This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa File: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (raw, json) Hash identifier: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA= Subject key identifier: D2:FD:AF:F6:5A:48:1F:C1:9F:7B:D6:CA:7C:05:91:73:D6:D3:7F:7B Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A27EEF572E27401F09DFEF91719988 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa Signing time: Thu 01 Jan 2026 08:17:53 +0000 ROA not before: Thu 01 Jan 2026 08:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400486 IP address blocks: 185.161.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7e:ef:57:2e:27:40:1f:09:df:ef:91:71:99:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2fdaff65a481fc19f7bd6ca7c059173d6d37f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:60:f7:19:80:10:ec:5f:81:55:a2:72:c3: 37:0a:68:38:47:77:af:57:5d:50:c7:56:1e:24:d9: 58:d8:cb:20:7f:73:1d:23:59:35:ce:29:5f:cd:e1: d3:80:ac:50:71:d0:33:18:3a:be:46:15:2c:e2:fc: 36:da:76:85:05:87:49:91:22:e4:e2:82:45:71:d5: f2:69:6e:78:69:54:ff:dd:19:08:23:7e:97:69:49: a4:01:58:88:6a:9c:f1:f7:32:9c:2b:16:06:aa:a8: a9:bf:60:80:4a:7d:7f:58:cd:1c:b2:24:fe:20:0d: be:67:b3:e7:99:d1:ed:56:1f:fc:f7:84:7d:40:fc: eb:81:6e:bf:7e:5d:da:33:5c:4b:51:5d:a2:de:32: 5f:02:7f:5a:89:5a:01:7c:ae:9d:33:37:84:84:fa: e1:25:ec:fb:ce:c5:f1:ee:b3:40:b4:fc:2c:60:2e: ef:b0:fd:8a:a1:ba:08:97:76:18:72:92:70:ef:a7: 91:7d:3d:30:3e:b5:37:53:65:8c:f1:82:57:3b:6b: ba:5d:24:3b:2b:01:7c:32:6d:22:19:7f:1d:05:e6: 84:3a:be:84:1f:3b:25:3d:be:d7:17:d4:1b:29:55: 3b:5b:71:1f:84:ea:14:b0:ca:b8:3b:c7:c9:5d:35: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FD:AF:F6:5A:48:1F:C1:9F:7B:D6:CA:7C:05:91:73:D6:D3:7F:7B X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.189.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:a7:5e:9a:6d:8a:63:a8:df:e7:05:ea:35:17:54:59:02:78: 94:b1:76:9b:b7:38:a1:db:b5:48:d3:c2:93:3f:44:f0:83:5f: 27:81:6a:6e:a0:d3:c9:e3:ad:79:95:d6:0e:7d:73:3d:79:55: a7:3e:0d:76:77:6a:30:be:97:8a:88:18:21:ad:5d:48:7f:5e: ee:1d:da:63:26:37:21:c6:c4:b2:86:40:5f:c8:45:c4:3e:89: 22:c8:55:4e:ac:31:55:a8:a3:1c:8d:ff:5d:96:00:53:25:31: 59:3c:16:d8:73:3f:23:d7:4c:62:da:96:ce:e2:e4:9b:31:dd: a3:1f:ee:38:e9:be:e4:46:ff:ac:4a:6d:3e:13:8b:03:14:ea: ed:55:65:ff:e5:e9:13:13:49:95:45:d3:81:da:f5:35:6a:b5: 4f:19:ed:5c:b7:87:a4:0e:40:4c:d5:a7:04:d9:93:59:cd:20: 7e:ec:b2:fa:45:d0:58:6f:50:de:17:e7:8a:d2:e6:37:f5:48: 57:a6:fa:1b:22:0d:93:68:4e:62:6e:8a:3b:c1:06:2b:48:68: 0a:63:89:c8:8e:7e:77:7e:55:ef:24:94:fb:b2:6f:b3:63:14: 96:84:e6:20:2a:52:0f:6c:62:a5:07:7f:99:d6:be:2f:7c:18: d4:e6:bd:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4on7vVy4nQB8J3++RcZmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmZkYWZmNjVhNDgxZmMxOWY3YmQ2Y2E3YzA1OTE3M2Q2ZDM3ZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHtg9xmAEOxfgVWicsM3Cmg4R3ev V11Qx1YeJNlY2Msgf3MdI1k1zilfzeHTgKxQcdAzGDq+RhUs4vw22naFBYdJkSLk 4oJFcdXyaW54aVT/3RkII36XaUmkAViIapzx9zKcKxYGqqipv2CASn1/WM0csiT+ IA2+Z7PnmdHtVh/894R9QPzrgW6/fl3aM1xLUV2i3jJfAn9aiVoBfK6dMzeEhPrh Jez7zsXx7rNAtPwsYC7vsP2KoboIl3YYcpJw76eRfT0wPrU3U2WM8YJXO2u6XSQ7 KwF8Mm0iGX8dBeaEOr6EHzslPb7XF9QbKVU7W3EfhOoUsMq4O8fJXTXnNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNL9r/ZaSB/Bn3vWynwFkXPW0397MB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvMHYydjlscElIOEdmZTliS2ZBV1JjOWJUZjNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaG9MA0G CSqGSIb3DQEBCwUAA4IBAQCap16abYpjqN/nBeo1F1RZAniUsXabtzih27VI08KT P0Twg18ngWpuoNPJ4615ldYOfXM9eVWnPg12d2owvpeKiBghrV1If17uHdpjJjch xsSyhkBfyEXEPokiyFVOrDFVqKMcjf9dlgBTJTFZPBbYcz8j10xi2pbO4uSbMd2j H+446b7kRv+sSm0+E4sDFOrtVWX/5ekTE0mVRdOB2vU1arVPGe1ct4ekDkBM1acE 2ZNZzSB+7LL6RdBYb1DeF+eK0uY39UhXpvobIg2TaE5iboo7wQYrSGgKY4nIjn53 flXvJJT7sm+zYxSWhOYgKlIPbGKlB3+Z1r4vfBjU5r3k -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:29 2026 by rpki-client