This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/dwuC-Oont7VoWE0EeLLcfQ4EL44.roa File: dwuC-Oont7VoWE0EeLLcfQ4EL44.roa (raw, json) Hash identifier: +0Vnu02NvEFbgGKFBmW6kguLObTD4n6atdlC8I4zK9M= Subject key identifier: 77:0B:82:F8:EA:27:B7:B5:68:58:4D:04:78:B2:DC:7D:0E:04:2F:8E Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949 Certificate serial: 019B7BA402A52E3B712805E3D3779CF94F46 Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/dwuC-Oont7VoWE0EeLLcfQ4EL44.roa Signing time: Thu 01 Jan 2026 22:18:24 +0000 ROA not before: Thu 01 Jan 2026 22:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 145.79.32.0/21 maxlen: 21 145.79.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:02:a5:2e:3b:71:28:05:e3:d3:77:9c:f9:4f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949 Validity Not Before: Jan 1 22:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=770b82f8ea27b7b568584d0478b2dc7d0e042f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:a1:05:88:39:17:41:4d:7e:b4:07:dc:0a: 35:46:55:5f:a3:9a:e9:6b:cd:ea:ed:29:b0:fc:22: 9b:f4:5f:b3:e7:23:25:ef:69:96:4a:2e:14:e7:ac: 14:2b:e7:4f:3a:e8:9a:ae:30:60:cd:85:af:26:3c: 50:ea:d9:32:8f:98:d7:10:d9:94:7d:96:f0:4d:5f: 15:6b:3f:b5:4c:b2:e3:62:a5:9e:44:54:34:f1:bb: f7:8e:00:f5:b3:95:da:74:4b:cd:ef:27:3a:77:a3: a2:0f:74:98:20:62:8e:eb:43:32:db:28:5f:7e:9b: ce:d5:60:90:6e:f3:a2:32:c5:ac:96:f0:f7:b7:a5: cd:f1:b2:e1:46:14:47:ad:bd:fd:73:6b:79:68:bf: 98:b3:12:27:11:71:2a:a5:1f:8b:dd:ca:cc:19:2b: 0f:bb:07:2e:1d:a3:a4:6e:0e:5b:d5:bf:03:94:5c: e6:42:80:ae:5e:d9:cc:98:98:d5:86:24:e2:c1:7a: d4:2b:ee:ba:a2:83:12:3e:6e:43:04:41:c8:48:7a: 25:6d:90:37:66:62:2c:db:87:ca:de:1f:f4:9d:59: aa:cd:bc:7f:78:ac:8c:54:97:a2:82:7e:a3:92:e3: 02:fb:58:0b:93:34:47:30:83:21:7b:ab:de:8a:ca: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0B:82:F8:EA:27:B7:B5:68:58:4D:04:78:B2:DC:7D:0E:04:2F:8E X509v3 Authority Key Identifier: keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/dwuC-Oont7VoWE0EeLLcfQ4EL44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.32.0/21 145.79.200.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:d8:3f:c1:73:56:73:0a:1f:7d:cd:f7:6c:11:26:a0:ce:55: 68:b7:d9:5b:e6:81:3a:a5:ac:8a:0c:93:c8:6e:e7:94:15:7d: 19:d3:65:4d:df:e3:d9:ac:79:2a:bc:19:42:79:ed:8e:e7:ea: 96:df:e4:e2:7c:7f:68:c5:dd:e7:2e:7b:51:15:cb:3a:b9:8b: 83:8f:b8:6e:71:1a:55:a4:fc:d7:bd:75:07:f6:d8:2d:08:f7: b9:ac:cb:63:2a:29:48:e5:03:95:6a:cf:a0:f7:ed:5d:54:f4: d1:6a:0f:08:bc:c9:62:36:2f:44:0a:2e:1e:c9:70:a0:1e:85: 7a:58:1c:e0:d3:0a:ee:a4:89:16:ac:44:3c:b4:9e:99:c5:30: 8e:ad:67:4f:5b:84:66:28:ec:2c:32:b1:3f:24:ad:10:f6:04: 85:e5:57:f3:9e:ac:73:8e:b0:d2:39:a8:f4:c4:c2:42:1a:62: e1:cb:bc:2d:34:e5:58:42:23:96:15:97:ed:ac:b7:64:6e:81: be:79:e6:9b:00:d8:3b:13:bd:74:f1:05:38:8e:76:2c:21:76: c3:60:26:77:c1:a4:8d:0c:08:06:b2:5c:8c:54:de:99:a9:fe: e0:a2:15:84:a8:79:aa:7b:c5:68:a6:f0:77:14:c0:2d:c5:1b: d5:06:56:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pAKlLjtxKAXj03ec+U9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzZlOWIxZDAxNDc0YWYyYzNlNGY4YzIwZjQ2MWQxMzY4 MDE5NDkwHhcNMjYwMTAxMjIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzBiODJmOGVhMjdiN2I1Njg1ODRkMDQ3OGIyZGM3ZDBlMDQyZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4mhBYg5F0FNfrQH3Ao1RlVfo5rp a83q7Smw/CKb9F+z5yMl72mWSi4U56wUK+dPOuiarjBgzYWvJjxQ6tkyj5jXENmU fZbwTV8Vaz+1TLLjYqWeRFQ08bv3jgD1s5XadEvN7yc6d6OiD3SYIGKO60My2yhf fpvO1WCQbvOiMsWslvD3t6XN8bLhRhRHrb39c2t5aL+YsxInEXEqpR+L3crMGSsP uwcuHaOkbg5b1b8DlFzmQoCuXtnMmJjVhiTiwXrUK+66ooMSPm5DBEHISHolbZA3 ZmIs24fK3h/0nVmqzbx/eKyMVJeign6jkuMC+1gLkzRHMIMhe6veisp3nwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHcLgvjqJ7e1aFhNBHiy3H0OBC+OMB8GA1UdIwQY MBaAFIc26bHQFHSvLD5PjCD0YdE2gBlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt M2IwNjhkYjQxMTQwLzEvZHd1Qy1Pb250N1ZvV0UwRWVMTGNmUTRFTDQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw LzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDkU8gAwQD kU/IMA0GCSqGSIb3DQEBCwUAA4IBAQAs2D/Bc1ZzCh99zfdsESagzlVot9lb5oE6 payKDJPIbueUFX0Z02VN3+PZrHkqvBlCee2O5+qW3+TifH9oxd3nLntRFcs6uYuD j7hucRpVpPzXvXUH9tgtCPe5rMtjKilI5QOVas+g9+1dVPTRag8IvMliNi9ECi4e yXCgHoV6WBzg0wrupIkWrEQ8tJ6ZxTCOrWdPW4RmKOwsMrE/JK0Q9gSF5Vfznqxz jrDSOaj0xMJCGmLhy7wtNOVYQiOWFZftrLdkboG+eeabANg7E7108QU4jnYsIXbD YCZ3waSNDAgGslyMVN6Zqf7gohWEqHmqe8VopvB3FMAtxRvVBlZm -----END CERTIFICATE-----Generated at Tue Jan 27 00:30:16 2026 by rpki-client