This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/i1-MRvdMDpnMLALR5PXvq3Ies1U.roa File: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (raw, json) Hash identifier: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE= Subject key identifier: 8B:5F:8C:46:F7:4C:0E:99:CC:2C:02:D1:E4:F5:EF:AB:72:1E:B3:55 Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Certificate serial: 019B7E374945A665AEB4DD85CDAB4166E271 Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/i1-MRvdMDpnMLALR5PXvq3Ies1U.roa Signing time: Fri 02 Jan 2026 10:18:31 +0000 ROA not before: Fri 02 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215371 IP address blocks: 195.140.196.0/24 maxlen: 24 195.140.197.0/24 maxlen: 24 195.140.198.0/24 maxlen: 24 195.140.199.0/24 maxlen: 24 195.149.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:49:45:a6:65:ae:b4:dd:85:cd:ab:41:66:e2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b5f8c46f74c0e99cc2c02d1e4f5efab721eb355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:86:f0:4f:fb:d9:92:22:7d:45:ff:b0:71: b6:0b:97:eb:9c:83:5d:21:c7:66:73:37:de:6d:c0: 7d:82:8b:4f:39:5b:56:dc:94:ad:80:13:c4:2d:8e: ee:27:b4:d6:be:8e:a3:56:f7:c0:43:5b:fa:80:09: 2b:04:64:f7:5c:ad:80:b8:f1:a5:8f:86:ab:a4:a1: 18:3b:f5:c6:3e:45:ea:3b:8b:ab:b8:97:46:4c:32: a0:7e:6b:60:60:3f:45:19:66:7b:46:b4:47:f1:58: 67:58:55:0b:5a:92:b1:e6:32:57:ab:38:cd:33:95: 75:c9:d0:ef:77:51:36:ef:b2:9d:27:32:05:33:b5: 1f:e4:d0:1c:e0:e2:64:fa:b0:b7:85:cb:fa:83:88: 5c:d0:3d:6c:76:b0:44:bc:b9:59:48:e9:4f:a3:df: 9b:9c:a5:95:4d:63:8d:53:ca:52:84:65:d0:39:f4: f8:20:a4:8f:93:c8:fd:96:c7:21:84:1c:e0:ca:84: 76:75:ea:2a:27:9a:06:3e:4f:98:69:cc:4a:9d:7d: da:d1:b0:70:c3:14:02:66:71:9a:37:8e:f2:55:72: ed:38:e1:b9:ac:45:48:f2:b0:d7:54:30:2d:11:ad: 1f:09:5a:c5:0f:b9:02:43:78:79:c1:30:70:41:25: ec:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5F:8C:46:F7:4C:0E:99:CC:2C:02:D1:E4:F5:EF:AB:72:1E:B3:55 X509v3 Authority Key Identifier: keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/i1-MRvdMDpnMLALR5PXvq3Ies1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.140.196.0/22 195.149.116.0/24 Signature Algorithm: sha256WithRSAEncryption ac:9d:74:03:58:72:04:07:90:ad:e7:17:a3:d8:d6:ac:9e:8f: 02:75:46:e5:78:4c:75:7f:9d:9b:20:35:b2:31:0a:c7:e9:ea: 07:42:7f:78:a7:57:91:30:4a:75:5c:4b:a9:1f:27:c0:d1:db: f4:60:73:43:15:11:c6:69:61:d8:dc:f7:45:c8:a2:b3:b7:43: aa:1f:0e:4b:10:0b:6c:22:b8:1b:af:82:aa:d0:d2:5e:00:07: 9e:79:1d:e5:95:17:f6:1d:1f:42:b7:48:40:35:39:b9:47:92: 04:f0:c5:7f:d4:1c:88:39:cf:3b:7b:eb:0b:cd:f8:ad:e6:ce: 71:8f:32:ac:23:a7:20:71:a4:98:3c:92:79:30:a9:bf:34:20: 59:a9:c7:49:da:3b:75:09:97:b9:83:b2:9d:94:62:cd:c0:d3: 72:97:d9:0a:e3:66:ce:ab:9f:c1:2f:7f:9b:57:6f:84:a9:10: 79:7d:02:33:07:44:a7:47:f1:32:a8:df:fd:09:01:e3:8a:04: 0c:f1:f5:9f:0d:59:4b:5d:78:dc:6a:3f:f0:1e:44:80:7d:f6: bf:6e:f6:ac:5a:eb:37:81:28:98:df:65:dc:a4:31:5d:eb:de: b9:42:26:c6:5b:a9:a3:bc:2a:2e:a5:56:c8:81:6e:ad:f0:7f: 21:6e:eb:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N0lFpmWutN2FzatBZuJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm NWNlNTEwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjVmOGM0NmY3NGMwZTk5Y2MyYzAyZDFlNGY1ZWZhYjcyMWViMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5GG8E/72ZIifUX/sHG2C5frnINd IcdmczfebcB9gotPOVtW3JStgBPELY7uJ7TWvo6jVvfAQ1v6gAkrBGT3XK2AuPGl j4arpKEYO/XGPkXqO4uruJdGTDKgfmtgYD9FGWZ7RrRH8VhnWFULWpKx5jJXqzjN M5V1ydDvd1E277KdJzIFM7Uf5NAc4OJk+rC3hcv6g4hc0D1sdrBEvLlZSOlPo9+b nKWVTWONU8pShGXQOfT4IKSPk8j9lschhBzgyoR2deoqJ5oGPk+YacxKnX3a0bBw wxQCZnGaN47yVXLtOOG5rEVI8rDXVDAtEa0fCVrFD7kCQ3h5wTBwQSXsVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFItfjEb3TA6ZzCwC0eT176tyHrNVMB8GA1UdIwQY MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt NzdmY2E3YTMwYjlmLzEvaTEtTVJ2ZE1EcG5NTEFMUjVQWHZxM0llczFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw4zEAwQA w5V0MA0GCSqGSIb3DQEBCwUAA4IBAQCsnXQDWHIEB5Ct5xej2Nasno8CdUbleEx1 f52bIDWyMQrH6eoHQn94p1eRMEp1XEupHyfA0dv0YHNDFRHGaWHY3PdFyKKzt0Oq Hw5LEAtsIrgbr4Kq0NJeAAeeeR3llRf2HR9Ct0hANTm5R5IE8MV/1ByIOc87e+sL zfit5s5xjzKsI6cgcaSYPJJ5MKm/NCBZqcdJ2jt1CZe5g7KdlGLNwNNyl9kK42bO q5/BL3+bV2+EqRB5fQIzB0SnR/EyqN/9CQHjigQM8fWfDVlLXXjcaj/wHkSAffa/ bvasWus3gSiY32XcpDFd6965QibGW6mjvCoupVbIgW6t8H8hbuvK -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:26 2026 by rpki-client