This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/D4so7F4iJQ3ao6dIXFSQYC-XGbE.roa File: D4so7F4iJQ3ao6dIXFSQYC-XGbE.roa (raw, json) Hash identifier: gqWDVnk0tUa5bFlFT+UYPIPkFsYBe4H7LkGhaI+lIUo= Subject key identifier: 0F:8B:28:EC:5E:22:25:0D:DA:A3:A7:48:5C:54:90:60:2F:97:19:B1 Certificate issuer: /CN=318cbfffcd21127de3628697598db0c2d9e11351 Certificate serial: 019B7A5ABE3EAE151BC61038620E746C1A74 Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/D4so7F4iJQ3ao6dIXFSQYC-XGbE.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42721 IP address blocks: 194.110.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:be:3e:ae:15:1b:c6:10:38:62:0e:74:6c:1a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351 Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f8b28ec5e22250ddaa3a7485c5490602f9719b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:f5:44:be:e5:d3:1d:fc:ed:e9:73:c2:2e: 6b:38:4c:0d:46:10:ef:79:10:31:d8:c2:6f:0b:60: da:56:7b:3e:60:4d:22:7f:d7:97:36:f6:15:4c:cd: 90:73:92:4a:51:82:fb:03:67:fb:80:4a:0e:dc:ab: fc:93:7c:b2:f1:56:31:99:78:fb:f5:32:e9:ff:26: 6e:f4:5b:4d:dd:60:3b:61:d9:43:07:df:64:45:1e: 08:49:1f:f9:be:9c:3a:78:98:99:6d:f0:74:24:19: f1:99:19:a4:a9:a2:bf:e3:3c:65:be:58:ec:87:ec: e5:6f:8a:5c:bf:4c:d1:ac:d6:5a:8f:25:b0:21:47: cd:f8:70:0b:55:73:54:44:3f:6a:17:de:c6:01:05: 89:34:00:fa:33:e4:37:52:5e:d1:26:92:32:89:40: 6a:24:39:3c:96:e0:7d:16:d6:68:97:71:82:3d:dc: f0:b0:9b:b7:c1:c0:ea:59:c3:8d:84:f9:86:e2:d2: 28:d8:c3:21:9e:0f:11:d2:78:8c:30:ea:3c:8f:1d: f5:39:30:81:e5:12:9f:44:c7:3e:d3:17:83:5d:a1: 81:fd:32:50:59:c0:a9:92:e7:1d:88:b8:26:df:cc: 42:1f:e8:0e:a5:a1:e3:4d:bd:6c:8c:da:c1:34:67: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8B:28:EC:5E:22:25:0D:DA:A3:A7:48:5C:54:90:60:2F:97:19:B1 X509v3 Authority Key Identifier: keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/D4so7F4iJQ3ao6dIXFSQYC-XGbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.205.0/24 Signature Algorithm: sha256WithRSAEncryption 84:61:1c:f8:62:25:8c:99:30:76:08:77:ee:7f:5d:de:35:1b: 01:f2:90:3e:b3:a3:9b:75:5d:5e:69:4d:21:ef:d2:47:ee:4a: 1d:78:ac:31:43:9f:ea:0c:d9:ba:05:5f:41:01:d9:cb:3a:02: 44:55:49:3c:8f:fe:1d:01:65:70:73:f1:57:b4:86:d8:cc:e2: 22:cb:ee:4f:7a:40:2f:74:e4:2f:04:d6:c7:1d:7a:28:4b:5e: 78:03:f1:e1:c1:27:ab:58:29:3b:5e:cb:44:af:2c:ec:c4:a9: b5:b3:d1:ac:25:3e:8b:b8:df:92:05:15:64:5d:6f:d2:bd:9f: 94:c0:d2:83:e3:39:3c:17:5c:8a:80:6e:08:b6:3e:e9:83:23: 7a:ab:d5:0a:ba:91:3c:35:88:2c:ef:98:f4:f3:61:57:80:5a: 1e:c8:65:b0:bc:8a:4e:f0:1b:f5:d2:a5:fd:32:6f:77:45:2a: f2:ac:76:0a:22:a3:b3:72:b4:38:5e:f9:50:ea:8b:73:f0:81: 7a:69:af:3d:66:e8:63:f3:c5:75:cf:8b:6d:d5:7a:06:76:d4: db:d5:80:62:45:a8:67:22:86:7b:e7:88:36:25:a3:56:02:94: c7:04:c5:60:e5:6e:81:49:63:48:8e:fd:2e:cf:ea:c7:36:10: 9a:90:bc:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wr4+rhUbxhA4Yg50bBp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOGNiZmZmY2QyMTEyN2RlMzYyODY5NzU5OGRiMGMyZDll MTEzNTEwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjhiMjhlYzVlMjIyNTBkZGFhM2E3NDg1YzU0OTA2MDJmOTcxOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rP1RL7l0x387elzwi5rOEwNRhDv eRAx2MJvC2DaVns+YE0if9eXNvYVTM2Qc5JKUYL7A2f7gEoO3Kv8k3yy8VYxmXj7 9TLp/yZu9FtN3WA7YdlDB99kRR4ISR/5vpw6eJiZbfB0JBnxmRmkqaK/4zxlvljs h+zlb4pcv0zRrNZajyWwIUfN+HALVXNURD9qF97GAQWJNAD6M+Q3Ul7RJpIyiUBq JDk8luB9FtZol3GCPdzwsJu3wcDqWcONhPmG4tIo2MMhng8R0niMMOo8jx31OTCB 5RKfRMc+0xeDXaGB/TJQWcCpkucdiLgm38xCH+gOpaHjTb1sjNrBNGdH0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+LKOxeIiUN2qOnSFxUkGAvlxmxMB8GA1UdIwQY MBaAFDGMv//NIRJ942KGl1mNsMLZ4RNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVl5X184MGhFbjNqWW9hWFdZMnd3dG5oRTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMGEzZjktOTk3YS00MmE4LWFhNDct NGJiNzFlMjc0YTVjLzEvRDRzbzdGNGlKUTNhbzZkSVhGU1FZQy1YR2JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kMGEzZjktOTk3YS00MmE4LWFhNDctNGJiNzFlMjc0YTVj LzEvTVl5X184MGhFbjNqWW9hWFdZMnd3dG5oRTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7NMA0G CSqGSIb3DQEBCwUAA4IBAQCEYRz4YiWMmTB2CHfuf13eNRsB8pA+s6ObdV1eaU0h 79JH7kodeKwxQ5/qDNm6BV9BAdnLOgJEVUk8j/4dAWVwc/FXtIbYzOIiy+5PekAv dOQvBNbHHXooS154A/HhwSerWCk7XstEryzsxKm1s9GsJT6LuN+SBRVkXW/SvZ+U wNKD4zk8F1yKgG4Itj7pgyN6q9UKupE8NYgs75j082FXgFoeyGWwvIpO8Bv10qX9 Mm93RSryrHYKIqOzcrQ4XvlQ6otz8IF6aa89Zuhj88V1z4tt1XoGdtTb1YBiRahn IoZ754g2JaNWApTHBMVg5W6BSWNIjv0uz+rHNhCakLwH -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:19 2026 by rpki-client