This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0PFAsQVAIlYRK2hfqWl9uqptiW8.roa File: 0PFAsQVAIlYRK2hfqWl9uqptiW8.roa (raw, json) Hash identifier: a3R2G7B41CVs6ApiWzlbvL8z5GPJvNWJW83MEN3yaCQ= Subject key identifier: D0:F1:40:B1:05:40:22:56:11:2B:68:5F:A9:69:7D:BA:AA:6D:89:6F Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A331F7B2E26CAB287C1DF2C1C4B18A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0PFAsQVAIlYRK2hfqWl9uqptiW8.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205220 IP address blocks: 194.180.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:31:f7:b2:e2:6c:ab:28:7c:1d:f2:c1:c4:b1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0f140b105402256112b685fa9697dbaaa6d896f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:55:4e:f1:35:22:fb:62:48:c5:22:f0:04: 47:6c:d5:8f:2a:88:5f:70:18:14:2d:ef:85:05:09: d5:4d:22:1d:d8:25:23:83:e5:62:74:08:77:70:5f: 77:52:42:1b:5e:73:26:06:d1:5e:c0:ec:00:1f:a1: 11:93:24:27:68:7b:77:bf:53:f2:58:9a:31:13:42: 2a:4c:3d:73:d0:0d:d2:70:a7:e6:d3:8c:f0:8f:58: 6f:18:97:dc:a2:36:72:34:93:64:78:30:de:0d:48: 01:31:4a:64:61:1d:ce:f6:6a:f6:1b:8e:4d:96:f4: 80:0d:a5:8f:1b:b2:46:a1:df:d2:1f:e2:ef:4a:9c: b6:1d:49:cf:68:1e:53:22:5d:fa:fd:ca:72:b9:35: af:fe:d2:74:d9:e5:f7:76:05:03:ae:b0:e8:d4:3e: fe:11:b9:23:27:2e:76:22:9d:ad:ed:f2:a9:b0:5d: c3:2f:ca:2d:b3:1b:93:92:4b:60:29:1c:67:4f:f8: 3a:42:36:a4:d0:08:5d:2d:2c:4c:64:cf:bb:14:12: 86:32:d4:bd:4b:7b:dd:c7:c7:3f:f9:a7:6f:13:3c: f0:98:5d:49:35:64:57:99:b1:d7:d4:c9:f8:b8:9e: 24:ea:24:32:32:b1:02:f1:a1:f8:85:5c:b7:2b:7e: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:40:B1:05:40:22:56:11:2B:68:5F:A9:69:7D:BA:AA:6D:89:6F X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0PFAsQVAIlYRK2hfqWl9uqptiW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.37.0/24 Signature Algorithm: sha256WithRSAEncryption 21:70:20:fe:da:7c:5c:8a:4d:8b:88:f2:2a:c0:b6:f4:03:d6: eb:fc:dc:96:43:ff:46:34:3e:5e:89:09:35:8e:3b:be:fd:93: 68:e3:00:c3:89:b3:03:cd:89:2c:11:e5:e3:90:e4:29:5b:d8: cc:ac:c0:75:e1:a2:93:43:a6:c6:fd:f6:15:dc:b4:bc:fa:e1: 24:b9:05:f4:6a:26:ff:28:2f:02:04:c6:b8:7b:0f:bc:be:d7: e1:f7:d7:6f:82:da:14:94:f1:a8:14:ff:75:db:54:1e:89:3f: 18:26:68:cf:b8:d5:7e:72:66:5a:80:25:79:6c:b0:13:2d:77: ce:07:cd:ad:8f:1c:c4:d3:99:11:6e:74:bc:e1:9d:31:3c:57: 23:2e:4f:57:6a:65:0d:74:f4:19:f0:bb:6c:6a:94:d3:7f:54: 67:b6:86:ba:1b:07:7a:05:b4:b8:3e:a3:2b:9c:d7:65:8e:fa: e7:18:fd:64:34:4c:c1:68:77:41:3d:ab:b7:a2:09:48:b1:20: d3:74:85:44:7c:5d:0a:4d:23:c0:59:60:6d:c9:bd:37:03:05: 9a:78:a6:00:82:99:ce:95:70:0d:fa:17:2b:d7:2b:26:a5:c9: e9:81:5e:7d:52:ec:2c:fa:b1:f2:21:a2:76:30:96:e8:b3:7e: 6f:d0:31:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozH3suJsqyh8HfLBxLGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGYxNDBiMTA1NDAyMjU2MTEyYjY4NWZhOTY5N2RiYWFhNmQ4OTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr1VTvE1IvtiSMUi8ARHbNWPKohf cBgULe+FBQnVTSId2CUjg+VidAh3cF93UkIbXnMmBtFewOwAH6ERkyQnaHt3v1Py WJoxE0IqTD1z0A3ScKfm04zwj1hvGJfcojZyNJNkeDDeDUgBMUpkYR3O9mr2G45N lvSADaWPG7JGod/SH+LvSpy2HUnPaB5TIl36/cpyuTWv/tJ02eX3dgUDrrDo1D7+ EbkjJy52Ip2t7fKpsF3DL8otsxuTkktgKRxnT/g6Qjak0AhdLSxMZM+7FBKGMtS9 S3vdx8c/+advEzzwmF1JNWRXmbHX1Mn4uJ4k6iQyMrEC8aH4hVy3K37aQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNDxQLEFQCJWEStoX6lpfbqqbYlvMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvMFBGQXNRVkFJbFlSSzJoZnFXbDl1cXB0aVc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrQlMA0G CSqGSIb3DQEBCwUAA4IBAQAhcCD+2nxcik2LiPIqwLb0A9br/NyWQ/9GND5eiQk1 jju+/ZNo4wDDibMDzYksEeXjkOQpW9jMrMB14aKTQ6bG/fYV3LS8+uEkuQX0aib/ KC8CBMa4ew+8vtfh99dvgtoUlPGoFP9121QeiT8YJmjPuNV+cmZagCV5bLATLXfO B82tjxzE05kRbnS84Z0xPFcjLk9XamUNdPQZ8LtsapTTf1Rntoa6Gwd6BbS4PqMr nNdljvrnGP1kNEzBaHdBPau3oglIsSDTdIVEfF0KTSPAWWBtyb03AwWaeKYAgpnO lXAN+hcr1ysmpcnpgV59Uuws+rHyIaJ2MJbos35v0DG8 -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:58 2026 by rpki-client