This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0pDzMD3q6_iuFqV5nawmbf67VCc.roa File: 0pDzMD3q6_iuFqV5nawmbf67VCc.roa (raw, json) Hash identifier: EWYE61iko1nTpmul34YHamHqRxJiG3laTCNimvVwuug= Subject key identifier: D2:90:F3:30:3D:EA:EB:F8:AE:16:A5:79:9D:AC:26:6D:FE:BB:54:27 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A23F24572CFBB820F1A483BD3D0011 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0pDzMD3q6_iuFqV5nawmbf67VCc.roa Signing time: Thu 01 Jan 2026 08:17:37 +0000 ROA not before: Thu 01 Jan 2026 08:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 195.40.145.0/24 maxlen: 24 195.40.146.0/23 maxlen: 24 195.40.148.0/22 maxlen: 24 195.40.192.0/18 maxlen: 24 195.172.0.0/18 maxlen: 24 195.172.64.0/19 maxlen: 24 195.172.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3f:24:57:2c:fb:b8:20:f1:a4:83:bd:3d:00:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d290f3303deaebf8ae16a5799dac266dfebb5427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:5d:aa:cf:4b:c6:24:b6:60:dc:db:22:31: ad:19:8f:67:58:a1:d4:39:3f:7c:48:8f:a5:b2:11: 21:15:5a:df:10:7c:9b:9a:74:d7:d3:e5:ed:dc:8c: e8:96:b2:22:28:82:cd:93:93:3d:1c:0e:c4:46:7a: 6b:fe:04:2d:7f:db:e0:a7:fa:d7:7e:87:b1:f7:6d: b7:41:24:7c:60:69:a8:62:db:58:86:ae:f4:7c:d8: eb:2c:a9:ac:0e:6d:af:16:63:f2:4e:93:97:e4:74: ab:5d:0f:aa:2e:15:cb:52:14:fa:48:8e:73:57:f1: 21:82:17:87:09:47:9d:02:50:10:80:b3:a9:30:6e: 52:9c:d9:46:3e:3e:9f:47:34:45:b5:ea:98:0a:6b: 69:d1:8e:66:35:a8:26:5d:19:1c:68:48:ce:e1:d3: b4:e5:a3:a0:03:9a:3f:79:ff:b6:ed:5e:e5:10:99: 26:4a:57:f6:6b:39:d2:9a:07:e6:28:d0:4b:00:e8: c4:54:26:39:3e:14:48:bf:2d:08:a7:ed:70:3d:5b: b5:b1:b4:97:0f:e3:ba:9c:04:33:a0:f4:02:16:da: 09:b0:03:2e:5c:13:20:de:50:28:d2:b0:51:4d:29: a0:0a:3f:74:d8:19:b4:3c:38:33:21:0e:82:88:f5: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:90:F3:30:3D:EA:EB:F8:AE:16:A5:79:9D:AC:26:6D:FE:BB:54:27 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0pDzMD3q6_iuFqV5nawmbf67VCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.145.0-195.40.151.255 195.40.192.0/18 195.172.0.0-195.172.95.255 195.172.224.0/19 Signature Algorithm: sha256WithRSAEncryption 11:c7:f1:73:41:72:e9:53:c9:0c:0b:54:52:37:3f:9c:9b:ca: d9:6b:f0:2d:06:fb:05:5f:14:cb:89:77:ed:a5:df:ed:41:f3: 5b:49:af:e0:a1:48:04:66:dc:dd:2b:fa:ae:4f:4b:e8:79:ee: f9:3a:69:66:f0:a9:79:82:de:0a:50:3d:e8:9e:df:2c:8a:50: d3:7d:40:f7:ac:0e:bd:6a:ae:98:55:a1:6b:fb:32:10:6c:c1: 7e:76:fb:0b:f5:0e:e0:0c:28:13:4f:46:c9:fe:57:90:aa:f0: 7f:f0:04:cc:16:8b:89:d6:77:a2:07:d3:f3:18:1c:f9:4a:96: 03:f6:0a:20:1a:49:e1:83:22:34:1b:f8:81:1d:bd:6d:b9:d2: dd:15:74:a4:11:03:01:f3:d5:3c:24:9c:e0:46:07:fe:db:a4: 5e:d0:e5:03:c4:d7:80:13:be:df:a5:38:9d:3f:71:a6:a6:59: 63:ac:d9:d0:4d:0c:1c:f1:95:cb:e4:b5:6c:33:cf:62:a5:30: 22:97:8a:2e:fe:ba:ec:5e:cd:44:e5:ad:fb:6e:0e:2f:d8:be: e4:07:42:54:19:f2:d6:ae:aa:53:9b:f0:eb:6e:f4:e5:8e:f9: 97:ef:57:a7:af:a2:46:f8:8c:24:bb:20:f0:7e:94:14:71:88: fa:12:20:e2 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4oj8kVyz7uCDxpIO9PQARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjkwZjMzMDNkZWFlYmY4YWUxNmE1Nzk5ZGFjMjY2ZGZlYmI1NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gFdqs9LxiS2YNzbIjGtGY9nWKHU OT98SI+lshEhFVrfEHybmnTX0+Xt3IzolrIiKILNk5M9HA7ERnpr/gQtf9vgp/rX foex9223QSR8YGmoYttYhq70fNjrLKmsDm2vFmPyTpOX5HSrXQ+qLhXLUhT6SI5z V/EhgheHCUedAlAQgLOpMG5SnNlGPj6fRzRFteqYCmtp0Y5mNagmXRkcaEjO4dO0 5aOgA5o/ef+27V7lEJkmSlf2aznSmgfmKNBLAOjEVCY5PhRIvy0Ip+1wPVu1sbSX D+O6nAQzoPQCFtoJsAMuXBMg3lAo0rBRTSmgCj902Bm0PDgzIQ6CiPXcnQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNKQ8zA96uv4rhaleZ2sJm3+u1QnMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMHBEek1EM3E2X2l1RnFWNW5hd21iZjY3VkNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAATAnMAwDBADDKJED BAPDKJADBAbDKMAwCwMDAsOsAwQFw6xAAwQFw6zgMA0GCSqGSIb3DQEBCwUAA4IB AQARx/FzQXLpU8kMC1RSNz+cm8rZa/AtBvsFXxTLiXftpd/tQfNbSa/goUgEZtzd K/quT0voee75Omlm8Kl5gt4KUD3ont8silDTfUD3rA69aq6YVaFr+zIQbMF+dvsL 9Q7gDCgTT0bJ/leQqvB/8ATMFouJ1neiB9PzGBz5SpYD9gogGknhgyI0G/iBHb1t udLdFXSkEQMB89U8JJzgRgf+26Re0OUDxNeAE77fpTidP3GmplljrNnQTQwc8ZXL 5LVsM89ipTAil4ou/rrsXs1E5a37bg4v2L7kB0JUGfLWrqpTm/DrbvTljvmX71en r6JG+IwkuyDwfpQUcYj6EiDi -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:52 2026 by rpki-client