSAEncryption 77:4f:8f:9d:06:b2:76:4f:4e:6c:35:a7:a2:6d:c6:e4:02:15: 6e:11:62:c6:48:98:3f:3e:4a:4d:6f:5b:cb:3a:13:ce:7e:05: 79:8c:24:05:fe:b7:15:e8:10:14:87:2b:16:81:7c:56:f8:a8: 07:81:30:41:85:ae:bd:8f:73:bc:1f:1c:d7:74:4e:e7:bc:aa: c1:8f:58:cd:d5:1c:73:49:72:04:d0:c8:b1:2e:73:45:dc:3c: bb:69:de:c5:45:40:27:58:19:13:c9:79:05:df:ef:ea:c2:d0: 04:90:ad:0b:65:c2:c1:2f:cf:b7:3e:68:73:8e:b1:91:bc:ee: b4:17:ef:53:be:61:59:ca:91:2e:91:b5:de:35:74:16:5e:b6: eb:c5:a3:a0:ee:91:e3:d2:4c:e9:e1:37:99:06:22:ad:c9:e1: 7a:7f:d6:a1:0e:66:71:17:45:63:b0:d7:ef:a3:45:5e:8d:2d: a2:b6:ae:b3:37:77:19:8b:a5:1c:83:31:ce:a2:6f:31:f6:0b: be:9f:10:c3:ae:04:d0:28:c5:82:d2:5d:f6:9d:4b:01:01:14: 7e:b7:9f:92:df:fa:a0:97:da:2c:3c:fc:72:7a:2c:d5:ed:e7: 56:b4:92:a3:69:82:e2:87:59:98:81:68:28:57:04:62:9f:24: 5f:af:e2:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jFlADelvk2KJOM+9WyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzNmZDYwMDg1ZDNmZGRlNDE4YmJkNTZhNzQxN2U2MTFhYjMwMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOzZSDx3mD7IdnqDqTzTnZ0S28dd kqJuXTAEY/ueoXmu45hywQZQ6kYlc6W+8IMsflqemfxbNNm5sdCNQ3J/TLzIXt7Q d8K6acA4ChuFPLUfLIdIcH50I6vSumfFHu61hlxI3QrXnMj89WwzD8XxVGNueBjo 52GxFWNrp6pLuQj6tmdKt3F5EUCOreY2a8lu8mL1AAdCbWKFPVFSaGdq3DNXpDEz Fo5x1fa1WWRlBBQTV0QNgA6MWGN+fHfb/bK4ipZ8+uANgVBRRQHvhzvMg91mE9cs /17DD9hN4GsZQSju7hQVRCj354oDpLuMek0Lfm4pEt2++Rt9efkrRq4PEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAw/1gCF0/3eQYu9VqdBfmEaswHmMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvRERfV0FJWFRfZDVCaTcxV3AwRi1ZUnF6QWVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJSJQMA0G CSqGSIb3DQEBCwUAA4IBAQB3T4+dBrJ2T05sNaeibcbkAhVuEWLGSJg/PkpNb1vL OhPOfgV5jCQF/rcV6BAUhysWgXxW+KgHgTBBha69j3O8HxzXdE7nvKrBj1jN1Rxz SXIE0MixLnNF3Dy7ad7FRUAnWBkTyXkF3+/qwtAEkK0LZcLBL8+3PmhzjrGRvO60 F+9TvmFZypEukbXeNXQWXrbrxaOg7pHj0kzp4TeZBiKtyeF6f9ahDmZxF0VjsNfv o0VejS2itq6zN3cZi6UcgzHOom8x9gu+nxDDrgTQKMWC0l32nUsBARR+t5+S3/qg l9osPPxyeizV7edWtJKjaYLih1mYgWgoVwRinyRfr+IS -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:41 2026 by rpki-client