This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/0I3PlKQ5LpzcoIELfYIBNlgcV4Q.roa File: 0I3PlKQ5LpzcoIELfYIBNlgcV4Q.roa (raw, json) Hash identifier: Caoj+QANr8Hoidw+IoB9K8sbTurE/vnKVtB/Kf7u0RU= Subject key identifier: D0:8D:CF:94:A4:39:2E:9C:DC:A0:81:0B:7D:82:01:36:58:1C:57:84 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37EB8D54084F7A681498676CCD76D8 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/0I3PlKQ5LpzcoIELfYIBNlgcV4Q.roa Signing time: Fri 02 Jan 2026 10:19:12 +0000 ROA not before: Fri 02 Jan 2026 10:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49563 IP address blocks: 212.15.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:eb:8d:54:08:4f:7a:68:14:98:67:6c:cd:76:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d08dcf94a4392e9cdca0810b7d820136581c5784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:e3:31:cc:be:3b:e3:80:eb:32:b6:f5:fe: 21:61:b1:8b:a6:b2:f2:6f:12:47:87:10:1d:84:96: e6:07:24:ba:9f:b8:be:32:d0:dc:3f:cd:a5:11:af: 01:0a:b8:f8:b9:ab:cb:84:28:73:7a:46:6d:b6:4f: 02:fb:be:4e:f4:2e:bd:b7:fb:b4:5a:18:1f:04:81: a2:5c:5b:8c:40:d5:14:24:14:94:48:d6:17:a6:94: c9:56:01:f0:a0:f7:ea:5e:51:d8:ce:1f:05:a2:07: e4:13:70:81:af:a2:44:22:51:05:27:5e:a2:59:36: 56:80:9e:1a:9e:54:42:f5:42:f3:45:7a:0e:a1:46: 5e:ec:61:f8:e6:c8:d1:47:bf:8d:a4:f5:d4:48:2c: 5d:3d:f0:90:5d:9d:be:74:ac:d3:b1:14:6d:f1:de: 81:18:8f:ee:a1:ec:74:f8:bb:7f:14:ea:64:72:e2: 7b:67:29:f8:4d:a3:28:14:69:ba:ed:c0:5a:e2:76: b8:c0:89:b1:57:af:e7:c3:51:6e:43:2d:41:e7:d7: e5:d1:d5:f0:5e:2f:aa:00:be:44:50:2c:41:b7:62: 8b:33:e6:4d:ca:50:c3:0f:cf:5d:a4:e9:05:1f:03: 61:fe:38:2c:a3:a3:df:15:c7:a8:8c:89:36:fb:aa: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8D:CF:94:A4:39:2E:9C:DC:A0:81:0B:7D:82:01:36:58:1C:57:84 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/0I3PlKQ5LpzcoIELfYIBNlgcV4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.24.0/24 Signature Algorithm: sha256WithRSAEncryption d0:d2:2f:0a:d4:c6:74:ba:61:6f:40:2f:58:82:2f:9b:3d:b2: df:26:ec:90:ba:ec:9f:31:03:5f:43:74:a3:e1:33:5d:91:cc: f9:9b:33:db:0c:a1:c1:2c:a6:26:04:b7:73:ab:cf:ee:3d:58: ca:35:c0:69:81:8e:a2:ad:f9:04:c3:fd:6c:45:84:d3:35:9d: ab:1d:6d:c5:bb:df:80:7d:65:f3:24:1d:97:88:e0:04:37:13: 71:03:2d:8a:1d:6f:15:96:38:7c:96:29:4e:ad:6f:35:1d:15: ff:89:96:d7:11:32:3c:c0:9f:20:bf:d0:41:46:c5:2f:8b:68: c9:b3:bd:e3:2f:11:c4:39:9c:6c:5f:91:2a:65:5c:2b:16:64: 87:73:ac:59:a5:20:c9:ce:b9:85:9e:d7:0a:28:83:0a:91:29: 16:70:5e:45:cc:88:4d:20:18:d7:95:92:05:0a:68:dc:ef:4e: a0:30:0a:43:5a:c9:4d:89:78:4b:8e:92:96:5e:2b:a6:70:2f: f2:27:f8:f9:54:68:aa:12:3b:e3:a3:4e:ff:37:73:4c:ee:cc: 04:aa:2d:9b:81:cd:03:30:04:e3:23:04:39:d7:37:19:e0:5a: fc:62:8c:21:4d:58:ca:0c:bd:2a:48:a0:34:d8:c8:36:6d:58: 38:62:b7:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+uNVAhPemgUmGdszXbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDhkY2Y5NGE0MzkyZTljZGNhMDgxMGI3ZDgyMDEzNjU4MWM1Nzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrjjMcy+O+OA6zK29f4hYbGLprLy bxJHhxAdhJbmByS6n7i+MtDcP82lEa8BCrj4uavLhChzekZttk8C+75O9C69t/u0 WhgfBIGiXFuMQNUUJBSUSNYXppTJVgHwoPfqXlHYzh8FogfkE3CBr6JEIlEFJ16i WTZWgJ4anlRC9ULzRXoOoUZe7GH45sjRR7+NpPXUSCxdPfCQXZ2+dKzTsRRt8d6B GI/uoex0+Lt/FOpkcuJ7Zyn4TaMoFGm67cBa4na4wImxV6/nw1FuQy1B59fl0dXw Xi+qAL5EUCxBt2KLM+ZNylDDD89dpOkFHwNh/jgso6PfFceojIk2+6qlvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCNz5SkOS6c3KCBC32CATZYHFeEMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvMEkzUGxLUTVMcHpjb0lFTGZZSUJObGdjVjRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1A8YMA0G CSqGSIb3DQEBCwUAA4IBAQDQ0i8K1MZ0umFvQC9Ygi+bPbLfJuyQuuyfMQNfQ3Sj 4TNdkcz5mzPbDKHBLKYmBLdzq8/uPVjKNcBpgY6irfkEw/1sRYTTNZ2rHW3Fu9+A fWXzJB2XiOAENxNxAy2KHW8Vljh8lilOrW81HRX/iZbXETI8wJ8gv9BBRsUvi2jJ s73jLxHEOZxsX5EqZVwrFmSHc6xZpSDJzrmFntcKKIMKkSkWcF5FzIhNIBjXlZIF Cmjc706gMApDWslNiXhLjpKWXiumcC/yJ/j5VGiqEjvjo07/N3NM7swEqi2bgc0D MATjIwQ51zcZ4Fr8YowhTVjKDL0qSKA02Mg2bVg4YrdC -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:51 2026 by rpki-client