This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cid7HvMidFvtXH-s1EtdDJVv1aQ.roa File: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (raw, json) Hash identifier: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM= Subject key identifier: 72:27:7B:1E:F3:22:74:5B:ED:5C:7F:AC:D4:4B:5D:0C:95:6F:D5:A4 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A377A3BBB793E37BCB8CC3675D01D8 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cid7HvMidFvtXH-s1EtdDJVv1aQ.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 83.111.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:a3:bb:b7:93:e3:7b:cb:8c:c3:67:5d:01:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72277b1ef322745bed5c7facd44b5d0c956fd5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:62:76:2f:ed:cf:6d:f0:de:b3:c3:cd:e0: 48:d5:f2:f6:61:de:15:d4:ac:81:35:c2:2f:e3:e6: 04:42:bd:4c:2f:fe:c3:48:78:fb:56:0b:6d:1f:ad: 2d:82:5e:50:2b:7b:d4:02:da:e4:93:a9:44:ba:73: c2:35:df:57:81:e3:54:79:d7:fe:e3:c1:6c:40:c2: 5a:15:1e:e3:2d:95:40:9d:28:f0:f5:61:2d:06:3a: c6:33:3a:69:a3:91:50:c3:2f:c6:20:69:a2:27:82: 2a:fe:2b:ac:d0:c6:b9:92:12:54:f7:52:ab:db:ad: b2:17:6d:fd:12:e4:10:76:29:78:07:a5:7a:cd:93: 23:89:bf:15:90:51:59:e4:0a:66:f4:ac:8c:05:65: bf:66:74:37:9a:22:db:33:fd:cb:76:a5:3c:a4:95: 16:d9:d4:fe:8f:c3:7e:c4:33:b2:9a:15:d4:cd:5d: 87:ec:d1:bc:bf:8c:15:b2:e5:d1:25:15:88:16:f8: 30:00:10:ae:28:54:e0:ee:a1:d0:07:80:84:d1:5b: 19:7a:b3:b4:df:1c:db:9d:97:e5:ee:73:a7:3a:6f: 87:2c:b8:56:74:44:6a:ae:78:c8:77:b4:cd:bc:34: 3e:47:f0:b8:81:d5:d9:15:ae:5c:5d:c6:a6:29:e4: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:27:7B:1E:F3:22:74:5B:ED:5C:7F:AC:D4:4B:5D:0C:95:6F:D5:A4 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cid7HvMidFvtXH-s1EtdDJVv1aQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.111.28.0/24 Signature Algorithm: sha256WithRSAEncryption 02:14:7c:da:63:4a:22:f4:d4:42:10:da:72:94:ca:60:a4:86: f5:2c:6a:78:d5:fb:60:13:0f:75:4f:f6:14:45:4f:d8:47:f6: 0f:04:cc:8d:01:f2:59:ef:ae:90:49:35:94:a9:b2:81:6b:8c: 9a:4a:06:40:48:c4:9c:5f:3e:0a:d9:0f:4a:8a:2c:90:d9:fd: 74:cf:2b:81:fb:4f:15:dd:f5:39:91:6f:92:03:28:e2:f8:87: 9a:fd:4d:1b:19:1d:f2:2c:55:a0:45:32:bd:05:47:f5:ac:c5: 6c:1f:2b:39:77:59:b0:67:9c:c2:fe:a1:d1:2c:c8:58:f7:41: ae:0b:39:26:da:d4:20:2c:27:a7:fb:ac:6d:dc:92:9d:24:7e: 80:71:be:d2:cd:27:e4:66:89:df:09:33:6f:b4:61:a5:04:9b: f1:14:91:94:8e:4b:6f:da:1e:c6:04:b8:f8:2f:30:d2:cf:ac: 86:06:ec:a1:ab:a1:3c:7a:0a:f1:d4:66:51:8c:bf:50:2a:75: df:10:9c:08:d8:2f:80:4f:1d:ef:7e:16:13:c2:07:60:33:33: ae:c6:c2:13:ce:72:e3:14:c1:07:bb:91:a9:f5:f1:77:ee:e1: d7:aa:ec:10:7e:08:32:93:b7:21:3a:ba:4c:b2:db:d4:39:b2: 4f:a8:18:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3eju7eT43vLjMNnXQHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjI3N2IxZWYzMjI3NDViZWQ1YzdmYWNkNDRiNWQwYzk1NmZkNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UBidi/tz23w3rPDzeBI1fL2Yd4V 1KyBNcIv4+YEQr1ML/7DSHj7VgttH60tgl5QK3vUAtrkk6lEunPCNd9XgeNUedf+ 48FsQMJaFR7jLZVAnSjw9WEtBjrGMzppo5FQwy/GIGmiJ4Iq/ius0Ma5khJU91Kr 262yF239EuQQdil4B6V6zZMjib8VkFFZ5Apm9KyMBWW/ZnQ3miLbM/3LdqU8pJUW 2dT+j8N+xDOymhXUzV2H7NG8v4wVsuXRJRWIFvgwABCuKFTg7qHQB4CE0VsZerO0 3xzbnZfl7nOnOm+HLLhWdERqrnjId7TNvDQ+R/C4gdXZFa5cXcamKeSGYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHInex7zInRb7Vx/rNRLXQyVb9WkMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvY2lkN0h2TWlkRnZ0WEgtczFFdGRESlZ2MWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU28cMA0G CSqGSIb3DQEBCwUAA4IBAQACFHzaY0oi9NRCENpylMpgpIb1LGp41ftgEw91T/YU RU/YR/YPBMyNAfJZ766QSTWUqbKBa4yaSgZASMScXz4K2Q9KiiyQ2f10zyuB+08V 3fU5kW+SAyji+Iea/U0bGR3yLFWgRTK9BUf1rMVsHys5d1mwZ5zC/qHRLMhY90Gu Czkm2tQgLCen+6xt3JKdJH6Acb7SzSfkZonfCTNvtGGlBJvxFJGUjktv2h7GBLj4 LzDSz6yGBuyhq6E8egrx1GZRjL9QKnXfEJwI2C+ATx3vfhYTwgdgMzOuxsITznLj FMEHu5Gp9fF37uHXquwQfggyk7chOrpMstvUObJPqBgc -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:52 2026 by rpki-client