This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/05Rdwr--1tnXZPfu13z1-r9tQTo.roa File: 05Rdwr--1tnXZPfu13z1-r9tQTo.roa (raw, json) Hash identifier: wM0ntv3W1SWKI6P8cH7TnrdrNZlJdigMYw8TmLb1CoU= Subject key identifier: D3:94:5D:C2:BF:BE:D6:D9:D7:64:F7:EE:D7:7C:F5:FA:BF:6D:41:3A Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Certificate serial: 019B79EBBC63FF98260995E2F694307FB4DC Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/05Rdwr--1tnXZPfu13z1-r9tQTo.roa Signing time: Thu 01 Jan 2026 14:17:30 +0000 ROA not before: Thu 01 Jan 2026 14:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205660 IP address blocks: 185.39.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bc:63:ff:98:26:09:95:e2:f6:94:30:7f:b4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Validity Not Before: Jan 1 14:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3945dc2bfbed6d9d764f7eed77cf5fabf6d413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:10:b2:d3:5f:05:00:b8:83:24:44:1a:08: 25:80:cc:6a:a2:b7:0f:8c:e7:6c:16:9a:0d:ed:f4: 45:04:58:5a:dd:b3:21:b1:b5:cb:40:da:a3:ae:0c: 0c:46:af:90:fc:af:69:e4:b1:a1:6e:c9:76:33:30: 52:94:54:af:f6:0a:b3:38:b9:1d:04:3e:fa:b4:1d: f0:d6:c4:c2:b2:1f:bc:f3:af:68:5f:3b:8d:1e:94: cf:b3:38:06:5a:dd:fe:af:02:87:1e:66:45:11:ff: 27:27:a4:ac:70:7f:fd:f3:13:59:8e:1e:08:35:72: 64:bb:34:4e:bc:5a:0b:d0:91:20:75:ad:cd:2f:00: d5:5d:44:1b:da:9c:f7:82:69:0b:14:c2:0b:fd:f5: 98:fb:fb:79:03:c2:ce:18:c5:61:86:c0:fb:92:98: 46:45:23:dd:09:b9:f4:7c:8d:79:c8:0c:a6:26:e6: 72:bb:6a:31:35:77:9d:2e:2d:41:15:07:32:64:9f: 4b:34:d2:95:3c:30:f3:38:49:da:92:6e:39:05:96: f7:7b:0e:24:f2:82:6d:4c:d0:1c:f1:4f:be:40:86: d5:a5:e7:b8:42:b9:b0:02:c9:1b:05:91:fc:08:e4: 4a:59:b1:8f:f2:f9:da:94:a7:54:5c:16:e0:70:6b: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:94:5D:C2:BF:BE:D6:D9:D7:64:F7:EE:D7:7C:F5:FA:BF:6D:41:3A X509v3 Authority Key Identifier: keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/05Rdwr--1tnXZPfu13z1-r9tQTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.253.0/24 Signature Algorithm: sha256WithRSAEncryption 05:96:8d:87:ad:99:7c:6a:98:8b:5a:63:57:a9:19:c8:b2:0b: 1b:ea:e4:33:af:39:0c:5f:f2:4f:58:dc:9e:ca:51:d9:2d:b8: 05:bb:89:46:97:ba:86:a0:08:4f:3a:1b:48:83:01:c2:83:36: d0:a4:04:05:cb:8c:2b:d7:f6:34:a9:9e:0e:14:36:62:1a:c5: 51:e4:aa:7a:12:6f:99:6c:c1:fc:c1:13:23:0b:88:80:5f:5b: 12:d3:ef:1c:b8:c7:9d:09:c2:dc:b2:65:fa:d9:78:b7:76:b7: 60:0b:87:5f:99:fb:51:16:dd:14:fe:71:02:2b:a7:83:79:78: 52:c2:13:91:96:fb:3a:67:d6:23:11:eb:cf:5a:5e:e8:9b:c0: 53:c3:ac:5c:cc:0b:93:4e:49:24:6d:d1:16:2f:06:1c:b1:4b: 49:7d:7f:47:69:fa:83:ca:dc:cc:bb:e5:b1:0f:b8:03:ee:d8: b7:fd:e1:45:c8:58:f5:ec:80:f0:51:f5:4a:e2:c8:b7:b8:b7: 88:5d:2b:48:c8:4b:c7:2f:c9:43:de:30:7f:72:04:1e:f1:b7: 1a:74:e1:93:23:ea:8e:e0:79:44:f8:c9:28:6f:c7:92:e5:de: 30:cf:cd:a4:5c:fb:19:66:1b:fc:16:eb:d1:bd:f9:2d:39:a2: e3:06:54:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt567xj/5gmCZXi9pQwf7TcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5Y2QzOGQxZDFjNGEyMzA1M2NkOTk3MTYzMzE4ZDY0OWE3 YjJhNTcwHhcNMjYwMTAxMTQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzk0NWRjMmJmYmVkNmQ5ZDc2NGY3ZWVkNzdjZjVmYWJmNmQ0MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXIQstNfBQC4gyREGgglgMxqorcP jOdsFpoN7fRFBFha3bMhsbXLQNqjrgwMRq+Q/K9p5LGhbsl2MzBSlFSv9gqzOLkd BD76tB3w1sTCsh+8869oXzuNHpTPszgGWt3+rwKHHmZFEf8nJ6SscH/98xNZjh4I NXJkuzROvFoL0JEgda3NLwDVXUQb2pz3gmkLFMIL/fWY+/t5A8LOGMVhhsD7kphG RSPdCbn0fI15yAymJuZyu2oxNXedLi1BFQcyZJ9LNNKVPDDzOEnakm45BZb3ew4k 8oJtTNAc8U++QIbVpee4QrmwAskbBZH8CORKWbGP8vnalKdUXBbgcGv/NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOUXcK/vtbZ12T37td89fq/bUE6MB8GA1UdIwQY MBaAFMnNONHRxKIwU82ZcWMxjWSaeypXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMmU0OWQtNjk1My00ZmM4LWE4OTYt YzVjMzU4ODM3YTg0LzEvMDVSZHdyLS0xdG5YWlBmdTEzejEtcjl0UVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMmU0OWQtNjk1My00ZmM4LWE4OTYtYzVjMzU4ODM3YTg0 LzEveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSf9MA0G CSqGSIb3DQEBCwUAA4IBAQAFlo2HrZl8apiLWmNXqRnIsgsb6uQzrzkMX/JPWNye ylHZLbgFu4lGl7qGoAhPOhtIgwHCgzbQpAQFy4wr1/Y0qZ4OFDZiGsVR5Kp6Em+Z bMH8wRMjC4iAX1sS0+8cuMedCcLcsmX62Xi3drdgC4dfmftRFt0U/nECK6eDeXhS whORlvs6Z9YjEevPWl7om8BTw6xczAuTTkkkbdEWLwYcsUtJfX9HafqDytzMu+Wx D7gD7ti3/eFFyFj17IDwUfVK4si3uLeIXStIyEvHL8lD3jB/cgQe8bcadOGTI+qO 4HlE+Mkob8eS5d4wz82kXPsZZhv8FuvRvfktOaLjBlTY -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:16 2026 by rpki-client