This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/RIVpRVcoTiPM597Ay6ktG1nRpoI.roa File: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (raw, json) Hash identifier: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s= Subject key identifier: 44:85:69:45:57:28:4E:23:CC:E7:DE:C0:CB:A9:2D:1B:59:D1:A6:82 Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Certificate serial: 019B7DCA36D4444881E6C97F056EB9411607 Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/RIVpRVcoTiPM597Ay6ktG1nRpoI.roa Signing time: Fri 02 Jan 2026 08:19:22 +0000 ROA not before: Fri 02 Jan 2026 08:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211686 IP address blocks: 185.15.199.0/24 maxlen: 24 185.95.1.0/24 maxlen: 24 194.213.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:36:d4:44:48:81:e6:c9:7f:05:6e:b9:41:16:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4485694557284e23cce7dec0cba92d1b59d1a682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:33:51:46:0d:37:1e:0f:c1:c1:c3:4f:43: 14:81:8e:5f:ff:f8:21:92:8f:21:91:85:f1:d0:3e: c1:5c:d0:ef:13:92:ea:23:69:b6:63:da:4c:1b:37: 52:84:0a:5d:6b:88:cc:da:02:12:40:51:72:71:22: fe:af:87:0f:4b:8d:b1:16:aa:9c:6e:a4:b7:63:65: 80:6f:cb:fe:07:24:46:ca:19:ee:08:d9:9d:6a:1d: 7d:82:19:54:2e:64:46:f8:25:e4:91:d1:e5:51:fd: 5b:58:f1:92:44:fe:9e:30:c0:80:ba:6c:16:31:06: e5:f5:29:e6:f5:90:31:b5:e9:83:0d:9f:dc:b1:22: 0d:e2:ed:6e:8e:ef:e0:0c:75:0b:d6:53:57:1e:87: 71:b7:09:9e:a4:7b:b3:fb:fd:f4:0e:dc:06:24:25: ad:5f:68:40:d0:7c:24:1b:82:5a:5b:23:e8:0e:73: bf:17:7f:92:1f:1c:2a:80:a9:b3:eb:13:af:74:8d: b3:0c:f0:49:c2:09:14:d8:b0:33:cd:49:eb:0b:7f: 57:98:4c:fe:90:da:ed:31:8f:7a:2b:46:30:b1:23: 4e:03:0d:f1:d0:12:c1:ef:73:9c:70:48:40:2b:d5: c8:f0:c8:fb:5d:37:16:d7:13:08:d3:5d:9b:fd:68: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:85:69:45:57:28:4E:23:CC:E7:DE:C0:CB:A9:2D:1B:59:D1:A6:82 X509v3 Authority Key Identifier: keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/RIVpRVcoTiPM597Ay6ktG1nRpoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.199.0/24 185.95.1.0/24 194.213.25.0/24 Signature Algorithm: sha256WithRSAEncryption 88:4c:09:95:95:b9:1e:ce:3c:eb:85:a5:8c:11:97:a6:25:ce: 68:dc:19:f6:ab:46:7c:1e:ba:5d:f9:1e:ef:e8:5e:f8:0f:87: 65:0f:b4:94:94:22:c6:16:5d:9c:8e:4d:f7:4a:e7:48:01:34: ce:54:1c:a4:32:e8:61:91:cd:0f:60:a0:fd:31:71:a1:74:58: a8:44:d7:4c:ea:76:3c:a4:be:98:3a:7e:08:b3:e0:b9:dd:46: 04:68:a6:57:cd:80:7a:d0:da:61:f1:b4:62:b2:0c:f1:18:28: b2:30:9a:83:ee:73:c0:29:55:0e:1e:b0:17:7d:19:00:f4:73: f7:1d:15:52:c3:c4:e7:32:b0:4b:24:fc:ea:4e:91:d5:96:04: bc:5b:4e:d2:91:59:ae:58:ed:a3:a2:5f:c5:c5:fb:3f:98:fd: 90:15:b5:88:a1:0c:be:db:95:69:f9:fc:2f:63:f1:90:f9:b0: c0:44:2d:de:3c:3d:dd:b1:b8:ef:1c:6b:8d:66:40:bb:32:1c: 9e:07:1f:07:18:40:b0:50:2f:10:14:c5:fd:52:d0:8f:fc:05: fe:08:3c:84:b5:95:f7:9b:ba:38:e7:ac:ce:bd:d2:49:fc:8a: 16:1f:67:93:17:3c:16:e2:32:bd:b6:bc:50:ea:2f:3d:80:61: cb:fe:fe:c1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yjbUREiB5sl/BW65QRYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy Y2UxNGEwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDg1Njk0NTU3Mjg0ZTIzY2NlN2RlYzBjYmE5MmQxYjU5ZDFhNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrczUUYNNx4PwcHDT0MUgY5f//gh ko8hkYXx0D7BXNDvE5LqI2m2Y9pMGzdShApda4jM2gISQFFycSL+r4cPS42xFqqc bqS3Y2WAb8v+ByRGyhnuCNmdah19ghlULmRG+CXkkdHlUf1bWPGSRP6eMMCAumwW MQbl9Snm9ZAxtemDDZ/csSIN4u1uju/gDHUL1lNXHodxtwmepHuz+/30DtwGJCWt X2hA0HwkG4JaWyPoDnO/F3+SHxwqgKmz6xOvdI2zDPBJwgkU2LAzzUnrC39XmEz+ kNrtMY96K0YwsSNOAw3x0BLB73OccEhAK9XI8Mj7XTcW1xMI012b/WguNwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFESFaUVXKE4jzOfewMupLRtZ0aaCMB8GA1UdIwQY MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct OTY4ZDBjN2YyMmJiLzEvUklWcFJWY29UaVBNNTk3QXk2a3RHMW5ScG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuQ/HAwQA uV8BAwQAwtUZMA0GCSqGSIb3DQEBCwUAA4IBAQCITAmVlbkezjzrhaWMEZemJc5o 3Bn2q0Z8Hrpd+R7v6F74D4dlD7SUlCLGFl2cjk33SudIATTOVBykMuhhkc0PYKD9 MXGhdFioRNdM6nY8pL6YOn4Is+C53UYEaKZXzYB60Nph8bRisgzxGCiyMJqD7nPA KVUOHrAXfRkA9HP3HRVSw8TnMrBLJPzqTpHVlgS8W07SkVmuWO2jol/Fxfs/mP2Q FbWIoQy+25Vp+fwvY/GQ+bDARC3ePD3dsbjvHGuNZkC7MhyeBx8HGECwUC8QFMX9 UtCP/AX+CDyEtZX3m7o456zOvdJJ/IoWH2eTFzwW4jK9trxQ6i89gGHL/v7B -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:46 2026 by rpki-client