This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DW_FPUO3dN1AkRkwFfK8oeSO7kc.roa File: DW_FPUO3dN1AkRkwFfK8oeSO7kc.roa (raw, json) Hash identifier: 7qW4T96iW/3vUFWF2J1+ROQUVMvEXYqkj8Pl5VZbcmU= Subject key identifier: 0D:6F:C5:3D:43:B7:74:DD:40:91:19:30:15:F2:BC:A1:E4:8E:EE:47 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83AC92CC39477694C8EA4ABA3C7E1E Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DW_FPUO3dN1AkRkwFfK8oeSO7kc.roa Signing time: Fri 02 Jan 2026 16:21:34 +0000 ROA not before: Fri 02 Jan 2026 16:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200215 IP address blocks: 178.170.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ac:92:cc:39:47:76:94:c8:ea:4a:ba:3c:7e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d6fc53d43b774dd4091193015f2bca1e48eee47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:ed:ac:71:0f:d6:70:46:3c:16:8b:74:88: ca:79:0b:c8:be:83:47:6f:e9:56:54:71:7d:45:80: dd:05:ea:52:1f:70:9f:b5:24:f2:2f:cf:d8:8d:20: 13:4f:e3:12:7b:57:26:a6:9a:a1:aa:91:95:9b:9f: 5d:f6:9b:34:21:ed:f0:9b:c1:96:8f:8c:e6:e4:88: da:b5:fa:3e:31:1b:78:36:04:81:00:ee:19:d0:56: 0a:9a:a7:fe:95:94:02:99:f0:9f:52:77:2e:89:6e: 30:a7:4a:2d:ae:66:00:04:8e:3c:14:a3:ff:e2:e7: b5:91:e6:7a:59:e9:d8:85:9b:56:d3:6f:66:5f:9f: 98:6d:c2:22:85:43:c3:ae:73:50:69:3c:8b:75:79: 2e:63:ab:cc:5f:37:53:79:7b:67:16:c8:89:ba:50: cc:87:8d:39:a1:1d:ed:30:bf:fb:21:00:04:65:51: be:18:c4:10:d6:97:ab:c1:be:b6:64:56:7a:0b:54: 91:c1:de:05:9f:94:8a:7e:b3:fe:44:ee:40:0e:a5: 0f:33:e8:74:e9:ad:aa:87:01:0c:77:fd:c9:df:30: ca:f3:90:b4:4f:df:f6:87:91:a2:bc:6c:88:7a:10: 63:4f:40:7d:9d:bd:b5:b8:6c:e6:98:f0:36:54:01: 49:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6F:C5:3D:43:B7:74:DD:40:91:19:30:15:F2:BC:A1:E4:8E:EE:47 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DW_FPUO3dN1AkRkwFfK8oeSO7kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.170.231.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:53:1d:b7:a7:d4:f9:95:57:42:1c:36:5b:6f:7d:1b:ce:14: 94:28:2a:b2:c4:5b:a3:8b:df:fa:3f:9b:75:0e:10:a2:de:37: 85:11:58:34:5f:e3:e5:34:f6:c8:cd:ad:71:e5:c8:0b:cb:57: 68:56:09:3f:5f:e3:87:ab:d7:75:bc:dd:ae:a1:f5:b6:3a:32: 6f:73:28:67:be:f6:0f:a9:a4:0c:06:3d:ee:c0:32:4a:8b:00: 78:43:ba:6a:a1:e3:6a:be:4d:6d:ff:db:52:31:06:9b:09:57: 8a:54:e0:68:61:2b:13:47:00:2f:2a:53:d0:d1:04:9e:90:db: cc:99:b4:1e:f2:ee:58:e1:87:da:37:8a:f4:f2:b7:2a:a8:46: 97:e0:ed:b0:14:3c:b8:77:18:2e:29:f6:5c:9c:38:08:c3:f0: aa:77:ae:54:e9:eb:fc:88:61:f9:e7:94:0b:86:5e:b0:e4:59: 76:f6:07:88:19:3f:78:ed:1e:08:a6:38:6f:d0:64:84:c8:eb: e0:e4:3b:28:0e:c8:1e:09:dc:b3:97:c2:59:c2:25:5c:38:f9: 57:2e:45:3d:10:a8:02:2a:d5:ec:3a:30:54:37:bc:03:75:3c: 4c:09:fb:40:08:1c:eb:59:55:aa:b0:89:7c:07:48:1f:b7:cf: 04:0e:0d:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6ySzDlHdpTI6kq6PH4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDZmYzUzZDQzYjc3NGRkNDA5MTE5MzAxNWYyYmNhMWU0OGVlZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYrtrHEP1nBGPBaLdIjKeQvIvoNH b+lWVHF9RYDdBepSH3CftSTyL8/YjSATT+MSe1cmppqhqpGVm59d9ps0Ie3wm8GW j4zm5Ijatfo+MRt4NgSBAO4Z0FYKmqf+lZQCmfCfUncuiW4wp0otrmYABI48FKP/ 4ue1keZ6WenYhZtW029mX5+YbcIihUPDrnNQaTyLdXkuY6vMXzdTeXtnFsiJulDM h405oR3tML/7IQAEZVG+GMQQ1perwb62ZFZ6C1SRwd4Fn5SKfrP+RO5ADqUPM+h0 6a2qhwEMd/3J3zDK85C0T9/2h5GivGyIehBjT0B9nb21uGzmmPA2VAFJZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1vxT1Dt3TdQJEZMBXyvKHkju5HMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvRFdfRlBVTzNkTjFBa1Jrd0ZmSzhvZVNPN2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsqrnMA0G CSqGSIb3DQEBCwUAA4IBAQA9Ux23p9T5lVdCHDZbb30bzhSUKCqyxFuji9/6P5t1 DhCi3jeFEVg0X+PlNPbIza1x5cgLy1doVgk/X+OHq9d1vN2uofW2OjJvcyhnvvYP qaQMBj3uwDJKiwB4Q7pqoeNqvk1t/9tSMQabCVeKVOBoYSsTRwAvKlPQ0QSekNvM mbQe8u5Y4YfaN4r08rcqqEaX4O2wFDy4dxguKfZcnDgIw/Cqd65U6ev8iGH555QL hl6w5Fl29geIGT947R4Ipjhv0GSEyOvg5DsoDsgeCdyzl8JZwiVcOPlXLkU9EKgC KtXsOjBUN7wDdTxMCftACBzrWVWqsIl8B0gft88EDg2T -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:21 2026 by rpki-client