This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/0PWfBn0oGldVFHP5tIF47j3zzAs.roa File: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (raw, json) Hash identifier: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ= Subject key identifier: D0:F5:9F:06:7D:28:1A:57:55:14:73:F9:B4:81:78:EE:3D:F3:CC:0B Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019B7C80646B9467C91E83AE0E27DA81727A Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/0PWfBn0oGldVFHP5tIF47j3zzAs.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198173 IP address blocks: 188.247.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:64:6b:94:67:c9:1e:83:ae:0e:27:da:81:72:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0f59f067d281a57551473f9b48178ee3df3cc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:73:6f:18:2c:eb:26:61:4a:f3:a6:63:01: 9e:88:3a:be:fe:bc:f7:eb:48:7d:ad:99:ca:af:14: 24:de:5f:30:0b:94:7b:e7:7a:32:75:a9:0a:4c:08: 60:d1:00:e5:c3:04:b4:c3:7b:fe:d5:fe:53:05:50: 60:83:8f:e2:e2:96:f3:08:2a:3c:72:d4:e3:d5:95: c7:c4:f1:38:41:05:7d:17:8e:73:97:54:42:31:68: d1:e7:da:db:58:57:7d:d2:4d:be:5f:48:d4:65:e6: c1:8d:17:b9:24:f9:61:67:22:03:39:68:ec:fb:f2: 91:1b:7d:f6:12:f3:09:71:55:43:e9:36:43:3d:ed: 2c:74:e8:e2:7c:df:85:5e:87:eb:23:3e:dd:62:f8: 4c:5d:c1:3c:19:ee:ba:78:7c:83:a7:2e:95:9b:a3: 82:1b:52:c8:df:00:90:f0:53:ad:3f:74:49:18:1d: 48:f0:23:bd:a9:a0:50:93:fe:7a:9a:e8:fb:ce:fe: 78:d4:8d:fa:a1:20:de:f6:b9:99:26:bd:6d:f6:e8: ab:7e:da:33:c7:36:cb:81:60:ce:1b:94:19:03:99: 29:0e:fe:fb:ae:87:3b:3f:55:6e:78:19:2d:72:98: c9:32:74:cf:9b:7d:ae:43:46:ff:e0:4c:81:8b:a0: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F5:9F:06:7D:28:1A:57:55:14:73:F9:B4:81:78:EE:3D:F3:CC:0B X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/0PWfBn0oGldVFHP5tIF47j3zzAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.247.233.0/24 Signature Algorithm: sha256WithRSAEncryption de:75:91:7a:c7:2f:96:a4:a3:86:f3:a5:42:f2:86:d1:4b:95: 2c:8a:d6:91:37:75:d5:90:f8:f5:02:6b:f4:38:e2:7d:6a:4d: ef:bb:ae:73:b9:c5:b4:75:99:a5:5c:30:03:e9:12:a4:8e:2b: 4d:53:db:e4:fd:16:25:7d:04:81:07:97:e0:e1:5a:06:c6:2a: d3:4b:3d:ac:38:50:8b:56:f9:05:84:62:b7:be:45:78:d4:95: 9e:cc:9f:53:09:3c:14:db:4c:9e:d1:7c:ab:bb:a4:36:c0:74: b9:1d:5c:14:82:aa:74:a8:29:ef:ac:9a:c3:6d:12:38:5f:4c: fb:ad:77:b4:cb:82:73:73:3c:6c:07:d5:6e:98:89:00:63:fb: 92:f8:a2:06:84:12:03:6a:7a:f7:3e:ce:36:e9:76:5a:ca:ea: 12:0d:21:3d:46:c9:8c:e7:4b:c9:af:1c:29:83:2f:fd:bd:2f: 18:c2:79:e5:e4:db:92:dc:c7:28:cf:b9:31:63:2a:dc:07:18: 49:fb:b9:58:6e:6a:45:3a:ce:a6:87:2a:df:3a:ee:20:52:25: 2d:a3:d6:99:04:20:37:95:3b:fe:28:8e:db:35:bd:86:fa:6d: 0d:3b:e6:fb:ba:ed:4c:3f:da:19:e0:93:9d:e9:31:c5:0e:f5: 37:d4:ea:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGRrlGfJHoOuDifagXJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGY1OWYwNjdkMjgxYTU3NTUxNDczZjliNDgxNzhlZTNkZjNjYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEdzbxgs6yZhSvOmYwGeiDq+/rz3 60h9rZnKrxQk3l8wC5R753oydakKTAhg0QDlwwS0w3v+1f5TBVBgg4/i4pbzCCo8 ctTj1ZXHxPE4QQV9F45zl1RCMWjR59rbWFd90k2+X0jUZebBjRe5JPlhZyIDOWjs +/KRG332EvMJcVVD6TZDPe0sdOjifN+FXofrIz7dYvhMXcE8Ge66eHyDpy6Vm6OC G1LI3wCQ8FOtP3RJGB1I8CO9qaBQk/56muj7zv541I36oSDe9rmZJr1t9uirftoz xzbLgWDOG5QZA5kpDv77roc7P1VueBktcpjJMnTPm32uQ0b/4EyBi6BZsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFND1nwZ9KBpXVRRz+bSBeO4988wLMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvMFBXZkJuMG9HbGRWRkhQNXRJRjQ3ajN6ekFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPfpMA0G CSqGSIb3DQEBCwUAA4IBAQDedZF6xy+WpKOG86VC8obRS5UsitaRN3XVkPj1Amv0 OOJ9ak3vu65zucW0dZmlXDAD6RKkjitNU9vk/RYlfQSBB5fg4VoGxirTSz2sOFCL VvkFhGK3vkV41JWezJ9TCTwU20ye0Xyru6Q2wHS5HVwUgqp0qCnvrJrDbRI4X0z7 rXe0y4JzczxsB9VumIkAY/uS+KIGhBIDanr3Ps426XZayuoSDSE9RsmM50vJrxwp gy/9vS8Ywnnl5NuS3Mcoz7kxYyrcBxhJ+7lYbmpFOs6mhyrfOu4gUiUto9aZBCA3 lTv+KI7bNb2G+m0NO+b7uu1MP9oZ4JOd6THFDvU31Oqj -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:10 2026 by rpki-client