This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wL0HO-_mQni-QFYcw1CDgmZZVEc.roa File: wL0HO-_mQni-QFYcw1CDgmZZVEc.roa (raw, json) Hash identifier: i7AiknzWkRZK0YUNGLxBwVkmLyxoojm9IZ0y868wajc= Subject key identifier: C0:BD:07:3B:EF:E6:42:78:BE:40:56:1C:C3:50:83:82:66:59:54:47 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14BE0723710050FBEDAC7A82700E1D Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wL0HO-_mQni-QFYcw1CDgmZZVEc.roa Signing time: Fri 02 Jan 2026 14:20:24 +0000 ROA not before: Fri 02 Jan 2026 14:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 195.86.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:be:07:23:71:00:50:fb:ed:ac:7a:82:70:0e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0bd073befe64278be40561cc350838266595447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:fc:1c:ed:e2:34:d6:67:1c:43:d7:35:ef: a0:8a:94:b1:d0:06:2b:86:b9:5b:78:7e:65:cc:55: 31:f3:20:06:08:d4:13:8c:c6:11:5d:78:03:20:2e: 0a:0b:c0:aa:01:aa:2b:13:64:82:cf:90:ac:67:7f: 2c:79:01:3e:0a:6b:dc:e1:96:73:6f:29:f4:c4:7f: bf:31:78:13:e7:0d:33:53:b6:ea:5e:aa:c3:c1:4e: b8:c3:66:eb:41:19:68:d7:10:f7:47:0f:19:23:98: a8:37:7d:55:5e:f3:58:8d:74:e1:18:16:1d:46:a0: 75:d9:64:ab:5c:56:5c:c4:8b:8f:7b:8b:ca:bf:81: 73:f7:97:29:e2:37:b5:d8:5a:39:47:28:f2:31:ca: 7e:07:83:e9:3f:b9:b2:64:92:75:f2:9d:9a:97:8a: d6:3a:de:4b:24:c8:a2:48:68:c2:98:4e:f1:e6:70: b6:ab:7f:8f:be:0c:11:fd:50:d8:1f:45:f9:d9:24: 80:90:9e:8d:94:55:28:96:58:23:2b:20:7b:13:04: 4a:c6:60:0e:a2:07:66:fc:64:ed:8f:36:c6:4f:6e: 0e:98:79:12:07:ca:da:f9:13:87:ac:88:6d:98:ab: 02:0c:b7:5f:09:ff:1e:ff:77:3c:b3:c3:e0:6b:2f: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BD:07:3B:EF:E6:42:78:BE:40:56:1C:C3:50:83:82:66:59:54:47 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wL0HO-_mQni-QFYcw1CDgmZZVEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.86.161.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:fe:65:60:ef:17:25:72:70:22:13:29:db:af:ed:30:16:c3: f8:b4:ce:31:0c:13:ca:d1:86:71:43:1f:c7:ae:89:25:e6:f5: e6:91:02:86:22:a0:27:45:62:31:4c:e9:14:d8:32:9b:b5:25: 24:25:25:7d:e9:bf:fb:eb:bb:43:cc:62:1e:68:23:83:f2:12: 6c:61:72:66:63:91:24:2a:14:22:61:6a:80:23:3b:78:ea:0b: 06:e0:89:48:3f:81:db:17:40:49:1d:2b:2e:78:83:7b:8c:3e: 48:1c:f3:d3:86:d8:a1:ad:f9:68:8d:e5:65:47:9e:ea:b4:25: 34:db:22:30:66:a5:89:62:54:4a:39:02:0d:33:84:ea:a3:b5: 95:51:11:42:b3:07:9d:17:cc:1c:b8:f9:a0:c3:1c:5a:64:a6: 07:6e:c6:47:60:61:77:13:f9:08:e4:8e:aa:47:c7:05:af:e7: 0b:31:ad:e4:2e:ba:95:61:a8:07:48:cc:ed:86:d5:67:68:c7: e6:a6:3b:80:c4:f3:cd:63:53:12:b3:2e:3f:f8:26:4e:6e:2b: 3d:4e:15:31:3d:27:71:c0:4c:4b:da:af:3c:bc:01:77:7b:f6: a3:f2:05:83:c3:a1:30:e2:ae:bf:cd:52:8a:51:ec:03:52:5c: c0:17:85:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FL4HI3EAUPvtrHqCcA4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGJkMDczYmVmZTY0Mjc4YmU0MDU2MWNjMzUwODM4MjY2NTk1NDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSb8HO3iNNZnHEPXNe+gipSx0AYr hrlbeH5lzFUx8yAGCNQTjMYRXXgDIC4KC8CqAaorE2SCz5CsZ38seQE+Cmvc4ZZz byn0xH+/MXgT5w0zU7bqXqrDwU64w2brQRlo1xD3Rw8ZI5ioN31VXvNYjXThGBYd RqB12WSrXFZcxIuPe4vKv4Fz95cp4je12Fo5RyjyMcp+B4PpP7myZJJ18p2al4rW Ot5LJMiiSGjCmE7x5nC2q3+PvgwR/VDYH0X52SSAkJ6NlFUollgjKyB7EwRKxmAO ogdm/GTtjzbGT24OmHkSB8ra+ROHrIhtmKsCDLdfCf8e/3c8s8Pgay8swQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMC9Bzvv5kJ4vkBWHMNQg4JmWVRHMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvd0wwSE8tX21RbmktUUZZY3cxQ0RnbVpaVkVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1ahMA0G CSqGSIb3DQEBCwUAA4IBAQBa/mVg7xclcnAiEynbr+0wFsP4tM4xDBPK0YZxQx/H rokl5vXmkQKGIqAnRWIxTOkU2DKbtSUkJSV96b/767tDzGIeaCOD8hJsYXJmY5Ek KhQiYWqAIzt46gsG4IlIP4HbF0BJHSsueIN7jD5IHPPThtihrflojeVlR57qtCU0 2yIwZqWJYlRKOQINM4Tqo7WVURFCswedF8wcuPmgwxxaZKYHbsZHYGF3E/kI5I6q R8cFr+cLMa3kLrqVYagHSMzthtVnaMfmpjuAxPPNY1MSsy4/+CZObis9ThUxPSdx wExL2q88vAF3e/aj8gWDw6Ew4q6/zVKKUewDUlzAF4VE -----END CERTIFICATE-----Generated at Sun Jan 18 10:47:52 2026 by rpki-client