This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/0vQnyQ3hXqzpV2UPPOpTPgINrk4.roa File: 0vQnyQ3hXqzpV2UPPOpTPgINrk4.roa (raw, json) Hash identifier: 4algmiejEZMto+7PZwa7gie6uv+uFN+W8bKhST4lB6M= Subject key identifier: D2:F4:27:C9:0D:E1:5E:AC:E9:57:65:0F:3C:EA:53:3E:02:0D:AE:4E Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207 Certificate serial: 019B7C800BCB23498798A59844D94CA04037 Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/0vQnyQ3hXqzpV2UPPOpTPgINrk4.roa Signing time: Fri 02 Jan 2026 02:18:44 +0000 ROA not before: Fri 02 Jan 2026 02:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198467 IP address blocks: 195.254.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0b:cb:23:49:87:98:a5:98:44:d9:4c:a0:40:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207 Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2f427c90de15eace957650f3cea533e020dae4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a7:45:64:5b:f9:96:36:b6:66:af:38:c8:2a: e2:d5:77:3a:38:d0:54:1b:2c:fe:79:47:6c:aa:4e: 37:f3:fb:53:3f:48:8a:99:2a:87:3a:ff:b3:75:8e: 7a:bf:a6:23:f3:56:fc:38:9d:16:29:90:7c:be:4d: 8a:39:4f:81:e9:18:79:99:d8:3b:b7:bb:0a:76:8f: 99:d5:9a:b9:c1:4c:a3:de:20:25:71:a0:d1:8f:ad: 55:b9:21:81:2b:0e:07:0b:4f:fe:02:77:6c:e2:44: a7:74:ca:12:03:08:a6:da:f1:c4:6b:0e:75:c4:8a: e0:c4:a4:8e:be:ef:5d:35:b5:72:d3:56:58:0c:7a: f9:61:99:f6:69:74:55:60:ab:46:f0:e5:66:2f:df: 9c:92:1d:c5:2e:bf:f1:51:6f:1a:94:c0:b9:a5:41: 31:8d:7e:77:60:c3:8a:c3:28:ec:d4:81:67:8d:d0: 1d:4f:7d:b1:b5:e7:d9:57:38:43:ec:c3:83:7c:9b: 2f:08:d2:c7:f1:ae:23:02:d8:54:c3:97:8c:87:18: 34:34:99:67:5b:22:af:bb:01:1d:fc:9f:63:cf:41: 2c:7d:2d:70:ff:9a:f9:ee:dd:7d:0a:cf:82:54:ce: 27:a0:5d:53:9f:55:8c:a2:f6:0b:9e:8b:57:88:1d: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F4:27:C9:0D:E1:5E:AC:E9:57:65:0F:3C:EA:53:3E:02:0D:AE:4E X509v3 Authority Key Identifier: keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/0vQnyQ3hXqzpV2UPPOpTPgINrk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.176.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:bb:70:14:3b:f2:3f:0c:e5:d4:13:82:9e:99:76:c2:9f:2a: 43:d7:34:2d:e9:f1:9d:e0:79:85:e6:bc:cd:78:d6:6b:c6:84: f8:cf:91:cc:81:ea:15:eb:9e:eb:bd:60:7e:7f:aa:cd:e1:34: 9a:9b:a6:37:10:e9:b4:0a:f9:c0:88:a9:56:be:5b:7f:ae:03: f8:31:44:f2:17:09:05:d7:55:75:d1:ef:12:57:32:69:02:29: 2b:8f:10:d5:32:03:d9:c7:bc:08:c0:31:3c:2f:e2:a5:22:85: d8:1a:39:8f:eb:a9:d7:14:2f:f3:65:03:27:ee:0c:d7:e2:f1: f3:1f:4d:78:68:c8:74:97:3e:77:2e:c5:f6:b8:53:85:49:a6: 47:68:80:64:b7:fc:3f:01:5b:88:36:a5:06:d1:9d:75:9d:f6: 71:4c:f0:bc:02:9a:96:0d:ed:58:c4:dd:90:f0:b8:fb:1e:93: 8c:40:23:77:2a:0c:85:55:dc:dd:cd:2f:c2:95:48:bf:bf:2e: 41:5d:33:5d:80:30:93:da:25:29:c2:df:82:bb:3b:90:e6:14: dc:34:d4:ca:fb:4b:b7:b3:1e:fb:42:a1:1d:6c:2c:e0:89:35: 90:a0:6f:ef:f7:d8:fe:ee:25:97:af:5b:db:43:ad:ed:a8:39: c3:05:7d:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gAvLI0mHmKWYRNlMoEA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWU0NzBlOTBkNWViZGRjY2FhOWNmNmJiMjJlODlkZTBk OWYyMDcwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY0MjdjOTBkZTE1ZWFjZTk1NzY1MGYzY2VhNTMzZTAyMGRhZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6dFZFv5lja2Zq84yCri1Xc6ONBU Gyz+eUdsqk438/tTP0iKmSqHOv+zdY56v6Yj81b8OJ0WKZB8vk2KOU+B6Rh5mdg7 t7sKdo+Z1Zq5wUyj3iAlcaDRj61VuSGBKw4HC0/+Ands4kSndMoSAwim2vHEaw51 xIrgxKSOvu9dNbVy01ZYDHr5YZn2aXRVYKtG8OVmL9+ckh3FLr/xUW8alMC5pUEx jX53YMOKwyjs1IFnjdAdT32xtefZVzhD7MODfJsvCNLH8a4jAthUw5eMhxg0NJln WyKvuwEd/J9jz0EsfS1w/5r57t19Cs+CVM4noF1Tn1WMovYLnotXiB12JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNL0J8kN4V6s6VdlDzzqUz4CDa5OMB8GA1UdIwQY MBaAFGteRw6Q1evdzKqc9rsi6J3g2fIHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQt ZWViNmRhYTc1ZWM1LzEvMHZRbnlRM2hYcXpwVjJVUFBPcFRQZ0lOcms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQtZWViNmRhYTc1ZWM1 LzEvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/6wMA0G CSqGSIb3DQEBCwUAA4IBAQANu3AUO/I/DOXUE4KemXbCnypD1zQt6fGd4HmF5rzN eNZrxoT4z5HMgeoV657rvWB+f6rN4TSam6Y3EOm0CvnAiKlWvlt/rgP4MUTyFwkF 11V10e8SVzJpAikrjxDVMgPZx7wIwDE8L+KlIoXYGjmP66nXFC/zZQMn7gzX4vHz H014aMh0lz53LsX2uFOFSaZHaIBkt/w/AVuINqUG0Z11nfZxTPC8ApqWDe1YxN2Q 8Lj7HpOMQCN3KgyFVdzdzS/ClUi/vy5BXTNdgDCT2iUpwt+CuzuQ5hTcNNTK+0u3 sx77QqEdbCzgiTWQoG/v99j+7iWXr1vbQ63tqDnDBX3i -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:23 2026 by rpki-client