This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/nOjA58wyDiQ_zRw7avoPEh5_s40.roa File: nOjA58wyDiQ_zRw7avoPEh5_s40.roa (raw, json) Hash identifier: V7B/P97cRl0fsQwMRzVez4oDaZWFnkjVorYQBWfrtpg= Subject key identifier: 9C:E8:C0:E7:CC:32:0E:24:3F:CD:1C:3B:6A:FA:0F:12:1E:7F:B3:8D Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B8FC78F45DDA7F46E08F66617F58FBCB1 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/nOjA58wyDiQ_zRw7avoPEh5_s40.roa Signing time: Mon 05 Jan 2026 20:09:38 +0000 ROA not before: Mon 05 Jan 2026 20:09:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 195.226.82.0/24 maxlen: 24 195.226.83.0/24 maxlen: 24 195.226.84.0/24 maxlen: 24 195.226.85.0/24 maxlen: 24 195.226.86.0/24 maxlen: 24 195.226.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:c7:8f:45:dd:a7:f4:6e:08:f6:66:17:f5:8f:bc:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 5 20:09:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ce8c0e7cc320e243fcd1c3b6afa0f121e7fb38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:2a:80:22:85:b1:f4:f9:18:3e:0c:4d:fe: cd:9e:36:19:d8:91:a2:50:b1:d3:c3:bd:5b:ef:ae: 31:6d:d2:42:e4:f9:c7:64:bc:03:8a:7b:05:a4:65: ae:40:90:39:98:e8:ac:6c:b6:2d:b7:e0:05:af:38: 8b:3b:92:c0:a0:2c:a7:6d:f6:8f:90:9d:a7:87:04: ce:d8:76:68:8b:41:9e:8b:0c:b9:03:d4:fa:3a:12: 9a:f9:eb:13:db:1d:cd:33:8b:51:58:43:a2:77:98: 5e:39:de:6d:ab:c7:41:b8:89:a2:bc:10:23:65:a7: 63:ac:e9:47:db:f2:5f:f5:17:84:e0:45:e4:b8:c6: 32:65:9e:9f:97:3d:fb:e9:de:27:d7:92:fe:ed:9c: 6e:1e:40:91:5a:7f:1e:5f:36:54:29:c4:8a:55:e3: 18:82:35:51:89:2b:1d:a9:74:2a:9c:cc:27:7b:52: f9:4f:c6:76:b6:49:56:f9:07:c6:60:68:79:0f:91: 66:59:00:34:e2:f3:89:03:4b:dc:e1:bb:dc:c3:ce: 27:d7:93:57:25:aa:21:ef:8c:b2:93:95:3e:9c:97: b1:fc:12:d9:1c:86:0a:aa:1e:6c:e2:05:47:c1:f9: 0c:62:14:67:2e:0f:7c:98:41:fc:4e:c2:da:ed:cd: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E8:C0:E7:CC:32:0E:24:3F:CD:1C:3B:6A:FA:0F:12:1E:7F:B3:8D X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/nOjA58wyDiQ_zRw7avoPEh5_s40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.82.0-195.226.87.255 Signature Algorithm: sha256WithRSAEncryption 4e:29:33:f5:91:e0:12:d1:e4:a6:5f:08:b7:b1:1c:63:80:71: ba:ae:71:de:d3:6c:fb:3f:10:e5:02:a9:88:29:69:ae:dc:91: 94:0d:ab:3f:d0:63:c7:49:06:7a:08:88:2c:5c:37:c2:00:30: e2:9d:49:f9:d5:be:99:25:f7:3c:9d:48:16:d7:ae:37:47:2f: 1f:87:29:83:7c:26:8e:9d:d2:99:64:d2:0c:21:16:e0:0d:86: 2d:5c:e6:97:ac:e3:bf:d4:74:ea:2c:7f:e6:2d:20:eb:a5:5e: 86:1b:ad:15:d6:00:e2:85:91:44:78:12:d0:f5:7b:ae:d3:8f: 62:71:2c:0e:17:39:dd:6b:10:16:5c:0c:fe:1f:cb:74:11:b0: 46:95:e7:c0:77:64:ba:3d:bf:fe:40:41:ee:22:5a:0d:65:25: c3:75:1a:3b:f9:7e:b3:c7:1f:5b:66:bd:77:d3:59:d4:ca:5f: 20:89:a8:74:45:9d:34:51:31:60:00:f4:d9:98:00:65:46:37: e6:f2:2c:7d:75:b1:f9:ea:49:8e:71:3c:ef:68:48:f8:e8:6b: c5:53:6d:3a:fc:7a:cd:f3:33:5a:0e:26:ee:c0:15:84:c5:2f: 5d:8d:05:13:b8:06:55:3e:8b:7d:50:88:20:b0:72:5b:19:34: 99:f6:38:ed -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuPx49F3af0bgj2Zhf1j7yxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTA1MjAwOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2U4YzBlN2NjMzIwZTI0M2ZjZDFjM2I2YWZhMGYxMjFlN2ZiMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLAqgCKFsfT5GD4MTf7NnjYZ2JGi ULHTw71b764xbdJC5PnHZLwDinsFpGWuQJA5mOisbLYtt+AFrziLO5LAoCynbfaP kJ2nhwTO2HZoi0Geiwy5A9T6OhKa+esT2x3NM4tRWEOid5heOd5tq8dBuImivBAj ZadjrOlH2/Jf9ReE4EXkuMYyZZ6flz376d4n15L+7ZxuHkCRWn8eXzZUKcSKVeMY gjVRiSsdqXQqnMwne1L5T8Z2tklW+QfGYGh5D5FmWQA04vOJA0vc4bvcw84n15NX Jaoh74yyk5U+nJex/BLZHIYKqh5s4gVHwfkMYhRnLg98mEH8TsLa7c1bhQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJzowOfMMg4kP80cO2r6DxIef7ONMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvbk9qQTU4d3lEaVFfelJ3N2F2b1BFaDVfczQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHD4lID BAPD4lAwDQYJKoZIhvcNAQELBQADggEBAE4pM/WR4BLR5KZfCLexHGOAcbqucd7T bPs/EOUCqYgpaa7ckZQNqz/QY8dJBnoIiCxcN8IAMOKdSfnVvpkl9zydSBbXrjdH Lx+HKYN8Jo6d0plk0gwhFuANhi1c5pes47/UdOosf+YtIOulXoYbrRXWAOKFkUR4 EtD1e67Tj2JxLA4XOd1rEBZcDP4fy3QRsEaV58B3ZLo9v/5AQe4iWg1lJcN1Gjv5 frPHH1tmvXfTWdTKXyCJqHRFnTRRMWAA9NmYAGVGN+byLH11sfnqSY5xPO9oSPjo a8VTbTr8es3zM1oOJu7AFYTFL12NBRO4BlU+i31QiCCwclsZNJn2OO0= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:45 2026 by rpki-client