This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/0d5BfvygLk34C_gchAEDYvaKyoI.roa File: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (raw, json) Hash identifier: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg= Subject key identifier: D1:DE:41:7E:FC:A0:2E:4D:F8:0B:F8:1C:84:01:03:62:F6:8A:CA:82 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B7EA65C29130B3FC26757531871E117CC Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/0d5BfvygLk34C_gchAEDYvaKyoI.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51964 IP address blocks: 195.151.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5c:29:13:0b:3f:c2:67:57:53:18:71:e1:17:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1de417efca02e4df80bf81c84010362f68aca82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:26:51:5a:23:b5:2e:4b:66:a3:e1:a3:52: b3:5c:2c:19:80:ad:43:4b:12:41:18:25:b3:51:c9: 65:4e:4c:d0:33:cb:a0:b7:72:3d:2e:4a:71:62:ee: 4d:01:e0:dd:86:5a:36:e4:cd:66:72:e5:58:96:d1: ca:98:a6:08:53:e8:b8:88:bc:e2:39:fa:c9:4d:70: b8:c7:99:09:3b:f7:f2:14:b7:20:e6:80:56:82:7d: ba:96:15:d4:43:ae:9b:14:55:bd:29:fd:ae:9a:a1: eb:01:c7:68:87:bd:d4:12:14:ad:99:27:ec:0e:a4: 26:c8:7c:f6:04:c6:04:14:62:e0:64:d0:da:c8:e2: 39:f9:d9:42:9a:16:82:0d:c2:52:70:61:28:3b:48: db:98:9f:14:ba:fa:cd:55:26:d6:2e:cd:00:d3:67: 03:ea:40:62:db:7a:f2:7f:27:47:06:0e:8b:aa:a4: 76:a0:70:12:ed:1e:d8:09:9a:e7:85:f3:e6:fc:2a: d0:7e:28:80:a9:d4:70:ee:0c:59:e2:a2:68:fe:8f: 58:be:c2:f5:fd:c3:a6:c4:d1:85:78:79:aa:2c:52: b0:40:6a:f6:f9:08:42:0d:2b:a1:85:67:39:b5:3b: 59:17:a2:54:b0:c5:c8:82:da:bd:71:05:92:e7:6b: 47:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DE:41:7E:FC:A0:2E:4D:F8:0B:F8:1C:84:01:03:62:F6:8A:CA:82 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/0d5BfvygLk34C_gchAEDYvaKyoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.151.160.0/24 Signature Algorithm: sha256WithRSAEncryption 10:c2:a7:f7:f2:fb:99:9c:7b:ac:11:1e:15:21:ee:81:d5:c1: bc:79:cb:03:b4:7b:45:7f:4a:a9:c5:14:fe:f7:8d:b2:35:4a: af:e4:a4:ef:79:5e:b3:45:20:c8:39:1f:b5:e4:e9:8e:22:ff: 78:4e:46:fc:cf:a7:a7:71:1b:c5:0b:71:2e:4a:2c:f7:0e:78: 46:ac:4d:51:27:66:b8:b6:10:74:75:aa:4b:58:67:32:0c:cd: 57:02:53:77:13:f5:dc:99:99:3d:8e:d3:5f:1f:b6:86:3e:dc: 86:c7:07:50:01:b0:ff:b7:a4:5c:17:96:9d:70:6a:47:47:91: 6b:35:d5:d6:53:a3:11:92:37:10:55:8b:59:7b:18:e8:df:94: a5:c6:6c:11:b0:bd:26:37:d1:11:6d:4c:d8:61:05:42:87:8b: 36:41:47:2a:69:d5:dc:1a:2e:88:1c:a3:ef:8a:8f:13:20:fd: 45:98:60:7f:46:0a:c6:e6:83:01:33:0c:58:85:89:4f:71:2a: 4a:14:e4:fb:75:57:ed:45:e8:06:b4:1e:9c:d9:71:14:ad:fd: 56:28:7e:99:72:55:51:88:52:13:59:72:4e:d2:f7:d1:10:67: f4:f6:a7:57:47:9a:a1:0e:bb:af:0c:54:f9:79:62:9b:49:3c: 36:14:e0:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+plwpEws/wmdXUxhx4RfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWRlNDE3ZWZjYTAyZTRkZjgwYmY4MWM4NDAxMDM2MmY2OGFjYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAgmUVojtS5LZqPho1KzXCwZgK1D SxJBGCWzUcllTkzQM8ugt3I9LkpxYu5NAeDdhlo25M1mcuVYltHKmKYIU+i4iLzi OfrJTXC4x5kJO/fyFLcg5oBWgn26lhXUQ66bFFW9Kf2umqHrAcdoh73UEhStmSfs DqQmyHz2BMYEFGLgZNDayOI5+dlCmhaCDcJScGEoO0jbmJ8UuvrNVSbWLs0A02cD 6kBi23ryfydHBg6LqqR2oHAS7R7YCZrnhfPm/CrQfiiAqdRw7gxZ4qJo/o9YvsL1 /cOmxNGFeHmqLFKwQGr2+QhCDSuhhWc5tTtZF6JUsMXIgtq9cQWS52tHnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNHeQX78oC5N+Av4HIQBA2L2isqCMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvMGQ1QmZ2eWdMazM0Q19nY2hBRURZdmFLeW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5egMA0G CSqGSIb3DQEBCwUAA4IBAQAQwqf38vuZnHusER4VIe6B1cG8ecsDtHtFf0qpxRT+ 942yNUqv5KTveV6zRSDIOR+15OmOIv94Tkb8z6encRvFC3EuSiz3DnhGrE1RJ2a4 thB0dapLWGcyDM1XAlN3E/XcmZk9jtNfH7aGPtyGxwdQAbD/t6RcF5adcGpHR5Fr NdXWU6MRkjcQVYtZexjo35SlxmwRsL0mN9ERbUzYYQVCh4s2QUcqadXcGi6IHKPv io8TIP1FmGB/RgrG5oMBMwxYhYlPcSpKFOT7dVftRegGtB6c2XEUrf1WKH6ZclVR iFITWXJO0vfREGf09qdXR5qhDruvDFT5eWKbSTw2FODy -----END CERTIFICATE-----Generated at Fri Jan 23 15:07:23 2026 by rpki-client