This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/0sUgrxZJElJI75bHc4PMJv-m6Hg.roa File: 0sUgrxZJElJI75bHc4PMJv-m6Hg.roa (raw, json) Hash identifier: 2W0uHz9I3ibHN2TiwFffgNpABHgMMaB3ZZQbo22uvH0= Subject key identifier: D2:C5:20:AF:16:49:12:52:48:EF:96:C7:73:83:CC:26:FF:A6:E8:78 Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68 Certificate serial: 019B7BA4F6D26E588C7AEF7091F5C8D22B95 Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/0sUgrxZJElJI75bHc4PMJv-m6Hg.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28731 IP address blocks: 217.14.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f6:d2:6e:58:8c:7a:ef:70:91:f5:c8:d2:2b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68 Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2c520af1649125248ef96c77383cc26ffa6e878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:3e:f0:e3:ef:46:dd:cd:f3:c7:d7:51:b3: 01:3b:5c:9c:a6:22:8a:47:de:af:29:fd:91:ac:3a: af:6c:10:51:c7:d7:c7:a6:c4:7d:02:16:d4:3f:89: 07:b3:ea:f6:f9:cb:3b:b8:65:4d:2f:d7:d9:05:ed: 5b:d9:98:4d:68:cd:54:12:8c:d0:90:3b:0d:d2:d7: 7a:e0:82:8a:6d:4e:6a:65:95:2b:84:f2:06:4d:39: cf:46:8e:52:c4:e9:b1:28:55:cb:8a:48:ba:b4:cf: 18:e4:97:ea:86:f1:67:69:e4:50:c3:d8:8f:a0:04: 2f:15:34:50:17:ab:0b:bb:46:22:ef:96:7a:ec:7d: 85:d7:2c:d4:17:d0:89:2b:c9:57:06:f3:d7:a5:e0: d7:1c:d6:d0:af:ea:69:e8:09:80:d5:65:b0:8b:28: 72:f5:20:33:34:a3:cc:87:0b:c1:25:d2:3d:b8:be: 4a:f8:29:08:13:88:f8:ee:78:c9:90:0f:10:52:da: bf:03:55:1c:36:a2:f4:f5:5b:cc:d9:87:6d:d0:ad: ad:a5:f5:4f:f6:c6:fe:a5:d0:3d:a0:2e:01:18:f4: 77:d6:d9:4a:0d:f1:0c:23:51:cf:5d:7b:d3:63:13: b0:82:db:b9:06:f8:7e:90:d9:74:d8:87:77:37:dc: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C5:20:AF:16:49:12:52:48:EF:96:C7:73:83:CC:26:FF:A6:E8:78 X509v3 Authority Key Identifier: keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/0sUgrxZJElJI75bHc4PMJv-m6Hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.14.144.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:56:99:07:27:1f:50:c5:44:aa:34:0b:0d:5a:8c:7b:d2:02: 6c:54:5c:14:e6:f8:3f:d9:46:12:98:e7:0c:e2:03:6a:6f:6c: 99:7f:51:b0:a3:02:58:c9:7d:c8:21:88:e8:dd:2e:de:b7:2c: 87:c6:a5:a2:61:a7:c0:d8:a8:6f:f4:ba:1c:72:05:66:b9:2d: b0:61:15:6d:1a:ad:68:7a:0c:03:2d:77:73:ca:ce:f7:0a:cd: 3f:cd:0f:6d:e1:4a:de:64:08:e4:49:02:fb:9a:fa:93:fa:78: 56:86:62:6c:b7:4e:0e:f4:bb:a6:ac:16:1e:4d:5f:8e:ed:86: 22:2d:cd:79:6d:1e:1b:64:77:d3:d3:44:b0:4a:74:f7:41:46: ee:8e:7d:da:58:b7:66:2d:38:27:07:bb:13:af:12:03:bb:5d: 29:47:da:f8:a1:05:bf:8a:fc:aa:05:7e:5c:b4:88:9b:18:4e: 2b:7c:52:40:41:85:6f:42:77:ab:99:11:a5:d5:d1:99:5b:bd: 92:b9:df:82:a6:ca:b8:bd:fd:09:57:ae:65:93:2f:2a:44:fd: 82:3b:c7:9b:62:3e:2c:ce:6a:62:14:d7:e0:2f:07:ec:89:46: f2:d0:8f:4f:fd:06:f5:89:2d:24:c6:3d:0d:92:10:7f:32:c5: 49:5b:b8:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPbSbliMeu9wkfXI0iuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MzQwMDc0MTRjZmYxNmNkY2YzYTNhYTIyYTk2Njc3Zjhi ZTJiNjgwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmM1MjBhZjE2NDkxMjUyNDhlZjk2Yzc3MzgzY2MyNmZmYTZlODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGo+8OPvRt3N88fXUbMBO1ycpiKK R96vKf2RrDqvbBBRx9fHpsR9AhbUP4kHs+r2+cs7uGVNL9fZBe1b2ZhNaM1UEozQ kDsN0td64IKKbU5qZZUrhPIGTTnPRo5SxOmxKFXLiki6tM8Y5JfqhvFnaeRQw9iP oAQvFTRQF6sLu0Yi75Z67H2F1yzUF9CJK8lXBvPXpeDXHNbQr+pp6AmA1WWwiyhy 9SAzNKPMhwvBJdI9uL5K+CkIE4j47njJkA8QUtq/A1UcNqL09VvM2Ydt0K2tpfVP 9sb+pdA9oC4BGPR31tlKDfEMI1HPXXvTYxOwgtu5Bvh+kNl02Id3N9x80QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLFIK8WSRJSSO+Wx3ODzCb/puh4MB8GA1UdIwQY MBaAFNY0AHQUz/Fs3POjqiKpZnf4vitoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2Yzgt ZGVjYjkyZDFhNTIzLzEvMHNVZ3J4WkpFbEpJNzViSGM0UE1Kdi1tNkhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2YzgtZGVjYjkyZDFhNTIz LzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2Q6QMA0G CSqGSIb3DQEBCwUAA4IBAQAMVpkHJx9QxUSqNAsNWox70gJsVFwU5vg/2UYSmOcM 4gNqb2yZf1GwowJYyX3IIYjo3S7etyyHxqWiYafA2Khv9LoccgVmuS2wYRVtGq1o egwDLXdzys73Cs0/zQ9t4UreZAjkSQL7mvqT+nhWhmJst04O9LumrBYeTV+O7YYi Lc15bR4bZHfT00SwSnT3QUbujn3aWLdmLTgnB7sTrxIDu10pR9r4oQW/ivyqBX5c tIibGE4rfFJAQYVvQnermRGl1dGZW72Sud+Cpsq4vf0JV65lky8qRP2CO8ebYj4s zmpiFNfgLwfsiUby0I9P/Qb1iS0kxj0NkhB/MsVJW7gi -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:20 2026 by rpki-client