This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0v_IdNcycYr13nWN4J6bHt0hmII.roa File: 0v_IdNcycYr13nWN4J6bHt0hmII.roa (raw, json) Hash identifier: sepQ6Tgt9y8B7+2OT1PMABir8yM8A089xHp/7aSiUtc= Subject key identifier: D2:FF:C8:74:D7:32:71:8A:F5:DE:75:8D:E0:9E:9B:1E:DD:21:98:82 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85635281ADA9CCE8021BE6AFB2F3FF Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0v_IdNcycYr13nWN4J6bHt0hmII.roa Signing time: Fri 02 Jan 2026 16:23:26 +0000 ROA not before: Fri 02 Jan 2026 16:23:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203872 IP address blocks: 194.87.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:63:52:81:ad:a9:cc:e8:02:1b:e6:af:b2:f3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2ffc874d732718af5de758de09e9b1edd219882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:fc:44:90:cb:fe:e2:a7:4b:14:53:da:df: 6b:9d:9c:74:39:74:e2:5e:78:e1:90:e8:f3:ad:77: b1:a0:d8:65:0c:f9:a6:3c:11:b7:b2:99:12:dc:ab: 6a:b7:f8:b9:a4:70:8b:82:1b:eb:9b:3f:72:0e:aa: b9:3f:37:6a:9a:1f:82:b9:1f:13:8d:09:ab:1d:38: 0f:2e:62:8a:85:50:b7:dd:3c:1f:e1:a3:b7:85:25: 51:88:0a:28:9c:40:4c:41:5d:75:62:bc:2d:f3:8c: dc:bb:33:55:e4:dd:2b:01:bc:00:1e:94:c2:42:ee: 66:e1:6f:d2:b7:3f:e0:02:c0:2f:8c:45:0f:cb:3a: 6b:b8:79:f2:bb:23:c3:ba:30:1a:92:e6:2b:79:1d: 9a:03:94:24:c9:09:8b:75:05:06:b3:6f:ca:da:3a: fa:c1:36:32:2c:01:e0:3d:53:00:ea:01:0d:ac:ff: 26:73:b6:1a:fe:85:4f:58:49:10:da:7c:4a:e4:50: c6:ee:f0:4a:1e:f0:2f:f3:e6:d8:ab:f1:ff:cf:2c: 2d:c6:6f:3b:7b:fe:7c:81:69:b2:c2:a6:a9:cf:34: 58:cb:4b:c5:d1:f7:58:02:d8:47:b7:24:fb:a2:07: 41:c6:01:eb:4f:a3:5e:4c:22:4e:ab:d1:fa:4a:dc: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:C8:74:D7:32:71:8A:F5:DE:75:8D:E0:9E:9B:1E:DD:21:98:82 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0v_IdNcycYr13nWN4J6bHt0hmII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.192.0/24 Signature Algorithm: sha256WithRSAEncryption 10:e4:0d:5d:bf:0d:b1:07:c6:61:47:0a:35:9a:80:af:ee:f0: b5:13:1f:ac:63:43:f1:b8:fb:59:51:df:1c:8f:ef:9a:17:c6: 0c:ab:39:97:e2:47:46:64:5d:8c:2b:e5:a2:cc:c5:fb:09:1e: bd:db:5f:75:18:b3:f3:b6:0c:aa:1a:a7:04:a9:98:14:07:45: 1e:0e:0c:d8:85:60:2f:f8:92:70:cc:a0:32:d0:47:75:55:a3: 70:65:c8:23:53:11:65:05:2f:7a:52:1a:3c:08:b7:16:2c:a0: 82:29:50:42:91:18:7d:59:26:48:41:9a:4f:ad:e4:1a:de:ea: 1a:b9:b4:1a:bb:fc:78:23:26:c3:68:e2:9b:07:43:c6:b6:de: 1d:82:e7:19:09:b2:d2:ac:45:62:6b:2a:fc:b3:98:51:e1:76: 12:27:a1:97:64:31:e3:04:e8:b1:90:4e:14:49:59:5c:24:38: e6:7b:1b:c4:d9:c2:86:3e:13:73:06:89:70:8c:21:53:36:38: a6:b0:ab:2d:ac:24:25:3c:b2:24:0f:59:c1:e9:a8:11:4b:c5: 89:b7:f9:b5:00:51:18:1d:9f:f6:9a:9c:91:c0:fd:12:fc:69: 96:90:bf:f9:2e:6f:2e:3e:2d:30:2c:37:eb:03:6a:ad:c8:3d: 87:ac:54:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWNSga2pzOgCG+avsvP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmZmYzg3NGQ3MzI3MThhZjVkZTc1OGRlMDllOWIxZWRkMjE5ODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPL8RJDL/uKnSxRT2t9rnZx0OXTi XnjhkOjzrXexoNhlDPmmPBG3spkS3Ktqt/i5pHCLghvrmz9yDqq5Pzdqmh+CuR8T jQmrHTgPLmKKhVC33Twf4aO3hSVRiAoonEBMQV11Yrwt84zcuzNV5N0rAbwAHpTC Qu5m4W/Stz/gAsAvjEUPyzpruHnyuyPDujAakuYreR2aA5QkyQmLdQUGs2/K2jr6 wTYyLAHgPVMA6gENrP8mc7Ya/oVPWEkQ2nxK5FDG7vBKHvAv8+bYq/H/zywtxm87 e/58gWmywqapzzRYy0vF0fdYAthHtyT7ogdBxgHrT6NeTCJOq9H6StxmNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNL/yHTXMnGK9d51jeCemx7dIZiCMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvMHZfSWROY3ljWXIxM25XTjRKNmJIdDBobUlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfAMA0G CSqGSIb3DQEBCwUAA4IBAQAQ5A1dvw2xB8ZhRwo1moCv7vC1Ex+sY0PxuPtZUd8c j++aF8YMqzmX4kdGZF2MK+WizMX7CR692191GLPztgyqGqcEqZgUB0UeDgzYhWAv +JJwzKAy0Ed1VaNwZcgjUxFlBS96Uho8CLcWLKCCKVBCkRh9WSZIQZpPreQa3uoa ubQau/x4IybDaOKbB0PGtt4dgucZCbLSrEViayr8s5hR4XYSJ6GXZDHjBOixkE4U SVlcJDjmexvE2cKGPhNzBolwjCFTNjimsKstrCQlPLIkD1nB6agRS8WJt/m1AFEY HZ/2mpyRwP0S/GmWkL/5Lm8uPi0wLDfrA2qtyD2HrFQo -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:28 2026 by rpki-client