This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/3oD6UkoDNe0rtJWj8HxpE6jlak0.roa File: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (raw, json) Hash identifier: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA= Subject key identifier: DE:80:FA:52:4A:03:35:ED:2B:B4:95:A3:F0:7C:69:13:A8:E5:6A:4D Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Certificate serial: 019B7E3748D7BA13DD930C077C9DF1C582B8 Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/3oD6UkoDNe0rtJWj8HxpE6jlak0.roa Signing time: Fri 02 Jan 2026 10:18:30 +0000 ROA not before: Fri 02 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 195.140.196.0/24 maxlen: 24 195.140.197.0/24 maxlen: 24 195.140.198.0/24 maxlen: 24 195.140.199.0/24 maxlen: 24 195.149.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:48:d7:ba:13:dd:93:0c:07:7c:9d:f1:c5:82:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Validity Not Before: Jan 2 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de80fa524a0335ed2bb495a3f07c6913a8e56a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:c5:20:23:ab:94:ff:4f:a1:eb:74:ef:12: 98:4f:ef:37:c7:97:db:21:eb:5d:8e:ed:3c:4c:2a: 81:8d:12:a1:89:9d:a4:c5:88:f7:2b:8f:83:a4:97: 14:ce:48:16:5f:dc:0b:21:0a:0a:88:59:d8:52:54: 33:d0:57:d8:19:08:73:4a:6c:81:8a:17:d3:05:54: 0c:4d:c4:60:a0:38:06:a2:ae:c6:da:34:f1:41:5a: 72:26:e0:6c:42:83:92:da:5a:17:22:ad:e3:c3:d5: 3d:eb:b5:c4:a4:9a:92:15:f6:aa:d5:68:01:31:01: 6c:3e:82:6b:18:df:30:d5:08:c2:18:be:05:72:a9: 71:1e:2e:9c:43:f4:49:68:6d:61:74:9d:17:fc:45: 61:ff:cf:66:02:71:81:86:4b:ea:86:b3:01:d9:17: d5:4c:de:8c:a0:79:59:be:dc:1f:a4:72:77:d3:f8: 51:fd:2e:a8:a8:79:d7:56:f1:c7:b6:26:5a:0b:89: 2e:5d:52:55:a3:b1:ff:9c:20:b8:80:94:6d:eb:fe: db:17:63:00:7e:fc:ad:91:88:e6:39:bb:22:3c:0f: 3a:ea:d2:fd:1c:b9:f1:f0:21:a7:06:c6:d7:13:be: eb:7f:75:11:bc:81:f8:4e:9d:c3:8a:df:5e:4b:84: 44:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:80:FA:52:4A:03:35:ED:2B:B4:95:A3:F0:7C:69:13:A8:E5:6A:4D X509v3 Authority Key Identifier: keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/3oD6UkoDNe0rtJWj8HxpE6jlak0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.140.196.0/22 195.149.116.0/24 Signature Algorithm: sha256WithRSAEncryption ac:da:bd:a2:11:59:bb:e1:48:71:d1:f5:1a:78:59:42:1c:62: 69:83:d1:c6:0d:23:c1:c7:9c:87:7c:56:bf:47:20:d7:4e:96: 3f:d5:32:6f:c9:a8:9f:e1:1f:f8:6c:80:ef:05:99:56:48:78: e5:d8:fb:aa:28:95:a9:5a:ab:43:f4:ea:18:c2:d3:16:8f:74: cb:37:35:d0:96:86:4a:cc:c6:e6:d6:41:af:28:de:b2:53:91: 7c:d9:ad:0e:46:a5:67:27:76:94:51:ab:49:68:67:a5:dc:f9: 11:2f:06:0b:a6:43:0b:22:26:6c:28:58:cb:66:d7:23:8e:06: ef:bb:77:89:e9:4b:fe:c7:38:9f:ed:74:6f:53:1a:74:5f:21: 3f:ab:77:0e:ea:1f:b0:ee:af:93:fc:a8:9e:9b:47:b6:b1:17: 74:75:7b:9c:47:f8:d4:b9:04:0a:df:ea:ee:8c:96:2b:97:2b: 12:01:aa:7d:e5:76:5a:7c:50:21:ca:94:87:c1:31:4e:fd:34: 17:2d:9f:3d:c3:97:f4:10:31:b0:28:44:ce:42:00:c1:ac:28: 08:eb:cd:21:33:d7:c9:44:91:b4:19:6b:1c:52:59:9d:51:fe: 1a:0e:3d:30:a6:c4:99:9d:6c:e8:45:07:d4:cd:b7:7f:ca:3d: c2:f5:5c:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N0jXuhPdkwwHfJ3xxYK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm NWNlNTEwHhcNMjYwMTAyMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTgwZmE1MjRhMDMzNWVkMmJiNDk1YTNmMDdjNjkxM2E4ZTU2YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJTFICOrlP9Poet07xKYT+83x5fb Ietdju08TCqBjRKhiZ2kxYj3K4+DpJcUzkgWX9wLIQoKiFnYUlQz0FfYGQhzSmyB ihfTBVQMTcRgoDgGoq7G2jTxQVpyJuBsQoOS2loXIq3jw9U967XEpJqSFfaq1WgB MQFsPoJrGN8w1QjCGL4FcqlxHi6cQ/RJaG1hdJ0X/EVh/89mAnGBhkvqhrMB2RfV TN6MoHlZvtwfpHJ30/hR/S6oqHnXVvHHtiZaC4kuXVJVo7H/nCC4gJRt6/7bF2MA fvytkYjmObsiPA866tL9HLnx8CGnBsbXE77rf3URvIH4Tp3Dit9eS4REjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN6A+lJKAzXtK7SVo/B8aROo5WpNMB8GA1UdIwQY MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt NzdmY2E3YTMwYjlmLzEvM29ENlVrb0ROZTBydEpXajhIeHBFNmpsYWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw4zEAwQA w5V0MA0GCSqGSIb3DQEBCwUAA4IBAQCs2r2iEVm74Uhx0fUaeFlCHGJpg9HGDSPB x5yHfFa/RyDXTpY/1TJvyaif4R/4bIDvBZlWSHjl2PuqKJWpWqtD9OoYwtMWj3TL NzXQloZKzMbm1kGvKN6yU5F82a0ORqVnJ3aUUatJaGel3PkRLwYLpkMLIiZsKFjL Ztcjjgbvu3eJ6Uv+xzif7XRvUxp0XyE/q3cO6h+w7q+T/Kiem0e2sRd0dXucR/jU uQQK3+rujJYrlysSAap95XZafFAhypSHwTFO/TQXLZ89w5f0EDGwKETOQgDBrCgI 680hM9fJRJG0GWscUlmdUf4aDj0wpsSZnWzoRQfUzbd/yj3C9Vyq -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:05 2026 by rpki-client