This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/DvcjVJOkMRapOd1S3buwBoLNCuM.roa File: DvcjVJOkMRapOd1S3buwBoLNCuM.roa (raw, json) Hash identifier: PhgxUgpvf/qnyzn1ZNECv/I05gKGU5HogGKChSYsZr8= Subject key identifier: 0E:F7:23:54:93:A4:31:16:A9:39:DD:52:DD:BB:B0:06:82:CD:0A:E3 Certificate issuer: /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Certificate serial: 019B7F827988B8A10F90A9B3E94CBD811580 Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/DvcjVJOkMRapOd1S3buwBoLNCuM.roa Signing time: Fri 02 Jan 2026 16:20:15 +0000 ROA not before: Fri 02 Jan 2026 16:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 194.130.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:79:88:b8:a1:0f:90:a9:b3:e9:4c:bd:81:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Validity Not Before: Jan 2 16:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ef7235493a43116a939dd52ddbbb00682cd0ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:dc:97:37:5d:d9:b6:a4:ad:8d:38:eb:b0: dc:73:5d:7d:d0:8d:57:09:50:2a:86:6b:d2:26:ee: 67:4a:3d:ce:f8:49:c8:16:d5:bb:ec:e5:95:77:df: 48:21:66:54:3c:f9:9b:b5:86:a5:fe:4d:7b:97:13: 6c:7d:e2:39:d5:bb:3b:4a:fc:18:89:07:d6:a8:93: 9a:b0:ae:0c:eb:37:f7:df:e9:c7:b2:52:82:46:cc: 09:c6:b5:f2:0b:b6:70:f2:dd:e0:10:56:5f:e9:f2: 59:c2:34:16:54:e4:be:2f:fc:ad:8d:5a:d3:49:79: e8:3b:68:c6:fc:e8:27:71:fa:da:b0:3d:6e:33:af: da:b5:e1:a7:c6:13:d0:85:33:d8:d5:be:12:d4:01: ee:14:bb:38:27:41:61:e4:c2:bb:b6:05:10:a3:d1: 23:74:85:a0:55:f5:94:55:21:cc:4c:dd:0f:98:a7: a9:6c:4a:e3:a4:a6:ca:aa:6c:6e:a3:4c:5e:3f:e7: c2:e3:6a:62:8a:80:f4:9d:68:a3:2a:44:08:38:7e: 69:35:11:ab:e1:84:e2:11:cc:c5:eb:17:50:8e:07: 96:22:a3:d7:b0:34:97:ae:2f:85:ae:d1:f9:47:eb: c1:5b:6f:25:f4:36:ed:29:c2:e6:03:cd:08:f7:07: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F7:23:54:93:A4:31:16:A9:39:DD:52:DD:BB:B0:06:82:CD:0A:E3 X509v3 Authority Key Identifier: keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/DvcjVJOkMRapOd1S3buwBoLNCuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.130.116.0/23 Signature Algorithm: sha256WithRSAEncryption 54:9b:c8:be:85:f5:93:3c:2f:c9:af:05:f2:0e:24:82:a7:33: 6f:2f:9c:24:7f:42:ff:78:c2:39:00:75:8f:21:b4:bd:f7:7a: 05:be:62:ab:d9:0f:4a:13:f1:16:63:fe:49:a3:e9:d8:6a:2d: f9:8a:c2:ee:e4:6b:8a:fc:46:03:72:fb:10:5e:a7:27:f7:22: d6:68:5d:46:d8:3e:c5:da:2f:ec:2b:4e:0c:9a:d2:82:7d:f7: 38:bd:ef:3d:cc:e1:79:09:7d:8b:e9:bb:95:bf:c3:32:c6:c7: 98:db:28:98:80:2b:38:28:8c:bd:a7:15:39:c4:61:ad:59:df: fd:7b:ee:ea:2b:4d:29:d2:22:68:75:c3:31:f5:e3:20:2b:60: 4c:a7:89:a7:11:af:9a:8f:5a:fb:48:51:23:a5:3c:69:4a:6f: 1e:41:00:bd:a1:14:a5:9c:e9:7b:fd:61:82:cd:ab:36:c2:96: 32:a6:6e:54:3e:41:2d:e3:59:1c:5a:ad:df:65:95:56:f0:3d: 6d:3d:d7:89:e0:03:01:63:62:f7:0f:d3:df:6a:3f:c2:58:db: 92:47:b6:57:b2:2b:6f:55:24:69:33:b6:20:6a:8f:73:cd:03: 40:cf:be:e9:13:b0:3c:e4:fb:dc:c8:23:ad:08:ea:a8:1a:a3: eb:cd:5a:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gnmIuKEPkKmz6Uy9gRWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm N2YwNTQwHhcNMjYwMTAyMTYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWY3MjM1NDkzYTQzMTE2YTkzOWRkNTJkZGJiYjAwNjgyY2QwYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkTclzdd2bakrY0467Dcc1190I1X CVAqhmvSJu5nSj3O+EnIFtW77OWVd99IIWZUPPmbtYal/k17lxNsfeI51bs7SvwY iQfWqJOasK4M6zf33+nHslKCRswJxrXyC7Zw8t3gEFZf6fJZwjQWVOS+L/ytjVrT SXnoO2jG/OgncfrasD1uM6/ateGnxhPQhTPY1b4S1AHuFLs4J0Fh5MK7tgUQo9Ej dIWgVfWUVSHMTN0PmKepbErjpKbKqmxuo0xeP+fC42piioD0nWijKkQIOH5pNRGr 4YTiEczF6xdQjgeWIqPXsDSXri+FrtH5R+vBW28l9DbtKcLmA80I9wfJYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA73I1STpDEWqTndUt27sAaCzQrjMB8GA1UdIwQY MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct MTE3NWU1YTA3YTU1LzEvRHZjalZKT2tNUmFwT2QxUzNidXdCb0xOQ3VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1 LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwoJ0MA0G CSqGSIb3DQEBCwUAA4IBAQBUm8i+hfWTPC/JrwXyDiSCpzNvL5wkf0L/eMI5AHWP IbS993oFvmKr2Q9KE/EWY/5Jo+nYai35isLu5GuK/EYDcvsQXqcn9yLWaF1G2D7F 2i/sK04MmtKCffc4ve89zOF5CX2L6buVv8MyxseY2yiYgCs4KIy9pxU5xGGtWd/9 e+7qK00p0iJodcMx9eMgK2BMp4mnEa+aj1r7SFEjpTxpSm8eQQC9oRSlnOl7/WGC zas2wpYypm5UPkEt41kcWq3fZZVW8D1tPdeJ4AMBY2L3D9Pfaj/CWNuSR7ZXsitv VSRpM7Ygao9zzQNAz77pE7A85PvcyCOtCOqoGqPrzVo6 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:27 2026 by rpki-client