This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/D07dxDXxrFaWAK13Zm1gQWe6sqM.roa File: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (raw, json) Hash identifier: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo= Subject key identifier: 0F:4E:DD:C4:35:F1:AC:56:96:00:AD:77:66:6D:60:41:67:BA:B2:A3 Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674 Certificate serial: 019B797F0218482823A8D7F4351988B45CA2 Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/D07dxDXxrFaWAK13Zm1gQWe6sqM.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50635 IP address blocks: 195.191.186.0/23 maxlen: 23 195.191.186.0/24 maxlen: 24 195.191.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:02:18:48:28:23:a8:d7:f4:35:19:88:b4:5c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f4eddc435f1ac569600ad77666d604167bab2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:00:f2:db:3d:ca:3f:ea:cd:23:c5:9c:83: d0:7b:e0:5e:ab:7d:26:01:f2:1b:40:04:66:ed:c3: ac:37:95:e1:6a:b3:54:28:b5:11:87:2d:bf:ab:f9: 89:2f:f8:03:a7:76:a2:60:75:a3:2d:3c:0a:be:0a: 93:ed:d9:d3:c4:bc:9f:e1:78:a1:a4:ee:35:a9:13: 6c:9c:d2:97:47:8e:b4:44:18:6d:76:f1:a4:67:99: 70:25:13:20:da:27:a3:0a:06:be:e6:80:38:a6:60: 61:67:94:40:c5:67:3a:ad:22:0e:3e:e8:5e:f5:f5: e6:50:50:62:37:c7:d5:64:07:31:09:25:67:bb:07: 2c:a4:8d:a3:cf:64:e9:39:9e:0c:9c:bd:a3:c2:62: 8f:32:71:98:d8:39:34:b1:36:b3:eb:98:76:e7:6e: 0b:c9:88:69:47:a6:53:1f:d3:6c:12:65:ed:8c:ce: 7c:d8:7e:5f:75:17:dd:b3:1e:ac:94:d6:01:45:f7: cc:2b:c5:66:eb:a8:a5:cf:1c:6a:ba:b7:83:f8:d5: 02:c2:eb:47:87:03:56:f0:d6:fd:4d:ce:be:3b:a6: 6f:d0:00:c9:1a:5a:bc:6c:df:8a:6b:96:fd:c2:8c: 49:51:b5:d9:5c:f4:3c:47:82:92:66:c9:c7:de:74: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4E:DD:C4:35:F1:AC:56:96:00:AD:77:66:6D:60:41:67:BA:B2:A3 X509v3 Authority Key Identifier: keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/D07dxDXxrFaWAK13Zm1gQWe6sqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.186.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:a9:b9:d3:68:b6:6e:64:a9:e7:7d:f5:69:50:1c:3f:8d:a6: d2:0c:e0:9c:53:20:8e:1d:99:12:1c:e8:b6:28:81:0a:05:d8: e6:2f:3d:a8:0e:ce:99:67:f3:93:cb:c8:f5:fa:2c:a6:fe:9f: ca:a2:8d:4e:fd:13:97:8c:a4:61:77:52:bc:68:02:50:29:42: 02:cf:fd:57:0d:33:14:3a:cc:e6:3f:68:8b:ed:05:70:c1:fb: 9b:f3:cf:9e:c5:70:a5:75:f9:32:d1:ac:0e:60:5b:85:51:d2: 7f:af:bf:8c:d2:30:3f:c0:f7:26:d1:37:85:78:71:a6:00:da: a1:75:c2:7e:51:b0:26:7e:3b:4c:78:a6:ed:23:b2:81:fc:21: b2:18:f5:b6:fe:81:51:df:ca:01:f0:8e:54:13:fd:cb:09:e9: b6:1f:b6:13:06:67:01:6a:fe:04:e1:70:76:f9:63:9f:51:aa: 86:b6:99:7f:9a:d0:86:a3:2c:04:1a:f3:30:af:15:47:02:44: ca:22:b3:f3:79:fe:6a:0d:5a:cb:df:05:fc:e7:20:f6:89:ef: 44:12:81:a7:d8:6a:b4:02:8a:88:fd:fd:31:35:82:c2:bd:2f: f0:de:64:29:4f:5e:19:61:ef:af:0f:a8:13:22:70:03:9a:a9: 71:9f:d4:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwIYSCgjqNf0NRmItFyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl M2I2NzQwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjRlZGRjNDM1ZjFhYzU2OTYwMGFkNzc2NjZkNjA0MTY3YmFiMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ0A8ts9yj/qzSPFnIPQe+Beq30m AfIbQARm7cOsN5XharNUKLURhy2/q/mJL/gDp3aiYHWjLTwKvgqT7dnTxLyf4Xih pO41qRNsnNKXR460RBhtdvGkZ5lwJRMg2iejCga+5oA4pmBhZ5RAxWc6rSIOPuhe 9fXmUFBiN8fVZAcxCSVnuwcspI2jz2TpOZ4MnL2jwmKPMnGY2Dk0sTaz65h2524L yYhpR6ZTH9NsEmXtjM582H5fdRfdsx6slNYBRffMK8Vm66ilzxxqureD+NUCwutH hwNW8Nb9Tc6+O6Zv0ADJGlq8bN+Ka5b9woxJUbXZXPQ8R4KSZsnH3nR1FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA9O3cQ18axWlgCtd2ZtYEFnurKjMB8GA1UdIwQY MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt NDI0M2U4OGJkNzZjLzEvRDA3ZHhEWHhyRmFXQUsxM1ptMWdRV2U2c3FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7+6MA0G CSqGSIb3DQEBCwUAA4IBAQAvqbnTaLZuZKnnffVpUBw/jabSDOCcUyCOHZkSHOi2 KIEKBdjmLz2oDs6ZZ/OTy8j1+iym/p/Koo1O/ROXjKRhd1K8aAJQKUICz/1XDTMU OszmP2iL7QVwwfub88+exXCldfky0awOYFuFUdJ/r7+M0jA/wPcm0TeFeHGmANqh dcJ+UbAmfjtMeKbtI7KB/CGyGPW2/oFR38oB8I5UE/3LCem2H7YTBmcBav4E4XB2 +WOfUaqGtpl/mtCGoywEGvMwrxVHAkTKIrPzef5qDVrL3wX85yD2ie9EEoGn2Gq0 AoqI/f0xNYLCvS/w3mQpT14ZYe+vD6gTInADmqlxn9SE -----END CERTIFICATE-----Generated at Fri Feb 6 09:57:52 2026 by rpki-client