This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/rCdVkvlt_G1LGQUde5JSbjVQWY4.roa File: rCdVkvlt_G1LGQUde5JSbjVQWY4.roa (raw, json) Hash identifier: cVPKC03A+0G/4nVl6AX0govpW+3dUmuY6t25DXrvz8U= Subject key identifier: AC:27:55:92:F9:6D:FC:6D:4B:19:05:1D:7B:92:52:6E:35:50:59:8E Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019B7B3678B45D8853B56C18977070F08FF4 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/rCdVkvlt_G1LGQUde5JSbjVQWY4.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 195.64.120.0/24 maxlen: 24 195.64.121.0/24 maxlen: 24 195.64.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:78:b4:5d:88:53:b5:6c:18:97:70:70:f0:8f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac275592f96dfc6d4b19051d7b92526e3550598e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:17:02:32:b0:74:f4:2a:78:f8:59:0f:03: 9a:16:5e:70:f1:ac:e2:cb:37:83:6a:4f:64:16:08: 9b:e7:bc:1d:41:95:b5:a0:9f:e4:f6:82:36:20:f1: 2b:93:a2:2e:b2:9b:e8:0f:17:af:ae:ef:18:00:14: 92:12:0a:84:91:24:fd:be:5b:ac:89:95:28:18:df: 61:41:a4:f5:25:e8:55:9f:ba:4f:0e:4b:c2:d4:e6: c8:f4:ce:a8:ea:ab:a7:ac:7e:d6:f4:d7:f5:87:c6: 96:1f:17:79:e6:4e:3f:67:9b:51:8c:ed:5e:4d:99: cd:7a:e0:ff:5c:86:f2:3b:23:03:a2:ea:37:ae:b0: 05:8b:f4:97:65:b1:74:c1:db:f8:da:1c:b6:b8:09: ec:25:ef:98:29:7c:c2:3a:49:06:6f:2f:7c:20:f2: 8a:66:7d:7a:36:a3:51:7a:d8:75:2a:72:2b:7f:23: be:f6:0a:df:9e:20:79:70:6e:e6:87:35:c6:c4:85: 01:30:fa:e3:6d:8f:0b:d2:d2:78:bf:bc:a4:b4:a8: 06:f3:40:be:30:a4:e6:81:75:90:81:c2:ef:52:29: c3:9e:37:f3:c3:1d:55:da:ae:30:ad:e0:8b:49:61: 90:35:f2:de:ab:95:dd:6e:0a:23:49:d2:59:e4:ec: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:27:55:92:F9:6D:FC:6D:4B:19:05:1D:7B:92:52:6E:35:50:59:8E X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/rCdVkvlt_G1LGQUde5JSbjVQWY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.120.0/23 195.64.123.0/24 Signature Algorithm: sha256WithRSAEncryption 74:cf:8b:0c:08:2c:89:01:5a:4e:c0:b8:5a:c5:5d:10:9f:87: 88:63:e0:74:28:95:f6:48:5c:a5:93:fc:68:c6:b7:15:e8:68: ab:11:e9:e2:83:8e:01:62:f2:91:c8:b8:be:9b:c6:01:c9:1f: 7e:1c:88:14:ff:32:8a:75:fd:52:c5:3c:e9:df:a7:3a:d0:84: e5:d2:c2:7e:ab:d7:c8:73:ae:e8:85:70:b5:54:33:99:dc:b4: 3a:a9:61:38:91:dc:bb:7c:1d:e0:fe:c0:77:0f:e6:32:79:03: 7f:65:9a:2d:e6:19:da:ab:ff:e0:55:ed:d4:1d:f4:87:37:d8: fc:61:c5:60:dc:88:5d:c5:95:76:b1:c2:a1:fa:82:33:03:ea: 61:db:80:f8:82:63:82:6f:2a:cd:c0:2e:c6:43:06:d9:24:96: b2:b8:81:20:9a:8f:32:96:a5:56:33:cd:ea:cc:e3:b3:bd:af: 8d:ba:e3:bb:b7:75:14:1b:bb:14:bf:a7:67:19:14:35:b9:76: 9f:9b:d8:22:85:92:d2:2d:38:c7:8f:4c:ed:d8:5c:d1:06:8a: 4f:ee:9c:cb:9b:16:8a:b8:ba:c7:25:cd:54:c9:ee:4f:ea:03: 5b:dd:40:15:cd:35:46:b0:61:df:0d:06:a5:1f:52:6f:96:5a: e7:e1:a1:15 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nni0XYhTtWwYl3Bw8I/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzI3NTU5MmY5NmRmYzZkNGIxOTA1MWQ3YjkyNTI2ZTM1NTA1OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNoXAjKwdPQqePhZDwOaFl5w8azi yzeDak9kFgib57wdQZW1oJ/k9oI2IPErk6IuspvoDxevru8YABSSEgqEkST9vlus iZUoGN9hQaT1JehVn7pPDkvC1ObI9M6o6qunrH7W9Nf1h8aWHxd55k4/Z5tRjO1e TZnNeuD/XIbyOyMDouo3rrAFi/SXZbF0wdv42hy2uAnsJe+YKXzCOkkGby98IPKK Zn16NqNReth1KnIrfyO+9grfniB5cG7mhzXGxIUBMPrjbY8L0tJ4v7yktKgG80C+ MKTmgXWQgcLvUinDnjfzwx1V2q4wreCLSWGQNfLeq5XdbgojSdJZ5OyhawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKwnVZL5bfxtSxkFHXuSUm41UFmOMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvckNkVmt2bHRfRzFMR1FVZGU1SlNialZRV1k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw0B4AwQA w0B7MA0GCSqGSIb3DQEBCwUAA4IBAQB0z4sMCCyJAVpOwLhaxV0Qn4eIY+B0KJX2 SFylk/xoxrcV6GirEenig44BYvKRyLi+m8YByR9+HIgU/zKKdf1SxTzp36c60ITl 0sJ+q9fIc67ohXC1VDOZ3LQ6qWE4kdy7fB3g/sB3D+YyeQN/ZZot5hnaq//gVe3U HfSHN9j8YcVg3IhdxZV2scKh+oIzA+ph24D4gmOCbyrNwC7GQwbZJJayuIEgmo8y lqVWM83qzOOzva+NuuO7t3UUG7sUv6dnGRQ1uXafm9gihZLSLTjHj0zt2FzRBopP 7pzLmxaKuLrHJc1Uye5P6gNb3UAVzTVGsGHfDQalH1Jvllrn4aEV -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:29 2026 by rpki-client