This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/0M06EybESD0rwYWfwqrVRbpIyv4.roa File: 0M06EybESD0rwYWfwqrVRbpIyv4.roa (raw, json) Hash identifier: vcttDWnGAt8CJjLo47y5yaYR7r334apl/y9yFk3ErkE= Subject key identifier: D0:CD:3A:13:26:C4:48:3D:2B:C1:85:9F:C2:AA:D5:45:BA:48:CA:FE Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Certificate serial: 019B7AC7D53523E37445A8A09393A5B142A8 Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/0M06EybESD0rwYWfwqrVRbpIyv4.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 80.89.176.0/20 maxlen: 24 194.26.4.0/22 maxlen: 24 2a06:b940::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d5:35:23:e3:74:45:a8:a0:93:93:a5:b1:42:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0cd3a1326c4483d2bc1859fc2aad545ba48cafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:b3:64:6a:e2:f1:12:7f:12:67:bc:c4:80: 77:fc:af:83:35:3f:b4:49:6f:61:cb:05:6c:1c:c5: 32:79:cc:f2:e0:10:74:88:bf:ab:06:a0:7d:b4:a4: c4:8b:fe:ee:df:05:31:85:bc:2a:b3:2c:86:cc:aa: 8c:48:00:2f:6e:d0:e5:c2:d8:7a:e0:d5:7d:72:7a: 1b:82:47:d4:99:79:20:e5:71:ee:f2:7b:99:46:c9: 80:1a:06:4f:b2:df:03:17:67:76:80:b8:1e:c5:fc: c6:88:9f:b2:6f:87:b2:46:86:90:e3:1a:75:de:de: 1a:3e:9c:ee:84:e1:f7:51:42:ac:c5:41:e6:11:fc: 9f:50:d4:72:99:96:e0:b2:36:74:a9:44:ea:08:f9: fa:ca:af:26:9e:0e:88:75:df:b3:c5:f2:0a:b3:5b: 92:61:44:a7:41:c7:11:87:75:c0:5a:7c:02:1a:98: 3c:fc:54:04:4c:9c:56:08:19:db:c9:5f:47:d1:58: 84:ed:4a:20:83:f7:ba:e1:0c:8c:61:66:fb:8c:43: 78:c1:dd:2d:b6:94:e2:54:45:9e:df:0e:9b:8c:f6: 25:97:d5:a7:5f:13:49:6e:e8:82:4b:e4:db:ad:26: 56:d5:25:52:e3:53:39:b9:1f:9d:df:ea:85:5f:d2: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CD:3A:13:26:C4:48:3D:2B:C1:85:9F:C2:AA:D5:45:BA:48:CA:FE X509v3 Authority Key Identifier: keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/0M06EybESD0rwYWfwqrVRbpIyv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.176.0/20 194.26.4.0/22 IPv6: 2a06:b940::/29 Signature Algorithm: sha256WithRSAEncryption 35:e0:0c:89:38:2f:f4:34:a7:d8:04:bf:df:19:19:68:80:a5: 4b:78:d8:ef:88:25:66:fc:46:30:d2:8d:c5:42:10:f8:dd:e1: 83:64:04:bd:ec:be:69:55:85:57:c5:cc:5f:f2:04:55:e3:fb: fb:ae:d4:bb:52:7f:ad:58:b3:cf:7f:53:4b:e5:da:9b:7b:97: 94:13:ac:1e:44:f1:dd:5e:cc:74:eb:1f:45:f9:9a:92:1a:15: 21:c0:35:d2:93:f4:ab:5e:f6:02:b0:7b:ee:a8:a2:07:77:70: e1:96:1b:19:2c:41:7d:54:21:ee:f1:06:77:8d:44:f2:8d:d3: c7:36:7c:9a:0d:b1:9f:48:68:67:43:78:bc:dd:19:5a:e1:a1: 0e:69:c9:ab:bf:d0:02:80:34:98:8c:4e:1a:18:fb:06:c8:3d: 22:e5:6d:f4:45:32:4f:43:8a:8b:f3:0a:d5:d7:c4:51:2b:63: 83:c8:ab:5f:bd:4e:f3:c6:e7:31:62:13:83:9f:59:f1:e3:70: 9f:7f:ae:64:88:c4:32:54:99:ec:96:c5:36:0d:ec:cf:10:66: 4f:bc:a1:48:e0:b3:ce:34:97:1b:7f:cd:08:56:d3:78:6f:cc: bb:f5:02:12:c0:07:11:65:e5:28:5a:60:0f:82:e3:1e:d5:c6: 22:c5:a1:f2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x9U1I+N0Raigk5OlsUKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGU2ZWRkMjZlZjFiMTZkODQ4ZTk4MTMwZTZmYzQ0NTBi MzI3NTIwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGNkM2ExMzI2YzQ0ODNkMmJjMTg1OWZjMmFhZDU0NWJhNDhjYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoROzZGri8RJ/Eme8xIB3/K+DNT+0 SW9hywVsHMUyeczy4BB0iL+rBqB9tKTEi/7u3wUxhbwqsyyGzKqMSAAvbtDlwth6 4NV9cnobgkfUmXkg5XHu8nuZRsmAGgZPst8DF2d2gLgexfzGiJ+yb4eyRoaQ4xp1 3t4aPpzuhOH3UUKsxUHmEfyfUNRymZbgsjZ0qUTqCPn6yq8mng6Idd+zxfIKs1uS YUSnQccRh3XAWnwCGpg8/FQETJxWCBnbyV9H0ViE7Uogg/e64QyMYWb7jEN4wd0t tpTiVEWe3w6bjPYll9WnXxNJbuiCS+TbrSZW1SVS41M5uR+d3+qFX9KXxQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNDNOhMmxEg9K8GFn8Kq1UW6SMr+MB8GA1UdIwQY MBaAFL1Obt0m7xsW2EjpgTDm/ERQsydSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt OTYyOGY1MjY2NTQyLzEvME0wNkV5YkVTRDByd1lXZndxclZSYnBJeXY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy LzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFmwAwQC whoEMA0EAgACMAcDBQMqBrlAMA0GCSqGSIb3DQEBCwUAA4IBAQA14AyJOC/0NKfY BL/fGRlogKVLeNjviCVm/EYw0o3FQhD43eGDZAS97L5pVYVXxcxf8gRV4/v7rtS7 Un+tWLPPf1NL5dqbe5eUE6weRPHdXsx06x9F+ZqSGhUhwDXSk/SrXvYCsHvuqKIH d3DhlhsZLEF9VCHu8QZ3jUTyjdPHNnyaDbGfSGhnQ3i83Rla4aEOacmrv9ACgDSY jE4aGPsGyD0i5W30RTJPQ4qL8wrV18RRK2ODyKtfvU7zxucxYhODn1nx43Cff65k iMQyVJnslsU2DezPEGZPvKFI4LPONJcbf80IVtN4b8y79QISwAcRZeUoWmAPguMe 1cYixaHy -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:40 2026 by rpki-client