This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/1Zw3dOHQdTR7vigHBw9Gl95CsWA.roa File: 1Zw3dOHQdTR7vigHBw9Gl95CsWA.roa (raw, json) Hash identifier: Xi/Bb5DmK6ae5rm5BeoWF06YJy3In/vvvYvcO432dxg= Subject key identifier: D5:9C:37:74:E1:D0:75:34:7B:BE:28:07:07:0F:46:97:DE:42:B1:60 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019A96E27FE359B0449D57D0A5988F447ED6 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/1Zw3dOHQdTR7vigHBw9Gl95CsWA.roa Signing time: Tue 18 Nov 2025 12:13:37 +0000 ROA not before: Tue 18 Nov 2025 12:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208905 IP address blocks: 194.76.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:e2:7f:e3:59:b0:44:9d:57:d0:a5:98:8f:44:7e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Nov 18 12:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d59c3774e1d075347bbe2807070f4697de42b160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:c5:48:39:a3:c3:e5:61:ed:87:05:da:ce: 9c:fc:8b:9b:fc:52:64:b5:75:27:75:37:4c:85:f1: e8:03:97:17:5c:1b:5f:20:d8:20:1a:78:e7:58:d9: 28:c9:ea:42:92:30:44:88:b2:1d:da:b5:ef:6f:46: 1c:99:e2:5e:54:0d:fa:8c:46:3e:2a:f9:1f:77:8f: 0e:6b:07:e4:7a:d1:13:4b:b5:c8:c5:e9:94:8d:8a: 81:70:83:ec:84:f2:0f:81:5f:d6:ae:53:8e:e0:a4: 8d:85:a3:9d:18:29:1a:56:0e:d3:c4:87:ae:95:94: f9:96:a1:2f:68:5a:51:4b:d6:bc:20:46:cc:79:f2: f2:6d:71:ec:41:05:18:99:76:12:c5:30:6d:06:0e: 62:dd:c9:0d:5c:33:84:7d:7c:23:b6:e4:89:df:63: 56:07:e9:4f:d0:a7:ca:61:3c:10:12:9a:26:20:a8: 21:ce:fb:47:25:38:a2:6e:e3:cd:28:5f:f5:11:a6: b3:cc:2d:8e:7b:7a:4b:0e:a4:e4:71:80:36:e0:37: ad:e8:1c:4c:9f:12:7c:4d:0a:8c:c4:3f:f3:d1:ce: 43:4e:9d:13:08:53:5d:e4:ce:0d:e7:62:43:59:f8: 32:63:cf:61:d0:12:c9:06:91:49:91:4b:9f:0a:f4: a1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9C:37:74:E1:D0:75:34:7B:BE:28:07:07:0F:46:97:DE:42:B1:60 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/1Zw3dOHQdTR7vigHBw9Gl95CsWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.115.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:5e:92:e5:49:f6:e1:61:62:19:33:9f:68:88:48:e6:8e:b1: 34:8e:5a:a7:9f:05:86:93:40:32:51:2f:90:b5:dd:9f:e3:a5: c9:be:53:32:20:f6:79:5a:f2:f8:a9:87:7c:b5:b7:e7:fd:8d: b5:34:81:bd:60:37:2c:3d:26:f0:8c:ed:64:3f:c6:0e:72:10: 5e:c9:90:b3:c0:7c:74:44:ba:f2:ef:f5:67:09:c8:c5:13:fa: e5:37:b6:6a:d8:2e:01:9f:fc:20:44:72:5f:91:32:16:69:f8: ae:34:84:af:45:a7:d7:f5:44:a5:f1:cf:f7:dd:8a:c8:75:a0: 83:67:e1:cc:34:1a:75:a7:49:83:c6:a5:f7:26:d9:f9:cc:f7: 1f:e7:39:83:19:e8:1e:a6:46:b4:06:3e:c9:50:ce:b0:c1:ce: d3:d6:02:ad:b5:0d:07:f0:53:3e:32:ea:3e:1c:92:41:43:0c: f1:23:85:37:d1:5a:3f:1c:a4:0e:17:e6:37:50:8b:a5:71:cd: 6a:7a:76:eb:22:4a:2a:44:e4:f5:00:25:a3:c5:c3:3a:1f:36: 99:77:43:e8:c6:92:cd:a3:47:23:38:3d:e9:4b:38:d2:98:d2: af:66:41:47:e1:bc:4c:36:ce:30:de:ac:9a:dd:b0:81:5f:b0: 10:fa:83:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqW4n/jWbBEnVfQpZiPRH7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUxMTE4MTIxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTljMzc3NGUxZDA3NTM0N2JiZTI4MDcwNzBmNDY5N2RlNDJiMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLrFSDmjw+Vh7YcF2s6c/Iub/FJk tXUndTdMhfHoA5cXXBtfINggGnjnWNkoyepCkjBEiLId2rXvb0YcmeJeVA36jEY+ Kvkfd48OawfketETS7XIxemUjYqBcIPshPIPgV/WrlOO4KSNhaOdGCkaVg7TxIeu lZT5lqEvaFpRS9a8IEbMefLybXHsQQUYmXYSxTBtBg5i3ckNXDOEfXwjtuSJ32NW B+lP0KfKYTwQEpomIKghzvtHJTiibuPNKF/1EaazzC2Oe3pLDqTkcYA24Det6BxM nxJ8TQqMxD/z0c5DTp0TCFNd5M4N52JDWfgyY89h0BLJBpFJkUufCvShKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNWcN3Th0HU0e74oBwcPRpfeQrFgMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvMVp3M2RPSFFkVFI3dmlnSEJ3OUdsOTVDc1dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkxzMA0G CSqGSIb3DQEBCwUAA4IBAQAdXpLlSfbhYWIZM59oiEjmjrE0jlqnnwWGk0AyUS+Q td2f46XJvlMyIPZ5WvL4qYd8tbfn/Y21NIG9YDcsPSbwjO1kP8YOchBeyZCzwHx0 RLry7/VnCcjFE/rlN7Zq2C4Bn/wgRHJfkTIWafiuNISvRafX9USl8c/33YrIdaCD Z+HMNBp1p0mDxqX3Jtn5zPcf5zmDGegepka0Bj7JUM6wwc7T1gKttQ0H8FM+Muo+ HJJBQwzxI4U30Vo/HKQOF+Y3UIulcc1qenbrIkoqROT1ACWjxcM6HzaZd0PoxpLN o0cjOD3pSzjSmNKvZkFH4bxMNs4w3qya3bCBX7AQ+oNy -----END CERTIFICATE-----Generated at Sat Dec 6 18:48:01 2025 by rpki-client