This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0V1rxWbJ3rovK14RpAmhja-a3TE.roa File: 0V1rxWbJ3rovK14RpAmhja-a3TE.roa (raw, json) Hash identifier: B9iCZqIprR18UvvB8mGulDcs0GRqq1thHy0g6nFtgL4= Subject key identifier: D1:5D:6B:C5:66:C9:DE:BA:2F:2B:5E:11:A4:09:A1:8D:AF:9A:DD:31 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B09A04215EC59C1E3AD068D951DBC Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0V1rxWbJ3rovK14RpAmhja-a3TE.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 185.113.10.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:09:a0:42:15:ec:59:c1:e3:ad:06:8d:95:1d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d15d6bc566c9deba2f2b5e11a409a18daf9add31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8a:7e:09:5e:49:bf:50:4e:e9:a0:70:1e:49: 19:34:2e:6f:c1:6e:1b:fa:84:d6:1f:77:29:1d:8f: 20:3d:d1:ce:22:e9:89:3d:7e:45:ee:d0:9d:52:18: 35:08:ef:e3:e4:55:cd:13:b9:64:a0:c3:f7:61:28: 58:68:c4:7a:2b:38:aa:87:ae:e0:9b:9c:f7:2c:e0: 47:f4:c6:20:32:78:37:e6:54:79:65:6c:1e:f7:a8: 2e:96:e2:be:bd:fe:7c:07:1a:73:79:97:6f:f9:81: e7:b4:66:28:b1:83:99:44:10:cc:61:a6:42:83:6d: 7f:3c:c7:f0:04:30:98:f3:d3:45:cf:3e:32:27:5f: 38:ea:30:1a:0e:60:42:41:25:b4:a0:4d:ca:14:96: 2c:86:2d:50:e6:d5:fa:d5:9e:1b:27:0d:95:02:84: 11:31:66:3c:10:86:cb:96:72:ea:d7:93:0e:a5:cb: 5b:6f:56:14:f8:e4:a1:40:9c:3a:4f:cc:03:e8:2a: 67:fb:70:71:71:f9:36:52:23:9a:51:92:9a:57:cb: 30:39:26:a3:76:83:fe:53:60:27:d0:2e:14:7b:6d: 98:3d:16:c9:03:36:44:2e:6e:d1:9d:0a:cb:b8:42: 7a:e1:ef:c4:a1:b6:c1:d2:1a:01:1b:56:42:18:da: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5D:6B:C5:66:C9:DE:BA:2F:2B:5E:11:A4:09:A1:8D:AF:9A:DD:31 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0V1rxWbJ3rovK14RpAmhja-a3TE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.10.0/24 IPv6: 2a05:9080:5::/48 Signature Algorithm: sha256WithRSAEncryption 7a:38:8f:89:07:7d:6d:a2:d5:24:48:97:a2:27:3a:87:35:3d: d2:aa:9d:4f:54:b9:96:06:7c:87:4e:1b:42:74:09:41:85:77: dd:df:17:e5:7b:80:be:71:1d:fa:ce:f5:14:de:12:21:d2:5e: c2:b0:81:be:56:13:41:31:c1:e3:43:ff:f1:f0:9e:45:ab:fb: 10:a1:06:da:b4:37:3b:75:a4:1a:7e:a4:33:e4:e2:44:15:c9: 45:40:a5:8c:bd:78:25:54:cb:f8:50:f8:47:bb:6b:4a:98:ea: a8:9f:93:07:b7:dc:28:27:07:13:61:cd:75:6f:b7:10:25:ff: b4:d0:6d:c7:3f:84:cb:f3:e3:7a:64:f9:50:9f:62:3b:a2:e8: 03:e7:ce:62:11:cb:7d:07:06:67:67:92:bb:93:f0:74:46:34: 70:3e:83:67:3e:69:27:93:72:1e:79:0e:c1:77:e4:89:94:8e: 55:78:73:fa:26:23:e8:90:b7:e5:46:f4:31:0d:ed:4b:94:fd: dd:bc:35:1c:62:54:b6:70:a6:27:d8:54:a1:8b:9e:d7:8f:1b: 45:93:f5:5b:d0:79:b4:07:ea:d4:3b:78:cd:61:61:5f:06:b5: dd:79:ab:06:95:84:15:ec:7b:0f:b3:78:63:45:28:42:a6:ff: 43:20:b7:dc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WwmgQhXsWcHjrQaNlR28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTVkNmJjNTY2YzlkZWJhMmYyYjVlMTFhNDA5YTE4ZGFmOWFkZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64p+CV5Jv1BO6aBwHkkZNC5vwW4b +oTWH3cpHY8gPdHOIumJPX5F7tCdUhg1CO/j5FXNE7lkoMP3YShYaMR6Kziqh67g m5z3LOBH9MYgMng35lR5ZWwe96guluK+vf58BxpzeZdv+YHntGYosYOZRBDMYaZC g21/PMfwBDCY89NFzz4yJ1846jAaDmBCQSW0oE3KFJYshi1Q5tX61Z4bJw2VAoQR MWY8EIbLlnLq15MOpctbb1YU+OShQJw6T8wD6Cpn+3Bxcfk2UiOaUZKaV8swOSaj doP+U2An0C4Ue22YPRbJAzZELm7RnQrLuEJ64e/EobbB0hoBG1ZCGNoo5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNFda8Vmyd66LyteEaQJoY2vmt0xMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvMFYxcnhXYkozcm92SzE0UnBBbWhqYS1hM1RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXEKMA8E AgACMAkDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEBAHo4j4kHfW2i1SRIl6In Ooc1PdKqnU9UuZYGfIdOG0J0CUGFd93fF+V7gL5xHfrO9RTeEiHSXsKwgb5WE0Ex weND//HwnkWr+xChBtq0Nzt1pBp+pDPk4kQVyUVApYy9eCVUy/hQ+Ee7a0qY6qif kwe33CgnBxNhzXVvtxAl/7TQbcc/hMvz43pk+VCfYjui6APnzmIRy30HBmdnkruT 8HRGNHA+g2c+aSeTch55DsF35ImUjlV4c/omI+iQt+VG9DEN7UuU/d28NRxiVLZw pifYVKGLntePG0WT9VvQebQH6tQ7eM1hYV8Gtd15qwaVhBXsew+zeGNFKEKm/0Mg t9w= -----END CERTIFICATE-----Generated at Mon Jan 5 13:06:14 2026 by rpki-client