This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa File: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (raw, json) Hash identifier: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU= Subject key identifier: 75:5F:7F:6A:AD:E9:F0:AF:24:80:A6:F5:84:C9:34:89:F5:90:B5:F3 Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Certificate serial: 019B791146A09CAE39F81C4A3F9E8364705D Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35024 IP address blocks: 195.225.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:46:a0:9c:ae:39:f8:1c:4a:3f:9e:83:64:70:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=755f7f6aade9f0af2480a6f584c93489f590b5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:9a:4b:e3:c4:3f:bc:5b:c2:15:08:58:96: b3:a9:ef:9e:1f:13:dc:91:78:0a:17:a8:e5:a5:b3: 50:94:e1:cb:ab:65:5c:c1:7e:9c:f1:f8:d5:d9:c3: 50:3d:a7:82:4a:1e:f5:b5:30:0e:38:1b:b8:5d:5e: 1b:70:38:99:d4:b7:cc:53:35:73:83:b9:94:ef:2c: f3:b1:80:e0:35:72:cf:0d:ac:86:0b:89:bd:f1:fc: f0:b6:ee:de:ba:5b:3a:cb:22:91:d6:22:c3:7e:ba: 12:64:df:9c:9c:32:a1:9d:c0:ce:05:bd:71:8c:63: f4:f6:41:19:a8:a5:76:a5:f6:71:aa:4b:73:4c:42: b4:d8:ea:ea:0d:82:fe:2c:89:50:c7:ac:59:9e:f4: 0b:b6:28:67:92:fe:79:34:78:5e:28:9d:72:f8:1e: 73:10:5d:1b:20:3c:3d:a7:0d:35:a4:35:25:aa:d7: 8a:ac:e0:1c:31:95:0a:8a:df:4f:13:49:82:43:b0: 5c:2a:64:d9:39:9d:ec:31:0c:2c:39:df:28:ce:3c: 6c:20:78:62:46:97:7d:a8:79:cf:d0:4d:77:76:13: 52:d7:8c:df:10:f8:cf:d0:ec:de:21:e5:7d:ec:9f: ed:1f:cd:b1:03:68:ae:f4:d5:0f:9d:18:58:55:8b: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5F:7F:6A:AD:E9:F0:AF:24:80:A6:F5:84:C9:34:89:F5:90:B5:F3 X509v3 Authority Key Identifier: keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.34.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:55:7b:e1:03:e1:26:e3:48:e5:06:b9:bc:b4:e7:4e:8d:76: 02:1a:29:81:46:4e:54:8e:cd:34:94:fd:35:a8:ba:21:c6:0a: 51:ce:69:66:8c:20:7b:cf:06:06:6c:5b:ee:83:34:fd:4a:59: b6:29:14:83:16:61:b4:b1:33:7e:fb:6d:15:1a:fc:85:a4:5c: 46:85:45:8b:e0:e6:8a:d2:71:30:5e:b2:9c:a5:79:2e:78:fd: 6a:11:20:20:91:80:22:80:c9:a1:64:cc:fa:e9:29:f5:79:46: 38:85:d2:dd:88:2f:d9:c7:bd:7a:36:71:a3:5d:17:32:28:c9: 8b:00:fc:4f:01:f1:ec:45:6b:38:0d:77:f6:e5:e8:46:6c:25: 26:69:09:d9:9a:08:72:7b:bd:25:2b:1a:b0:8c:b1:26:35:29: 11:0a:62:fd:46:c7:c3:e2:d7:1d:da:04:44:14:12:68:4c:75: b6:68:c0:1a:1b:14:db:c8:bd:b2:51:d0:8b:5e:34:fe:31:29: 00:bc:5c:13:13:8f:14:d4:3d:d9:75:9f:39:f9:1d:e6:6c:1e: 51:58:15:d1:f7:09:c7:f8:eb:60:ca:56:91:4c:54:f2:98:28: 8e:55:f0:a8:b3:29:93:8f:3a:7f:00:7b:7b:98:ee:43:0a:86: 63:4b:6a:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUagnK45+BxKP56DZHBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0 ZDQ1ZTIwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTVmN2Y2YWFkZTlmMGFmMjQ4MGE2ZjU4NGM5MzQ4OWY1OTBiNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGGaS+PEP7xbwhUIWJazqe+eHxPc kXgKF6jlpbNQlOHLq2VcwX6c8fjV2cNQPaeCSh71tTAOOBu4XV4bcDiZ1LfMUzVz g7mU7yzzsYDgNXLPDayGC4m98fzwtu7euls6yyKR1iLDfroSZN+cnDKhncDOBb1x jGP09kEZqKV2pfZxqktzTEK02OrqDYL+LIlQx6xZnvQLtihnkv55NHheKJ1y+B5z EF0bIDw9pw01pDUlqteKrOAcMZUKit9PE0mCQ7BcKmTZOZ3sMQwsOd8ozjxsIHhi Rpd9qHnP0E13dhNS14zfEPjP0OzeIeV97J/tH82xA2iu9NUPnRhYVYvrAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHVff2qt6fCvJICm9YTJNIn1kLXzMB8GA1UdIwQY MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt YmIzY2M3Yzk0NGFkLzEvZFY5X2FxM3A4SzhrZ0tiMWhNazBpZldRdGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw+EiMA0G CSqGSIb3DQEBCwUAA4IBAQA9VXvhA+Em40jlBrm8tOdOjXYCGimBRk5Ujs00lP01 qLohxgpRzmlmjCB7zwYGbFvugzT9Slm2KRSDFmG0sTN++20VGvyFpFxGhUWL4OaK 0nEwXrKcpXkueP1qESAgkYAigMmhZMz66Sn1eUY4hdLdiC/Zx716NnGjXRcyKMmL APxPAfHsRWs4DXf25ehGbCUmaQnZmghye70lKxqwjLEmNSkRCmL9RsfD4tcd2gRE FBJoTHW2aMAaGxTbyL2yUdCLXjT+MSkAvFwTE48U1D3ZdZ85+R3mbB5RWBXR9wnH +OtgylaRTFTymCiOVfCosymTjzp/AHt7mO5DCoZjS2pR -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:30 2026 by rpki-client