This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa File: Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa (raw, json) Hash identifier: Bnj3IDrJ882iRsnMbr53VXkROwmtnT/7J8NLZ7LP/VA= Subject key identifier: 22:9E:40:08:90:D8:91:D6:15:44:38:1E:72:BF:D5:4F:52:12:D4:BA Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Certificate serial: 019B7A5B827D91ABAD0844AAF8DABC09C120 Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211607 IP address blocks: 195.230.103.0/24 maxlen: 24 216.25.124.0/24 maxlen: 24 216.25.125.0/24 maxlen: 24 216.25.126.0/24 maxlen: 24 2001:678:e70::/48 maxlen: 48 2a10:b640:3000::/36 maxlen: 48 2a10:b641::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:7d:91:ab:ad:08:44:aa:f8:da:bc:09:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=229e400890d891d61544381e72bfd54f5212d4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:0a:2f:f2:93:46:eb:41:8b:2c:d3:84:6d: 57:88:08:6f:04:9a:14:00:eb:84:16:c1:50:9a:03: d6:51:42:ed:30:7b:7d:99:90:8d:bf:8d:53:cb:39: c3:0c:7d:c1:6f:9d:10:d2:39:76:91:4f:e2:b9:e6: 40:d8:91:9a:11:55:62:5f:37:3c:20:7d:dc:b8:02: 49:c5:5c:92:91:9b:d4:d8:69:db:a5:10:34:2e:b4: 6f:5c:90:9d:89:6b:9a:93:cb:ec:85:1c:b9:7d:db: 5f:3f:8d:98:84:eb:3f:d8:f1:56:23:53:7c:3d:91: f4:95:81:3a:b7:3c:d3:e9:26:f2:08:31:44:19:00: 32:d2:21:4b:6f:0a:90:63:51:13:1f:c6:93:e4:66: be:ee:01:c1:47:2e:1e:0a:06:ea:ae:21:50:27:00: 5e:ee:4c:d8:87:0e:1a:50:10:32:ea:16:c6:2b:dc: 3b:ff:24:b0:ca:0d:0e:13:a8:39:67:c8:e1:19:66: 1b:dc:6a:95:74:13:a3:73:21:c0:ae:1c:4d:ec:79: 64:fe:ad:6e:61:c0:11:7f:d7:f3:ba:e6:64:c7:1c: 0a:95:52:64:7b:23:12:a3:6a:3b:c1:04:35:43:44: 56:b9:50:b9:32:d2:6d:ae:cc:fe:71:17:16:fd:4d: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9E:40:08:90:D8:91:D6:15:44:38:1E:72:BF:D5:4F:52:12:D4:BA X509v3 Authority Key Identifier: keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.103.0/24 216.25.124.0-216.25.126.255 IPv6: 2001:678:e70::/48 2a10:b640:3000::/36 2a10:b641::/36 Signature Algorithm: sha256WithRSAEncryption 1a:ff:23:2f:9e:45:fb:55:12:3d:ac:3e:15:07:40:70:7c:2e: cf:ad:d4:55:92:51:51:b4:7a:89:b1:02:fd:4f:71:48:09:33: ba:d7:b8:a7:f4:0d:eb:43:22:ab:2a:a1:2d:3e:58:e1:fb:20: 83:f3:a3:01:a7:6c:6b:c0:f9:40:d6:00:4d:4f:47:fe:a7:7e: 19:8f:b2:de:20:71:ff:a7:a6:56:51:b4:63:4e:59:e4:59:c2: 6c:63:9e:5b:a6:30:0d:02:ed:ab:ba:60:aa:51:0d:82:27:19: a3:27:b9:4c:d1:30:bb:15:b7:87:c2:8a:2f:0f:da:63:f6:fe: 0c:3e:28:e6:56:88:01:23:10:ef:82:f9:52:46:bc:dc:af:85: 4f:7b:5b:2b:93:01:e1:6d:60:77:dd:02:50:12:cf:91:7a:ee: 83:6a:97:81:0f:27:5d:a1:82:f3:5b:12:af:00:25:54:60:06: d6:bc:ef:19:e9:c5:be:79:2a:a5:2a:31:ae:50:33:6f:74:d5: d7:be:d5:34:38:6b:71:48:71:0a:60:c1:3a:70:89:7b:60:00: 79:57:e3:05:8f:20:23:b3:93:21:b9:fb:4f:b7:5b:44:f6:78: 55:7a:ad:7e:b8:c6:15:d9:03:ce:8f:d8:e8:2b:eb:62:85:64: 8c:57:5c:d6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt6W4J9kautCESq+Nq8CcEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx ZDllODYwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjllNDAwODkwZDg5MWQ2MTU0NDM4MWU3MmJmZDU0ZjUyMTJkNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv24KL/KTRutBiyzThG1XiAhvBJoU AOuEFsFQmgPWUULtMHt9mZCNv41TyznDDH3Bb50Q0jl2kU/iueZA2JGaEVViXzc8 IH3cuAJJxVySkZvU2GnbpRA0LrRvXJCdiWuak8vshRy5fdtfP42YhOs/2PFWI1N8 PZH0lYE6tzzT6SbyCDFEGQAy0iFLbwqQY1ETH8aT5Ga+7gHBRy4eCgbqriFQJwBe 7kzYhw4aUBAy6hbGK9w7/ySwyg0OE6g5Z8jhGWYb3GqVdBOjcyHArhxN7Hlk/q1u YcARf9fzuuZkxxwKlVJkeyMSo2o7wQQ1Q0RWuVC5MtJtrsz+cRcW/U3XXwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFCKeQAiQ2JHWFUQ4HnK/1U9SEtS6MB8GA1UdIwQY MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt OGU5MjRmZmJlNTg0LzEvSXA1QUNKRFlrZFlWUkRnZWNyX1ZUMUlTMUxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0 LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAaBAIAATAUAwQAw+ZnMAwD BALYGXwDBADYGX4wHwQCAAIwGQMHACABBngOcAMGBCoQtkAwAwYEKhC2QQAwDQYJ KoZIhvcNAQELBQADggEBABr/Iy+eRftVEj2sPhUHQHB8Ls+t1FWSUVG0eomxAv1P cUgJM7rXuKf0DetDIqsqoS0+WOH7IIPzowGnbGvA+UDWAE1PR/6nfhmPst4gcf+n plZRtGNOWeRZwmxjnlumMA0C7au6YKpRDYInGaMnuUzRMLsVt4fCii8P2mP2/gw+ KOZWiAEjEO+C+VJGvNyvhU97WyuTAeFtYHfdAlASz5F67oNql4EPJ12hgvNbEq8A JVRgBta87xnpxb55KqUqMa5QM2901de+1TQ4a3FIcQpgwTpwiXtgAHlX4wWPICOz kyG5+0+3W0T2eFV6rX64xhXZA86P2Ogr62KFZIxXXNY= -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:27 2026 by rpki-client