This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/a0kN2gfK01wMuqhoW-MZjPAbstc.roa File: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (raw, json) Hash identifier: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE= Subject key identifier: 6B:49:0D:DA:07:CA:D3:5C:0C:BA:A8:68:5B:E3:19:8C:F0:1B:B2:D7 Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Certificate serial: 019B7758D453BBB3DC0711BEC1F177569EFC Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/a0kN2gfK01wMuqhoW-MZjPAbstc.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12578 IP address blocks: 195.35.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:53:bb:b3:dc:07:11:be:c1:f1:77:56:9e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b490dda07cad35c0cbaa8685be3198cf01bb2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:28:6a:4a:5c:ab:38:be:04:33:ed:79:38: 5d:6b:53:a4:de:9c:ad:9d:1c:9d:15:6f:d2:f9:7e: 72:b3:6f:62:4e:73:26:cf:f6:65:94:24:9f:a1:19: 7f:d5:5b:0f:e8:8b:b4:16:48:63:0a:b8:3f:0d:f9: e5:32:f5:fe:3f:f5:04:a1:de:49:31:10:55:ef:a7: 4f:30:7c:9b:1f:b5:7f:7f:73:c5:47:56:e6:5b:f7: 8f:38:5b:29:70:6a:c6:e7:2a:36:50:e4:cf:a8:c7: 7f:78:67:32:95:99:cb:9f:d7:83:9f:cc:57:12:89: 48:ab:11:c4:57:7e:5c:21:7b:43:64:57:24:13:e0: 24:a9:da:f3:d3:6d:8e:fb:6b:5b:da:4f:ea:ad:aa: 13:1d:99:d6:9a:5b:3c:28:96:bd:76:9a:61:70:6c: 78:f7:ef:7a:01:35:33:47:b6:8b:c6:0a:bf:44:78: e8:64:4c:7e:fa:50:dd:63:74:d3:69:21:b1:d2:d5: eb:09:79:23:4b:3b:71:a5:91:1e:13:22:3c:fe:e8: 44:bd:15:ed:ed:be:25:95:dc:d1:9c:9f:24:a6:11: 62:2d:a2:ae:c0:3c:90:1b:fd:6a:2b:c6:37:ef:25: 41:5c:03:81:13:0f:8b:85:34:5e:60:d5:ba:e6:29: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:49:0D:DA:07:CA:D3:5C:0C:BA:A8:68:5B:E3:19:8C:F0:1B:B2:D7 X509v3 Authority Key Identifier: keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/a0kN2gfK01wMuqhoW-MZjPAbstc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.35.107.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:6a:bf:ec:1f:1d:5f:36:ca:f7:59:35:a0:60:a3:10:55:b5: fe:4f:1d:ae:1e:2d:47:b5:54:0d:89:51:a4:ce:8b:94:93:27: 1c:95:db:ef:87:ca:bb:09:9b:97:68:78:90:e2:e7:d6:1f:32: 97:27:ef:f9:d7:da:e8:f1:57:ac:44:5a:e7:2b:91:a8:05:47: 86:c4:94:fb:e4:1d:97:c4:ce:ec:d6:d9:81:9b:17:a4:d4:87: 16:eb:fa:9e:8a:cb:11:12:63:fe:92:a2:79:ee:ee:79:9d:c0: 67:a0:f7:2d:c2:d1:58:43:59:97:0c:19:5c:3e:61:58:e9:28: e3:2d:63:19:0c:85:f8:91:e5:5f:2f:41:2d:59:c1:a6:4c:3e: 69:ac:ce:33:41:08:0b:04:89:dc:b7:b0:37:89:58:1a:fe:03: 3a:97:50:89:0c:7f:65:10:04:16:fd:d8:82:ff:80:38:5a:63: 01:78:61:40:fe:1f:5d:2c:87:58:d4:93:8a:ce:97:0d:5d:bd: 83:ce:b3:8f:8d:fe:1c:64:5f:63:96:0d:60:e8:d9:4a:2f:e9: e5:82:c6:f6:a7:d6:d8:4f:b3:23:bc:12:c4:ab:b5:bc:e7:53: 92:bc:21:bb:7e:97:4f:31:9d:b4:b4:13:10:f6:ef:8a:64:98: 64:a4:14:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNRTu7PcBxG+wfF3Vp78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0 MmZjNmUwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjQ5MGRkYTA3Y2FkMzVjMGNiYWE4Njg1YmUzMTk4Y2YwMWJiMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQoakpcqzi+BDPteThda1Ok3pyt nRydFW/S+X5ys29iTnMmz/ZllCSfoRl/1VsP6Iu0FkhjCrg/DfnlMvX+P/UEod5J MRBV76dPMHybH7V/f3PFR1bmW/ePOFspcGrG5yo2UOTPqMd/eGcylZnLn9eDn8xX EolIqxHEV35cIXtDZFckE+Akqdrz022O+2tb2k/qraoTHZnWmls8KJa9dpphcGx4 9+96ATUzR7aLxgq/RHjoZEx++lDdY3TTaSGx0tXrCXkjSztxpZEeEyI8/uhEvRXt 7b4lldzRnJ8kphFiLaKuwDyQG/1qK8Y37yVBXAOBEw+LhTReYNW65inXiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGtJDdoHytNcDLqoaFvjGYzwG7LXMB8GA1UdIwQY MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt ZjA4ZDcxYzRmM2RiLzEvYTBrTjJnZkswMXdNdXFob1ctTVpqUEFic3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyNrMA0G CSqGSIb3DQEBCwUAA4IBAQAtar/sHx1fNsr3WTWgYKMQVbX+Tx2uHi1HtVQNiVGk zouUkyccldvvh8q7CZuXaHiQ4ufWHzKXJ+/519ro8VesRFrnK5GoBUeGxJT75B2X xM7s1tmBmxek1IcW6/qeissREmP+kqJ57u55ncBnoPctwtFYQ1mXDBlcPmFY6Sjj LWMZDIX4keVfL0EtWcGmTD5prM4zQQgLBInct7A3iVga/gM6l1CJDH9lEAQW/diC /4A4WmMBeGFA/h9dLIdY1JOKzpcNXb2DzrOPjf4cZF9jlg1g6NlKL+nlgsb2p9bY T7MjvBLEq7W851OSvCG7fpdPMZ20tBMQ9u+KZJhkpBTX -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:15 2026 by rpki-client