This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/_EXzGZ6mIohQTkOQklm2HctGpf0.roa File: _EXzGZ6mIohQTkOQklm2HctGpf0.roa (raw, json) Hash identifier: d5WVsZmAqKJyYsnjGKZS29R+h6TCBV39mM8GYttnuxM= Subject key identifier: FC:45:F3:19:9E:A6:22:88:50:4E:43:90:92:59:B6:1D:CB:46:A5:FD Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d Certificate serial: 019B7CED901A59F93080688B75D6E450A4D8 Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/_EXzGZ6mIohQTkOQklm2HctGpf0.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.168.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:90:1a:59:f9:30:80:68:8b:75:d6:e4:50:a4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc45f3199ea62288504e43909259b61dcb46a5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:83:61:3d:24:08:99:92:d5:e6:09:86:d2: 80:08:90:e7:70:39:3c:32:9b:c3:1c:36:7b:0d:c4: 3a:4a:7d:7d:c3:30:ac:b8:cd:6e:d5:1c:ec:c1:50: c6:42:75:ef:1b:66:f8:73:11:1e:be:29:a4:1c:58: bb:11:9f:e6:4b:9e:6b:38:6a:b9:b6:ba:32:0f:b4: 80:48:ec:92:ce:51:f8:6e:5c:51:ad:da:35:91:b5: 2f:4f:ac:f9:98:97:a4:08:7f:08:69:cc:6f:52:b4: 8e:a9:e7:0b:b0:23:25:cd:d4:b6:aa:16:15:b7:c6: 8b:b9:0d:b7:fc:f4:14:d3:74:e7:b6:8e:cf:4f:5b: 29:a7:f1:71:b7:c2:67:5e:7d:91:36:9b:7b:2d:ba: e5:00:90:9f:6c:43:dc:4d:3d:fe:cd:16:37:91:b8: dc:eb:8f:1c:76:f3:94:e1:d3:e1:0a:57:8c:f5:9e: 52:4f:5c:6f:0f:5a:ff:c2:37:e5:92:dd:c2:7f:a9: 59:8f:6a:2c:e2:e6:6b:06:90:ae:64:b0:0b:99:38: 79:47:77:76:fd:99:51:d2:16:9c:77:3f:f3:7c:a5: 0f:71:79:bf:34:57:90:26:d1:52:56:c8:73:2e:8a: 67:df:2e:3f:67:e7:fc:77:2b:29:e1:c6:40:dd:70: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:45:F3:19:9E:A6:22:88:50:4E:43:90:92:59:B6:1D:CB:46:A5:FD X509v3 Authority Key Identifier: keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/_EXzGZ6mIohQTkOQklm2HctGpf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.204.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:a2:cd:e4:f3:35:80:77:db:05:b9:d8:52:95:e1:e0:12:c1: 51:f8:7a:ad:85:66:d2:4e:f4:66:67:51:bf:96:05:e5:37:bd: 05:f8:7f:3e:cb:59:b8:e2:75:c8:63:23:5e:89:40:7d:96:b5: 4e:d8:dc:78:4d:9b:78:7d:16:d0:7a:4e:c3:0c:18:5a:b1:1f: 4a:4e:aa:90:49:12:a1:68:12:f5:4a:a0:2b:33:a4:08:68:59: cd:58:03:9e:8c:a2:d7:20:50:5a:d6:ff:a6:e4:2c:3a:d3:db: d9:15:f4:8c:c1:9c:8f:50:58:e1:5a:78:14:20:88:ee:36:b6: 33:48:8f:3a:da:17:8b:53:f5:a4:49:f6:60:db:89:47:d4:a4: f2:3e:bc:2c:2e:56:b5:d5:7d:fe:c2:1a:af:73:d6:b0:8e:a1: 8e:fa:4e:8d:7d:4b:b3:e6:d1:49:b8:3a:ed:e6:4d:f2:ec:84: 93:73:26:c6:81:d0:1e:b2:bc:46:07:98:cd:d1:b5:07:0a:0c: 04:b4:39:fe:df:8e:2c:3d:6d:e4:83:fb:3e:cb:18:65:e4:56: 53:84:1c:12:d9:3f:46:a5:5c:f6:93:56:77:43:ff:f3:3d:98: 6e:31:f7:e3:09:e0:38:78:4a:28:8f:71:08:b2:7f:91:85:6f: 92:96:da:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ZAaWfkwgGiLddbkUKTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzA0NmQxNmNmYzM5MWIwMjhiODg3NDM3NzNjZTAwNWNm OTdiMWQwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzQ1ZjMxOTllYTYyMjg4NTA0ZTQzOTA5MjU5YjYxZGNiNDZhNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy2DYT0kCJmS1eYJhtKACJDncDk8 MpvDHDZ7DcQ6Sn19wzCsuM1u1RzswVDGQnXvG2b4cxEevimkHFi7EZ/mS55rOGq5 troyD7SASOySzlH4blxRrdo1kbUvT6z5mJekCH8IacxvUrSOqecLsCMlzdS2qhYV t8aLuQ23/PQU03Tnto7PT1spp/Fxt8JnXn2RNpt7LbrlAJCfbEPcTT3+zRY3kbjc 648cdvOU4dPhCleM9Z5ST1xvD1r/wjflkt3Cf6lZj2os4uZrBpCuZLALmTh5R3d2 /ZlR0hacdz/zfKUPcXm/NFeQJtFSVshzLopn3y4/Z+f8dysp4cZA3XDaJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPxF8xmepiKIUE5DkJJZth3LRqX9MB8GA1UdIwQY MBaAFNAwRtFs/DkbAouIdDdzzgBc+XsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYt ZGMwZTFhNzI1MjIxLzEvX0VYekdaNm1Jb2hRVGtPUWtsbTJIY3RHcGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYtZGMwZTFhNzI1MjIx LzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuajMMA0G CSqGSIb3DQEBCwUAA4IBAQAOos3k8zWAd9sFudhSleHgEsFR+HqthWbSTvRmZ1G/ lgXlN70F+H8+y1m44nXIYyNeiUB9lrVO2Nx4TZt4fRbQek7DDBhasR9KTqqQSRKh aBL1SqArM6QIaFnNWAOejKLXIFBa1v+m5Cw609vZFfSMwZyPUFjhWngUIIjuNrYz SI862heLU/WkSfZg24lH1KTyPrwsLla11X3+whqvc9awjqGO+k6NfUuz5tFJuDrt 5k3y7ISTcybGgdAesrxGB5jN0bUHCgwEtDn+344sPW3kg/s+yxhl5FZThBwS2T9G pVz2k1Z3Q//zPZhuMffjCeA4eEooj3EIsn+RhW+SltpC -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:14 2026 by rpki-client