This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/06cgoU7GyJzMyJR7nF3NCVCDDU0.roa File: 06cgoU7GyJzMyJR7nF3NCVCDDU0.roa (raw, json) Hash identifier: kN3R1rOeDYfzsBK/+cPskIhYJ/5X5cYwuNm8G34vSmk= Subject key identifier: D3:A7:20:A1:4E:C6:C8:9C:CC:C8:94:7B:9C:5D:CD:09:50:83:0D:4D Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af Certificate serial: 019B79ECC40E4579B0392669530CCE92E353 Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/06cgoU7GyJzMyJR7nF3NCVCDDU0.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203773 IP address blocks: 194.149.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c4:0e:45:79:b0:39:26:69:53:0c:ce:92:e3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3a720a14ec6c89cccc8947b9c5dcd0950830d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:f3:b6:f2:ea:28:fe:52:a3:20:71:ea:ce: 8d:4c:2b:ae:ef:b8:4c:0c:a3:40:57:6b:59:d3:8c: 6b:27:1f:6d:f3:e4:70:38:00:5d:46:d7:d7:96:f6: c1:00:3d:dd:f6:3d:0b:94:29:73:ea:16:1f:21:31: ad:ed:a6:ac:7e:1c:0b:f0:49:8a:93:4a:ad:8f:c9: 6f:d6:f5:99:fa:a6:3b:2d:07:33:5f:bd:c5:d3:d3: 04:21:0d:e0:63:2f:da:af:44:51:cf:7b:18:e3:65: c7:57:39:02:3d:ca:f1:52:13:ad:5a:1c:95:d7:d8: f1:41:9c:95:6d:bc:63:1f:81:3d:54:ef:25:2e:e8: 0f:39:92:17:d6:b8:bb:61:54:d9:a5:6b:53:bc:21: e8:90:31:69:f1:f9:85:bc:b5:de:1a:ab:a2:7a:a5: 80:62:c5:6e:f5:04:9d:b0:60:05:4a:24:1f:9b:9f: 33:eb:0a:73:ed:cf:d7:8d:37:42:ce:a9:85:7a:d1: 0a:bc:6b:04:1b:f9:be:52:5d:c5:e9:1c:96:83:12: e7:57:9f:2b:ec:0a:4c:39:6f:27:af:aa:26:66:03: d7:1d:a9:9d:01:d2:e8:17:73:44:a3:01:8d:ec:bd: d4:4d:53:5d:86:06:53:3e:e9:f8:d3:c7:1d:fd:ff: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A7:20:A1:4E:C6:C8:9C:CC:C8:94:7B:9C:5D:CD:09:50:83:0D:4D X509v3 Authority Key Identifier: keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/06cgoU7GyJzMyJR7nF3NCVCDDU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.149.237.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:c8:1f:ef:66:a2:e1:a5:9c:8b:3d:70:b3:e6:e0:f3:2d:77: d6:7d:5a:56:f5:e5:d8:84:ff:ef:7b:59:5d:85:08:0e:3d:53: dd:eb:a5:45:ad:bd:aa:02:97:a4:5d:54:fe:ba:dc:f0:64:f9: b1:be:c2:53:10:4f:67:c1:50:db:62:05:d0:60:e2:ea:b3:b2: dd:e2:a4:a5:15:0d:b2:2d:48:61:18:81:19:d8:85:e7:a8:51: 30:6a:fa:30:d8:32:5a:5c:e4:34:60:69:21:8a:26:5e:6c:d0: 6a:d4:44:70:38:bd:e2:2c:70:5f:2d:c4:22:5f:bd:c8:9c:af: 73:1f:5b:10:88:dd:b2:a1:b3:3f:29:19:1b:33:ee:c9:b6:f8: 47:b6:16:05:17:94:4b:13:93:c1:61:29:93:98:2c:17:6d:bc: 42:75:90:fa:11:b0:83:d2:3e:e5:37:b4:6b:9b:11:40:55:f5: 07:08:77:d1:bd:34:d0:d9:84:e9:c9:64:b6:f8:e9:68:06:e5: 79:39:3c:b3:61:80:6c:9e:b2:1f:c3:b0:90:39:cf:3a:af:7c: 37:43:27:75:89:39:9a:c1:63:88:61:d9:f3:2c:91:96:3b:7f: 6f:78:2e:0a:da:9a:ef:ac:8c:ed:97:db:30:59:3c:fc:2d:3f: 8a:8c:b9:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MQORXmwOSZpUwzOkuNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmY5MWE1MjE2NDA0OTQyMjM5ZTY5NmU2NWNmMmQzNzIx NGU0YWYwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2E3MjBhMTRlYzZjODljY2NjODk0N2I5YzVkY2QwOTUwODMwZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1bztvLqKP5SoyBx6s6NTCuu77hM DKNAV2tZ04xrJx9t8+RwOABdRtfXlvbBAD3d9j0LlClz6hYfITGt7aasfhwL8EmK k0qtj8lv1vWZ+qY7LQczX73F09MEIQ3gYy/ar0RRz3sY42XHVzkCPcrxUhOtWhyV 19jxQZyVbbxjH4E9VO8lLugPOZIX1ri7YVTZpWtTvCHokDFp8fmFvLXeGquieqWA YsVu9QSdsGAFSiQfm58z6wpz7c/XjTdCzqmFetEKvGsEG/m+Ul3F6RyWgxLnV58r 7ApMOW8nr6omZgPXHamdAdLoF3NEowGN7L3UTVNdhgZTPun408cd/f9/NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOnIKFOxsiczMiUe5xdzQlQgw1NMB8GA1UdIwQY MBaAFA1vkaUhZASUIjnmluZc8tNyFOSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUt YzQ3ZWFiMTdlOTNhLzEvMDZjZ29VN0d5SnpNeUpSN25GM05DVkNERFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUtYzQ3ZWFiMTdlOTNh LzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpXtMA0G CSqGSIb3DQEBCwUAA4IBAQAfyB/vZqLhpZyLPXCz5uDzLXfWfVpW9eXYhP/ve1ld hQgOPVPd66VFrb2qApekXVT+utzwZPmxvsJTEE9nwVDbYgXQYOLqs7Ld4qSlFQ2y LUhhGIEZ2IXnqFEwavow2DJaXOQ0YGkhiiZebNBq1ERwOL3iLHBfLcQiX73InK9z H1sQiN2yobM/KRkbM+7JtvhHthYFF5RLE5PBYSmTmCwXbbxCdZD6EbCD0j7lN7Rr mxFAVfUHCHfRvTTQ2YTpyWS2+OloBuV5OTyzYYBsnrIfw7CQOc86r3w3Qyd1iTma wWOIYdnzLJGWO39veC4K2prvrIztl9swWTz8LT+KjLm4 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:02 2026 by rpki-client