This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa File: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (raw, json) Hash identifier: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss= Subject key identifier: AD:38:02:EC:F2:C1:30:51:E1:76:99:77:7C:11:D6:68:F1:99:3F:F6 Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860 Certificate serial: 019B77C6F031EA1D346A879D3BBECC495D5C Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206143 IP address blocks: 185.195.62.0/24 maxlen: 24 185.195.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f0:31:ea:1d:34:6a:87:9d:3b:be:cc:49:5d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad3802ecf2c13051e17699777c11d668f1993ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:c9:a8:02:f0:33:e0:69:8c:f6:43:b8:5d: ee:3e:9a:52:d1:b2:89:4c:aa:3e:6c:f5:cd:ac:f9: 8a:5a:3f:1c:9e:35:c6:44:c8:a6:92:1c:14:a4:36: d1:76:fc:2a:74:e5:ef:b1:04:e8:6d:6a:22:0c:fd: c6:03:69:39:7a:9f:fa:71:ce:fe:c8:e5:7e:d1:19: c5:71:2d:59:32:70:4c:1b:24:07:e5:2e:d3:74:d8: dd:ed:0e:2c:c6:39:09:18:dd:56:cb:65:ea:ba:01: 5d:21:8a:9e:64:2c:2c:96:a6:6c:a2:07:d9:d5:16: ea:3f:87:c7:c2:a4:fa:10:c9:12:e6:78:db:ab:9e: 7a:0a:4f:a2:45:eb:ea:ab:c0:e0:47:5c:05:95:38: 05:f6:57:a5:68:54:cd:c5:5f:85:f9:12:59:27:c7: d9:69:08:96:d0:1f:96:22:07:28:23:1d:17:25:26: f3:c0:c9:8f:d6:d1:60:bb:37:01:2f:55:dc:bf:da: 85:51:0d:d8:06:0e:8a:3b:8e:4d:d6:51:e7:9f:7b: dd:6e:14:4a:68:a3:4a:00:7f:b9:3f:b4:24:0b:54: e1:4b:01:f8:8c:47:2e:ca:ba:be:85:7e:c8:5a:9b: 43:73:5f:9a:21:f1:58:5e:4a:7d:ee:a0:ae:43:a4: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:38:02:EC:F2:C1:30:51:E1:76:99:77:7C:11:D6:68:F1:99:3F:F6 X509v3 Authority Key Identifier: keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.62.0/23 Signature Algorithm: sha256WithRSAEncryption 66:78:ff:70:3b:3f:9c:27:d7:cc:6f:0f:f1:60:9a:d7:ca:2f: c7:8a:dc:88:e6:29:30:ee:0d:b3:03:35:1c:21:48:1e:36:e1: 9f:58:86:9e:8f:91:ed:f0:91:80:53:f2:a9:f5:88:01:e2:1c: 22:70:3c:fc:5e:f2:82:27:52:e9:d5:3f:4c:9f:27:4b:06:11: cb:a4:95:f4:83:d2:fe:4e:b0:57:97:af:62:f0:a3:1a:08:92: 41:bb:ab:06:12:b2:ba:e8:64:ec:2e:67:06:03:a9:4f:9e:c7: 59:c0:bf:95:f3:08:93:1f:30:d3:95:44:aa:f1:35:f9:4c:66: 0f:0d:aa:47:21:c8:21:74:18:e5:11:5d:d0:77:d7:e4:b8:f2: 55:23:ae:3f:4f:68:b4:f7:f7:bf:f3:94:c7:64:35:8a:35:8e: c4:cb:00:c4:23:4e:0c:c0:e6:71:5b:1e:05:bc:03:e9:5b:c4: a2:55:db:ae:26:39:e4:51:2d:92:a5:16:02:97:90:b9:9e:40: 8a:69:e7:dd:e8:dc:76:72:4e:9c:3b:b2:d1:c5:7a:7e:d1:5c: 4d:2e:3c:6f:e8:a6:a2:8e:d8:0c:1b:c1:14:c2:e9:ec:a9:65: 9a:47:15:28:0c:ae:48:ae:b8:af:0e:25:d2:a0:d8:23:48:f1: 13:73:c7:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvAx6h00aoedO77MSV1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1 ZWQ4NjAwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDM4MDJlY2YyYzEzMDUxZTE3Njk5Nzc3YzExZDY2OGYxOTkzZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF3JqALwM+BpjPZDuF3uPppS0bKJ TKo+bPXNrPmKWj8cnjXGRMimkhwUpDbRdvwqdOXvsQTobWoiDP3GA2k5ep/6cc7+ yOV+0RnFcS1ZMnBMGyQH5S7TdNjd7Q4sxjkJGN1Wy2XqugFdIYqeZCwslqZsogfZ 1RbqP4fHwqT6EMkS5njbq556Ck+iRevqq8DgR1wFlTgF9lelaFTNxV+F+RJZJ8fZ aQiW0B+WIgcoIx0XJSbzwMmP1tFguzcBL1Xcv9qFUQ3YBg6KO45N1lHnn3vdbhRK aKNKAH+5P7QkC1ThSwH4jEcuyrq+hX7IWptDc1+aIfFYXkp97qCuQ6TYZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK04AuzywTBR4XaZd3wR1mjxmT/2MB8GA1UdIwQY MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt ODRmOWVkODdhYzMxLzEvclRnQzdQTEJNRkhoZHBsM2ZCSFdhUEdaUF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucM+MA0G CSqGSIb3DQEBCwUAA4IBAQBmeP9wOz+cJ9fMbw/xYJrXyi/HityI5ikw7g2zAzUc IUgeNuGfWIaej5Ht8JGAU/Kp9YgB4hwicDz8XvKCJ1Lp1T9MnydLBhHLpJX0g9L+ TrBXl69i8KMaCJJBu6sGErK66GTsLmcGA6lPnsdZwL+V8wiTHzDTlUSq8TX5TGYP DapHIcghdBjlEV3Qd9fkuPJVI64/T2i09/e/85THZDWKNY7EywDEI04MwOZxWx4F vAPpW8SiVduuJjnkUS2SpRYCl5C5nkCKaefd6Nx2ck6cO7LRxXp+0VxNLjxv6Kai jtgMG8EUwunsqWWaRxUoDK5IrrivDiXSoNgjSPETc8fk -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:27 2026 by rpki-client