This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/OvRiWl6aJnMMAf_Y11cKpyWtrGs.roa File: OvRiWl6aJnMMAf_Y11cKpyWtrGs.roa (raw, json) Hash identifier: acAc33rPF2ddnrrVmw/BW6ayY7XOhe80s7zul9nM5JA= Subject key identifier: 3A:F4:62:5A:5E:9A:26:73:0C:01:FF:D8:D7:57:0A:A7:25:AD:AC:6B Certificate issuer: /CN=5a8655ebf944500025a5f075ba7bde641584fda6 Certificate serial: 019B7CED9BF6D35F34CC0C1EE78E44B6979A Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/OvRiWl6aJnMMAf_Y11cKpyWtrGs.roa Signing time: Fri 02 Jan 2026 04:18:25 +0000 ROA not before: Fri 02 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212274 IP address blocks: 195.144.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9b:f6:d3:5f:34:cc:0c:1e:e7:8e:44:b6:97:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6 Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3af4625a5e9a26730c01ffd8d7570aa725adac6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:8f:2e:0f:14:77:b5:85:71:3a:7d:1c:83: cc:bf:00:e6:81:76:f5:da:7b:e6:31:a7:11:cb:de: 42:8d:3f:6b:c8:f8:bd:dd:95:e2:60:16:9c:c7:67: 17:84:5c:18:7b:c2:50:76:26:71:84:e7:f8:c5:79: 59:85:e3:f7:5b:81:a8:9f:ae:2d:4e:a5:12:56:ce: 04:24:9b:d6:3f:35:27:46:bc:e1:74:05:5a:57:0e: 4a:45:bd:6b:5b:8d:0c:b0:a8:1d:8a:37:88:f7:ae: 8e:ba:75:ea:91:29:ad:09:da:8b:52:46:08:5f:73: 44:b1:d7:86:75:fa:da:99:1d:cf:e2:49:26:c8:33: 0b:a6:9f:02:fd:bb:37:ee:f2:56:d2:47:2e:6c:52: 62:1f:b6:78:b1:bc:0f:a0:cc:9f:9c:96:00:de:1d: a9:f9:fb:6d:ed:1e:2f:12:17:ab:42:20:a6:70:95: 10:f8:41:c7:97:5a:4d:44:68:9a:f6:93:1d:5a:78: 0d:0f:fc:cc:c7:6b:56:ea:52:f1:c5:c3:42:53:31: c1:3c:84:bb:bf:53:d9:90:8c:60:bc:4e:a9:a2:89: c3:d0:e6:53:f4:dd:99:2f:5f:41:77:e4:24:b1:64: a3:24:e8:7f:1d:7d:6e:b2:fa:db:84:93:30:ee:1c: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F4:62:5A:5E:9A:26:73:0C:01:FF:D8:D7:57:0A:A7:25:AD:AC:6B X509v3 Authority Key Identifier: keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/OvRiWl6aJnMMAf_Y11cKpyWtrGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.16.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:e3:ee:ef:93:20:4a:a2:f7:cc:30:f1:37:2c:45:13:ab:b7: 28:7a:b7:83:8e:ad:98:8a:1b:16:86:84:01:25:8f:b5:86:71: 3b:b6:ec:66:34:0e:9b:ae:d4:74:94:be:a6:bc:48:d9:67:35: b6:1a:57:04:fe:a3:e4:72:1c:f6:d8:82:52:61:1d:6b:fa:a0: c4:73:ee:cb:75:59:5f:9b:38:39:0a:68:c4:5c:2d:4f:8e:53: ba:b7:f3:4f:a0:44:fe:94:25:1f:36:94:1c:30:85:0a:36:a1: 6f:10:62:56:50:50:4c:ec:47:2c:36:4f:db:85:d3:e2:53:3f: 36:81:fa:c1:2e:d2:91:f6:a8:27:5b:d3:5b:a9:8a:12:ad:21: 03:4b:c9:6c:6c:85:ce:38:9a:56:fd:43:df:1c:de:25:e2:ad: f9:7b:1a:66:95:3d:82:6a:40:be:84:61:0f:66:b2:d7:52:cd: 58:49:bd:aa:17:1f:c8:2d:8d:4f:d3:9b:ed:04:c8:01:26:13: c4:eb:9d:51:83:56:ff:82:1e:a3:0f:6e:28:6f:01:1e:f2:7f: ad:03:4f:ff:e9:5c:88:05:c9:a0:60:bd:e6:2b:1f:55:af:cc: 49:cb:d5:85:23:65:a6:ec:23:58:a8:57:e5:c4:69:bb:51:29: 97:a1:cd:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Zv20180zAwe545EtpeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhODY1NWViZjk0NDUwMDAyNWE1ZjA3NWJhN2JkZTY0MTU4 NGZkYTYwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWY0NjI1YTVlOWEyNjczMGMwMWZmZDhkNzU3MGFhNzI1YWRhYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOiPLg8Ud7WFcTp9HIPMvwDmgXb1 2nvmMacRy95CjT9ryPi93ZXiYBacx2cXhFwYe8JQdiZxhOf4xXlZheP3W4Gon64t TqUSVs4EJJvWPzUnRrzhdAVaVw5KRb1rW40MsKgdijeI966OunXqkSmtCdqLUkYI X3NEsdeGdframR3P4kkmyDMLpp8C/bs37vJW0kcubFJiH7Z4sbwPoMyfnJYA3h2p +ftt7R4vEherQiCmcJUQ+EHHl1pNRGia9pMdWngND/zMx2tW6lLxxcNCUzHBPIS7 v1PZkIxgvE6poonD0OZT9N2ZL19Bd+QksWSjJOh/HX1usvrbhJMw7hzpqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDr0YlpemiZzDAH/2NdXCqclraxrMB8GA1UdIwQY MBaAFFqGVev5RFAAJaXwdbp73mQVhP2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81NGZkODQtNmU5Ni00N2IyLTk3YTUt ZjJiNTU2ZWQ2OTkwLzEvT3ZSaVdsNmFKbk1NQWZfWTExY0tweVd0ckdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC81NGZkODQtNmU5Ni00N2IyLTk3YTUtZjJiNTU2ZWQ2OTkw LzEvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5AQMA0G CSqGSIb3DQEBCwUAA4IBAQA/4+7vkyBKovfMMPE3LEUTq7coereDjq2YihsWhoQB JY+1hnE7tuxmNA6brtR0lL6mvEjZZzW2GlcE/qPkchz22IJSYR1r+qDEc+7LdVlf mzg5CmjEXC1PjlO6t/NPoET+lCUfNpQcMIUKNqFvEGJWUFBM7EcsNk/bhdPiUz82 gfrBLtKR9qgnW9NbqYoSrSEDS8lsbIXOOJpW/UPfHN4l4q35expmlT2CakC+hGEP ZrLXUs1YSb2qFx/ILY1P05vtBMgBJhPE651Rg1b/gh6jD24obwEe8n+tA0//6VyI BcmgYL3mKx9Vr8xJy9WFI2Wm7CNYqFflxGm7USmXoc2X -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:34 2026 by rpki-client