This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/x0heqVIS4ldbm4VvDuHpvjwdG18.roa File: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (raw, json) Hash identifier: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y= Subject key identifier: C7:48:5E:A9:52:12:E2:57:5B:9B:85:6F:0E:E1:E9:BE:3C:1D:1B:5F Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E9C8703D453001E3F77424CB9FF0 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/x0heqVIS4ldbm4VvDuHpvjwdG18.roa Signing time: Thu 01 Jan 2026 22:18:18 +0000 ROA not before: Thu 01 Jan 2026 22:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203331 IP address blocks: 82.144.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e9:c8:70:3d:45:30:01:e3:f7:74:24:cb:9f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7485ea95212e2575b9b856f0ee1e9be3c1d1b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:f2:bd:ec:06:1d:d6:7b:ed:79:0b:40:58: 11:83:b6:4a:7b:8c:19:32:e2:80:79:86:52:ef:ab: 11:cf:d7:40:77:8b:d7:ff:98:8c:25:f0:b4:09:6e: cc:7a:5a:18:0e:e2:d6:a0:9f:21:f5:c8:68:26:7e: d5:40:26:31:96:4b:df:ec:9a:e8:26:2f:2e:b4:94: ff:48:e6:f6:fe:15:32:81:89:9c:a0:1a:da:3a:cb: b7:d2:8a:4e:87:6a:cc:a6:91:49:d5:98:b1:d4:4c: 46:bc:45:90:eb:e2:69:02:a0:b4:87:36:1e:6e:da: 50:b4:e4:83:1e:2f:2c:0d:7c:6e:dc:f7:bd:3f:5b: 37:c7:f6:42:b4:2a:48:4f:53:12:ee:b8:7f:79:a0: fd:54:ab:51:2f:5f:9f:af:83:28:f8:1b:3a:5a:c9: a1:20:af:f7:1a:20:18:d9:39:7d:9d:3b:09:29:1b: 81:80:3a:2c:1c:52:66:0d:f1:a5:88:dd:d2:4e:7e: 57:ed:52:f3:41:30:fb:74:eb:a8:f4:b8:be:e8:9e: 29:af:df:e6:e6:64:bc:be:01:c7:53:fa:6a:c5:5d: d5:40:36:ec:62:6e:dc:6e:76:00:c1:8f:71:d8:d0: c6:c4:7b:9d:71:49:c0:cd:2a:6d:5a:ca:1e:31:f5: 42:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:48:5E:A9:52:12:E2:57:5B:9B:85:6F:0E:E1:E9:BE:3C:1D:1B:5F X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/x0heqVIS4ldbm4VvDuHpvjwdG18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.144.186.0/24 Signature Algorithm: sha256WithRSAEncryption 50:39:3f:bf:15:30:61:e4:7c:4e:37:cc:99:6d:0f:ed:e7:20: 83:71:52:51:3b:e5:0c:91:16:cb:b3:b4:65:41:c4:3f:22:ac: 50:45:48:72:db:0b:f0:63:8b:89:15:f8:9a:84:3d:51:aa:a8: 0c:39:6f:b6:4e:4f:00:22:8d:9e:df:f0:29:95:92:2c:21:cd: 91:13:cf:98:f3:1a:02:54:d6:13:fb:6e:ef:32:43:1b:e1:e6: 5a:b2:09:0f:3b:94:90:f1:b9:46:7b:20:dd:31:0e:5c:ad:a7: 55:de:01:f3:c1:cf:89:07:f6:66:f4:20:3a:a1:a0:be:9c:6a: 0b:cf:1a:77:bf:01:2a:ad:16:96:a4:e7:47:3e:80:1a:20:38: 94:e3:b9:b9:7e:3b:cb:a4:9b:47:46:10:9b:08:b8:45:b7:14: aa:db:c1:4b:4b:40:9c:ab:cc:fa:43:ad:8c:70:74:10:7a:33: e4:e4:07:15:4b:34:30:ca:a1:79:75:2a:a2:c7:15:9e:f0:51: aa:b1:20:b7:aa:49:fa:db:29:e2:65:ca:ee:24:9b:0f:2b:20: 19:bc:6a:ee:f7:1f:c8:72:71:53:13:c5:a3:13:2c:09:b7:0f: 67:6c:78:72:65:64:e0:6f:bf:a0:b6:4c:c9:de:a2:76:58:af: d2:af:0d:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+nIcD1FMAHj93Qky5/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzQ4NWVhOTUyMTJlMjU3NWI5Yjg1NmYwZWUxZTliZTNjMWQxYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6PyvewGHdZ77XkLQFgRg7ZKe4wZ MuKAeYZS76sRz9dAd4vX/5iMJfC0CW7MeloYDuLWoJ8h9choJn7VQCYxlkvf7Jro Ji8utJT/SOb2/hUygYmcoBraOsu30opOh2rMppFJ1Zix1ExGvEWQ6+JpAqC0hzYe btpQtOSDHi8sDXxu3Pe9P1s3x/ZCtCpIT1MS7rh/eaD9VKtRL1+fr4Mo+Bs6Wsmh IK/3GiAY2Tl9nTsJKRuBgDosHFJmDfGliN3STn5X7VLzQTD7dOuo9Li+6J4pr9/m 5mS8vgHHU/pqxV3VQDbsYm7cbnYAwY9x2NDGxHudcUnAzSptWsoeMfVCKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMdIXqlSEuJXW5uFbw7h6b48HRtfMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEveDBoZXFWSVM0bGRibTRWdkR1SHB2andkRzE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpC6MA0G CSqGSIb3DQEBCwUAA4IBAQBQOT+/FTBh5HxON8yZbQ/t5yCDcVJRO+UMkRbLs7Rl QcQ/IqxQRUhy2wvwY4uJFfiahD1RqqgMOW+2Tk8AIo2e3/AplZIsIc2RE8+Y8xoC VNYT+27vMkMb4eZasgkPO5SQ8blGeyDdMQ5cradV3gHzwc+JB/Zm9CA6oaC+nGoL zxp3vwEqrRaWpOdHPoAaIDiU47m5fjvLpJtHRhCbCLhFtxSq28FLS0Ccq8z6Q62M cHQQejPk5AcVSzQwyqF5dSqixxWe8FGqsSC3qkn62yniZcruJJsPKyAZvGru9x/I cnFTE8WjEywJtw9nbHhyZWTgb7+gtkzJ3qJ2WK/Srw2Y -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:04 2026 by rpki-client