This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5DBGO8jrAc2n3cgGf7fkIV9FLUU.roa File: 5DBGO8jrAc2n3cgGf7fkIV9FLUU.roa (raw, json) Hash identifier: rYHcQswnDMCserrBI9uDY43ZeZ+FqmsRZQnz119APik= Subject key identifier: E4:30:46:3B:C8:EB:01:CD:A7:DD:C8:06:7F:B7:E4:21:5F:45:2D:45 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E8F05C9B1A0F5F5F516561509316 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5DBGO8jrAc2n3cgGf7fkIV9FLUU.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43331 IP address blocks: 195.87.22.0/24 maxlen: 24 195.87.212.0/22 maxlen: 22 195.87.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e8:f0:5c:9b:1a:0f:5f:5f:51:65:61:50:93:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e430463bc8eb01cda7ddc8067fb7e4215f452d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:0e:bc:c6:10:7b:09:1e:cb:1d:72:7b:ea: ab:ba:ea:50:52:3f:c3:86:4b:4d:ea:fe:00:27:3f: 16:b1:5d:38:e5:41:dc:4c:01:c6:06:9a:60:30:32: 88:c8:ea:0d:bf:df:82:b8:07:58:58:15:d6:4f:ad: 7a:c9:10:b9:45:4d:2f:e2:a2:f6:52:66:5c:fc:e0: 00:48:c0:f3:ab:27:bd:f3:1f:7a:a1:84:4d:7a:54: ce:15:41:ef:b5:95:56:89:5b:da:fb:08:b5:44:c2: 5d:4b:f3:f4:3d:ec:5e:b3:74:90:07:ff:94:af:a7: 7c:82:a7:90:8d:99:29:c7:40:b4:fd:79:ee:d2:0e: fc:5c:a9:f5:e7:b7:d1:e7:34:b9:df:aa:85:f3:a2: 8c:ec:1d:ce:bf:27:ba:85:59:4b:9d:2c:f4:e1:12: 7b:ea:97:cd:ec:ca:55:d7:34:39:26:23:a6:8e:e2: 05:2d:26:fb:83:c5:00:5a:68:f9:3d:54:03:bd:9e: f3:9d:19:88:aa:2b:20:61:87:bd:99:0e:0f:68:fd: a6:a6:aa:dd:1d:db:00:46:ba:b6:fe:6d:12:27:33: b3:87:ac:8c:f7:47:a1:7e:3d:5c:5a:22:18:6e:5c: f8:1a:70:9c:0a:a7:d6:73:df:4c:43:79:24:e1:a3: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:30:46:3B:C8:EB:01:CD:A7:DD:C8:06:7F:B7:E4:21:5F:45:2D:45 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5DBGO8jrAc2n3cgGf7fkIV9FLUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.87.22.0/24 195.87.212.0/22 195.87.237.0/24 Signature Algorithm: sha256WithRSAEncryption 47:18:ae:2a:6b:b9:bc:6b:ae:92:7c:5e:b9:9b:c0:fe:f1:56: 51:22:65:c9:06:8a:3d:56:f7:d6:bf:7e:74:ef:3d:4d:15:7a: 2f:31:43:31:60:2d:cd:c8:db:18:61:a4:31:4a:fa:b6:20:39: ef:5a:bc:87:bd:67:a8:97:02:18:c0:65:9a:0d:2e:e9:0d:7d: 7b:fc:92:8c:eb:49:b9:47:2d:6f:43:63:92:1f:da:57:4a:9f: e3:93:8d:a1:c4:ca:81:aa:08:be:00:7b:4f:57:2b:ad:e8:58: cd:78:9e:22:a2:e7:a6:94:48:5e:82:5f:ce:b5:fd:d7:f0:66: 0f:25:ff:3f:f8:a6:8a:8a:95:7a:a9:90:f8:7c:e7:e9:ee:b9: bd:e9:b9:fa:6e:a3:e8:21:5b:16:d6:bd:48:1d:4b:79:e7:4d: c1:5e:34:c8:b9:f1:9e:bd:17:df:e2:16:3f:c3:47:09:bb:09: 18:14:75:c8:63:91:b1:0c:cb:80:a6:67:9e:93:b5:68:67:1f: ae:9d:16:69:52:96:7d:c0:a8:9a:7c:cc:56:18:0d:9e:6c:9e: eb:b6:10:5a:4a:71:06:1e:4b:a7:d7:99:81:3f:5d:54:21:69: f4:fc:49:dc:5b:d4:65:f7:25:ec:62:0e:ba:cf:c4:d9:c7:2c: 79:ad:01:95 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N+jwXJsaD19fUWVhUJMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDMwNDYzYmM4ZWIwMWNkYTdkZGM4MDY3ZmI3ZTQyMTVmNDUyZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nIOvMYQewkeyx1ye+qruupQUj/D hktN6v4AJz8WsV045UHcTAHGBppgMDKIyOoNv9+CuAdYWBXWT616yRC5RU0v4qL2 UmZc/OAASMDzqye98x96oYRNelTOFUHvtZVWiVva+wi1RMJdS/P0Pexes3SQB/+U r6d8gqeQjZkpx0C0/Xnu0g78XKn157fR5zS536qF86KM7B3Ovye6hVlLnSz04RJ7 6pfN7MpV1zQ5JiOmjuIFLSb7g8UAWmj5PVQDvZ7znRmIqisgYYe9mQ4PaP2mpqrd HdsARrq2/m0SJzOzh6yM90ehfj1cWiIYblz4GnCcCqfWc99MQ3kk4aO6NQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOQwRjvI6wHNp93IBn+35CFfRS1FMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvNURCR084anJBYzJuM2NnR2Y3ZmtJVjlGTFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw1cWAwQC w1fUAwQAw1ftMA0GCSqGSIb3DQEBCwUAA4IBAQBHGK4qa7m8a66SfF65m8D+8VZR ImXJBoo9VvfWv3507z1NFXovMUMxYC3NyNsYYaQxSvq2IDnvWryHvWeolwIYwGWa DS7pDX17/JKM60m5Ry1vQ2OSH9pXSp/jk42hxMqBqgi+AHtPVyut6FjNeJ4iouem lEhegl/Otf3X8GYPJf8/+KaKipV6qZD4fOfp7rm96bn6bqPoIVsW1r1IHUt5503B XjTIufGevRff4hY/w0cJuwkYFHXIY5GxDMuApmeek7VoZx+unRZpUpZ9wKiafMxW GA2ebJ7rthBaSnEGHkun15mBP11UIWn0/EncW9Rl9yXsYg66z8TZxyx5rQGV -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:58 2026 by rpki-client