This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/0T8fcmm1hsNnOmqM2PEgoAyliqU.roa File: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (raw, json) Hash identifier: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0= Subject key identifier: D1:3F:1F:72:69:B5:86:C3:67:3A:6A:8C:D8:F1:20:A0:0C:A5:8A:A5 Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215 Certificate serial: 019B7AC8C897AA4A09AFEBA503BF3E82F80A Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/0T8fcmm1hsNnOmqM2PEgoAyliqU.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58192 IP address blocks: 194.5.54.0/24 maxlen: 24 2a13:5e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c8:97:aa:4a:09:af:eb:a5:03:bf:3e:82:f8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d13f1f7269b586c3673a6a8cd8f120a00ca58aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:ae:25:6b:0d:f1:36:3d:7f:79:12:70:79: cd:ee:41:da:b4:26:b7:6a:51:40:8f:5a:02:c7:3f: 4b:8c:0a:4f:ec:48:3f:de:84:28:d2:1a:9c:7e:91: bc:ed:6b:66:a6:a4:34:e8:09:e1:62:d0:97:3e:fa: af:a3:7c:8b:79:20:52:2a:e8:e8:79:1d:13:11:34: 1f:9f:4f:c5:14:eb:64:f4:7a:6f:38:2e:e8:7d:ba: 15:1b:c3:9e:fa:c5:76:e3:1a:f3:38:41:79:06:95: 80:99:f7:0f:c5:55:f8:67:a2:96:24:cc:c4:22:98: 3b:45:22:d9:46:c9:13:6c:77:a7:49:0f:c8:64:1c: 9e:70:3a:94:72:46:6e:d8:56:47:b2:42:d9:aa:c1: ea:9d:3d:03:80:04:a6:e8:b1:db:d9:13:de:bf:dc: 1e:c2:c7:e9:e5:90:a5:1e:97:50:72:58:79:e1:90: c9:38:9b:47:42:74:71:f6:ed:d1:d1:ab:da:e8:2b: 8e:a1:84:0e:fd:26:cb:f0:99:13:ec:9d:73:1a:e8: 4c:3b:66:ac:4a:c1:ce:08:79:fa:f5:eb:02:48:3d: a4:bb:ee:8e:13:42:ed:d9:65:14:5a:aa:b9:11:5d: 6d:a5:d6:a5:2f:ff:a9:4c:b2:bc:19:bc:9e:03:6c: 4b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3F:1F:72:69:B5:86:C3:67:3A:6A:8C:D8:F1:20:A0:0C:A5:8A:A5 X509v3 Authority Key Identifier: keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/0T8fcmm1hsNnOmqM2PEgoAyliqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.54.0/24 IPv6: 2a13:5e40::/29 Signature Algorithm: sha256WithRSAEncryption 2e:d4:c1:a7:88:56:48:64:61:07:47:9d:fb:ba:88:6a:b5:8d: 46:08:da:07:c7:15:65:ac:cd:72:2f:e3:82:82:3c:a6:88:24: 50:b2:7c:ad:47:46:87:16:c4:23:0e:31:43:46:5b:50:a1:4f: 22:cf:ad:07:c7:32:9b:ae:40:9e:5c:c9:f9:da:98:e9:e6:ae: 11:f0:72:eb:1d:75:79:ce:d7:63:af:bc:a8:67:54:e6:72:56: c1:2c:c8:79:e3:2d:81:9a:7b:44:26:be:88:8a:48:01:a8:1b: 1d:df:39:53:d4:fb:f7:d7:ff:a1:0a:66:e5:f5:b2:7d:d0:40: 58:6a:8a:45:45:41:55:0c:10:28:13:6b:6b:b1:02:cf:7c:36: b6:c8:6b:42:e6:2b:eb:b2:47:85:b6:4c:bf:f0:42:74:ed:6e: 87:26:a0:6f:83:79:00:a4:08:48:02:bf:6a:60:40:ba:fe:ac: 27:30:2c:93:2c:50:02:c8:87:47:14:00:37:65:73:6a:96:c3: a0:29:70:de:c2:30:b1:b8:94:29:58:b7:f9:fc:bb:cf:86:19: e6:22:55:cc:5a:bf:ca:5b:cf:57:07:9c:cf:5d:03:9d:a2:cc: 5c:78:c7:58:8c:7f:9f:d1:37:fe:77:5a:6f:5e:18:69:14:a0: b6:b7:58:e0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yMiXqkoJr+ulA78+gvgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yjc5NTA2NjE1MGExYzM2N2RhYmNjZjY5Yzk3MGFiMGM3 MjMyMTUwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTNmMWY3MjY5YjU4NmMzNjczYTZhOGNkOGYxMjBhMDBjYTU4YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTCuJWsN8TY9f3kScHnN7kHatCa3 alFAj1oCxz9LjApP7Eg/3oQo0hqcfpG87WtmpqQ06AnhYtCXPvqvo3yLeSBSKujo eR0TETQfn0/FFOtk9HpvOC7ofboVG8Oe+sV24xrzOEF5BpWAmfcPxVX4Z6KWJMzE Ipg7RSLZRskTbHenSQ/IZByecDqUckZu2FZHskLZqsHqnT0DgASm6LHb2RPev9we wsfp5ZClHpdQclh54ZDJOJtHQnRx9u3R0ava6CuOoYQO/SbL8JkT7J1zGuhMO2as SsHOCHn69esCSD2ku+6OE0Lt2WUUWqq5EV1tpdalL/+pTLK8GbyeA2xLpQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNE/H3JptYbDZzpqjNjxIKAMpYqlMB8GA1UdIwQY MBaAFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjct NTQ3YmU0Y2ZhNDU3LzEvMFQ4ZmNtbTFoc05uT21xTTJQRWdvQXlsaXFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjctNTQ3YmU0Y2ZhNDU3 LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwgU2MA0E AgACMAcDBQMqE15AMA0GCSqGSIb3DQEBCwUAA4IBAQAu1MGniFZIZGEHR537uohq tY1GCNoHxxVlrM1yL+OCgjymiCRQsnytR0aHFsQjDjFDRltQoU8iz60HxzKbrkCe XMn52pjp5q4R8HLrHXV5ztdjr7yoZ1TmclbBLMh54y2BmntEJr6IikgBqBsd3zlT 1Pv31/+hCmbl9bJ90EBYaopFRUFVDBAoE2trsQLPfDa2yGtC5ivrskeFtky/8EJ0 7W6HJqBvg3kApAhIAr9qYEC6/qwnMCyTLFACyIdHFAA3ZXNqlsOgKXDewjCxuJQp WLf5/LvPhhnmIlXMWr/KW89XB5zPXQOdosxceMdYjH+f0Tf+d1pvXhhpFKC2t1jg -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:00 2026 by rpki-client