This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DhSllvPGSd3YnVhce9HnBoZgt8E.roa File: DhSllvPGSd3YnVhce9HnBoZgt8E.roa (raw, json) Hash identifier: zb+i/wUtWBc9eps6N5FvM/IzX0UjVJFTI3c9KTx7lsE= Subject key identifier: 0E:14:A5:96:F3:C6:49:DD:D8:9D:58:5C:7B:D1:E7:06:86:60:B7:C1 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A23CD218DE761BE0C4FC8CB72A90AF Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DhSllvPGSd3YnVhce9HnBoZgt8E.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 195.40.153.0/24 maxlen: 24 195.40.154.0/24 maxlen: 24 195.40.155.0/24 maxlen: 24 195.172.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3c:d2:18:de:76:1b:e0:c4:fc:8c:b7:2a:90:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e14a596f3c649ddd89d585c7bd1e7068660b7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:43:9b:ec:1d:24:f3:c1:0c:79:3d:b4:20: 27:db:85:f5:63:c6:22:d7:27:b2:b6:35:16:d4:f8: 67:23:8c:77:ce:9b:c8:42:6a:98:90:28:d3:28:4b: db:69:39:a5:76:c2:f8:0e:3c:72:02:e8:0c:20:05: e1:c7:32:d3:99:f1:70:0b:26:bc:f3:b6:da:4c:10: c2:c1:83:6a:83:cf:45:bd:e3:3f:54:61:eb:8e:05: d6:75:e4:ea:3f:75:ec:d7:07:24:a8:2b:6c:98:9f: b9:49:96:ef:62:d2:68:63:aa:a2:e0:b8:5d:c2:55: 8b:b5:20:d1:59:71:14:b3:96:d5:21:2f:3a:3f:d1: 52:e7:fa:4d:55:15:2e:38:f0:f0:4c:c1:db:22:9c: 67:fc:9d:e5:02:34:90:c5:3e:11:5e:21:a5:6c:c1: 59:f1:b8:0e:e5:91:05:76:b7:ca:07:4e:8e:94:cf: 21:bd:77:4a:ac:d3:ad:3e:e7:73:c7:a7:f1:8e:ca: fe:08:71:c2:52:d9:1b:1e:86:13:2f:03:a3:59:fd: 5a:0c:18:6c:7b:66:01:66:ad:cd:2a:b2:3c:2a:2d: 6c:c8:e3:09:39:7e:77:98:63:fb:06:02:d4:72:64: 0d:1f:30:4b:65:8e:ee:54:20:8d:9e:49:42:77:9b: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:14:A5:96:F3:C6:49:DD:D8:9D:58:5C:7B:D1:E7:06:86:60:B7:C1 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DhSllvPGSd3YnVhce9HnBoZgt8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.153.0-195.40.155.255 195.172.120.0/24 Signature Algorithm: sha256WithRSAEncryption c9:89:7d:7f:60:8f:a5:a3:69:6a:22:66:77:f9:2c:39:29:1f: cf:e4:e4:a7:f2:51:b6:19:4e:20:9b:05:e8:9c:2e:1d:12:60: eb:d8:29:21:70:bf:38:75:4d:6b:d5:84:16:d9:49:d1:a0:12: 15:de:b3:88:6a:ee:0e:32:39:99:21:f1:dd:4d:6f:25:59:5f: 32:9e:6c:15:ad:2b:54:55:4c:b3:30:15:5d:7a:71:94:81:3e: 51:6b:53:e8:17:fa:17:fe:61:11:9a:47:9d:31:67:43:93:53: b0:c8:66:22:7a:8e:1c:8f:f8:9d:62:02:e4:b6:3c:03:01:42: aa:c7:f0:7b:e0:21:83:74:f3:a1:f4:82:18:22:43:6f:09:d7: b6:1a:4f:8a:26:d9:a0:04:1b:ed:c6:1e:48:ac:b3:42:da:06: 35:b5:63:b9:74:e0:58:a4:15:92:f4:38:ab:be:dc:e1:27:d1: b6:d0:bd:9f:82:0e:2a:4a:2c:0b:22:66:60:00:43:d6:e6:44: d6:70:bb:43:7b:36:e9:57:61:c2:16:c9:60:50:d0:4b:f4:ca: 1f:42:74:10:08:4c:79:27:df:b1:29:a7:1c:e9:0f:a1:5e:7b: 2c:87:0b:a5:b1:19:1c:de:96:4b:8e:9d:e8:bc:ac:4a:86:87: 19:ae:5b:59 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4ojzSGN52G+DE/Iy3KpCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE0YTU5NmYzYzY0OWRkZDg5ZDU4NWM3YmQxZTcwNjg2NjBiN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4dDm+wdJPPBDHk9tCAn24X1Y8Yi 1yeytjUW1PhnI4x3zpvIQmqYkCjTKEvbaTmldsL4DjxyAugMIAXhxzLTmfFwCya8 87baTBDCwYNqg89FveM/VGHrjgXWdeTqP3Xs1wckqCtsmJ+5SZbvYtJoY6qi4Lhd wlWLtSDRWXEUs5bVIS86P9FS5/pNVRUuOPDwTMHbIpxn/J3lAjSQxT4RXiGlbMFZ 8bgO5ZEFdrfKB06OlM8hvXdKrNOtPudzx6fxjsr+CHHCUtkbHoYTLwOjWf1aDBhs e2YBZq3NKrI8Ki1syOMJOX53mGP7BgLUcmQNHzBLZY7uVCCNnklCd5sYCQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFA4UpZbzxknd2J1YXHvR5waGYLfBMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvRGhTbGx2UEdTZDNZblZoY2U5SG5Cb1pndDhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADDKJkD BALDKJgDBADDrHgwDQYJKoZIhvcNAQELBQADggEBAMmJfX9gj6WjaWoiZnf5LDkp H8/k5KfyUbYZTiCbBeicLh0SYOvYKSFwvzh1TWvVhBbZSdGgEhXes4hq7g4yOZkh 8d1NbyVZXzKebBWtK1RVTLMwFV16cZSBPlFrU+gX+hf+YRGaR50xZ0OTU7DIZiJ6 jhyP+J1iAuS2PAMBQqrH8HvgIYN086H0ghgiQ28J17YaT4om2aAEG+3GHkiss0La BjW1Y7l04FikFZL0OKu+3OEn0bbQvZ+CDipKLAsiZmAAQ9bmRNZwu0N7NulXYcIW yWBQ0Ev0yh9CdBAITHkn37EppxzpD6FeeyyHC6WxGRzelkuOnei8rEqGhxmuW1k= -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:33 2026 by rpki-client