This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa File: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (raw, json) Hash identifier: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys= Subject key identifier: 57:BC:C8:2D:30:76:43:EA:58:97:28:B7:79:8F:03:A0:77:B6:8A:C4 Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Certificate serial: 019B791011046096F64916F38E8A20EF7D9A Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa Signing time: Thu 01 Jan 2026 10:17:34 +0000 ROA not before: Thu 01 Jan 2026 10:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 193.163.186.0/24 maxlen: 24 2a10:f540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:11:04:60:96:f6:49:16:f3:8e:8a:20:ef:7d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57bcc82d307643ea589728b7798f03a077b68ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:99:1e:b3:20:3b:20:30:38:75:a3:b3:5c: 8a:f3:f1:ef:13:f7:03:3f:6c:44:60:1b:d8:72:52: 4d:39:bd:45:b5:70:53:e9:0e:a2:b1:7a:86:c0:60: 41:f1:cd:b5:f7:38:ee:08:c7:c8:89:39:6d:b3:69: 57:a3:df:ed:c8:86:87:59:95:e4:f4:38:45:4f:55: e9:73:af:fb:38:6f:9c:b7:f7:ea:fd:b0:df:29:56: c5:a6:5b:b6:a6:16:62:a2:6b:e5:f0:e4:ed:80:18: 01:33:76:39:56:b0:ef:17:6a:0b:4f:90:d4:dd:ac: 8e:ba:e0:7d:a4:f0:61:55:bf:3b:b3:3d:76:be:11: 4e:0c:54:db:b6:72:b5:05:7c:5a:da:3c:fd:84:8f: 6e:21:a0:22:4a:c8:05:2e:ea:67:bd:c2:a5:e8:6e: a3:a6:9d:3b:e6:16:16:0e:69:1e:f8:1b:df:77:82: 09:15:ba:ff:54:d6:82:5d:ec:92:f7:7e:23:96:a0: c7:8d:21:ab:5a:a1:5a:57:30:10:06:8f:fb:40:c0: 06:5b:de:48:ba:16:1e:e2:db:a6:6e:81:96:48:72: 0c:df:96:12:11:2c:b1:f0:3f:d3:a0:c1:87:34:35: 3a:d7:26:f5:06:43:41:99:bc:cc:c3:d8:5a:55:af: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:C8:2D:30:76:43:EA:58:97:28:B7:79:8F:03:A0:77:B6:8A:C4 X509v3 Authority Key Identifier: keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.186.0/24 IPv6: 2a10:f540::/29 Signature Algorithm: sha256WithRSAEncryption 72:69:31:e3:fc:d4:f6:2a:2c:94:07:0c:d9:3f:ae:01:5b:ab: 46:19:2e:7e:e7:f6:17:76:47:7d:f9:29:98:05:b2:c6:3b:c2: fc:87:54:8c:d3:68:87:a1:4f:76:04:78:f4:8e:15:ce:1f:14: ba:ba:3d:25:8e:c1:3a:06:93:94:57:f5:08:55:78:86:9d:4e: b0:3d:a6:60:fd:0b:98:c7:a1:f9:58:42:9a:cd:be:9c:23:ad: c9:c8:33:0d:3d:78:d7:8c:6e:0d:a8:21:24:88:c0:c2:5c:2e: 44:a5:89:f8:cb:d7:cf:48:da:8a:1d:30:4e:61:b1:df:1a:89: d8:89:7b:8e:11:a2:13:d5:0f:23:1b:06:f1:d7:95:fb:20:4b: 2f:de:f4:62:13:02:27:f3:0b:16:8b:28:1b:55:86:81:0d:5b: 86:38:c3:4c:b3:05:f8:79:6f:f2:93:84:92:96:97:bf:6b:58: 30:2f:50:43:d6:b2:1b:90:14:82:ac:75:16:02:77:7a:a6:75: e2:df:f0:c7:f0:23:03:ce:3f:e4:6b:fc:05:20:22:26:5c:fb: 0d:c2:82:e1:36:4b:ba:3a:3c:7e:fb:b9:57:ea:56:32:f1:87: f2:df:cf:e5:33:dc:49:8f:84:96:99:18:0d:7f:69:02:67:19: 52:5a:4d:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EBEEYJb2SRbzjoog732aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NTFjZWE1YWNlNzdmNGQ3ZjRkZDI4MmYxMGFiOWNiMGVl NGQxZWMwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2JjYzgyZDMwNzY0M2VhNTg5NzI4Yjc3OThmMDNhMDc3YjY4YWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoSZHrMgOyAwOHWjs1yK8/HvE/cD P2xEYBvYclJNOb1FtXBT6Q6isXqGwGBB8c219zjuCMfIiTlts2lXo9/tyIaHWZXk 9DhFT1Xpc6/7OG+ct/fq/bDfKVbFplu2phZiomvl8OTtgBgBM3Y5VrDvF2oLT5DU 3ayOuuB9pPBhVb87sz12vhFODFTbtnK1BXxa2jz9hI9uIaAiSsgFLupnvcKl6G6j pp075hYWDmke+Bvfd4IJFbr/VNaCXeyS934jlqDHjSGrWqFaVzAQBo/7QMAGW95I uhYe4tumboGWSHIM35YSESyx8D/ToMGHNDU61yb1BkNBmbzMw9haVa/6ZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFe8yC0wdkPqWJcot3mPA6B3torEMB8GA1UdIwQY MBaAFDZRzqWs539Nf03SgvEKucsO5NHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYt YjkyYjA5NGYzYTNjLzEvVjd6SUxUQjJRLXBZbHlpM2VZOERvSGUyaXNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYtYjkyYjA5NGYzYTNj LzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaO6MA0E AgACMAcDBQMqEPVAMA0GCSqGSIb3DQEBCwUAA4IBAQByaTHj/NT2KiyUBwzZP64B W6tGGS5+5/YXdkd9+SmYBbLGO8L8h1SM02iHoU92BHj0jhXOHxS6uj0ljsE6BpOU V/UIVXiGnU6wPaZg/QuYx6H5WEKazb6cI63JyDMNPXjXjG4NqCEkiMDCXC5EpYn4 y9fPSNqKHTBOYbHfGonYiXuOEaIT1Q8jGwbx15X7IEsv3vRiEwIn8wsWiygbVYaB DVuGOMNMswX4eW/yk4SSlpe/a1gwL1BD1rIbkBSCrHUWAnd6pnXi3/DH8CMDzj/k a/wFICImXPsNwoLhNku6Ojx++7lX6lYy8Yfy38/lM9xJj4SWmRgNf2kCZxlSWk15 -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:33 2026 by rpki-client