This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/0KPNPZABDj0Qzagg_XV0X1ugEl0.roa File: 0KPNPZABDj0Qzagg_XV0X1ugEl0.roa (raw, json) Hash identifier: MiYwj7dTzwCXkj4L24OFbR3dzFvz57EK/cZJ5GPnv1I= Subject key identifier: D0:A3:CD:3D:90:01:0E:3D:10:CD:A8:20:FD:75:74:5F:5B:A0:12:5D Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419 Certificate serial: 019B7C80B2FB581CDE3B68F52742898D310B Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/0KPNPZABDj0Qzagg_XV0X1ugEl0.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211487 IP address blocks: 185.15.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b2:fb:58:1c:de:3b:68:f5:27:42:89:8d:31:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0a3cd3d90010e3d10cda820fd75745f5ba0125d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b7:d5:05:a5:62:b3:e3:c7:71:43:c8:76:1f: 48:51:97:ce:fe:e6:89:94:81:95:1c:5d:19:01:d1: 33:40:b6:43:67:dc:ed:c8:33:23:dd:df:20:70:7e: 9c:fd:93:06:76:10:76:d0:15:4b:bb:34:18:37:9b: db:8e:cb:cc:cb:3d:eb:74:e2:8e:51:3e:cb:7a:04: 63:14:63:32:a1:52:34:4d:51:32:37:b2:a2:2b:be: 7b:53:05:77:de:05:20:0c:32:3c:fd:87:7c:f3:42: c7:23:36:40:42:02:8a:2c:2c:a3:1f:93:a8:b3:20: 0e:93:75:31:5d:8f:e0:08:e6:39:1d:6b:68:25:8f: c7:9c:d4:2d:03:82:c4:ef:90:79:b1:1c:7d:45:5a: 5d:84:c1:62:5e:1a:c4:82:5b:93:b1:14:3d:e9:07: 04:5e:9e:41:75:8e:cf:6f:6a:2f:40:89:ac:26:5b: 1d:87:90:36:0b:f3:ae:e0:6b:84:48:91:cd:42:1b: 9d:60:bf:ab:54:14:de:e3:76:29:7e:0a:63:3f:9c: 23:14:b1:5d:64:e8:19:67:e5:93:06:7e:92:da:18: 7e:03:df:86:4f:89:00:45:8f:e9:e7:a5:f6:73:b8: 65:f4:20:80:db:f8:39:17:8f:f7:37:6c:b8:3d:da: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:CD:3D:90:01:0E:3D:10:CD:A8:20:FD:75:74:5F:5B:A0:12:5D X509v3 Authority Key Identifier: keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/0KPNPZABDj0Qzagg_XV0X1ugEl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.156.0/24 Signature Algorithm: sha256WithRSAEncryption 58:14:2e:71:9e:c1:72:10:20:9a:a2:b1:0e:97:da:d3:0c:d4: 90:ca:ed:6f:3c:f9:e8:d4:d3:94:f8:5a:81:cf:df:ed:d6:dc: 8d:98:e2:99:5f:81:27:08:bf:ab:a1:7b:d3:80:40:f1:2b:88: fb:1f:4a:97:f1:c4:8b:26:f2:eb:61:ee:23:47:08:f8:56:9c: ea:41:8d:6f:95:db:fe:18:77:72:68:f7:7c:04:b3:52:27:cc: 61:7f:ad:07:5a:61:55:22:6d:c3:8b:f0:1b:f0:76:6b:23:9b: 9e:58:d7:e4:35:42:99:c8:ea:74:c7:0a:03:01:0e:1b:c1:4d: 59:25:fb:8a:d0:7f:7f:37:fa:c7:40:64:64:10:8a:1f:06:f0: e1:61:f0:ae:5e:44:4a:1f:4b:6e:af:95:a9:c5:e4:61:75:9a: 62:f9:82:d9:fe:47:c7:1a:b7:d9:25:da:0e:7b:ed:f9:c1:77: 48:dd:fe:90:b5:b4:a1:a5:4f:35:5a:1b:40:a9:c6:6a:c5:9a: 69:0d:77:5d:49:5d:49:87:57:7f:18:84:80:30:93:76:fa:4d: 3e:55:1f:bb:69:fc:d8:26:42:e7:84:d1:da:5a:74:e5:09:bf: 67:08:e0:1b:97:38:62:21:36:58:40:5c:ba:ea:1e:ad:4b:89: f7:ec:32:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLL7WBzeO2j1J0KJjTELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw Yjg0MTkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGEzY2QzZDkwMDEwZTNkMTBjZGE4MjBmZDc1NzQ1ZjViYTAxMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibfVBaVis+PHcUPIdh9IUZfO/uaJ lIGVHF0ZAdEzQLZDZ9ztyDMj3d8gcH6c/ZMGdhB20BVLuzQYN5vbjsvMyz3rdOKO UT7LegRjFGMyoVI0TVEyN7KiK757UwV33gUgDDI8/Yd880LHIzZAQgKKLCyjH5Oo syAOk3UxXY/gCOY5HWtoJY/HnNQtA4LE75B5sRx9RVpdhMFiXhrEgluTsRQ96QcE Xp5BdY7Pb2ovQImsJlsdh5A2C/Ou4GuESJHNQhudYL+rVBTe43YpfgpjP5wjFLFd ZOgZZ+WTBn6S2hh+A9+GT4kARY/p56X2c7hl9CCA2/g5F4/3N2y4PdqmpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCjzT2QAQ49EM2oIP11dF9boBJdMB8GA1UdIwQY MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt MGNjODNiMDBmYzU4LzEvMEtQTlBaQUJEajBRemFnZ19YVjBYMXVnRWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4 LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ+cMA0G CSqGSIb3DQEBCwUAA4IBAQBYFC5xnsFyECCaorEOl9rTDNSQyu1vPPno1NOU+FqB z9/t1tyNmOKZX4EnCL+roXvTgEDxK4j7H0qX8cSLJvLrYe4jRwj4VpzqQY1vldv+ GHdyaPd8BLNSJ8xhf60HWmFVIm3Di/Ab8HZrI5ueWNfkNUKZyOp0xwoDAQ4bwU1Z JfuK0H9/N/rHQGRkEIofBvDhYfCuXkRKH0tur5WpxeRhdZpi+YLZ/kfHGrfZJdoO e+35wXdI3f6QtbShpU81WhtAqcZqxZppDXddSV1Jh1d/GISAMJN2+k0+VR+7afzY JkLnhNHaWnTlCb9nCOAblzhiITZYQFy66h6tS4n37DKP -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:12 2026 by rpki-client