This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa File: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (raw, json) Hash identifier: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ= Subject key identifier: BF:45:D1:82:7E:A7:D8:11:2E:4D:67:EF:A1:82:30:34:B3:06:24:AC Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FDA0ED1B3A9B9A562DB55A3ACC01 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 195.8.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fd:a0:ed:1b:3a:9b:9a:56:2d:b5:5a:3a:cc:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf45d1827ea7d8112e4d67efa1823034b30624ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:52:67:cc:df:22:dd:a9:1c:e1:ed:05:ab:22: 41:c0:b1:59:83:54:08:18:66:c2:02:cc:f9:ef:06: ba:cd:cb:c2:b1:2d:bd:cc:cb:19:a9:d3:98:30:39: cf:5d:17:4d:a9:96:7d:f3:9d:8a:24:39:bf:2a:e4: 3f:3e:d3:13:cf:2b:c7:cd:e8:a4:0f:73:cc:2c:82: b2:a8:4c:46:65:45:77:c9:0c:41:ef:0e:0e:00:4a: f9:49:c4:c1:83:96:43:94:73:c9:50:56:b5:d9:33: 3b:b4:bd:e8:37:1c:66:c0:7a:82:14:85:21:5d:0a: 31:d6:27:d0:c9:16:1c:15:c1:78:4f:43:a9:89:97: f2:4e:a1:af:a0:9b:4b:67:83:9b:8f:e4:30:6f:93: 55:01:c7:04:65:0f:7a:c9:74:60:c2:99:78:47:53: 85:a9:59:bb:73:1e:f0:ce:7c:f1:e1:8f:3c:ff:b4: 2c:ef:f1:00:ac:cb:8b:e7:bd:3a:58:e9:92:d5:a4: 4e:04:ab:d5:fe:5b:2f:6d:81:fb:f6:74:67:3b:d2: ac:72:a9:13:55:49:8b:e7:d5:02:b8:03:88:90:34: 5a:f7:1f:17:34:e0:93:4f:24:dd:1d:6a:11:49:72: d3:da:62:5d:e0:03:cd:97:78:e4:a1:3f:4a:c9:cb: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:45:D1:82:7E:A7:D8:11:2E:4D:67:EF:A1:82:30:34:B3:06:24:AC X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.201.0/24 Signature Algorithm: sha256WithRSAEncryption 17:6e:9d:09:d2:44:69:2b:2b:d5:05:3f:4d:46:77:8b:e3:41: a7:34:2f:c1:5c:9e:d3:ed:b8:eb:0b:92:96:3e:9e:13:d1:5b: 50:fe:b2:8a:43:03:32:52:2e:20:d1:a6:3c:8c:3d:97:68:6c: a5:2a:c0:7a:99:3c:45:89:13:b4:1e:f6:a2:56:bc:ef:09:fd: 33:7d:0a:be:47:3b:c6:f8:af:ff:6f:cb:29:2c:e9:fa:2d:6d: 0e:05:95:6a:5d:83:0b:cd:91:28:90:50:80:1a:41:d2:5c:b7: 43:c8:36:bf:f2:85:64:dd:c1:87:07:14:d4:06:0f:d5:91:10: 83:22:e6:d4:1d:7a:f4:74:7e:c8:32:19:ad:8d:aa:4e:b8:56: b8:2b:90:81:da:1d:0a:43:5f:6d:5f:e6:11:a6:9c:4b:3e:15: 95:df:16:b9:17:93:94:90:35:50:93:20:33:eb:97:71:9d:bf: 1d:0f:50:44:21:d6:ac:c5:3b:e7:07:46:64:15:8e:4d:db:65: 7b:fc:f6:be:82:36:64:4c:5d:9b:bb:3c:6b:12:7c:43:02:d6: 6d:cd:fa:a7:6d:9c:97:ab:5c:5d:97:16:19:ff:c4:6f:df:e3: a0:f5:59:a6:5b:83:02:75:1b:69:c0:3e:99:c7:a7:a8:41:ae: 4b:eb:fa:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xv2g7Rs6m5pWLbVaOswBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjQ1ZDE4MjdlYTdkODExMmU0ZDY3ZWZhMTgyMzAzNGIzMDYyNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1JnzN8i3akc4e0FqyJBwLFZg1QI GGbCAsz57wa6zcvCsS29zMsZqdOYMDnPXRdNqZZ9852KJDm/KuQ/PtMTzyvHzeik D3PMLIKyqExGZUV3yQxB7w4OAEr5ScTBg5ZDlHPJUFa12TM7tL3oNxxmwHqCFIUh XQox1ifQyRYcFcF4T0OpiZfyTqGvoJtLZ4Obj+Qwb5NVAccEZQ96yXRgwpl4R1OF qVm7cx7wznzx4Y88/7Qs7/EArMuL5706WOmS1aROBKvV/lsvbYH79nRnO9KscqkT VUmL59UCuAOIkDRa9x8XNOCTTyTdHWoRSXLT2mJd4APNl3jkoT9KyctaHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL9F0YJ+p9gRLk1n76GCMDSzBiSsMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvdjBYUmduNm4yQkV1VFdmdm9ZSXdOTE1HSkt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjJMA0G CSqGSIb3DQEBCwUAA4IBAQAXbp0J0kRpKyvVBT9NRneL40GnNC/BXJ7T7bjrC5KW Pp4T0VtQ/rKKQwMyUi4g0aY8jD2XaGylKsB6mTxFiRO0HvaiVrzvCf0zfQq+RzvG +K//b8spLOn6LW0OBZVqXYMLzZEokFCAGkHSXLdDyDa/8oVk3cGHBxTUBg/VkRCD IubUHXr0dH7IMhmtjapOuFa4K5CB2h0KQ19tX+YRppxLPhWV3xa5F5OUkDVQkyAz 65dxnb8dD1BEIdasxTvnB0ZkFY5N22V7/Pa+gjZkTF2buzxrEnxDAtZtzfqnbZyX q1xdlxYZ/8Rv3+Og9VmmW4MCdRtpwD6Zx6eoQa5L6/oi -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:17 2026 by rpki-client