This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/D0vBlaEi7A0rX8awdZxOMYCwSCs.roa File: D0vBlaEi7A0rX8awdZxOMYCwSCs.roa (raw, json) Hash identifier: qntk8plrSMnKOv10bs2fGlY/KSg3rGJtKokmVQuz1LQ= Subject key identifier: 0F:4B:C1:95:A1:22:EC:0D:2B:5F:C6:B0:75:9C:4E:31:80:B0:48:2B Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFCF6395928696E6868F69AEF27A1 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/D0vBlaEi7A0rX8awdZxOMYCwSCs.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8762 IP address blocks: 194.177.198.0/24 maxlen: 24 195.251.48.0/24 maxlen: 24 2001:648:2c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fc:f6:39:59:28:69:6e:68:68:f6:9a:ef:27:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f4bc195a122ec0d2b5fc6b0759c4e3180b0482b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5b:d0:5c:b7:78:b6:2b:35:6d:f9:91:c1:d7: a8:c8:22:91:b1:70:a5:11:9b:6e:bb:6d:34:44:c5: 50:77:4d:ce:a3:16:f4:0a:4e:c8:66:9d:f1:d3:66: 2f:7d:40:90:22:28:79:72:9c:38:c1:59:ba:e6:c5: 15:7b:27:72:86:9e:db:ec:27:ac:e0:43:8f:4c:d3: 3e:84:fc:7f:6f:25:1d:db:a9:e5:05:5b:ae:f1:27: 1f:f8:40:43:aa:db:1b:82:ca:8e:51:ab:5e:ee:d0: 86:63:89:e1:31:31:81:60:f8:e0:fe:19:ca:1a:a1: 2f:93:c9:18:f6:37:0d:75:78:c7:82:8d:b1:4e:16: f5:9b:c8:f2:ca:d1:81:b9:23:dd:05:93:05:76:96: b6:07:01:cf:0b:ef:b7:f2:8b:28:32:04:fd:67:a8: ab:17:58:86:60:77:3f:0c:df:30:92:6b:fc:e7:4e: 6c:42:66:1e:12:46:58:91:8b:ce:15:f6:8b:06:17: ff:ad:0c:45:d4:fd:01:e7:32:e9:9c:5f:1d:40:50: 88:10:d3:05:67:8f:9c:34:82:35:7b:b1:6a:23:56: 1f:0b:57:87:c0:dc:64:9f:6a:cf:6f:fd:8a:89:15: a9:04:c6:a5:0b:4d:36:0c:9c:68:ac:46:0e:2f:30: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:C1:95:A1:22:EC:0D:2B:5F:C6:B0:75:9C:4E:31:80:B0:48:2B X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/D0vBlaEi7A0rX8awdZxOMYCwSCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.177.198.0/24 195.251.48.0/24 IPv6: 2001:648:2c10::/48 Signature Algorithm: sha256WithRSAEncryption 55:67:84:ce:40:2b:34:cf:b0:0c:1b:2e:2a:3a:9c:3f:ae:d1: 20:39:4a:27:30:63:14:e9:d0:e0:34:33:cd:99:ef:66:9e:a9: 2c:22:3b:f7:a0:8c:4d:90:94:a7:b0:8b:dc:00:72:23:46:7c: 84:9e:43:11:62:73:ec:62:70:d8:69:f3:37:15:21:90:31:c8: cd:cc:bf:96:fd:4e:c7:ec:4d:d1:d4:94:59:f3:16:94:ee:e1: 65:1b:a7:06:cd:c2:c9:34:50:71:bc:80:49:b4:51:2f:ce:f2: 50:15:88:9c:3f:8f:5f:a8:82:50:fd:da:f5:a3:60:8e:35:8f: 71:8d:58:ef:4a:27:b3:0c:7a:2a:be:2d:67:07:1d:e0:62:de: d7:6b:60:c7:40:81:7a:28:38:96:6f:93:07:88:62:a3:4d:0c: 84:d7:6b:52:ab:06:e0:ac:05:f5:c8:27:bb:d7:a6:05:66:c0: 3a:c1:e9:b9:80:46:1f:92:96:31:9c:08:9a:bf:33:09:78:81: e4:c0:b0:84:b8:81:a4:9e:58:78:53:e2:25:e3:3b:f7:fc:eb: 15:89:06:5f:83:ea:a9:d3:1c:56:b8:08:b9:60:6d:47:1e:cf: 01:f1:d7:7d:d4:f1:0c:59:c3:ed:3c:89:77:7f:46:85:6e:6c: ba:d1:c7:68 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87Pz2OVkoaW5oaPaa7yehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjRiYzE5NWExMjJlYzBkMmI1ZmM2YjA3NTljNGUzMTgwYjA0ODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1vQXLd4tis1bfmRwdeoyCKRsXCl EZtuu200RMVQd03Ooxb0Ck7IZp3x02YvfUCQIih5cpw4wVm65sUVeydyhp7b7Ces 4EOPTNM+hPx/byUd26nlBVuu8Scf+EBDqtsbgsqOUate7tCGY4nhMTGBYPjg/hnK GqEvk8kY9jcNdXjHgo2xThb1m8jyytGBuSPdBZMFdpa2BwHPC++38osoMgT9Z6ir F1iGYHc/DN8wkmv8505sQmYeEkZYkYvOFfaLBhf/rQxF1P0B5zLpnF8dQFCIENMF Z4+cNII1e7FqI1YfC1eHwNxkn2rPb/2KiRWpBMalC002DJxorEYOLzBbRwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFA9LwZWhIuwNK1/GsHWcTjGAsEgrMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvRDB2QmxhRWk3QTByWDhhd2RaeE9NWUN3U0NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwrHGAwQA w/swMA8EAgACMAkDBwAgAQZILBAwDQYJKoZIhvcNAQELBQADggEBAFVnhM5AKzTP sAwbLio6nD+u0SA5SicwYxTp0OA0M82Z72aeqSwiO/egjE2QlKewi9wAciNGfISe QxFic+xicNhp8zcVIZAxyM3Mv5b9TsfsTdHUlFnzFpTu4WUbpwbNwsk0UHG8gEm0 US/O8lAViJw/j1+oglD92vWjYI41j3GNWO9KJ7MMeiq+LWcHHeBi3tdrYMdAgXoo OJZvkweIYqNNDITXa1KrBuCsBfXIJ7vXpgVmwDrB6bmARh+SljGcCJq/Mwl4geTA sIS4gaSeWHhT4iXjO/f86xWJBl+D6qnTHFa4CLlgbUcezwHx133U8QxZw+08iXd/ RoVubLrRx2g= -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:00 2026 by rpki-client