This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/DwVnWS_n3oFRFU2iD-hTgfl9EFE.roa File: DwVnWS_n3oFRFU2iD-hTgfl9EFE.roa (raw, json) Hash identifier: lKO0GSwPIB0MYiJPwXvuOUNFB8HjB0kL1GRgNk8PV/A= Subject key identifier: 0F:05:67:59:2F:E7:DE:81:51:15:4D:A2:0F:E8:53:81:F9:7D:10:51 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A3300257355913B46DB05FCCD4BC7B Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/DwVnWS_n3oFRFU2iD-hTgfl9EFE.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53340 IP address blocks: 147.189.133.0/24 maxlen: 24 176.111.222.0/24 maxlen: 24 193.8.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:30:02:57:35:59:13:b4:6d:b0:5f:cc:d4:bc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f0567592fe7de8151154da20fe85381f97d1051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:77:a7:59:a7:ee:da:53:38:64:74:33:9a: c8:08:30:5c:b7:fa:a4:17:88:6f:de:68:0b:81:6b: 0b:7a:48:9a:f7:f6:2f:fa:20:5e:01:37:da:a3:23: 60:77:3b:fb:e7:82:c8:6f:d3:9a:6f:cb:34:8b:82: 21:ba:0a:da:d5:27:aa:20:d3:96:e6:ec:15:bd:31: 97:e8:07:99:92:2a:fc:2a:e1:9b:f8:2e:04:50:fc: 6c:a8:e8:78:4e:0d:7c:c9:18:e8:ef:e6:c1:c9:4f: 12:9d:ad:1b:54:94:38:58:fe:bb:bf:c2:46:ac:57: 33:67:dc:9b:3c:bf:55:39:ec:fc:7a:97:e6:55:f4: 2d:be:66:e5:79:0a:86:45:d7:fe:64:ad:0b:da:39: 76:85:73:41:ac:86:64:a2:49:67:27:b2:a1:cd:2d: 59:2b:4d:e2:8c:24:03:9d:a4:a3:e2:5b:11:07:60: 8c:cd:d6:3a:ce:99:e1:60:32:7a:82:7c:eb:58:d4: 29:de:e9:3f:87:93:e1:6d:94:02:1e:56:0d:d2:c9: aa:fd:b2:75:78:00:be:47:a9:2c:a1:d5:0f:87:84: 79:5b:a1:63:bb:cd:41:b2:f8:38:40:8e:5f:85:49: 70:8b:bd:ae:46:35:cb:4c:5e:30:98:51:f6:6a:18: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:05:67:59:2F:E7:DE:81:51:15:4D:A2:0F:E8:53:81:F9:7D:10:51 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/DwVnWS_n3oFRFU2iD-hTgfl9EFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.133.0/24 176.111.222.0/24 193.8.194.0/24 Signature Algorithm: sha256WithRSAEncryption 20:6d:3a:48:80:90:87:79:18:3c:93:9c:76:8c:22:92:97:d2: ad:ff:05:e5:12:a2:42:a8:7d:3a:09:9f:ce:00:3a:f4:21:76: 90:cb:94:3d:d1:ea:ef:06:74:c8:b2:50:11:00:87:e1:4d:6e: 85:33:c0:59:8d:2a:fb:31:7d:54:86:4d:0e:69:34:13:3b:10: 8a:a6:23:ae:1d:48:60:11:47:f7:73:ea:8c:d9:48:a9:7e:9f: 78:b3:6a:b4:63:96:95:1d:80:c9:ee:3c:1b:62:ba:69:c7:7d: fe:8e:70:36:48:f2:15:38:39:3d:20:61:d4:f6:75:35:2a:8a: 87:69:4f:b1:b7:c7:ff:3c:78:22:22:1e:6c:1b:a2:81:71:d2: bc:76:24:2a:bb:bb:e2:2d:eb:88:9a:b7:17:e6:dc:a5:6b:47: 2c:d8:00:11:35:7b:e8:d1:89:f4:00:f4:5f:16:33:9e:7b:a2: ed:cc:35:36:c8:b2:4b:a6:8c:58:01:2b:82:f3:02:f8:6e:fb: 2c:0c:74:18:9b:be:6d:44:92:98:e6:c8:41:75:70:08:09:aa: de:3a:fe:a2:ff:9f:da:4c:d7:ac:b8:ab:a5:88:f8:53:17:21: ca:81:91:92:e0:f4:9c:d7:94:27:1d:7f:1e:23:0a:69:fe:49: 36:ac:50:97 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4ozACVzVZE7RtsF/M1Lx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjA1Njc1OTJmZTdkZTgxNTExNTRkYTIwZmU4NTM4MWY5N2QxMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW53p1mn7tpTOGR0M5rICDBct/qk F4hv3mgLgWsLekia9/Yv+iBeATfaoyNgdzv754LIb9Oab8s0i4Ihugra1SeqINOW 5uwVvTGX6AeZkir8KuGb+C4EUPxsqOh4Tg18yRjo7+bByU8Sna0bVJQ4WP67v8JG rFczZ9ybPL9VOez8epfmVfQtvmbleQqGRdf+ZK0L2jl2hXNBrIZkoklnJ7KhzS1Z K03ijCQDnaSj4lsRB2CMzdY6zpnhYDJ6gnzrWNQp3uk/h5PhbZQCHlYN0smq/bJ1 eAC+R6ksodUPh4R5W6Fju81Bsvg4QI5fhUlwi72uRjXLTF4wmFH2ahjj1wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFA8FZ1kv596BURVNog/oU4H5fRBRMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL0R3Vm5XU19uM29GUkZVMmlELWhUZ2ZsOUVGRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACTvYUD BACwb94DBADBCMIwDQYJKoZIhvcNAQELBQADggEBACBtOkiAkId5GDyTnHaMIpKX 0q3/BeUSokKofToJn84AOvQhdpDLlD3R6u8GdMiyUBEAh+FNboUzwFmNKvsxfVSG TQ5pNBM7EIqmI64dSGARR/dz6ozZSKl+n3izarRjlpUdgMnuPBtiumnHff6OcDZI 8hU4OT0gYdT2dTUqiodpT7G3x/88eCIiHmwbooFx0rx2JCq7u+It64iatxfm3KVr RyzYABE1e+jRifQA9F8WM557ou3MNTbIskumjFgBK4LzAvhu+ywMdBibvm1Ekpjm yEF1cAgJqt46/qL/n9pM16y4q6WI+FMXIcqBkZLg9JzXlCcdfx4jCmn+STasUJc= -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:49 2026 by rpki-client