This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/rpVLr8z0Q-daVQyM2phBebLHi-c.roa File: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (raw, json) Hash identifier: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg= Subject key identifier: AE:95:4B:AF:CC:F4:43:E7:5A:55:0C:8C:DA:98:41:79:B2:C7:8B:E7 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E38A1807E326E09F8A6242AC858B490 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/rpVLr8z0Q-daVQyM2phBebLHi-c.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 195.114.193.0/24 maxlen: 24 195.114.206.0/24 maxlen: 24 195.114.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a1:80:7e:32:6e:09:f8:a6:24:2a:c8:58:b4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae954bafccf443e75a550c8cda984179b2c78be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:ec:0a:1f:0b:f2:f4:57:29:58:50:69:7f: 4b:eb:65:96:9e:5f:56:6c:d0:5b:c0:66:a9:95:03: 96:92:ab:7a:d1:67:f6:1e:e2:c7:2c:13:b8:c5:13: f9:7f:9d:3c:51:92:a3:59:87:df:fa:57:91:1a:4c: ae:4a:b1:85:e8:f5:8b:13:0e:86:30:0f:65:46:a1: e9:cd:df:d6:bd:19:e6:10:b3:17:68:72:9e:9b:32: 8c:fd:42:43:2f:b8:00:54:d2:dc:9e:f7:cd:83:c3: 49:1e:7b:71:8b:75:b7:bc:e7:ba:c7:20:6c:ec:90: 88:a8:4e:79:6d:a7:b2:5d:69:d1:10:2b:21:bc:57: 0b:e0:ab:5c:57:c5:6b:5a:e2:51:2d:b7:35:2f:e6: 2c:ab:65:8f:e4:11:a1:45:9a:4e:9c:07:1d:ee:6e: eb:f9:ad:b9:d6:58:7e:e5:4c:c6:d0:69:2b:3f:f0: de:85:e4:ae:58:6f:ba:7e:43:10:21:88:02:20:67: b9:42:25:d3:f4:5b:af:71:3e:d2:a3:7f:72:f5:cb: 4a:c9:f3:25:0c:9a:c0:34:01:ec:81:cd:af:6f:d5: fa:84:b5:e9:ab:81:33:56:cb:40:4c:c0:e0:9e:6a: 4a:7e:d4:c1:e8:62:bd:cb:57:4a:cf:37:cc:4c:9a: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:95:4B:AF:CC:F4:43:E7:5A:55:0C:8C:DA:98:41:79:B2:C7:8B:E7 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/rpVLr8z0Q-daVQyM2phBebLHi-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.193.0/24 195.114.206.0/23 Signature Algorithm: sha256WithRSAEncryption 10:f1:63:ac:78:1a:77:b3:9b:9a:d9:3e:4b:5a:a4:08:55:34: 02:b6:6e:3d:c8:19:39:2f:3a:9c:9a:b9:ec:bc:a4:07:28:8e: 32:65:c4:18:3a:2e:a2:20:09:e0:f0:8e:7a:d0:5e:9b:ac:73: af:3e:ac:15:0d:e3:a9:91:91:7d:c7:03:11:73:2f:12:7b:54: 76:a4:43:de:30:9c:bd:2f:ef:ad:03:05:57:34:ae:fa:57:d8: d0:cc:d2:a0:f4:07:9b:5a:24:de:78:5d:5a:b3:ce:2f:7e:d2: e7:da:fc:b9:75:29:6f:37:97:63:87:d8:52:90:a1:e1:67:22: 50:a3:9a:25:cc:6b:ad:e7:d4:0c:64:a0:5e:ed:4c:a6:1c:06: f1:72:47:d9:d4:e2:8b:39:c6:be:89:6d:61:91:d1:59:e9:2a: a3:5d:a7:4d:e7:4d:59:19:22:6b:fa:ba:c5:cf:4e:40:6d:6b: 66:67:ad:dc:a1:1b:7d:bd:77:35:b1:00:7e:bf:ac:8d:37:e6: fe:48:c1:9d:da:ca:b7:71:2c:7c:08:8f:81:92:63:fa:00:b1: 12:da:4d:93:32:22:c3:c2:f5:56:02:cb:67:b3:9e:59:7b:cb: c1:13:45:89:01:db:30:40:e4:4d:df:33:10:49:c0:5d:30:97: 58:5b:bd:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OKGAfjJuCfimJCrIWLSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTk1NGJhZmNjZjQ0M2U3NWE1NTBjOGNkYTk4NDE3OWIyYzc4YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo13sCh8L8vRXKVhQaX9L62WWnl9W bNBbwGaplQOWkqt60Wf2HuLHLBO4xRP5f508UZKjWYff+leRGkyuSrGF6PWLEw6G MA9lRqHpzd/WvRnmELMXaHKemzKM/UJDL7gAVNLcnvfNg8NJHntxi3W3vOe6xyBs 7JCIqE55baeyXWnRECshvFcL4KtcV8VrWuJRLbc1L+Ysq2WP5BGhRZpOnAcd7m7r +a251lh+5UzG0GkrP/DeheSuWG+6fkMQIYgCIGe5QiXT9FuvcT7So39y9ctKyfMl DJrANAHsgc2vb9X6hLXpq4EzVstATMDgnmpKftTB6GK9y1dKzzfMTJrTXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK6VS6/M9EPnWlUMjNqYQXmyx4vnMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvcnBWTHI4ejBRLWRhVlF5TTJwaEJlYkxIaS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw3LBAwQB w3LOMA0GCSqGSIb3DQEBCwUAA4IBAQAQ8WOseBp3s5ua2T5LWqQIVTQCtm49yBk5 LzqcmrnsvKQHKI4yZcQYOi6iIAng8I560F6brHOvPqwVDeOpkZF9xwMRcy8Se1R2 pEPeMJy9L++tAwVXNK76V9jQzNKg9AebWiTeeF1as84vftLn2vy5dSlvN5djh9hS kKHhZyJQo5olzGut59QMZKBe7UymHAbxckfZ1OKLOca+iW1hkdFZ6SqjXadN501Z GSJr+rrFz05AbWtmZ63coRt9vXc1sQB+v6yNN+b+SMGd2sq3cSx8CI+BkmP6ALES 2k2TMiLDwvVWAstns55Ze8vBE0WJAdswQORN3zMQScBdMJdYW72e -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:57 2026 by rpki-client