This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa File: n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa (raw, json) Hash identifier: RzOvebI8Ja0tDDKfejDU+yIZ7pTZTRTQ0O8NlhB8m4M= Subject key identifier: 9F:45:7E:44:18:62:EE:D3:AE:31:CD:62:6E:8D:18:F3:40:64:D2:AC Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Certificate serial: 019B76EAFE5677040C2BDEDF727BF7623BFD Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 158.94.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fe:56:77:04:0c:2b:de:df:72:7b:f7:62:3b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f457e441862eed3ae31cd626e8d18f34064d2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:1d:f3:14:eb:0d:3e:a4:ae:6d:52:d9:a8: 32:f5:f9:6a:3f:79:c6:2b:2e:75:89:19:58:5f:3a: 4b:5e:89:b7:64:e3:64:c5:65:b9:1b:a2:6b:ca:9a: 9f:c8:f4:eb:0a:8b:bf:3f:bc:3b:b0:6b:33:2f:63: e0:78:73:4f:92:aa:ee:be:33:5d:a1:a1:53:9e:3a: b2:e1:4f:84:59:35:b1:74:0b:00:1a:54:2d:d0:20: 89:f6:e7:04:2e:1c:e3:fb:03:45:62:34:5c:a4:0e: 07:00:85:8a:02:09:c0:e0:cd:8b:2a:15:c6:3d:77: 9c:8d:e7:a6:de:99:dc:ec:88:51:0b:87:f2:dd:d0: d2:ca:8b:7b:67:0e:01:0c:24:18:9a:14:55:2c:b2: 3e:5d:8c:a5:96:02:2e:13:fe:51:a2:b2:13:ca:60: ad:bf:1b:78:c5:e2:3d:51:08:d7:22:c0:4e:78:1a: d9:a7:7d:98:61:3a:df:ba:a5:67:73:33:4d:f4:01: 4d:07:9d:76:73:10:61:80:32:fe:26:eb:45:0b:cc: ab:98:cb:b9:41:61:67:32:12:3f:80:cc:d6:d7:86: f2:28:4e:57:35:0a:8b:c0:0b:55:99:14:ac:2b:ad: 2e:f7:ef:73:0b:47:5a:89:e5:a9:cb:90:29:38:31: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:45:7E:44:18:62:EE:D3:AE:31:CD:62:6E:8D:18:F3:40:64:D2:AC X509v3 Authority Key Identifier: keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.128.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:9b:05:b7:22:41:60:53:1b:98:32:f0:85:e6:93:56:9b:2f: 16:56:fa:64:b9:1d:c5:a9:b3:7d:64:50:04:41:a3:f1:cf:c8: 5d:7e:c3:a5:ad:3c:57:fe:08:29:b6:29:5b:ea:9e:6e:e5:09: f9:bb:a6:8d:42:ad:6e:3d:d1:a1:21:b6:a8:b4:fb:06:cf:48: 4c:6b:f7:e1:45:82:3b:74:51:96:c5:7f:ba:69:b6:d2:64:4b: 4c:cc:9f:5e:79:5c:83:c2:0f:dc:f2:0b:1d:19:2f:4c:86:c4: 40:78:8f:1a:e8:0d:56:15:f3:09:66:09:b2:8c:3e:de:a8:ca: 96:9c:67:dc:38:6c:42:13:1f:6b:2c:c5:2d:72:4f:51:37:e9: 1a:71:ac:f2:ba:ca:31:75:78:fa:ee:34:ae:53:7a:e9:dc:c4: 4c:c3:b0:83:46:b6:3c:9f:f4:46:f5:24:49:32:81:bc:b7:5a: 5a:80:24:06:a5:33:bc:06:48:47:e6:dd:60:76:2d:b2:fc:e5: 35:f1:64:b9:6a:06:9d:5e:c9:3b:31:a6:d3:e7:36:1a:75:eb: 3a:f5:0a:42:1a:0c:a5:eb:e6:49:a3:50:41:46:4f:3a:e1:04: 8d:d0:90:61:30:02:d1:72:86:38:8b:5d:8f:0f:c8:0f:68:ad: 88:7c:18:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26v5WdwQMK97fcnv3Yjv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw ODUzYTEwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjQ1N2U0NDE4NjJlZWQzYWUzMWNkNjI2ZThkMThmMzQwNjRkMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArggd8xTrDT6krm1S2agy9flqP3nG Ky51iRlYXzpLXom3ZONkxWW5G6JrypqfyPTrCou/P7w7sGszL2PgeHNPkqruvjNd oaFTnjqy4U+EWTWxdAsAGlQt0CCJ9ucELhzj+wNFYjRcpA4HAIWKAgnA4M2LKhXG PXecjeem3pnc7IhRC4fy3dDSyot7Zw4BDCQYmhRVLLI+XYyllgIuE/5RorITymCt vxt4xeI9UQjXIsBOeBrZp32YYTrfuqVnczNN9AFNB512cxBhgDL+JutFC8yrmMu5 QWFnMhI/gMzW14byKE5XNQqLwAtVmRSsK60u9+9zC0daieWpy5ApODFgwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9FfkQYYu7TrjHNYm6NGPNAZNKsMB8GA1UdIwQY MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt YzRiZWZiMjU2MjJjLzEvbjBWLVJCaGk3dE91TWMxaWJvMFk4MEJrMHF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnl6AMA0G CSqGSIb3DQEBCwUAA4IBAQAemwW3IkFgUxuYMvCF5pNWmy8WVvpkuR3FqbN9ZFAE QaPxz8hdfsOlrTxX/ggptilb6p5u5Qn5u6aNQq1uPdGhIbaotPsGz0hMa/fhRYI7 dFGWxX+6abbSZEtMzJ9eeVyDwg/c8gsdGS9MhsRAeI8a6A1WFfMJZgmyjD7eqMqW nGfcOGxCEx9rLMUtck9RN+kacazyusoxdXj67jSuU3rp3MRMw7CDRrY8n/RG9SRJ MoG8t1pagCQGpTO8BkhH5t1gdi2y/OU18WS5agadXsk7MabT5zYades69QpCGgyl 6+ZJo1BBRk864QSN0JBhMALRcoY4i12PD8gPaK2IfBi0 -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:25 2026 by rpki-client