This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/t0_-P-p1FyY1ODpwO0YUkJBxj8c.roa File: t0_-P-p1FyY1ODpwO0YUkJBxj8c.roa (raw, json) Hash identifier: g7MSzOZksmuKAgTRnCXrR4HOBteag1BykLmwHFt8BuA= Subject key identifier: B7:4F:FE:3F:EA:75:17:26:35:38:3A:70:3B:46:14:90:90:71:8F:C7 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED1F2CB064E3CE1CBCD2A420ECFB82 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/t0_-P-p1FyY1ODpwO0YUkJBxj8c.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200188 IP address blocks: 194.181.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1f:2c:b0:64:e3:ce:1c:bc:d2:a4:20:ec:fb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b74ffe3fea75172635383a703b46149090718fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:24:76:c8:e8:a7:7e:40:34:30:6c:77:05: 37:14:dc:31:4c:cf:76:f8:ec:cf:22:15:04:e7:90: 68:58:f5:66:ab:13:3c:fd:a7:19:75:a3:0f:ec:7d: 0e:22:38:00:63:da:12:c5:97:eb:f6:8d:0b:28:da: 06:b4:de:d3:0c:a5:7d:29:33:28:09:1f:f9:2c:a2: 6c:ff:75:8a:26:bd:f9:3e:74:bf:2f:ad:ea:72:f3: 94:d3:d8:19:12:da:5c:a6:a1:91:bd:65:40:38:85: c7:07:29:e7:9a:0f:71:0e:e8:9f:9b:9c:45:b6:ec: 36:83:bc:1b:2a:4c:06:60:d5:66:d2:01:e8:ae:a2: 08:e9:24:5a:48:19:02:8f:30:f2:6a:06:fd:0f:38: 38:85:ef:05:e0:5b:1f:ec:e4:d4:86:27:0b:75:9f: e1:71:7f:f9:70:ba:88:f6:af:ae:57:fb:8b:c8:d0: c3:e3:f4:f9:bd:17:74:92:20:8c:ac:bd:db:e7:f4: 94:43:99:b3:27:46:27:ba:11:f1:e5:ab:44:2b:5f: 6d:93:ed:95:fc:03:04:34:00:71:28:2e:54:e1:f4: 69:05:87:b5:62:5a:ac:79:59:1b:e8:bb:47:c9:50: 11:92:b3:69:29:66:d2:f9:ff:3c:45:45:c4:72:9c: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4F:FE:3F:EA:75:17:26:35:38:3A:70:3B:46:14:90:90:71:8F:C7 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/t0_-P-p1FyY1ODpwO0YUkJBxj8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.181.60.0/24 Signature Algorithm: sha256WithRSAEncryption 45:dd:70:21:1d:c9:47:c0:df:87:e0:17:6e:98:bb:aa:71:73: 5d:cd:43:f5:47:42:c1:0a:32:0d:e7:bf:90:04:e7:e4:e0:1c: 1b:e7:7a:a1:65:19:d3:d3:db:d9:ee:e9:f1:23:31:c3:c6:e0: 83:c2:3c:cb:af:f5:ac:59:0d:2c:93:5f:1d:21:8d:4d:c7:51: 39:93:ac:8a:2c:22:1a:02:81:d0:47:b5:48:b1:02:db:fd:75: f3:7f:d8:0a:99:d5:b2:03:9e:e6:5b:a9:91:3a:1a:4e:54:84: 11:38:87:98:78:c0:2e:78:77:3b:a2:4b:67:fb:e0:2b:c8:c5: 87:67:b2:b6:8b:28:ce:b7:e8:97:a1:64:6c:f1:0e:52:27:72: f6:6f:ca:d2:4d:fd:bd:e7:c9:48:94:a4:5c:d9:96:ca:8c:ef: 3b:2a:e2:33:a2:b7:98:aa:c0:fc:91:52:8b:93:bd:9d:5c:42: dc:c0:fa:9b:a8:16:b4:0e:e3:da:10:c6:7b:d9:7f:d5:55:4f: 12:45:99:2a:8b:cf:56:56:26:95:99:40:87:65:52:97:fe:0f: e3:59:90:17:80:d9:59:fd:d3:72:0b:6b:3e:3c:97:ab:f5:bb: 61:5f:19:80:ec:15:50:b2:e7:56:8a:d3:1e:09:2c:67:8f:2d: 1d:39:7a:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57R8ssGTjzhy80qQg7PuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzRmZmUzZmVhNzUxNzI2MzUzODNhNzAzYjQ2MTQ5MDkwNzE4ZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrIkdsjop35ANDBsdwU3FNwxTM92 +OzPIhUE55BoWPVmqxM8/acZdaMP7H0OIjgAY9oSxZfr9o0LKNoGtN7TDKV9KTMo CR/5LKJs/3WKJr35PnS/L63qcvOU09gZEtpcpqGRvWVAOIXHBynnmg9xDuifm5xF tuw2g7wbKkwGYNVm0gHorqII6SRaSBkCjzDyagb9Dzg4he8F4Fsf7OTUhicLdZ/h cX/5cLqI9q+uV/uLyNDD4/T5vRd0kiCMrL3b5/SUQ5mzJ0YnuhHx5atEK19tk+2V /AMENABxKC5U4fRpBYe1YlqseVkb6LtHyVARkrNpKWbS+f88RUXEcpzZXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdP/j/qdRcmNTg6cDtGFJCQcY/HMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvdDBfLVAtcDFGeVkxT0Rwd08wWVVrSkJ4ajhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrU8MA0G CSqGSIb3DQEBCwUAA4IBAQBF3XAhHclHwN+H4BdumLuqcXNdzUP1R0LBCjIN57+Q BOfk4Bwb53qhZRnT09vZ7unxIzHDxuCDwjzLr/WsWQ0sk18dIY1Nx1E5k6yKLCIa AoHQR7VIsQLb/XXzf9gKmdWyA57mW6mROhpOVIQROIeYeMAueHc7oktn++AryMWH Z7K2iyjOt+iXoWRs8Q5SJ3L2b8rSTf2958lIlKRc2ZbKjO87KuIzoreYqsD8kVKL k72dXELcwPqbqBa0DuPaEMZ72X/VVU8SRZkqi89WViaVmUCHZVKX/g/jWZAXgNlZ /dNyC2s+PJer9bthXxmA7BVQsudWitMeCSxnjy0dOXoq -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:28 2026 by rpki-client