This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/V2mAUhiuLSdY43WTX18t68JU52U.roa File: V2mAUhiuLSdY43WTX18t68JU52U.roa (raw, json) Hash identifier: 0HD53IzD09TTvFxGJ5/toZ8gNnKRelVvlZQJyDdwGvM= Subject key identifier: 57:69:80:52:18:AE:2D:27:58:E3:75:93:5F:5F:2D:EB:C2:54:E7:65 Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533 Certificate serial: 019B77C763545020800FB1C5757F896D4638 Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/V2mAUhiuLSdY43WTX18t68JU52U.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204240 IP address blocks: 195.85.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:63:54:50:20:80:0f:b1:c5:75:7f:89:6d:46:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5769805218ae2d2758e375935f5f2debc254e765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:a5:0c:1f:4e:29:a5:a7:38:39:89:67:e6: a8:9d:89:a7:12:0a:5b:70:06:1c:c6:98:eb:5b:2d: 25:f7:dd:72:22:4c:d2:73:ba:c4:71:69:4f:18:19: 4a:e5:1c:8d:a2:00:8e:dc:59:37:bc:7a:33:b5:2c: 28:20:2a:7d:ca:65:f5:a3:c6:46:72:db:d1:c8:4f: b3:f2:d6:2b:79:96:91:3b:d3:5a:bf:74:6a:ae:0f: 1b:49:65:e1:74:d4:3b:48:6a:3a:57:b3:a5:eb:02: 9c:f9:3f:9d:0b:f3:15:8d:10:49:b6:20:13:d0:e8: c2:8b:0f:ea:4c:1a:bf:d5:d2:94:4b:24:9d:7c:d5: 5f:01:af:1c:45:da:89:b9:b1:e5:76:60:65:6a:82: fb:1d:ee:a5:8f:4b:fe:3e:71:a0:a2:e9:b9:05:a4: 85:92:1b:bb:bf:54:e4:cb:56:40:58:f9:af:2e:ff: 8a:f3:9e:5f:78:27:a7:dd:3b:b8:7f:a5:3a:5e:3e: 64:ba:c1:cc:49:d0:b6:a9:b3:b1:8c:4b:08:4c:3a: 5a:4c:cf:9e:b9:26:6a:25:e9:93:5f:ba:0f:18:37: e6:ae:f2:fe:d9:1f:e5:cb:cc:52:1e:95:5b:ca:00: 86:2a:49:94:46:f4:c3:fa:aa:42:32:11:1a:4f:75: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:80:52:18:AE:2D:27:58:E3:75:93:5F:5F:2D:EB:C2:54:E7:65 X509v3 Authority Key Identifier: keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/V2mAUhiuLSdY43WTX18t68JU52U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.205.0/24 Signature Algorithm: sha256WithRSAEncryption 47:71:70:20:c6:d6:f7:5e:20:e7:ac:85:8d:f4:e2:d7:59:b3: 9c:4e:d1:73:1b:66:74:7e:9a:36:8f:b1:01:74:fc:56:5d:11: 41:8a:d0:41:47:8a:e2:26:01:fe:db:0a:1e:80:83:7d:60:19: 96:52:31:9b:47:fa:ea:09:89:21:29:30:74:68:1a:64:1f:1d: 34:ff:c0:98:6e:cc:2c:a2:cd:ff:a0:5f:01:03:a3:7e:f4:8a: 7c:e4:b3:20:df:5d:03:89:74:8e:d3:7d:ed:f1:0c:a3:03:2e: 03:99:cf:57:5c:b2:87:da:4d:22:e0:7e:44:dd:41:ed:73:a9: 98:39:0f:70:bb:0a:90:8f:b3:15:41:fa:1d:b9:0a:a9:d4:57: 27:54:77:07:90:0c:af:02:2e:5a:53:44:48:ba:96:25:a4:d0: 21:d4:fd:c2:2c:f9:1c:cc:d9:2a:7a:ff:59:b7:12:7a:4d:f8: e0:23:03:01:37:52:6c:f9:09:f9:47:72:b4:6c:49:e3:76:24: 03:66:fc:c7:9c:7d:58:09:c4:de:3f:a1:a1:93:76:de:9a:db: d8:2f:47:cb:f5:82:12:6a:4a:d7:ef:97:5a:36:90:21:4b:51: e9:f5:5b:d2:b8:f3:0b:e6:f2:76:a6:ae:3e:ea:aa:83:0a:ec: 91:55:1b:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2NUUCCAD7HFdX+JbUY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz M2I1MzMwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzY5ODA1MjE4YWUyZDI3NThlMzc1OTM1ZjVmMmRlYmMyNTRlNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QClDB9OKaWnODmJZ+aonYmnEgpb cAYcxpjrWy0l991yIkzSc7rEcWlPGBlK5RyNogCO3Fk3vHoztSwoICp9ymX1o8ZG ctvRyE+z8tYreZaRO9Nav3Rqrg8bSWXhdNQ7SGo6V7Ol6wKc+T+dC/MVjRBJtiAT 0OjCiw/qTBq/1dKUSySdfNVfAa8cRdqJubHldmBlaoL7He6lj0v+PnGgoum5BaSF khu7v1Tky1ZAWPmvLv+K855feCen3Tu4f6U6Xj5kusHMSdC2qbOxjEsITDpaTM+e uSZqJemTX7oPGDfmrvL+2R/ly8xSHpVbygCGKkmURvTD+qpCMhEaT3XZUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFdpgFIYri0nWON1k19fLevCVOdlMB8GA1UdIwQY MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt NDE0OTA4NzJmYzRlLzEvVjJtQVVoaXVMU2RZNDNXVFgxOHQ2OEpVNTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XNMA0G CSqGSIb3DQEBCwUAA4IBAQBHcXAgxtb3XiDnrIWN9OLXWbOcTtFzG2Z0fpo2j7EB dPxWXRFBitBBR4riJgH+2woegIN9YBmWUjGbR/rqCYkhKTB0aBpkHx00/8CYbsws os3/oF8BA6N+9Ip85LMg310DiXSO033t8QyjAy4Dmc9XXLKH2k0i4H5E3UHtc6mY OQ9wuwqQj7MVQfoduQqp1FcnVHcHkAyvAi5aU0RIupYlpNAh1P3CLPkczNkqev9Z txJ6TfjgIwMBN1Js+Qn5R3K0bEnjdiQDZvzHnH1YCcTeP6Ghk3bemtvYL0fL9YIS akrX75daNpAhS1Hp9VvSuPML5vJ2pq4+6qqDCuyRVRvD -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:20 2026 by rpki-client