This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DUwo7qgYzU3_unCAcVNSTVu2Tjs.roa File: DUwo7qgYzU3_unCAcVNSTVu2Tjs.roa (raw, json) Hash identifier: 4RpMytiuZRZ2IE/uc0qRr6K7xLCKjsc5nGLYKkDUunA= Subject key identifier: 0D:4C:28:EE:A8:18:CD:4D:FF:BA:70:80:71:53:52:4D:5B:B6:4E:3B Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41033779E1B5C4BE5F86EA5143625 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DUwo7qgYzU3_unCAcVNSTVu2Tjs.roa Signing time: Thu 01 Jan 2026 22:18:28 +0000 ROA not before: Thu 01 Jan 2026 22:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204997 IP address blocks: 45.144.64.0/24 maxlen: 24 45.144.65.0/24 maxlen: 24 45.144.66.0/24 maxlen: 24 45.144.67.0/24 maxlen: 24 46.17.104.0/24 maxlen: 24 91.217.81.0/24 maxlen: 24 139.28.222.0/24 maxlen: 24 139.28.223.0/24 maxlen: 24 147.78.64.0/24 maxlen: 24 147.78.65.0/24 maxlen: 24 147.78.66.0/24 maxlen: 24 147.78.67.0/24 maxlen: 24 185.17.3.0/24 maxlen: 24 185.104.248.0/24 maxlen: 24 185.104.249.0/24 maxlen: 24 185.139.68.0/24 maxlen: 24 185.139.69.0/24 maxlen: 24 185.139.70.0/24 maxlen: 24 185.139.71.0/24 maxlen: 24 185.174.138.0/24 maxlen: 24 185.180.230.0/24 maxlen: 24 185.180.231.0/24 maxlen: 24 185.188.182.0/24 maxlen: 24 185.188.183.0/24 maxlen: 24 185.189.12.0/22 maxlen: 22 185.189.12.0/24 maxlen: 24 185.189.13.0/24 maxlen: 24 185.189.14.0/24 maxlen: 24 185.189.15.0/24 maxlen: 24 185.195.24.0/24 maxlen: 24 185.195.25.0/24 maxlen: 24 185.195.26.0/24 maxlen: 24 185.195.27.0/24 maxlen: 24 185.204.0.0/24 maxlen: 24 185.204.2.0/24 maxlen: 24 185.204.3.0/24 maxlen: 24 185.212.148.0/24 maxlen: 24 185.244.172.0/24 maxlen: 24 185.244.173.0/24 maxlen: 24 185.252.146.0/24 maxlen: 24 185.252.147.0/24 maxlen: 24 185.255.132.0/24 maxlen: 24 185.255.133.0/24 maxlen: 24 185.255.134.0/24 maxlen: 24 185.255.135.0/24 maxlen: 24 193.109.78.0/24 maxlen: 24 193.109.79.0/24 maxlen: 24 195.66.114.0/24 maxlen: 24 2a04:5200:fb01::/48 maxlen: 48 2a04:5200:fb02::/48 maxlen: 48 2a04:5200:ff00::/48 maxlen: 48 2a04:5200:ff10::/48 maxlen: 48 2a04:5200:fff1::/48 maxlen: 48 2a04:5200:fff2::/48 maxlen: 48 2a04:5200:fff3::/48 maxlen: 48 2a04:5200:fff4::/48 maxlen: 48 2a04:5200:fff5::/48 maxlen: 48 2a04:5200:fff6::/48 maxlen: 48 2a04:5200:fff7::/48 maxlen: 48 2a04:5200:fff8::/48 maxlen: 48 2a04:5200:fff9::/48 maxlen: 48 2a04:5200:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:10:33:77:9e:1b:5c:4b:e5:f8:6e:a5:14:36:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d4c28eea818cd4dffba70807153524d5bb64e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:a7:cf:5a:71:9e:ab:cd:e4:90:67:8c:33: 51:43:a3:95:89:73:ce:87:55:ae:00:7d:c8:c7:7c: 17:5c:73:66:38:cf:3d:bf:f7:f2:7e:90:59:d5:bf: a8:d5:af:bc:ea:19:46:78:b5:d3:ca:01:a4:b0:da: 6d:a7:5e:78:4a:c5:5d:78:f6:f0:e4:95:d2:de:9e: 99:ef:ba:2e:35:c9:0f:87:14:5d:22:6d:48:d9:2c: 4b:61:85:b1:a6:32:63:c5:05:3e:bd:1f:a2:03:07: bc:1c:2c:67:39:c7:fd:3f:c4:28:75:57:80:fb:32: 6c:58:c3:00:42:8c:9f:d7:be:ff:11:3d:ca:a4:2e: 7c:2f:d6:f0:05:52:aa:5c:36:58:8d:44:32:95:c4: 52:d5:2d:89:00:46:be:34:63:0f:eb:78:fe:12:98: 58:f1:e1:f2:1b:98:07:b2:37:13:f9:d2:bd:16:66: 5b:e9:2b:31:32:3b:f7:c6:f8:c1:c2:b5:48:52:30: 02:7a:b7:e6:8f:36:d0:f4:ae:a2:ba:3b:18:a2:51: 19:f1:93:6e:55:58:86:ac:21:61:d8:b8:ec:d7:a2: 