This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/vo7YnQnhfpcCt9W2Rqwb0vyqxoE.roa File: vo7YnQnhfpcCt9W2Rqwb0vyqxoE.roa (raw, json) Hash identifier: auZ1xTmA0OBRW3so9ExVvfZyS39gjBoTBsN0vWWkcE0= Subject key identifier: BE:8E:D8:9D:09:E1:7E:97:02:B7:D5:B6:46:AC:1B:D2:FC:AA:C6:81 Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f Certificate serial: 019B285B496BA27B3B4F168BF3FA66C35B2D Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/vo7YnQnhfpcCt9W2Rqwb0vyqxoE.roa Signing time: Tue 16 Dec 2025 18:10:29 +0000 ROA not before: Tue 16 Dec 2025 18:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202794 IP address blocks: 195.222.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:5b:49:6b:a2:7b:3b:4f:16:8b:f3:fa:66:c3:5b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f Validity Not Before: Dec 16 18:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be8ed89d09e17e9702b7d5b646ac1bd2fcaac681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:a4:04:ae:ab:8e:6e:eb:2b:0c:78:2e:7e: dd:fb:58:39:78:d3:d9:5d:45:ba:0e:95:2a:b8:45: 11:43:64:79:a4:96:c7:61:98:3b:b6:ce:db:ad:8d: 71:4a:f8:88:3a:e1:4c:64:b4:98:1b:99:7a:52:c4: 09:b2:b9:cb:6c:ec:ec:6d:e4:b5:6d:2b:58:91:95: 84:da:a7:d7:66:76:d1:d1:70:06:f0:58:06:da:9b: e4:8b:c8:2c:a7:3b:a2:35:7e:02:9e:1d:7c:c9:a3: 20:f2:e5:94:e8:5d:43:eb:6c:2c:98:28:9e:51:8e: fa:64:8f:72:c8:84:5b:bf:6c:41:24:99:46:76:a7: 38:c4:96:24:88:03:f7:51:5e:0c:25:3e:04:9b:3b: 1c:92:ec:88:68:33:cc:1a:d2:56:8f:af:37:8b:00: 20:ab:c8:04:af:67:ec:1d:7e:af:75:bc:42:29:ef: 53:9e:a9:3b:a8:73:26:10:aa:41:9b:99:c1:ae:f0: cd:84:a0:7e:c9:6c:54:9c:15:a4:31:76:17:64:75: ff:26:4c:4d:20:9b:fc:85:1e:1b:5b:27:b7:ba:54: 12:1a:ac:3d:74:50:84:ef:25:98:af:db:62:1f:ab: 7a:83:38:4d:1a:fe:bc:48:b1:ab:8c:e1:1e:98:8c: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8E:D8:9D:09:E1:7E:97:02:B7:D5:B6:46:AC:1B:D2:FC:AA:C6:81 X509v3 Authority Key Identifier: keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/vo7YnQnhfpcCt9W2Rqwb0vyqxoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.222.106.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:0d:f8:f5:d1:55:f3:d0:60:53:47:ae:f4:a8:80:00:26:9b: 0a:45:92:0a:71:5a:eb:f3:e6:6a:2b:8b:6b:1a:05:6e:c7:54: a9:44:80:84:92:ac:5b:14:3a:9f:5c:13:d8:2c:14:f6:71:cf: 0a:58:ff:2d:44:67:2c:78:d2:4f:96:0b:dd:25:ea:54:5b:99: 69:eb:12:5e:0b:c9:94:84:58:ba:29:46:ad:66:68:27:5f:42: ee:75:b9:be:d8:62:fe:fc:b3:08:22:d9:50:4e:22:dc:df:2f: df:67:86:65:ab:e7:8f:7b:3e:a1:c7:9b:d2:b5:84:17:0c:e0: a3:cd:62:35:b2:b0:9c:f1:32:be:5a:50:3b:7a:49:0f:86:27: ec:85:d2:e1:0f:13:34:ed:eb:fd:b2:cf:4e:68:ab:c7:9f:90: ff:85:d6:5f:26:23:d0:7a:67:da:04:2b:c6:1f:41:1f:49:92: 1b:45:0f:81:7a:3d:ba:d2:60:db:57:4a:82:64:a7:e9:00:13: c1:86:55:6f:72:7c:65:68:f0:99:b0:15:37:1f:97:ab:cd:fc: 29:7c:69:e4:4b:45:41:d3:8c:c8:68:c1:ae:d3:4a:15:80:1d: 68:60:79:21:0e:ec:f9:8e:dd:d7:04:5e:94:58:63:13:07:b0: 11:18:d9:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsoW0lrons7TxaL8/pmw1stMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOWY1ZGMxNGY3MDc2ODExNDkxNjI4Y2ExODgyMTUwYmQ1 ZjAxMGYwHhcNMjUxMjE2MTgxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZThlZDg5ZDA5ZTE3ZTk3MDJiN2Q1YjY0NmFjMWJkMmZjYWFjNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LukBK6rjm7rKwx4Ln7d+1g5eNPZ XUW6DpUquEURQ2R5pJbHYZg7ts7brY1xSviIOuFMZLSYG5l6UsQJsrnLbOzsbeS1 bStYkZWE2qfXZnbR0XAG8FgG2pvki8gspzuiNX4Cnh18yaMg8uWU6F1D62wsmCie UY76ZI9yyIRbv2xBJJlGdqc4xJYkiAP3UV4MJT4EmzsckuyIaDPMGtJWj683iwAg q8gEr2fsHX6vdbxCKe9Tnqk7qHMmEKpBm5nBrvDNhKB+yWxUnBWkMXYXZHX/JkxN IJv8hR4bWye3ulQSGqw9dFCE7yWYr9tiH6t6gzhNGv68SLGrjOEemIynXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL6O2J0J4X6XArfVtkasG9L8qsaBMB8GA1UdIwQY MBaAFIqfXcFPcHaBFJFijKGIIVC9XwEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXA5ZHdVOXdkb0VVa1dLTW9ZZ2hVTDFmQVE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83MTAxNWQtZDBjNy00ZmE0LWE1NmMt Y2VkMmU0MTI4ZTg1LzEvdm83WW5RbmhmcGNDdDlXMlJxd2IwdnlxeG9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83MTAxNWQtZDBjNy00ZmE0LWE1NmMtY2VkMmU0MTI4ZTg1 LzEvaXA5ZHdVOXdkb0VVa1dLTW9ZZ2hVTDFmQVE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw95qMA0G CSqGSIb3DQEBCwUAA4IBAQBMDfj10VXz0GBTR670qIAAJpsKRZIKcVrr8+ZqK4tr GgVux1SpRICEkqxbFDqfXBPYLBT2cc8KWP8tRGcseNJPlgvdJepUW5lp6xJeC8mU hFi6KUatZmgnX0Ludbm+2GL+/LMIItlQTiLc3y/fZ4Zlq+ePez6hx5vStYQXDOCj zWI1srCc8TK+WlA7ekkPhifshdLhDxM07ev9ss9OaKvHn5D/hdZfJiPQemfaBCvG H0EfSZIbRQ+Bej260mDbV0qCZKfpABPBhlVvcnxlaPCZsBU3H5erzfwpfGnkS0VB 04zIaMGu00oVgB1oYHkhDuz5jt3XBF6UWGMTB7ARGNm8 -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:34 2025 by rpki-client