This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa File: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (raw, json) Hash identifier: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU= Subject key identifier: BC:EB:D4:1F:84:0B:DD:EB:80:F2:7E:59:B3:EA:77:B3:CA:6E:E4:E5 Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04 Certificate serial: 019B77C71140CC728E243BADE3334760A7C1 Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44466 IP address blocks: 195.80.60.0/24 maxlen: 24 195.80.61.0/24 maxlen: 24 195.80.62.0/24 maxlen: 24 195.80.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:11:40:cc:72:8e:24:3b:ad:e3:33:47:60:a7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcebd41f840bddeb80f27e59b3ea77b3ca6ee4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:da:d2:6b:ae:5f:85:b6:8f:a8:3b:46:8e: c3:53:68:b3:c6:37:bc:ca:b7:3e:ee:c9:bb:13:cf: cc:3b:ee:9d:8d:32:ec:ca:db:17:37:4a:b7:47:8e: 1e:fe:d5:67:c1:8d:36:30:62:0c:ab:d4:00:ec:97: c8:b4:20:85:1c:6a:4d:a0:d5:e3:96:ae:55:43:22: da:f7:69:61:ad:58:c0:8f:05:4b:29:be:d4:9d:db: cb:a8:40:1e:ec:42:fd:1c:61:c6:89:51:ac:0b:af: c4:b5:ed:37:9f:1a:62:5c:8c:eb:08:76:4d:1c:ec: 4d:62:3b:36:23:99:d5:92:eb:3a:bd:cc:54:ad:80: 1e:39:65:b1:c4:ce:f5:2a:b1:57:64:c8:27:0a:73: 6e:78:16:c8:60:99:8d:91:2f:ae:5b:d3:7e:a7:5f: 81:39:93:59:40:42:1c:71:3e:6c:f9:64:1b:6b:4a: 68:41:80:d3:d2:e8:c7:7d:13:77:c1:53:4b:89:34: 52:45:93:dd:15:92:b5:01:5e:50:6d:1c:f3:dc:89: 00:70:50:bc:81:91:31:a5:f3:42:60:16:58:9b:64: 16:aa:87:b0:51:e1:ff:ed:a9:b2:fb:d6:66:14:fa: d2:74:5d:c8:28:2f:39:b8:e1:fb:09:22:95:eb:9a: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EB:D4:1F:84:0B:DD:EB:80:F2:7E:59:B3:EA:77:B3:CA:6E:E4:E5 X509v3 Authority Key Identifier: keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.80.60.0/22 Signature Algorithm: sha256WithRSAEncryption 24:d8:8f:70:b5:8c:14:23:b3:5f:1d:ec:df:52:23:6e:eb:04: 99:14:f3:77:4a:57:30:e3:0a:3f:a6:a6:bf:33:39:ea:5e:e0: e0:43:0c:c4:3f:ba:9e:43:50:1c:66:0e:eb:1d:1e:0b:23:4a: 15:ca:81:c5:d8:4c:bb:6a:52:2d:9e:6f:87:b3:14:c2:03:a4: 15:a1:05:dd:72:1c:29:71:d3:73:50:fc:22:d1:1b:49:3e:2f: 03:0a:22:5b:42:57:c0:e3:5a:fa:4f:10:71:34:ba:09:35:54: 71:05:df:be:b5:51:70:9e:67:e0:15:4e:ad:dc:f8:ff:c0:f4: 89:d3:96:27:de:30:03:bd:60:40:cc:52:52:28:24:19:bb:6f: 5f:74:7b:06:76:9b:47:8c:c8:73:73:cd:13:f9:88:2f:ab:1e: 52:7f:8c:9e:09:04:f4:8a:41:81:a3:64:64:6c:26:24:c5:d6: cb:8c:b3:88:f1:f7:0c:fb:41:7a:d8:4f:d9:de:cc:b6:6c:ce: ae:5a:f2:2b:fb:b9:43:57:df:ad:90:b6:b4:7b:29:e7:01:95: 90:ff:e5:c1:96:ba:66:5b:a5:a1:a3:cc:5e:82:bf:55:f5:c7: 51:a9:43:71:9c:b9:fd:be:31:a7:5d:92:c0:65:34:cb:f3:1e: d3:1d:61:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxFAzHKOJDut4zNHYKfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjExYTE4MGRmMTc5OTRlNDhhZDMzMTg3MmNmZDAwYWQ5 YWJhMDQwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2ViZDQxZjg0MGJkZGViODBmMjdlNTliM2VhNzdiM2NhNmVlNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzna0muuX4W2j6g7Ro7DU2izxje8 yrc+7sm7E8/MO+6djTLsytsXN0q3R44e/tVnwY02MGIMq9QA7JfItCCFHGpNoNXj lq5VQyLa92lhrVjAjwVLKb7UndvLqEAe7EL9HGHGiVGsC6/Ete03nxpiXIzrCHZN HOxNYjs2I5nVkus6vcxUrYAeOWWxxM71KrFXZMgnCnNueBbIYJmNkS+uW9N+p1+B OZNZQEIccT5s+WQba0poQYDT0ujHfRN3wVNLiTRSRZPdFZK1AV5QbRzz3IkAcFC8 gZExpfNCYBZYm2QWqoewUeH/7amy+9ZmFPrSdF3IKC85uOH7CSKV65pZZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzr1B+EC93rgPJ+WbPqd7PKbuTlMB8GA1UdIwQY MBaAFF3xGhgN8XmU5IrTMYcs/QCtmroEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTct NmJjZTc3OTljYmVhLzEvdk92VUg0UUwzZXVBOG41WnMtcDNzOHB1NU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTctNmJjZTc3OTljYmVh LzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw1A8MA0G CSqGSIb3DQEBCwUAA4IBAQAk2I9wtYwUI7NfHezfUiNu6wSZFPN3Slcw4wo/pqa/ MznqXuDgQwzEP7qeQ1AcZg7rHR4LI0oVyoHF2Ey7alItnm+HsxTCA6QVoQXdchwp cdNzUPwi0RtJPi8DCiJbQlfA41r6TxBxNLoJNVRxBd++tVFwnmfgFU6t3Pj/wPSJ 05Yn3jADvWBAzFJSKCQZu29fdHsGdptHjMhzc80T+Ygvqx5Sf4yeCQT0ikGBo2Rk bCYkxdbLjLOI8fcM+0F62E/Z3sy2bM6uWvIr+7lDV9+tkLa0eynnAZWQ/+XBlrpm W6Who8xegr9V9cdRqUNxnLn9vjGnXZLAZTTL8x7THWFK -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:40 2026 by rpki-client