76:a4:87:02:43:f7:67:df:bd:90:06:04:12:d8:66: 55:dd:b5:35:9e:33:6a:f4:21:d4:fd:4c:a1:df:4b: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:28:EE:A8:18:CD:4D:FF:BA:70:80:71:53:52:4D:5B:B6:4E:3B X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DUwo7qgYzU3_unCAcVNSTVu2Tjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.64.0/22 46.17.104.0/24 91.217.81.0/24 139.28.222.0/23 147.78.64.0/22 185.17.3.0/24 185.104.248.0/23 185.139.68.0/22 185.174.138.0/24 185.180.230.0/23 185.188.182.0/23 185.189.12.0/22 185.195.24.0/22 185.204.0.0/24 185.204.2.0/23 185.212.148.0/24 185.244.172.0/23 185.252.146.0/23 185.255.132.0/22 193.109.78.0/23 195.66.114.0/24 IPv6: 2a04:5200:fb01::-2a04:5200:fb02:ffff:ffff:ffff:ffff:ffff 2a04:5200:ff00::/48 2a04:5200:ff10::/48 2a04:5200:fff1::-2a04:5200:fff9:ffff:ffff:ffff:ffff:ffff 2a04:5200:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 1c:23:3d:54:2b:d6:52:4d:e1:3a:b9:c6:ab:98:f9:95:38:6f: e2:48:ca:1d:68:2c:0a:6c:39:8d:b1:8f:59:a9:79:e2:77:6c: 5b:7d:d4:6c:ef:5b:a5:26:55:4d:e7:60:2c:64:12:a4:63:3d: 99:05:c5:6a:38:60:36:08:e9:e7:fb:11:28:a5:22:fd:69:ba: a2:37:fc:ec:a0:cf:da:6a:7e:eb:6f:ad:6b:fb:aa:d5:e3:56: fb:0b:8a:66:05:69:03:2b:1e:bc:49:eb:15:75:86:f6:8c:0c: 7b:18:df:f3:d3:8a:d6:3f:fb:fa:a0:38:f0:db:9d:89:07:7b: 2b:75:52:ca:0b:4f:87:96:e7:1a:23:c2:a2:aa:b5:cc:d0:ff: 43:e5:fe:ee:37:df:9f:ec:76:ff:82:8e:af:4d:c5:02:a7:7b: d2:d2:41:5b:5d:4f:4b:78:28:d0:f9:c8:d2:10:2d:24:50:48: 26:2b:2b:8e:b1:45:4a:9b:f2:e4:25:21:9f:c9:6c:08:50:eb: 8d:7e:0c:21:72:03:d5:27:42:df:4f:10:cc:01:42:ab:a4:1c: 19:0a:5d:8e:02:81:bf:02:2a:c9:c4:f4:a0:2c:db:96:77:69: 6d:d8:d7:7d:7e:97:02:f7:38:5e:9f:b1:70:30:39:bf:b5:02: a1:58:68:a5 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt7pBAzd54bXEvl+G6lFDYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDRjMjhlZWE4MThjZDRkZmZiYTcwODA3MTUzNTI0ZDViYjY0ZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9mnz1pxnqvN5JBnjDNRQ6OViXPO h1WuAH3Ix3wXXHNmOM89v/fyfpBZ1b+o1a+86hlGeLXTygGksNptp154SsVdePbw 5JXS3p6Z77ouNckPhxRdIm1I2SxLYYWxpjJjxQU+vR+iAwe8HCxnOcf9P8QodVeA +zJsWMMAQoyf177/ET3KpC58L9bwBVKqXDZYjUQylcRS1S2JAEa+NGMP63j+EphY 8eHyG5gHsjcT+dK9FmZb6SsxMjv3xvjBwrVIUjACerfmjzbQ9K6iujsYolEZ8ZNu VViGrCFh2Ljs16J2pIcCQ/dn372QBgQS2GZV3bU1njNq9CHU/Uyh30vbaQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFA1MKO6oGM1N/7pwgHFTUk1btk47MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvRFV3bzdxZ1l6VTNfdW5DQWNWTlNUVnUyVGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBhAQCAAEwfgMEAi2Q QAMEAC4RaAMEAFvZUQMEAYsc3gMEApNOQAMEALkRAwMEAblo+AMEArmLRAMEALmu igMEAbm05gMEAbm8tgMEArm9DAMEArnDGAMEALnMAAMEAbnMAgMEALnUlAMEAbn0 rAMEAbn8kgMEArn/hAMEAcFtTgMEAMNCcjBJBAIAAjBDMBIDBwAqBFIA+wEDBwAq BFIA+wIDBwAqBFIA/wADBwAqBFIA/xAwEgMHACoEUgD/8QMHASoEUgD/+AMHACoE UgD//zANBgkqhkiG9w0BAQsFAAOCAQEAHCM9VCvWUk3hOrnGq5j5lThv4kjKHWgs Cmw5jbGPWal54ndsW33UbO9bpSZVTedgLGQSpGM9mQXFajhgNgjp5/sRKKUi/Wm6 ojf87KDP2mp+62+ta/uq1eNW+wuKZgVpAysevEnrFXWG9owMexjf89OK1j/7+qA4 8NudiQd7K3VSygtPh5bnGiPCoqq1zND/Q+X+7jffn+x2/4KOr03FAqd70tJBW11P S3go0PnI0hAtJFBIJisrjrFFSpvy5CUhn8lsCFDrjX4MIXID1SdC308QzAFCq6Qc GQpdjgKBvwIqycT0oCzblndpbdjXfX6XAvc4Xp+xcDA5v7UCoVhopQ== -----END CERTIFICATE-----Generated at Fri Jan 2 18:22:05 2026 by rpki-client