This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v5ozZNIRjOqvivaI8Iyj5LtxjMo.roa File: v5ozZNIRjOqvivaI8Iyj5LtxjMo.roa (raw, json) Hash identifier: ISLd4Wt4QRjJwa3daMNoT+hewCupVr/VE3533pSd7uo= Subject key identifier: BF:9A:33:64:D2:11:8C:EA:AF:8A:F6:88:F0:8C:A3:E4:BB:71:8C:CA Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F856FABD4CFB9644AD5302BA8239AEA Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v5ozZNIRjOqvivaI8Iyj5LtxjMo.roa Signing time: Fri 02 Jan 2026 16:23:29 +0000 ROA not before: Fri 02 Jan 2026 16:23:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213755 IP address blocks: 212.192.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6f:ab:d4:cf:b9:64:4a:d5:30:2b:a8:23:9a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf9a3364d2118ceaaf8af688f08ca3e4bb718cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:49:b0:40:af:cb:45:25:01:f4:3c:86:9a: 8a:97:ea:52:ee:07:82:7d:7d:6c:77:07:9d:ef:b9: 6c:95:fd:20:18:08:21:bb:e0:0a:71:da:15:be:8b: 3a:4b:08:34:a7:8c:e8:ee:d4:ce:33:90:03:57:d3: b0:02:0c:25:7f:56:e8:45:c6:63:37:c8:98:0c:bd: 99:f6:e1:6b:1e:47:55:09:17:4c:c4:41:42:5c:0f: d6:41:b4:c7:71:07:bd:3c:d5:72:eb:94:e2:5a:16: 90:53:e2:09:c4:4d:8a:e7:f2:4a:4c:d7:4c:dc:b4: 9c:e1:63:ab:6b:6a:39:78:3b:83:4c:56:f7:0a:a7: b0:89:5c:37:8c:ad:1f:5c:da:d6:d2:4d:17:19:5c: 3c:e0:69:9a:9b:3d:5d:7e:e0:9c:0b:66:4e:2a:2b: ad:aa:44:95:45:f0:18:67:70:d4:6b:5d:76:81:ce: 37:ff:2f:cd:6f:d0:4d:ae:47:99:45:ea:10:4d:c1: d8:fe:68:10:56:da:71:bc:9c:ce:8d:09:ea:b1:98: e6:ce:68:c4:51:f6:cd:07:2c:a5:7b:a5:e2:59:b6: 55:d3:43:f3:19:0c:56:ab:71:16:25:04:1a:2c:45: 4f:f1:f5:d2:0b:41:d5:af:00:e6:36:72:a7:81:3d: 16:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9A:33:64:D2:11:8C:EA:AF:8A:F6:88:F0:8C:A3:E4:BB:71:8C:CA X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v5ozZNIRjOqvivaI8Iyj5LtxjMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.248.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:38:81:19:78:bf:e4:ac:3c:53:c2:37:68:7e:2c:a2:24:37: f8:85:7a:8c:f0:a3:71:dc:ac:cf:e0:4c:29:6c:3d:d0:1e:cc: 39:7d:bf:f1:83:c0:77:48:41:27:22:ed:e6:2e:35:b2:4a:18: ee:b7:64:cf:aa:99:53:31:fe:66:a4:61:c3:be:a4:f2:a1:d5: 83:2f:25:82:26:c1:00:04:98:89:a4:30:f9:f2:02:cf:40:c5: 52:da:47:5e:69:cf:0b:4f:77:0b:a0:b4:11:83:f9:82:2e:7b: eb:21:18:1a:0e:69:5b:14:be:95:b5:d0:e8:5c:bc:59:16:ff: d7:b0:ed:6f:40:44:27:34:6a:f6:87:29:bb:08:19:3d:15:a1: 7b:46:11:98:f8:69:13:df:f5:9f:9b:1c:79:01:84:fe:db:c0: 50:0f:26:89:e2:72:03:77:26:ad:05:bd:0f:f7:d8:c7:9e:e9: e2:f5:11:68:a2:5f:d3:71:74:f0:21:fe:97:2d:be:33:34:54: 14:fc:53:a9:f1:ef:2c:0b:a3:58:d3:6f:e8:58:7c:a6:2c:97: 5d:a1:a4:c3:20:40:2b:9f:e6:8e:c3:6c:4a:84:9e:e6:e4:43: 6c:f5:15:e1:b1:3f:8d:2e:59:00:1e:d4:64:b7:4e:e1:e1:c6: 6a:23:ec:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hW+r1M+5ZErVMCuoI5rqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjlhMzM2NGQyMTE4Y2VhYWY4YWY2ODhmMDhjYTNlNGJiNzE4Y2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljFJsECvy0UlAfQ8hpqKl+pS7geC fX1sdwed77lslf0gGAghu+AKcdoVvos6Swg0p4zo7tTOM5ADV9OwAgwlf1boRcZj N8iYDL2Z9uFrHkdVCRdMxEFCXA/WQbTHcQe9PNVy65TiWhaQU+IJxE2K5/JKTNdM 3LSc4WOra2o5eDuDTFb3CqewiVw3jK0fXNrW0k0XGVw84Gmamz1dfuCcC2ZOKiut qkSVRfAYZ3DUa112gc43/y/Nb9BNrkeZReoQTcHY/mgQVtpxvJzOjQnqsZjmzmjE UfbNByyle6XiWbZV00PzGQxWq3EWJQQaLEVP8fXSC0HVrwDmNnKngT0W0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+aM2TSEYzqr4r2iPCMo+S7cYzKMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvdjVvelpOSVJqT3F2aXZhSThJeWo1THR4ak1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MD4MA0G CSqGSIb3DQEBCwUAA4IBAQAfOIEZeL/krDxTwjdofiyiJDf4hXqM8KNx3KzP4Ewp bD3QHsw5fb/xg8B3SEEnIu3mLjWyShjut2TPqplTMf5mpGHDvqTyodWDLyWCJsEA BJiJpDD58gLPQMVS2kdeac8LT3cLoLQRg/mCLnvrIRgaDmlbFL6VtdDoXLxZFv/X sO1vQEQnNGr2hym7CBk9FaF7RhGY+GkT3/Wfmxx5AYT+28BQDyaJ4nIDdyatBb0P 99jHnuni9RFool/TcXTwIf6XLb4zNFQU/FOp8e8sC6NY02/oWHymLJddoaTDIEAr n+aOw2xKhJ7m5ENs9RXhsT+NLlkAHtRkt07h4cZqI+yG -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:03 2026 by rpki-client