This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tZVN8cjCgNVHWbYgjq1ONjunkpA.roa File: tZVN8cjCgNVHWbYgjq1ONjunkpA.roa (raw, json) Hash identifier: 9aUUWp5XINdqlmuzrkoj28lsqppSsAmxQ6ZT/6QOros= Subject key identifier: B5:95:4D:F1:C8:C2:80:D5:47:59:B6:20:8E:AD:4E:36:3B:A7:92:90 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2578BBC1D1AC5941F9F9D3432B65A Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tZVN8cjCgNVHWbYgjq1ONjunkpA.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197450 IP address blocks: 195.40.186.0/23 maxlen: 23 212.135.12.0/23 maxlen: 23 212.135.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:57:8b:bc:1d:1a:c5:94:1f:9f:9d:34:32:b6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5954df1c8c280d54759b6208ead4e363ba79290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:2a:3c:87:da:fd:72:4c:d6:a6:3f:79:24: 4f:75:df:e9:3c:7d:9a:a9:4d:33:d0:38:ce:cc:a7: 8a:d8:14:1b:f4:37:35:47:9d:9c:d1:7b:ad:70:33: 85:1e:ef:6b:72:12:dc:e3:85:12:ad:a7:4c:b6:b8: ad:4e:76:7c:4d:43:39:96:9a:97:98:bc:7a:17:6a: 82:03:b3:11:a3:44:40:19:63:77:6f:89:9f:0c:f0: a7:9b:44:83:c8:7e:2d:6d:e9:aa:59:d9:7f:83:19: 58:34:a9:49:64:7f:fb:b9:29:15:da:eb:08:19:09: 06:c7:d6:8f:ce:95:2d:18:90:ee:5c:9a:ea:11:67: 08:be:52:f8:70:fa:d5:ad:85:8a:17:3f:e1:1c:bf: b7:30:98:18:e7:84:4f:03:e2:23:67:a4:d8:34:ee: 6b:fb:b6:d5:f7:b0:ae:2b:17:bc:62:c9:2c:0f:06: 4f:cc:b6:f5:e8:e8:52:8a:ef:df:0c:64:7c:16:d7: 82:61:af:91:65:8a:ac:6a:69:66:85:82:39:ce:d2: f8:7a:2d:47:9a:ce:df:bb:35:66:fe:1c:8f:11:c7: 98:b4:4d:15:e4:5d:e1:6b:81:3b:26:21:d3:ba:1b: 93:20:be:52:12:7c:56:b1:cd:f3:f0:df:b7:11:ce: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:95:4D:F1:C8:C2:80:D5:47:59:B6:20:8E:AD:4E:36:3B:A7:92:90 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tZVN8cjCgNVHWbYgjq1ONjunkpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.186.0/23 212.135.12.0/23 212.135.180.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:c7:e4:70:cd:65:6c:42:e1:43:f8:92:4b:ed:06:e4:20:bd: dd:13:21:96:05:be:66:81:1e:06:81:d5:0d:b9:f6:14:ff:f2: 17:ac:76:15:ce:3d:e4:aa:7b:e8:9c:ff:88:65:96:4f:34:fa: 0a:60:57:78:eb:74:bc:ba:8f:9e:10:0a:08:25:d9:6f:37:6c: c7:d3:a3:36:63:63:28:f1:84:20:72:3d:d8:36:ae:bf:4c:20: 5f:5f:e5:17:98:40:fc:8d:a9:a7:3e:e4:9e:ee:76:b8:0c:bb: 2c:89:b8:45:33:8e:6e:88:b9:f2:1f:77:b4:22:47:0d:8c:5f: 0f:07:d3:be:aa:ab:85:e3:db:5d:51:8e:9a:7d:fc:b6:e0:6c: 82:4b:7e:70:84:6b:ca:07:7d:b1:aa:ec:7b:79:36:6c:66:70: 9c:74:80:2f:d8:ca:82:81:44:0b:74:32:0c:36:90:85:99:e3: 25:5f:25:95:7c:c2:1b:5d:2e:cd:13:db:3c:22:db:e2:6d:fe: a6:c5:d1:ce:c5:5f:3a:83:92:5d:7e:78:f7:2e:62:e6:b1:94: c9:5e:83:2e:20:30:e6:46:5e:ff:03:1e:c4:8f:c4:05:4c:81: 33:b0:21:1e:a2:79:09:e4:51:17:fa:3a:d7:ab:df:f7:49:ee: 95:65:91:a5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oleLvB0axZQfn500MrZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTk1NGRmMWM4YzI4MGQ1NDc1OWI2MjA4ZWFkNGUzNjNiYTc5MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmIqPIfa/XJM1qY/eSRPdd/pPH2a qU0z0DjOzKeK2BQb9Dc1R52c0XutcDOFHu9rchLc44USradMtritTnZ8TUM5lpqX mLx6F2qCA7MRo0RAGWN3b4mfDPCnm0SDyH4tbemqWdl/gxlYNKlJZH/7uSkV2usI GQkGx9aPzpUtGJDuXJrqEWcIvlL4cPrVrYWKFz/hHL+3MJgY54RPA+IjZ6TYNO5r +7bV97CuKxe8YsksDwZPzLb16OhSiu/fDGR8FteCYa+RZYqsamlmhYI5ztL4ei1H ms7fuzVm/hyPEceYtE0V5F3ha4E7JiHTuhuTIL5SEnxWsc3z8N+3Ec5NSQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLWVTfHIwoDVR1m2II6tTjY7p5KQMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvdFpWTjhjakNnTlZIV2JZZ2pxMU9OanVua3BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwyi6AwQB 1IcMAwQB1Ie0MA0GCSqGSIb3DQEBCwUAA4IBAQAPx+RwzWVsQuFD+JJL7QbkIL3d EyGWBb5mgR4GgdUNufYU//IXrHYVzj3kqnvonP+IZZZPNPoKYFd463S8uo+eEAoI JdlvN2zH06M2Y2Mo8YQgcj3YNq6/TCBfX+UXmED8jamnPuSe7na4DLssibhFM45u iLnyH3e0IkcNjF8PB9O+qquF49tdUY6affy24GyCS35whGvKB32xqux7eTZsZnCc dIAv2MqCgUQLdDIMNpCFmeMlXyWVfMIbXS7NE9s8Itvibf6mxdHOxV86g5Jdfnj3 LmLmsZTJXoMuIDDmRl7/Ax7Ej8QFTIEzsCEeonkJ5FEX+jrXq9/3Se6VZZGl -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:57 2026 by rpki-client