This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/DWNbWLKsKUbayknrkxZPm_ru1rE.roa File: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (raw, json) Hash identifier: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14= Subject key identifier: 0D:63:5B:58:B2:AC:29:46:DA:CA:49:EB:93:16:4F:9B:FA:EE:D6:B1 Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Certificate serial: 019B7EA4E3D817E6E18C0E54B638E9B0A1B9 Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/DWNbWLKsKUbayknrkxZPm_ru1rE.roa Signing time: Fri 02 Jan 2026 12:18:14 +0000 ROA not before: Fri 02 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 80.249.132.0/24 maxlen: 24 2a10:b5c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:e3:d8:17:e6:e1:8c:0e:54:b6:38:e9:b0:a1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Validity Not Before: Jan 2 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d635b58b2ac2946daca49eb93164f9bfaeed6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0e:d9:14:7b:f8:4f:e6:70:ec:8d:af:3f:14: c5:05:e6:d1:4f:21:6d:96:72:01:63:00:3a:af:4d: 4d:99:32:1d:3a:69:f5:5b:8f:77:d9:8d:8c:01:fa: 1d:4e:85:2b:08:b9:ef:4b:b4:72:01:e4:40:d3:d5: de:18:69:5b:f2:b2:25:f4:a0:73:7c:64:a1:29:f9: b3:a2:3d:29:03:27:f5:8d:62:9f:52:24:ea:51:23: c2:0e:61:30:27:58:d1:a0:f4:49:6b:bf:f6:a9:54: 95:c6:d9:da:ba:84:1a:08:a9:32:d6:3e:21:cc:90: 16:10:c7:71:ac:0b:00:2c:d6:a4:e9:da:cd:68:86: 4e:02:d7:df:02:8c:5d:46:2d:5c:73:cd:ca:ac:1f: bd:7d:93:e9:c5:88:d8:80:0b:47:c1:76:01:d3:85: 8f:3d:af:06:d9:b0:3f:51:27:ae:b9:2e:6f:a8:1d: ce:a3:15:f4:45:23:6a:cc:5d:ae:15:b8:38:4f:b4: e0:4e:35:92:d1:06:c7:23:6f:22:94:4b:53:b6:fa: 6f:5e:b4:53:81:b5:dc:e3:67:c0:d0:ba:e2:21:a6: 34:be:20:51:32:8a:2e:50:35:6a:6a:a5:81:31:31: a4:4b:4b:62:d6:ee:8c:2b:51:23:64:62:56:54:39: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:63:5B:58:B2:AC:29:46:DA:CA:49:EB:93:16:4F:9B:FA:EE:D6:B1 X509v3 Authority Key Identifier: keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/DWNbWLKsKUbayknrkxZPm_ru1rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.249.132.0/24 IPv6: 2a10:b5c0::/29 Signature Algorithm: sha256WithRSAEncryption 1c:e7:48:40:0d:5c:10:f2:ae:78:42:e0:31:cd:ae:0e:55:f1: 26:93:30:82:56:56:c1:d0:28:7b:85:c2:16:ff:a0:f7:40:b2: 40:c8:41:9c:9f:7b:21:07:96:e1:3c:d1:16:76:d7:29:d2:bd: 7a:51:e8:9f:fe:bf:6a:80:ae:21:8e:71:9b:de:68:7f:e1:27: cd:d0:d5:03:ab:4d:86:79:25:37:a7:af:c9:cd:72:3a:a0:12: 87:e5:08:3a:7a:01:63:ba:ce:7e:1c:b9:67:39:be:a3:4f:1b: 02:cd:f8:24:49:46:fa:12:6a:eb:09:2a:6d:a7:36:27:67:0d: 84:16:11:cd:7d:f2:fd:fa:a1:db:d9:5a:73:f3:a9:9e:ce:fe: ee:9d:50:1a:e0:71:da:48:bb:e6:cd:ec:78:68:5c:f7:86:f6: 28:68:94:6a:02:a4:df:d1:1d:53:23:b6:89:60:c7:f7:c1:4e: f6:48:a8:a5:78:91:4e:c6:2e:49:12:f7:c6:cc:6b:7c:37:12: fd:0c:19:29:5b:b5:d8:b1:b2:c0:54:d1:f4:ed:d2:de:74:25: db:f3:4f:c0:f4:e0:96:48:2e:c6:60:54:12:26:10:5d:a7:4f: 23:0c:c2:0c:5e:7f:ce:15:14:a5:83:9a:0e:1e:ec:6f:8b:a0: 66:e5:76:12 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pOPYF+bhjA5UtjjpsKG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh OWZjODUwHhcNMjYwMTAyMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDYzNWI1OGIyYWMyOTQ2ZGFjYTQ5ZWI5MzE2NGY5YmZhZWVkNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g7ZFHv4T+Zw7I2vPxTFBebRTyFt lnIBYwA6r01NmTIdOmn1W4932Y2MAfodToUrCLnvS7RyAeRA09XeGGlb8rIl9KBz fGShKfmzoj0pAyf1jWKfUiTqUSPCDmEwJ1jRoPRJa7/2qVSVxtnauoQaCKky1j4h zJAWEMdxrAsALNak6drNaIZOAtffAoxdRi1cc83KrB+9fZPpxYjYgAtHwXYB04WP Pa8G2bA/USeuuS5vqB3OoxX0RSNqzF2uFbg4T7TgTjWS0QbHI28ilEtTtvpvXrRT gbXc42fA0LriIaY0viBRMoouUDVqaqWBMTGkS0ti1u6MK1EjZGJWVDkOfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA1jW1iyrClG2spJ65MWT5v67taxMB8GA1UdIwQY MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt NmVhNWQ4Yjc1NDExLzEvRFdOYldMS3NLVWJheWtucmt4WlBtX3J1MXJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUPmEMA0E AgACMAcDBQMqELXAMA0GCSqGSIb3DQEBCwUAA4IBAQAc50hADVwQ8q54QuAxza4O VfEmkzCCVlbB0Ch7hcIW/6D3QLJAyEGcn3shB5bhPNEWdtcp0r16Ueif/r9qgK4h jnGb3mh/4SfN0NUDq02GeSU3p6/JzXI6oBKH5Qg6egFjus5+HLlnOb6jTxsCzfgk SUb6EmrrCSptpzYnZw2EFhHNffL9+qHb2Vpz86mezv7unVAa4HHaSLvmzex4aFz3 hvYoaJRqAqTf0R1TI7aJYMf3wU72SKileJFOxi5JEvfGzGt8NxL9DBkpW7XYsbLA VNH07dLedCXb80/A9OCWSC7GYFQSJhBdp08jDMIMXn/OFRSlg5oOHuxvi6Bm5XYS -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:06 2026 by rpki-client