This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/DAwWe5rLh-aQBzylMgXPEafT094.roa File: DAwWe5rLh-aQBzylMgXPEafT094.roa (raw, json) Hash identifier: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4= Subject key identifier: 0C:0C:16:7B:9A:CB:87:E6:90:07:3C:A5:32:05:CF:11:A7:D3:D3:DE Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B7C80321F1E58AB014A49BABC74F3B7CC Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/DAwWe5rLh-aQBzylMgXPEafT094.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 185.133.173.0/24 maxlen: 24 185.133.174.0/24 maxlen: 24 185.133.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:32:1f:1e:58:ab:01:4a:49:ba:bc:74:f3:b7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c0c167b9acb87e690073ca53205cf11a7d3d3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:29:f2:8c:71:5e:86:9d:03:1e:8b:a3:5c: 69:9a:16:1a:52:b2:a3:05:65:d7:d6:65:c8:68:a8: c1:59:f5:d7:15:9e:ae:9c:42:11:f5:e4:2c:fb:e9: 0b:5f:ba:60:54:26:67:57:97:28:a7:b5:79:db:97: 77:b8:a3:e0:77:49:d9:83:18:0c:de:af:a0:62:53: a8:12:3e:5c:94:ef:cd:f4:12:92:db:75:d1:a7:eb: 16:99:81:23:38:5f:e8:74:8a:82:d3:ef:d8:cd:40: 21:89:7e:c2:37:b1:bc:6c:c4:aa:3d:26:bc:30:53: ba:17:68:6d:10:17:a9:dd:b1:28:88:df:9a:fd:a0: f7:65:ed:3a:4d:77:0c:f5:89:a4:c0:cd:7e:8d:98: cf:a2:d4:de:e6:d1:31:ab:f0:da:5f:69:e1:95:67: c8:f5:36:40:e9:66:66:8a:dd:36:9f:73:cd:49:88: dc:1f:92:53:3d:6e:85:d9:f1:43:74:ce:41:4b:4a: a5:a0:f3:48:75:d8:f0:fa:9f:5a:ee:92:64:ce:60: bb:b7:f7:8a:e1:cf:bd:2b:96:1a:4a:26:9f:72:09: 52:75:6c:90:3a:de:36:f4:b7:ca:d3:db:b1:2c:a8: 1c:a4:11:c5:a0:07:95:a9:3a:ec:19:9c:c4:ed:0b: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0C:16:7B:9A:CB:87:E6:90:07:3C:A5:32:05:CF:11:A7:D3:D3:DE X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/DAwWe5rLh-aQBzylMgXPEafT094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.173.0-185.133.175.255 Signature Algorithm: sha256WithRSAEncryption 0a:50:63:ae:c2:a2:be:e0:8a:d5:f5:8d:25:d7:80:4a:aa:64: b2:b4:92:b0:4f:3e:0a:d7:4f:38:b9:4f:05:1f:57:07:22:3d: 2c:06:42:e7:15:6a:72:e8:7c:63:48:37:e4:88:ba:7b:1e:a9: 4c:65:4c:35:79:a6:ef:32:8f:65:a4:1a:bd:ae:10:55:d5:3f: 6b:3e:2a:02:a2:72:c0:a7:94:7e:30:5d:bb:e2:57:c5:da:66: 6e:91:83:44:ed:62:9a:27:64:55:a3:54:8f:9b:ab:20:ca:74: 29:dd:5d:3d:a6:ec:fb:84:e4:22:fc:c4:20:25:ce:57:11:31: 91:2b:5d:d3:dc:a0:58:b2:34:13:cb:77:94:53:26:3f:e5:1c: a7:d2:42:8d:c2:87:7d:35:e1:86:93:b7:02:37:dc:55:f3:fd: 89:da:af:37:aa:7c:67:d5:f3:6d:8d:b9:db:18:2d:28:5c:f5: 8b:8b:87:23:63:09:ca:af:44:34:0c:80:91:5a:e8:a1:a1:b6: 24:b6:1b:9b:64:f4:40:55:60:b7:8f:9f:8d:23:a6:81:3c:3b: 42:15:c4:20:12:d9:63:55:ef:04:43:86:93:3f:18:1d:98:a9: 7a:a1:34:3c:7f:66:99:46:2d:f2:5f:04:01:45:db:fa:bf:f5: fc:96:00:92 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gDIfHlirAUpJurx087fMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzBjMTY3YjlhY2I4N2U2OTAwNzNjYTUzMjA1Y2YxMWE3ZDNkM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAp8oxxXoadAx6Lo1xpmhYaUrKj BWXX1mXIaKjBWfXXFZ6unEIR9eQs++kLX7pgVCZnV5cop7V525d3uKPgd0nZgxgM 3q+gYlOoEj5clO/N9BKS23XRp+sWmYEjOF/odIqC0+/YzUAhiX7CN7G8bMSqPSa8 MFO6F2htEBep3bEoiN+a/aD3Ze06TXcM9YmkwM1+jZjPotTe5tExq/DaX2nhlWfI 9TZA6WZmit02n3PNSYjcH5JTPW6F2fFDdM5BS0qloPNIddjw+p9a7pJkzmC7t/eK 4c+9K5YaSiafcglSdWyQOt429LfK09uxLKgcpBHFoAeVqTrsGZzE7QulaQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAwMFnuay4fmkAc8pTIFzxGn09PeMB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvREF3V2U1ckxoLWFRQnp5bE1nWFBFYWZUMDk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5ha0D BAS5haAwDQYJKoZIhvcNAQELBQADggEBAApQY67Cor7gitX1jSXXgEqqZLK0krBP PgrXTzi5TwUfVwciPSwGQucVanLofGNIN+SIunseqUxlTDV5pu8yj2WkGr2uEFXV P2s+KgKicsCnlH4wXbviV8XaZm6Rg0TtYponZFWjVI+bqyDKdCndXT2m7PuE5CL8 xCAlzlcRMZErXdPcoFiyNBPLd5RTJj/lHKfSQo3Ch3014YaTtwI33FXz/Ynarzeq fGfV822NudsYLShc9YuLhyNjCcqvRDQMgJFa6KGhtiS2G5tk9EBVYLePn40jpoE8 O0IVxCAS2WNV7wRDhpM/GB2YqXqhNDx/ZplGLfJfBAFF2/q/9fyWAJI= -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:21 2026 by rpki-client