This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/ad8VziUyy5y7esWKDnVVM5dOvOs.roa File: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (raw, json) Hash identifier: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU= Subject key identifier: 69:DF:15:CE:25:32:CB:9C:BB:7A:C5:8A:0E:75:55:33:97:4E:BC:EB Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e Certificate serial: 019B7C124FCD99FA16714D5B1F4489838730 Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/ad8VziUyy5y7esWKDnVVM5dOvOs.roa Signing time: Fri 02 Jan 2026 00:18:53 +0000 ROA not before: Fri 02 Jan 2026 00:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 195.22.120.0/24 maxlen: 24 2001:67c:2f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4f:cd:99:fa:16:71:4d:5b:1f:44:89:83:87:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e Validity Not Before: Jan 2 00:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69df15ce2532cb9cbb7ac58a0e755533974ebceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:9c:5b:56:3e:77:b4:62:fb:8e:77:1d:cb: 68:bf:3b:c6:2b:11:d7:6f:63:6d:47:cc:db:41:9d: de:9b:ed:8a:02:37:27:a4:7a:ef:6d:2b:ef:e2:44: da:fd:c0:a3:a5:fc:d1:a9:e7:3a:fa:f4:20:af:7c: 62:8f:db:e7:bb:11:55:78:9f:61:aa:0e:15:96:09: 73:87:3f:5d:e2:af:0e:42:b5:3a:3b:80:9a:98:b2: 2d:eb:ae:ed:31:18:3a:f3:0a:f4:10:07:3f:45:35: cf:15:c3:56:fd:79:56:08:06:9f:2d:3c:ae:15:f3: 8f:e1:72:98:c3:41:ce:22:39:ef:28:36:1c:b1:11: bd:bc:c5:96:82:9c:c8:8c:23:17:45:94:65:13:db: a3:cb:6a:5b:94:d3:ed:8c:8b:0a:2e:e4:b9:54:a0: 62:04:ba:5a:c2:78:78:6a:93:94:c4:5c:03:f3:62: a1:e8:ad:95:1c:ba:32:8b:22:f6:ac:e1:bc:f5:b3: 0d:99:e0:d4:a8:1a:55:7b:8b:02:34:78:c9:bb:65: 8a:e7:c7:34:bf:14:5f:f6:95:34:ee:00:8b:70:fa: c1:b9:08:35:3e:23:9c:88:66:d9:f8:ac:1f:04:db: 1d:96:77:9a:31:f9:0f:8b:00:dc:8d:87:0f:5f:aa: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DF:15:CE:25:32:CB:9C:BB:7A:C5:8A:0E:75:55:33:97:4E:BC:EB X509v3 Authority Key Identifier: keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/ad8VziUyy5y7esWKDnVVM5dOvOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.22.120.0/24 IPv6: 2001:67c:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 90:e6:e9:e0:41:ea:34:0a:ab:c3:5a:dc:9e:27:9a:ab:ff:25: 0c:f9:13:79:fe:cf:6c:c2:2e:61:33:bf:0a:0e:b5:d0:5a:59: a3:5b:1e:7d:de:30:f8:7e:5e:be:44:6b:04:0d:de:37:2d:5c: 67:86:c9:62:99:76:e0:4c:36:24:1b:85:3c:0a:e3:e6:de:31: 4b:5e:a6:3f:48:71:af:8b:a0:79:e7:6b:62:c2:95:3d:8c:37: 62:00:2c:04:af:89:0e:79:61:97:d1:fa:4e:21:d0:49:68:f5: 73:c1:e1:1c:ef:58:21:ce:f0:50:00:83:54:ef:37:f1:cf:e0: f5:fe:03:5f:a4:25:51:82:7a:05:68:b3:a8:99:bc:04:5c:82: 75:12:f5:6c:08:ee:47:64:56:0c:6d:bc:a7:86:7a:5a:9e:d2: ee:97:1d:6e:d3:8b:f1:d5:be:b6:60:27:39:cf:f9:a3:da:dd: 6c:1d:fe:e5:5f:91:ba:a0:39:c1:2d:15:31:3f:10:00:9a:82: 2b:2a:db:3d:01:50:22:34:08:4d:76:86:3c:68:f2:d7:cb:4d: bd:d5:15:28:0e:c6:a4:39:db:8b:9a:04:e7:4c:dd:0c:05:6f: 66:f8:65:21:3d:c9:a0:69:9f:8c:b3:14:6d:37:ae:3a:20:8c: da:d8:dd:c6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ek/NmfoWcU1bH0SJg4cwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDNjMGMxMTUzMjhjM2QyOGMwZjU3MjFiMDA5ODJiMmNk NDIxNWUwHhcNMjYwMTAyMDAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWRmMTVjZTI1MzJjYjljYmI3YWM1OGEwZTc1NTUzMzk3NGViY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb+cW1Y+d7Ri+453HctovzvGKxHX b2NtR8zbQZ3em+2KAjcnpHrvbSvv4kTa/cCjpfzRqec6+vQgr3xij9vnuxFVeJ9h qg4Vlglzhz9d4q8OQrU6O4CamLIt667tMRg68wr0EAc/RTXPFcNW/XlWCAafLTyu FfOP4XKYw0HOIjnvKDYcsRG9vMWWgpzIjCMXRZRlE9ujy2pblNPtjIsKLuS5VKBi BLpawnh4apOUxFwD82Kh6K2VHLoyiyL2rOG89bMNmeDUqBpVe4sCNHjJu2WK58c0 vxRf9pU07gCLcPrBuQg1PiOciGbZ+KwfBNsdlneaMfkPiwDcjYcPX6qjXwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGnfFc4lMsucu3rFig51VTOXTrzrMB8GA1UdIwQY MBaAFAfTwMEVMow9KMD1chsAmCss1CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDct MmIxZDQzOWIyMjI3LzEvYWQ4VnppVXl5NXk3ZXNXS0RuVlZNNWRPdk9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDctMmIxZDQzOWIyMjI3 LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwxZ4MA8E AgACMAkDBwAgAQZ8LwAwDQYJKoZIhvcNAQELBQADggEBAJDm6eBB6jQKq8Na3J4n mqv/JQz5E3n+z2zCLmEzvwoOtdBaWaNbHn3eMPh+Xr5EawQN3jctXGeGyWKZduBM NiQbhTwK4+beMUtepj9Ica+LoHnna2LClT2MN2IALASviQ55YZfR+k4h0Elo9XPB 4RzvWCHO8FAAg1TvN/HP4PX+A1+kJVGCegVos6iZvARcgnUS9WwI7kdkVgxtvKeG elqe0u6XHW7Ti/HVvrZgJznP+aPa3Wwd/uVfkbqgOcEtFTE/EACagisq2z0BUCI0 CE12hjxo8tfLTb3VFSgOxqQ524uaBOdM3QwFb2b4ZSE9yaBpn4yzFG03rjogjNrY 3cY= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:10 2026 by rpki-client