This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/ds5dJRDzI4acHa9XOzintQa8R70.roa File: ds5dJRDzI4acHa9XOzintQa8R70.roa (raw, json) Hash identifier: NSHUOHDDYeCqlj4/tHZIL/eLYAJljLX9kfG+BuqGIqs= Subject key identifier: 76:CE:5D:25:10:F3:23:86:9C:1D:AF:57:3B:38:A7:B5:06:BC:47:BD Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384 Certificate serial: 019B7758FDFF9E0BBFADF2BF8EA68DB59F61 Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/ds5dJRDzI4acHa9XOzintQa8R70.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 193.17.185.0/24 maxlen: 24 193.17.186.0/24 maxlen: 24 195.234.152.0/24 maxlen: 24 2001:67c:1514::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fd:ff:9e:0b:bf:ad:f2:bf:8e:a6:8d:b5:9f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76ce5d2510f323869c1daf573b38a7b506bc47bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:6a:7b:44:1d:02:62:00:06:9a:b0:36:ea: a0:74:44:f5:e1:d8:52:2d:27:75:bd:bb:7d:46:fb: 9b:86:bd:07:b7:4c:52:76:1f:82:6d:0c:94:d9:82: cf:07:9d:4d:83:6f:b0:27:e8:7e:1d:47:6d:ab:c4: d3:d1:03:f7:4b:15:e8:1c:1a:8b:10:ad:2f:a3:dc: 21:d2:e4:9b:39:ac:d6:4e:3a:5b:f7:5d:dc:9a:31: fb:90:61:be:40:4f:fa:9d:00:6d:7b:e7:5a:de:ce: 6e:f6:c4:56:27:16:ee:66:44:7b:ae:d9:fe:97:3d: 89:d5:ee:6e:6e:a6:0e:a4:ba:83:0d:38:03:b4:ad: dc:67:4f:2d:6d:4d:d1:8b:e1:80:e6:f4:b7:9d:92: 60:2e:dd:fa:a5:a6:c2:ff:a5:82:05:06:b5:6a:46: 30:1b:ba:a0:cc:7a:27:1f:e7:56:00:87:dc:a7:44: b9:7c:f6:9c:fe:a7:ad:d2:8c:a5:e8:66:89:0c:d8: a6:cc:b3:8d:d0:f9:e8:9b:90:0e:35:e9:e4:7e:b3: 82:b5:8a:31:01:c3:0e:01:f7:0b:22:55:92:3b:00: e9:c2:d0:51:03:9b:24:a0:e6:95:f5:db:8a:ba:8e: 76:76:0f:ac:ce:c2:08:7b:95:ae:5b:bc:76:d3:c1: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CE:5D:25:10:F3:23:86:9C:1D:AF:57:3B:38:A7:B5:06:BC:47:BD X509v3 Authority Key Identifier: keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/ds5dJRDzI4acHa9XOzintQa8R70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.185.0-193.17.186.255 195.234.152.0/24 IPv6: 2001:67c:1514::/48 Signature Algorithm: sha256WithRSAEncryption 16:6d:4a:58:62:e6:0e:6a:f3:93:62:8a:47:ff:63:1e:56:6f: 7e:66:60:f5:5d:8f:c7:f2:3b:d3:7d:d7:25:d3:18:34:7a:96: a4:19:1a:c9:66:44:11:c4:82:2a:3f:e2:17:73:4e:8f:89:58: c5:c2:c4:c9:eb:29:18:45:fb:80:c9:db:f5:ce:23:c6:94:f6: 48:82:52:b5:f7:e1:1f:2a:c9:ce:15:13:23:a0:0c:c4:38:0d: 3e:14:eb:ad:e7:ab:3a:59:a6:e8:20:f4:d8:5b:c1:ff:c5:b2: e1:c3:54:e9:52:42:e1:9e:0a:23:41:70:b4:e5:46:a3:e5:05: 53:42:e0:e9:34:c8:09:57:70:be:63:37:22:68:9b:2f:be:05: b9:85:34:34:df:b6:a0:ca:3d:07:14:75:a3:aa:9d:a1:d2:32: 56:93:9d:f9:05:1f:01:c0:76:62:54:39:ef:a2:71:78:f4:20: d1:80:36:f9:58:e5:99:ba:06:67:23:2b:97:34:e3:2f:07:d5: f4:3f:5a:04:4f:06:ae:90:e0:9d:3b:19:cc:26:f8:ae:2e:32: 29:57:b6:ff:72:b1:a0:de:0d:9c:6b:9d:42:ad:21:0a:e6:26: 88:93:72:78:3d:ef:94:60:e5:2d:b0:e4:b7:d6:c9:31:65:47: 1f:e7:07:76 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt3WP3/ngu/rfK/jqaNtZ9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOTU1MzNlZjQ3ZmQ5NGI4YzU1NGRmM2QyMjhlZWRjZDRj YTAzODQwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmNlNWQyNTEwZjMyMzg2OWMxZGFmNTczYjM4YTdiNTA2YmM0N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWxqe0QdAmIABpqwNuqgdET14dhS LSd1vbt9Rvubhr0Ht0xSdh+CbQyU2YLPB51Ng2+wJ+h+HUdtq8TT0QP3SxXoHBqL EK0vo9wh0uSbOazWTjpb913cmjH7kGG+QE/6nQBte+da3s5u9sRWJxbuZkR7rtn+ lz2J1e5ubqYOpLqDDTgDtK3cZ08tbU3Ri+GA5vS3nZJgLt36pabC/6WCBQa1akYw G7qgzHonH+dWAIfcp0S5fPac/qet0oyl6GaJDNimzLON0Pnom5AONenkfrOCtYox AcMOAfcLIlWSOwDpwtBRA5skoOaV9duKuo52dg+szsIIe5WuW7x208FjXQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFHbOXSUQ8yOGnB2vVzs4p7UGvEe9MB8GA1UdIwQY MBaAFO2VUz70f9lLjFVN89Io7tzUygOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUt MTRkYTc5ZDZjM2FhLzEvZHM1ZEpSRHpJNGFjSGE5WE96aW50UWE4UjcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUtMTRkYTc5ZDZjM2Fh LzEvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBADBEbkD BADBEboDBADD6pgwDwQCAAIwCQMHACABBnwVFDANBgkqhkiG9w0BAQsFAAOCAQEA Fm1KWGLmDmrzk2KKR/9jHlZvfmZg9V2Px/I7033XJdMYNHqWpBkayWZEEcSCKj/i F3NOj4lYxcLEyespGEX7gMnb9c4jxpT2SIJStffhHyrJzhUTI6AMxDgNPhTrreer Olmm6CD02FvB/8Wy4cNU6VJC4Z4KI0FwtOVGo+UFU0Lg6TTICVdwvmM3ImibL74F uYU0NN+2oMo9BxR1o6qdodIyVpOd+QUfAcB2YlQ576JxePQg0YA2+VjlmboGZyMr lzTjLwfV9D9aBE8GrpDgnTsZzCb4ri4yKVe2/3KxoN4NnGudQq0hCuYmiJNyeD3v lGDlLbDkt9bJMWVHH+cHdg== -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:28 2026 by rpki-client