This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/DWY1eQDfqHVy_Z3zJbN13aKS57A.roa File: DWY1eQDfqHVy_Z3zJbN13aKS57A.roa (raw, json) Hash identifier: jmbycrPvCplrb8djv3dcVhWakNrsV0NG4YL0ITbeM/Q= Subject key identifier: 0D:66:35:79:00:DF:A8:75:72:FD:9D:F3:25:B3:75:DD:A2:92:E7:B0 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4934F690842F41BB539CEF2BD994C Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/DWY1eQDfqHVy_Z3zJbN13aKS57A.roa Signing time: Thu 01 Jan 2026 22:19:01 +0000 ROA not before: Thu 01 Jan 2026 22:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44803 IP address blocks: 45.136.70.0/23 maxlen: 23 45.153.48.0/24 maxlen: 24 92.119.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:93:4f:69:08:42:f4:1b:b5:39:ce:f2:bd:99:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d66357900dfa87572fd9df325b375dda292e7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:cb:09:62:a2:58:de:49:28:04:af:be:34: 78:96:09:0f:f7:67:28:68:c8:94:48:7a:c6:ab:16: d7:a0:82:da:3f:b8:1e:4d:86:52:ec:70:0b:47:42: 2e:73:4d:22:a4:a6:83:85:a6:a4:11:00:99:22:dc: c0:b7:b3:ad:f4:01:26:23:4b:2c:4e:cb:45:09:11: e0:1b:30:19:f0:9d:66:cd:3f:b8:ec:bc:53:67:b3: 43:1d:f0:9c:79:8f:df:21:21:9e:0a:c3:0f:f4:37: 71:25:b0:d2:13:73:8f:ab:44:b1:5b:7d:6a:2e:66: 90:bd:91:11:d9:c5:ac:0c:80:41:d1:ca:d5:5f:39: 96:af:7d:7d:ce:a0:2b:1c:67:dd:28:87:04:ed:ca: 15:8f:73:9c:62:cf:69:0e:9a:71:0d:f6:71:2a:5c: eb:98:8c:07:17:d6:ec:32:45:77:da:fc:da:b4:39: 41:39:ca:b5:f9:80:ad:3e:46:3e:b3:00:87:f0:7b: 12:8b:08:11:db:8f:ad:bd:87:9b:a0:6a:10:cb:cd: a3:51:16:26:2c:f2:ab:04:ca:89:08:4b:45:05:54: 97:d1:8e:53:9f:22:97:f6:4c:3d:25:ff:d1:82:28: 7e:f6:ab:71:77:98:12:c8:0a:1a:22:5d:fd:9b:b4: 24:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:66:35:79:00:DF:A8:75:72:FD:9D:F3:25:B3:75:DD:A2:92:E7:B0 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/DWY1eQDfqHVy_Z3zJbN13aKS57A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.70.0/23 45.153.48.0/24 92.119.129.0/24 Signature Algorithm: sha256WithRSAEncryption 35:aa:82:02:31:6d:5b:aa:5a:9d:69:47:dc:15:54:12:9f:3f: f0:bc:db:5c:c5:df:ec:d9:65:e8:87:0c:3d:4c:33:67:00:33: 71:03:de:68:ba:75:a1:d6:60:c5:92:3b:c5:1d:98:be:40:5a: 6a:07:60:0d:47:89:80:b2:4b:9d:ec:d1:d5:af:3a:8f:09:a0: 82:b2:7a:ce:51:f2:1e:c4:45:72:ec:ab:fa:b8:8e:0b:96:f7: 90:f7:f6:e0:0d:10:07:79:00:64:f2:f3:62:12:58:e7:24:84: cf:90:19:37:b2:7b:77:2b:09:17:2d:50:c6:23:36:45:ff:1f: 39:e6:4f:32:f7:8d:7e:f5:af:d6:6b:cb:46:8b:fa:4b:b0:56: 48:18:33:2b:cf:b1:ab:17:23:d4:d7:7b:6e:e8:e2:fd:18:51: a9:c7:90:90:0f:76:1a:c5:65:c5:01:cb:e0:10:2a:ce:2e:e9: 0a:c2:db:73:72:93:b5:77:55:94:ae:11:dc:15:68:67:3b:9a: d5:72:3b:bf:f1:86:a2:94:19:b0:61:2d:94:bf:10:ed:07:f3: 40:69:30:f9:0b:45:a5:1d:63:39:f8:01:4c:69:61:cf:9a:61: 45:86:76:bf:34:59:29:d5:a5:7d:bc:53:f9:b5:a6:2b:7b:5d: da:7f:c7:86 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pJNPaQhC9Bu1Oc7yvZlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDY2MzU3OTAwZGZhODc1NzJmZDlkZjMyNWIzNzVkZGEyOTJlN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMPLCWKiWN5JKASvvjR4lgkP92co aMiUSHrGqxbXoILaP7geTYZS7HALR0Iuc00ipKaDhaakEQCZItzAt7Ot9AEmI0ss TstFCRHgGzAZ8J1mzT+47LxTZ7NDHfCceY/fISGeCsMP9DdxJbDSE3OPq0SxW31q LmaQvZER2cWsDIBB0crVXzmWr319zqArHGfdKIcE7coVj3OcYs9pDppxDfZxKlzr mIwHF9bsMkV32vzatDlBOcq1+YCtPkY+swCH8HsSiwgR24+tvYeboGoQy82jURYm LPKrBMqJCEtFBVSX0Y5TnyKX9kw9Jf/Rgih+9qtxd5gSyAoaIl39m7QkzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA1mNXkA36h1cv2d8yWzdd2ikuewMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvRFdZMWVRRGZxSFZ5X1ozekpiTjEzYUtTNTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYhGAwQA LZkwAwQAXHeBMA0GCSqGSIb3DQEBCwUAA4IBAQA1qoICMW1bqlqdaUfcFVQSnz/w vNtcxd/s2WXohww9TDNnADNxA95ounWh1mDFkjvFHZi+QFpqB2ANR4mAskud7NHV rzqPCaCCsnrOUfIexEVy7Kv6uI4LlveQ9/bgDRAHeQBk8vNiEljnJITPkBk3snt3 KwkXLVDGIzZF/x855k8y941+9a/Wa8tGi/pLsFZIGDMrz7GrFyPU13tu6OL9GFGp x5CQD3YaxWXFAcvgECrOLukKwttzcpO1d1WUrhHcFWhnO5rVcju/8YailBmwYS2U vxDtB/NAaTD5C0WlHWM5+AFMaWHPmmFFhna/NFkp1aV9vFP5taYre13af8eG -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:26 2026 by rpki-client