This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/ldB1ccba1eVWxNgUlrtHodR40IY.roa File: ldB1ccba1eVWxNgUlrtHodR40IY.roa (raw, json) Hash identifier: /jl6IvaIt6KPatpRGzV51YKDjVrmO0TQhFPcR45WfF4= Subject key identifier: 95:D0:75:71:C6:DA:D5:E5:56:C4:D8:14:96:BB:47:A1:D4:78:D0:86 Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25 Certificate serial: 019B7AC90C215D4EE0B0C75B74F59629292C Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/ldB1ccba1eVWxNgUlrtHodR40IY.roa Signing time: Thu 01 Jan 2026 18:19:14 +0000 ROA not before: Thu 01 Jan 2026 18:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207496 IP address blocks: 195.162.6.0/23 maxlen: 23 195.177.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0c:21:5d:4e:e0:b0:c7:5b:74:f5:96:29:29:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25 Validity Not Before: Jan 1 18:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95d07571c6dad5e556c4d81496bb47a1d478d086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:27:fb:86:02:51:36:16:e7:4e:a1:64:52: cf:77:de:19:19:f9:9a:d4:85:ce:87:2f:00:9f:55: d5:70:bc:24:9b:b7:ff:af:d2:44:06:3b:90:5c:8b: e9:94:34:9c:0a:02:c2:e2:87:43:50:fd:0b:9a:8d: 5b:86:a9:a7:4a:8e:66:f4:14:44:8b:04:88:7a:36: e4:a5:55:2f:8f:fd:f8:b5:d0:38:9b:65:d6:b2:16: ef:1b:58:58:50:f1:1e:fd:b0:52:ab:30:38:c9:aa: 01:d2:4c:ba:d3:b9:55:96:f9:c2:f8:4b:f9:46:60: ee:4c:de:87:0e:52:11:16:8e:db:88:a2:fa:26:78: a6:5f:46:af:a6:b3:2a:9d:18:e3:e7:37:1d:51:e2: eb:77:50:8a:6d:49:f4:b7:69:92:4a:7e:ee:6b:fd: 12:d6:2c:d1:18:67:c1:05:88:cd:9a:8c:ef:19:b9: 95:ed:84:21:2b:a2:d1:4d:91:3c:0f:25:83:ae:a9: ae:61:c5:a7:64:3c:c2:e9:f3:2f:11:ab:a7:6e:ab: 83:8d:42:04:32:65:09:fd:a8:9a:6a:1f:6c:c7:56: de:bf:8d:60:5b:d2:b1:c6:ad:9d:7a:02:8b:33:b6: a8:ce:74:00:63:0c:4f:f0:96:b0:7e:65:15:54:64: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D0:75:71:C6:DA:D5:E5:56:C4:D8:14:96:BB:47:A1:D4:78:D0:86 X509v3 Authority Key Identifier: keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/ldB1ccba1eVWxNgUlrtHodR40IY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.162.6.0/23 195.177.194.0/23 Signature Algorithm: sha256WithRSAEncryption b9:76:8e:4a:82:c6:7d:7e:3c:77:c7:4d:98:a5:02:0f:23:2a: c2:23:4c:55:31:a9:0b:23:29:d4:58:00:dd:b4:31:6b:a6:e7: 63:4d:d0:57:93:2f:2a:d7:ac:68:25:fb:d2:a1:12:0a:a5:86: 6b:54:5e:9a:c8:11:bc:4b:36:e1:ff:e4:14:17:fe:58:c7:55: 14:f8:f8:05:cd:99:43:54:ff:61:09:10:ae:26:a4:c1:76:30: c1:6f:ba:3b:d0:35:ce:26:cc:a8:39:88:e5:07:21:25:1b:a0: 03:cf:c3:3c:7c:96:b1:fa:b9:a3:80:d7:2d:54:70:d2:d6:96: f6:80:b6:3f:6f:1b:bf:c5:ff:58:84:f4:f0:7f:9d:fb:3a:d6: fc:60:a8:b9:10:74:48:09:21:b5:a5:25:9b:63:94:02:50:0c: 61:7a:40:bd:2c:d7:36:84:ec:e9:af:a5:91:6d:0a:7d:65:b8: 39:d0:8c:e3:28:79:91:c7:a0:cf:31:78:3b:f2:58:9e:4d:44: 96:2b:55:d5:5a:3b:2a:df:ae:0a:ea:3a:f9:d4:b7:9d:aa:7f: fb:24:6d:1a:68:d7:59:15:08:84:c9:4f:aa:a6:73:5c:4a:73: 46:ca:b2:1e:49:b8:60:e5:49:68:a5:19:2a:a3:6e:a6:16:0b: 3d:67:43:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yQwhXU7gsMdbdPWWKSksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOWQ0NWYwMjkyZDMxMmZkMDYwYTI3NDBiZDFlNTI3NTBi YjhjMjUwHhcNMjYwMTAxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWQwNzU3MWM2ZGFkNWU1NTZjNGQ4MTQ5NmJiNDdhMWQ0NzhkMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJAn+4YCUTYW506hZFLPd94ZGfma 1IXOhy8An1XVcLwkm7f/r9JEBjuQXIvplDScCgLC4odDUP0Lmo1bhqmnSo5m9BRE iwSIejbkpVUvj/34tdA4m2XWshbvG1hYUPEe/bBSqzA4yaoB0ky607lVlvnC+Ev5 RmDuTN6HDlIRFo7biKL6JnimX0avprMqnRjj5zcdUeLrd1CKbUn0t2mSSn7ua/0S 1izRGGfBBYjNmozvGbmV7YQhK6LRTZE8DyWDrqmuYcWnZDzC6fMvEaunbquDjUIE MmUJ/aiaah9sx1bev41gW9Kxxq2degKLM7aoznQAYwxP8JawfmUVVGSbOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJXQdXHG2tXlVsTYFJa7R6HUeNCGMB8GA1UdIwQY MBaAFK2dRfApLTEv0GCidAvR5SdQu4wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMt Nzk0OTdlZTI1OTg0LzEvbGRCMWNjYmExZVZXeE5nVWxydEhvZFI0MElZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMtNzk0OTdlZTI1OTg0 LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw6IGAwQB w7HCMA0GCSqGSIb3DQEBCwUAA4IBAQC5do5KgsZ9fjx3x02YpQIPIyrCI0xVMakL IynUWADdtDFrpudjTdBXky8q16xoJfvSoRIKpYZrVF6ayBG8Szbh/+QUF/5Yx1UU +PgFzZlDVP9hCRCuJqTBdjDBb7o70DXOJsyoOYjlByElG6ADz8M8fJax+rmjgNct VHDS1pb2gLY/bxu/xf9YhPTwf537Otb8YKi5EHRICSG1pSWbY5QCUAxhekC9LNc2 hOzpr6WRbQp9Zbg50IzjKHmRx6DPMXg78lieTUSWK1XVWjsq364K6jr51Ledqn/7 JG0aaNdZFQiEyU+qpnNcSnNGyrIeSbhg5UlopRkqo26mFgs9Z0MH -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:12 2026 by rpki-client