This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0vj7JXUBrLagybLlWJ4PWRimrk4.roa File: 0vj7JXUBrLagybLlWJ4PWRimrk4.roa (raw, json) Hash identifier: p4ApMOK+SPj5XHXGwhSfxlbMJCsXzdSuABgqPBnj3MU= Subject key identifier: D2:F8:FB:25:75:01:AC:B6:A0:C9:B2:E5:58:9E:0F:59:18:A6:AE:4E Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B690A1E9CE532474089198F37D00 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0vj7JXUBrLagybLlWJ4PWRimrk4.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207582 IP address blocks: 185.86.7.0/24 maxlen: 24 185.86.15.0/24 maxlen: 24 185.87.120.0/24 maxlen: 24 185.185.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b6:90:a1:e9:ce:53:24:74:08:91:98:f3:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2f8fb257501acb6a0c9b2e5589e0f5918a6ae4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:ce:cc:2b:b2:15:3e:a3:5b:1d:5d:ad:ec: 41:ff:44:19:0e:50:17:f3:2f:79:37:a9:c3:69:28: 69:73:65:ff:c9:b5:0b:b2:ed:c5:1d:4a:10:05:59: 57:4f:ae:9c:ee:be:8e:b2:9a:e6:9b:1c:6b:67:38: 83:23:cd:a3:65:3d:dd:a4:44:55:50:c1:f1:1c:fe: b2:26:b7:6a:93:84:01:73:8f:59:13:e5:e0:59:2e: 39:d7:5b:15:3e:1c:f5:76:ea:43:41:9f:d8:70:e6: 6b:a3:0a:20:55:c4:23:9f:01:0d:7d:f8:e3:3d:d9: b4:12:09:81:be:4a:1c:71:43:30:65:91:65:e4:20: 33:d5:e0:10:b0:21:c8:3b:59:5e:1a:f8:92:7d:90: f6:64:9c:29:5d:6c:92:dd:5f:e6:87:61:6e:b1:61: 2d:c8:d6:39:6b:ad:32:1e:bb:d0:77:09:66:7a:90: ff:8b:54:60:76:4e:92:b0:68:4c:c4:8f:72:7a:f0: 36:8c:0a:cc:69:a9:c0:c4:36:96:a1:4c:60:81:ed: 62:30:0c:67:1c:18:8f:6a:6a:69:3e:24:66:e4:bb: 9e:90:d6:f8:e6:7a:15:6b:d8:fd:d5:9a:1e:ce:3f: 15:fc:7e:c6:a5:03:25:3e:f7:3f:4c:b7:7b:8b:92: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:FB:25:75:01:AC:B6:A0:C9:B2:E5:58:9E:0F:59:18:A6:AE:4E X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0vj7JXUBrLagybLlWJ4PWRimrk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.7.0/24 185.86.15.0/24 185.87.120.0/24 185.185.234.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:43:60:4d:80:10:83:26:20:84:6e:86:3b:ff:52:fc:43:0e: 07:31:53:f7:89:19:e6:68:8d:7c:d1:cc:08:2a:0f:1b:34:7d: 7a:41:6d:41:64:c0:91:f2:16:00:62:1f:e4:42:01:1b:9c:de: 60:27:18:53:84:54:3a:0b:cb:a3:6d:8b:6f:38:a5:06:78:0c: c3:b3:68:48:b9:e8:f5:ec:41:6b:3b:18:1e:c8:72:68:15:65: c2:1f:01:d5:cd:64:9a:34:5c:bc:bc:15:ed:08:e9:a0:ff:ea: f8:8b:34:ec:4e:6a:e4:73:d5:8f:bc:50:2e:2c:03:f2:8a:03: 54:9a:3f:70:48:19:fd:4e:cd:ce:29:22:73:fd:06:83:9e:66: 22:3a:43:f0:26:de:10:b7:bd:af:ed:2f:d2:10:65:5b:17:6a: 0e:45:b5:07:69:d5:d3:b9:47:d8:3a:5d:39:ff:08:3c:47:7f: 7b:00:5f:71:ff:3a:0f:61:5c:f3:d3:68:ac:fb:4f:b7:3a:7e: fa:15:bb:f4:55:42:e0:78:a2:d3:29:50:35:79:ed:95:df:f2: 5f:0e:9a:26:db:53:42:22:b5:25:1c:94:c4:af:26:25:01:52: 4d:b2:02:01:49:e8:70:85:45:3e:ee:95:35:8c:92:bf:93:aa: 7a:6b:f1:79 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WLaQoenOUyR0CJGY830AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY4ZmIyNTc1MDFhY2I2YTBjOWIyZTU1ODllMGY1OTE4YTZhZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/OzCuyFT6jWx1drexB/0QZDlAX 8y95N6nDaShpc2X/ybULsu3FHUoQBVlXT66c7r6OsprmmxxrZziDI82jZT3dpERV UMHxHP6yJrdqk4QBc49ZE+XgWS4511sVPhz1dupDQZ/YcOZrowogVcQjnwENffjj Pdm0EgmBvkoccUMwZZFl5CAz1eAQsCHIO1leGviSfZD2ZJwpXWyS3V/mh2FusWEt yNY5a60yHrvQdwlmepD/i1Rgdk6SsGhMxI9yevA2jArMaanAxDaWoUxgge1iMAxn HBiPamppPiRm5LuekNb45noVa9j91Zoezj8V/H7GpQMlPvc/TLd7i5KlAQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNL4+yV1Aay2oMmy5VieD1kYpq5OMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvMHZqN0pYVUJyTGFneWJMbFdKNFBXUmltcms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuVYHAwQA uVYPAwQAuVd4AwQAubnqMA0GCSqGSIb3DQEBCwUAA4IBAQA7Q2BNgBCDJiCEboY7 /1L8Qw4HMVP3iRnmaI180cwIKg8bNH16QW1BZMCR8hYAYh/kQgEbnN5gJxhThFQ6 C8ujbYtvOKUGeAzDs2hIuej17EFrOxgeyHJoFWXCHwHVzWSaNFy8vBXtCOmg/+r4 izTsTmrkc9WPvFAuLAPyigNUmj9wSBn9Ts3OKSJz/QaDnmYiOkPwJt4Qt72v7S/S EGVbF2oORbUHadXTuUfYOl05/wg8R397AF9x/zoPYVzz02is+0+3On76Fbv0VULg eKLTKVA1ee2V3/JfDpom21NCIrUlHJTEryYlAVJNsgIBSehwhUU+7pU1jJK/k6p6 a/F5 -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:04 2026 by rpki-client