This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/0GQt42msx4vizl7HtWHLfw5qSa8.roa File: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (raw, json) Hash identifier: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA= Subject key identifier: D0:64:2D:E3:69:AC:C7:8B:E2:CE:5E:C7:B5:61:CB:7F:0E:6A:49:AF Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115 Certificate serial: 019B7DCB1EC97D7C127342D7C576AF8F43CE Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/0GQt42msx4vizl7HtWHLfw5qSa8.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50083 IP address blocks: 185.202.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1e:c9:7d:7c:12:73:42:d7:c5:76:af:8f:43:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0642de369acc78be2ce5ec7b561cb7f0e6a49af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:91:99:b6:03:dd:d3:02:e7:82:82:86:a1: 5a:4c:22:87:a8:17:6d:6e:b0:db:78:de:8b:cd:aa: 80:3f:45:d4:ca:34:ef:ed:b6:a7:51:30:b9:b5:72: e9:55:ac:c4:ae:1a:04:17:c2:b5:60:fb:29:9d:bf: c9:7d:bf:cd:17:9a:ef:59:df:b0:5b:72:3b:84:0d: 74:fd:6a:75:ba:b1:67:7b:69:aa:f5:b8:17:84:00: f5:68:f3:32:a1:b7:c5:d1:ab:d9:b4:72:55:1a:a4: 36:69:78:96:70:1b:f9:23:54:9e:3f:68:35:b4:fe: 44:8e:f9:e7:72:e8:86:09:16:53:f9:0a:df:34:5a: 43:05:4f:8a:76:37:12:b6:e5:f7:98:e9:ae:5b:34: 25:cf:b6:f5:e4:1b:68:08:91:f1:ab:74:a0:6f:e7: 8e:94:19:cb:36:bf:f7:9d:6c:d3:27:78:6c:30:d0: b6:99:08:d4:46:92:de:90:00:5b:ef:d2:56:89:05: 4c:ee:cc:72:e5:4b:a4:e4:08:75:ba:c3:20:d9:94: 1a:f4:2d:b2:04:6e:05:64:0a:a0:77:bb:10:04:70: 81:76:b2:a2:3f:0f:1d:54:b9:e1:0e:10:d3:ad:0a: 58:94:f4:ef:fe:8c:92:02:d5:14:ee:c0:94:b3:ff: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:64:2D:E3:69:AC:C7:8B:E2:CE:5E:C7:B5:61:CB:7F:0E:6A:49:AF X509v3 Authority Key Identifier: keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/0GQt42msx4vizl7HtWHLfw5qSa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.224.0/24 Signature Algorithm: sha256WithRSAEncryption 39:f0:23:2a:03:9c:6a:58:34:e3:7e:f4:dd:ec:9d:99:ca:24: 04:15:07:10:ee:03:a7:1d:08:19:44:35:d4:b9:a4:b2:7a:43: cb:f2:c8:77:b9:77:92:d6:8e:d6:2b:23:7e:34:92:ca:36:b8: a1:5f:00:66:b6:e3:f9:b5:77:27:3e:3f:0a:ef:e6:8b:8d:2e: 77:4e:b1:58:2d:c8:ec:29:7b:d9:4d:ed:c7:22:dc:ed:aa:ee: 6d:6d:1e:92:a1:10:be:6e:d5:7f:bb:ec:29:4e:b9:2d:67:71: 7a:2e:6a:9c:16:9b:5c:b7:b8:ee:65:71:cb:a4:b8:dc:9f:76: b6:d7:dc:9d:08:6d:58:ab:d8:ac:ab:4e:34:d6:ab:2c:ba:bb: 88:d1:40:b7:1e:89:e9:5a:3c:0f:4f:d5:41:66:22:f1:03:89: 36:ba:d9:69:dd:61:a3:43:a3:17:c0:10:86:4b:81:07:50:19: f9:69:67:5b:88:11:4b:5e:fb:2e:92:dd:23:19:55:cb:be:2a: ae:0f:e1:d1:97:3c:06:47:fb:e3:09:fc:20:78:dc:5c:57:e2: 61:23:5b:2b:0b:1f:6e:6d:7a:5f:03:8a:eb:c4:4b:97:90:ff: 6f:ed:d8:65:36:79:00:b2:82:92:58:6f:10:77:0e:6a:e0:29: 8e:39:31:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yx7JfXwSc0LXxXavj0POMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZGQwZDcxNWU5N2ZiOTFmNzhkMDdmZTEwNjk2ZGE2MDE2 MDUxMTUwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDY0MmRlMzY5YWNjNzhiZTJjZTVlYzdiNTYxY2I3ZjBlNmE0OWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstWRmbYD3dMC54KChqFaTCKHqBdt brDbeN6LzaqAP0XUyjTv7banUTC5tXLpVazErhoEF8K1YPspnb/Jfb/NF5rvWd+w W3I7hA10/Wp1urFne2mq9bgXhAD1aPMyobfF0avZtHJVGqQ2aXiWcBv5I1SeP2g1 tP5EjvnncuiGCRZT+QrfNFpDBU+KdjcStuX3mOmuWzQlz7b15BtoCJHxq3Sgb+eO lBnLNr/3nWzTJ3hsMNC2mQjURpLekABb79JWiQVM7sxy5Uuk5Ah1usMg2ZQa9C2y BG4FZAqgd7sQBHCBdrKiPw8dVLnhDhDTrQpYlPTv/oySAtUU7sCUs/+kLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNBkLeNprMeL4s5ex7Vhy38OakmvMB8GA1UdIwQY MBaAFM7dDXFel/uR940H/hBpbaYBYFEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMt YWFmMzIxNzFlYWExLzEvMEdRdDQybXN4NHZpemw3SHRXSExmdzVxU2E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMtYWFmMzIxNzFlYWEx LzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucrgMA0G CSqGSIb3DQEBCwUAA4IBAQA58CMqA5xqWDTjfvTd7J2ZyiQEFQcQ7gOnHQgZRDXU uaSyekPL8sh3uXeS1o7WKyN+NJLKNrihXwBmtuP5tXcnPj8K7+aLjS53TrFYLcjs KXvZTe3HItztqu5tbR6SoRC+btV/u+wpTrktZ3F6LmqcFptct7juZXHLpLjcn3a2 19ydCG1Yq9isq0401qssuruI0UC3HonpWjwPT9VBZiLxA4k2utlp3WGjQ6MXwBCG S4EHUBn5aWdbiBFLXvsukt0jGVXLviquD+HRlzwGR/vjCfwgeNxcV+JhI1srCx9u bXpfA4rrxEuXkP9v7dhlNnkAsoKSWG8Qdw5q4CmOOTH/ -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:15 2026 by rpki-client