This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/0VZp4QWne5bvAgKwv7SjoOEfGHs.roa File: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (raw, json) Hash identifier: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM= Subject key identifier: D1:56:69:E1:05:A7:7B:96:EF:02:02:B0:BF:B4:A3:A0:E1:1F:18:7B Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019B7A5B1605E7767E0FAF89D26284954A3D Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/0VZp4QWne5bvAgKwv7SjoOEfGHs.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153589 IP address blocks: 153.112.128.0/24 maxlen: 24 153.112.210.0/24 maxlen: 24 192.131.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:16:05:e7:76:7e:0f:af:89:d2:62:84:95:4a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d15669e105a77b96ef0202b0bfb4a3a0e11f187b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:54:cb:37:9d:02:c6:cc:6a:2e:ed:0a:69: 43:ea:eb:c5:94:17:ab:4c:26:c2:42:64:38:b8:70: 5e:15:89:f4:8e:6e:bc:76:85:db:1a:f6:d5:e0:4b: 95:44:2b:0f:08:29:ca:09:a0:c3:35:8b:d2:62:d5: fc:48:f8:b5:dc:97:f0:56:00:0d:7a:f1:00:07:03: 7a:e4:05:92:6b:03:57:27:b6:bd:06:a5:12:ff:d1: e5:e9:ac:65:c6:a4:8a:4d:35:30:23:2b:35:f1:03: d8:44:5d:cb:b9:91:48:24:0d:47:32:91:8a:67:de: c4:e2:c6:6a:77:c1:dc:76:1f:f7:80:6f:e0:f5:7c: dd:d3:6c:5c:c2:42:6c:04:40:a7:62:41:fc:e6:a4: 71:93:de:cb:6b:62:f3:17:96:c8:5f:cd:d5:da:cb: 5a:ed:01:61:09:fd:3e:03:b5:aa:b6:97:0f:38:bf: cf:bb:be:5a:99:3b:98:48:4a:a6:9b:70:fe:fd:5e: e2:63:cb:80:27:eb:8a:87:57:2d:bd:11:8e:95:31: 68:c8:83:7b:09:d1:6c:48:9d:4e:f4:11:fb:f3:50: 7e:7c:29:8a:5f:55:63:f4:1c:3d:b8:28:80:28:46: c6:61:a2:15:0c:99:2b:8a:3a:bd:2e:0e:b9:a9:d7: 08:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:69:E1:05:A7:7B:96:EF:02:02:B0:BF:B4:A3:A0:E1:1F:18:7B X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/0VZp4QWne5bvAgKwv7SjoOEfGHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.112.128.0/24 153.112.210.0/24 192.131.25.0/24 Signature Algorithm: sha256WithRSAEncryption a4:ac:ff:2b:7e:8e:7a:81:8d:fa:91:20:10:a8:9e:e5:f7:da: 5b:2b:77:dd:6e:42:80:3a:f5:0d:01:53:cb:0a:5d:26:a5:b7: e5:b5:e2:dc:0f:0c:00:68:31:9c:16:d5:d0:17:26:ba:f5:2a: 0c:f1:24:99:1b:a8:80:8a:c8:6e:d9:f6:af:f0:4b:9b:77:be: ac:3d:b4:b9:c8:ae:95:18:dc:86:b8:72:83:13:65:34:40:98: 33:4d:14:e4:df:e9:65:87:57:a9:73:aa:43:82:88:95:63:3f: 68:14:fa:61:2c:ea:78:4f:c4:c3:71:48:13:33:42:c0:ba:8e: 3a:84:19:7d:c1:1a:db:9b:ce:ba:a6:c4:78:ca:f4:00:0f:b9: da:ec:e5:72:7a:4e:5f:79:ef:06:f3:79:eb:aa:97:d9:b3:fb: 97:6c:b8:4f:a5:a1:c7:23:9a:06:ff:66:37:83:3c:eb:c9:14: 4d:6f:4e:53:d6:9e:d9:83:dd:7b:b3:a5:87:98:ef:8e:92:69: c1:f5:5c:4f:bc:d2:c0:32:45:28:6c:d5:a8:57:29:81:47:6c: 8f:18:bd:82:5c:87:ec:6f:fd:73:09:68:54:1e:1a:61:07:41: c8:19:a4:d3:d8:3f:78:dd:d0:f0:da:cf:ee:5b:c9:a5:97:e4: d7:e3:11:7c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WxYF53Z+D6+J0mKElUo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTU2NjllMTA1YTc3Yjk2ZWYwMjAyYjBiZmI0YTNhMGUxMWYxODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8JUyzedAsbMai7tCmlD6uvFlBer TCbCQmQ4uHBeFYn0jm68doXbGvbV4EuVRCsPCCnKCaDDNYvSYtX8SPi13JfwVgAN evEABwN65AWSawNXJ7a9BqUS/9Hl6axlxqSKTTUwIys18QPYRF3LuZFIJA1HMpGK Z97E4sZqd8Hcdh/3gG/g9Xzd02xcwkJsBECnYkH85qRxk97La2LzF5bIX83V2sta 7QFhCf0+A7WqtpcPOL/Pu75amTuYSEqmm3D+/V7iY8uAJ+uKh1ctvRGOlTFoyIN7 CdFsSJ1O9BH781B+fCmKX1Vj9Bw9uCiAKEbGYaIVDJkrijq9Lg65qdcI2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNFWaeEFp3uW7wICsL+0o6DhHxh7MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvMFZacDRRV25lNWJ2QWdLd3Y3U2pvT0VmR0hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmXCAAwQA mXDSAwQAwIMZMA0GCSqGSIb3DQEBCwUAA4IBAQCkrP8rfo56gY36kSAQqJ7l99pb K3fdbkKAOvUNAVPLCl0mpbflteLcDwwAaDGcFtXQFya69SoM8SSZG6iAishu2fav 8Eubd76sPbS5yK6VGNyGuHKDE2U0QJgzTRTk3+llh1epc6pDgoiVYz9oFPphLOp4 T8TDcUgTM0LAuo46hBl9wRrbm866psR4yvQAD7na7OVyek5fee8G83nrqpfZs/uX bLhPpaHHI5oG/2Y3gzzryRRNb05T1p7Zg917s6WHmO+OkmnB9VxPvNLAMkUobNWo VymBR2yPGL2CXIfsb/1zCWhUHhphB0HIGaTT2D943dDw2s/uW8mll+TX4xF8 -----END CERTIFICATE-----Generated at Mon Jan 26 14:12:45 2026 by rpki-client