This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa File: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (raw, json) Hash identifier: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8= Subject key identifier: D0:C3:57:08:57:62:87:87:7D:17:00:80:5F:A3:CF:9D:53:87:38:84 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB87B390127432C6DBE119B87D4EAB Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57886 IP address blocks: 195.214.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:87:b3:90:12:74:32:c6:db:e1:19:b8:7d:4e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0c35708576287877d1700805fa3cf9d53873884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:e5:ce:99:7f:0a:67:80:5e:98:fa:ae:c0: 9d:ca:6f:a2:ff:14:4e:78:fc:95:78:d6:83:66:ed: b6:bd:da:f6:c0:2e:10:5b:93:c7:0f:e8:9e:8c:a5: c2:ff:cd:13:ea:48:7b:d0:fe:21:5c:41:b4:fe:5b: 1b:70:17:ab:f8:13:a9:97:96:71:1c:3e:ba:a7:b4: 6a:b2:5a:59:8e:9b:66:43:33:3c:2c:b7:43:0a:dd: f0:a6:5a:a1:1d:a9:c0:f0:6a:88:37:6f:8e:55:51: 37:49:28:32:54:04:d1:ef:b5:8e:bb:c1:de:be:44: ad:77:ab:c5:02:ef:de:bb:5f:7a:04:16:86:42:b4: e9:7f:17:e5:6b:c5:28:f8:ea:83:ca:3d:9e:8d:37: c3:45:bb:00:be:a7:e9:08:98:48:28:01:2b:2d:46: b4:de:c5:41:51:a9:52:40:a1:a4:62:20:8f:03:4a: 76:fb:7d:1e:24:3d:a8:85:dd:15:e1:f3:f0:c7:ae: 4c:b7:de:2c:7c:7a:ef:94:d2:d1:29:73:75:e1:b7: 54:40:c6:0c:b9:b8:e5:ce:f8:41:d4:90:66:b8:dd: 0f:a9:c3:44:06:ef:8c:80:b2:a1:80:04:87:b4:46: d2:62:7f:ce:53:dc:f6:f9:e4:79:f5:a1:33:07:0a: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C3:57:08:57:62:87:87:7D:17:00:80:5F:A3:CF:9D:53:87:38:84 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.214.160.0/24 Signature Algorithm: sha256WithRSAEncryption 13:20:a3:7b:4a:9d:3c:d5:b9:08:ad:74:9e:55:a3:6b:e7:67: a5:59:1c:97:53:38:02:8d:e0:bc:92:39:45:b2:e4:de:82:62: 1a:e4:14:b1:30:da:78:d8:d4:2e:ee:d0:31:59:e5:f5:41:d2: f9:59:9e:87:68:a5:15:08:76:b3:78:51:cc:cd:9a:62:c4:de: f7:ab:72:e9:3f:a3:5c:5d:45:32:e0:39:19:8f:fc:9b:c4:3f: 91:05:1c:24:62:2d:a5:bc:51:ff:ec:9f:bd:3e:36:82:6b:0a: 8f:13:39:3e:7c:78:b0:ae:37:23:bc:f3:46:7e:e9:31:96:58: ab:36:c5:08:16:bb:ce:49:23:c7:38:cc:ee:9e:a4:08:ef:a8: 0c:ab:3e:52:79:ce:53:6b:fa:cc:b3:49:6f:9a:40:1f:4a:58: 7e:c3:fd:1d:b5:f5:05:d0:8d:1a:b4:f4:f2:e7:d1:cb:40:ec: 15:90:5e:60:db:dd:e1:5a:cd:08:9e:d0:43:02:55:a2:e2:9a: fd:5f:42:ee:a8:60:d5:99:cb:be:92:db:75:a4:5f:c9:6c:2b: 33:96:28:cc:c8:cf:e5:e2:53:8f:b0:53:ba:27:d8:5a:b6:81: c4:72:01:0d:18:32:40:2c:71:dd:5c:96:f1:e8:b8:4f:06:8e: 04:88:7a:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264ezkBJ0Msbb4Rm4fU6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGMzNTcwODU3NjI4Nzg3N2QxNzAwODA1ZmEzY2Y5ZDUzODczODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qTlzpl/CmeAXpj6rsCdym+i/xRO ePyVeNaDZu22vdr2wC4QW5PHD+iejKXC/80T6kh70P4hXEG0/lsbcBer+BOpl5Zx HD66p7RqslpZjptmQzM8LLdDCt3wplqhHanA8GqIN2+OVVE3SSgyVATR77WOu8He vkStd6vFAu/eu196BBaGQrTpfxfla8Uo+OqDyj2ejTfDRbsAvqfpCJhIKAErLUa0 3sVBUalSQKGkYiCPA0p2+30eJD2ohd0V4fPwx65Mt94sfHrvlNLRKXN14bdUQMYM ubjlzvhB1JBmuN0PqcNEBu+MgLKhgASHtEbSYn/OU9z2+eR59aEzBwrJYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNDDVwhXYoeHfRcAgF+jz51ThziEMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvME1OWENGZGloNGQ5RndDQVg2UFBuVk9IT0lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9agMA0G CSqGSIb3DQEBCwUAA4IBAQATIKN7Sp081bkIrXSeVaNr52elWRyXUzgCjeC8kjlF suTegmIa5BSxMNp42NQu7tAxWeX1QdL5WZ6HaKUVCHazeFHMzZpixN73q3LpP6Nc XUUy4DkZj/ybxD+RBRwkYi2lvFH/7J+9PjaCawqPEzk+fHiwrjcjvPNGfukxllir NsUIFrvOSSPHOMzunqQI76gMqz5Sec5Ta/rMs0lvmkAfSlh+w/0dtfUF0I0atPTy 59HLQOwVkF5g293hWs0IntBDAlWi4pr9X0LuqGDVmcu+ktt1pF/JbCszlijMyM/l 4lOPsFO6J9hatoHEcgENGDJALHHdXJbx6LhPBo4EiHqk -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:12 2026 by rpki-client