This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/r0ZsIk8ecjQ268HGoGVXnQ10Cfg.roa File: r0ZsIk8ecjQ268HGoGVXnQ10Cfg.roa (raw, json) Hash identifier: GJiOlsWyLXx+juw5ogZOEjhwV9Y6Mjw80ZWfPi6BeNY= Subject key identifier: AF:46:6C:22:4F:1E:72:34:36:EB:C1:C6:A0:65:57:9D:0D:74:09:F8 Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89 Certificate serial: 019B7B358BF61AB293BBED7D7273FCC18F7E Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/r0ZsIk8ecjQ268HGoGVXnQ10Cfg.roa Signing time: Thu 01 Jan 2026 20:17:45 +0000 ROA not before: Thu 01 Jan 2026 20:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200040 IP address blocks: 188.124.0.0/24 maxlen: 24 188.124.6.0/24 maxlen: 24 188.124.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:8b:f6:1a:b2:93:bb:ed:7d:72:73:fc:c1:8f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89 Validity Not Before: Jan 1 20:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af466c224f1e723436ebc1c6a065579d0d7409f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b7:5e:c3:9a:89:c5:0f:ce:ad:82:ae:90:0f: 12:36:cc:6d:c9:3c:62:4a:9a:d2:7c:56:d6:b2:95: a5:ba:fc:a4:5f:ab:74:a9:30:f4:b5:5b:f0:2e:2f: 9f:0a:9e:18:be:1e:13:33:37:bc:f2:32:33:53:f7: 47:43:43:9a:76:f1:f0:ec:fa:63:a2:85:90:9a:8d: 3a:73:ef:36:6d:9e:28:fe:ad:b8:5d:0b:67:07:33: a0:f3:4c:05:cb:e7:13:58:ca:7e:32:d4:a5:69:ab: 1d:ee:36:37:a6:cc:d9:92:86:e9:2f:d6:00:d0:a2: 03:aa:2d:3e:0c:29:6f:6c:33:67:f4:7a:28:ce:70: c9:65:bb:c6:5a:e6:10:9a:32:86:ac:6f:93:ca:f2: 1c:be:f1:0d:57:e2:31:63:44:77:56:14:fa:c4:ae: 34:fc:be:a8:d5:af:89:b8:8d:6d:5f:07:b7:eb:ef: 52:4d:da:ab:d5:78:b5:e9:25:43:25:8b:e2:e7:e4: b2:53:38:98:b0:db:38:ef:30:60:ec:83:37:e6:5c: b7:51:e3:8d:d1:50:37:0b:64:29:eb:7d:cf:43:f2: 1a:8f:08:ef:4e:87:1e:ec:69:30:f3:4b:82:20:88: 56:16:43:7b:8e:c3:52:00:a0:69:08:67:8c:e2:0e: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:6C:22:4F:1E:72:34:36:EB:C1:C6:A0:65:57:9D:0D:74:09:F8 X509v3 Authority Key Identifier: keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/r0ZsIk8ecjQ268HGoGVXnQ10Cfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.124.0.0/24 188.124.6.0/24 188.124.31.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:41:10:9d:6b:d3:de:1d:f5:93:d0:b5:f1:d0:43:65:f5:6f: a6:3d:04:40:b5:aa:ce:cc:ca:9b:99:10:26:64:86:db:c7:3e: e7:ae:ed:d7:69:04:b4:41:b7:e1:15:09:70:0f:e6:43:44:75: cc:2e:22:e8:59:a3:4e:7b:38:12:cf:1e:b2:ed:71:94:82:1f: 26:e4:83:c3:2c:e9:d4:5a:b9:7c:eb:ab:06:b4:4d:d5:56:e6: e7:aa:95:d6:7e:76:a1:4f:cd:b9:46:1c:26:98:e3:f8:07:ea: 68:45:8d:d5:64:1e:b8:bd:f3:dc:2e:94:10:2d:6c:3e:ae:ee: 47:3f:0e:13:de:8b:ac:40:17:f9:09:2a:a0:92:57:10:b6:da: 95:c6:4a:bf:9a:c8:2c:28:0a:35:87:65:d0:1a:9e:8a:e8:80: 59:71:3c:78:f3:3e:3e:2e:83:26:d0:ae:5c:d9:13:13:a5:dd: d9:b5:81:24:e9:d4:5c:72:6c:d3:7b:db:27:22:4a:0d:8c:d1: 58:65:6e:b9:63:99:6a:5c:78:4a:c8:28:05:8a:60:51:14:b1: 27:93:64:31:f9:ae:83:12:c7:5e:2e:09:95:da:50:69:e3:9f: 36:f9:ce:04:7a:b3:4a:81:d8:10:24:2b:98:c7:21:9d:6f:7b: 67:88:2b:e2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NYv2GrKTu+19cnP8wY9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx NTZmODkwHhcNMjYwMTAxMjAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjQ2NmMyMjRmMWU3MjM0MzZlYmMxYzZhMDY1NTc5ZDBkNzQwOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rdew5qJxQ/OrYKukA8SNsxtyTxi SprSfFbWspWluvykX6t0qTD0tVvwLi+fCp4Yvh4TMze88jIzU/dHQ0OadvHw7Ppj ooWQmo06c+82bZ4o/q24XQtnBzOg80wFy+cTWMp+MtSlaasd7jY3pszZkobpL9YA 0KIDqi0+DClvbDNn9HooznDJZbvGWuYQmjKGrG+TyvIcvvENV+IxY0R3VhT6xK40 /L6o1a+JuI1tXwe36+9STdqr1Xi16SVDJYvi5+SyUziYsNs47zBg7IM35ly3UeON 0VA3C2Qp633PQ/IajwjvToce7Gkw80uCIIhWFkN7jsNSAKBpCGeM4g4qzwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK9GbCJPHnI0NuvBxqBlV50NdAn4MB8GA1UdIwQY MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt Y2Y2YzMwNTIxMmViLzEvcjBac0lrOGVjalEyNjhIR29HVlhuUTEwQ2ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvHwAAwQA vHwGAwQAvHwfMA0GCSqGSIb3DQEBCwUAA4IBAQCeQRCda9PeHfWT0LXx0ENl9W+m PQRAtarOzMqbmRAmZIbbxz7nru3XaQS0QbfhFQlwD+ZDRHXMLiLoWaNOezgSzx6y 7XGUgh8m5IPDLOnUWrl866sGtE3VVubnqpXWfnahT825RhwmmOP4B+poRY3VZB64 vfPcLpQQLWw+ru5HPw4T3ousQBf5CSqgklcQttqVxkq/msgsKAo1h2XQGp6K6IBZ cTx48z4+LoMm0K5c2RMTpd3ZtYEk6dRccmzTe9snIkoNjNFYZW65Y5lqXHhKyCgF imBRFLEnk2Qx+a6DEsdeLgmV2lBp4582+c4EerNKgdgQJCuYxyGdb3tniCvi -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:00 2026 by rpki-client