This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/0vxysV8K8K16kmkjIj4RtAbD-UU.roa File: 0vxysV8K8K16kmkjIj4RtAbD-UU.roa (raw, json) Hash identifier: iyJv/+zD+LriBgc6xgCjkmEFLCEbY7odbgSqK8CwFw4= Subject key identifier: D2:FC:72:B1:5F:0A:F0:AD:7A:92:69:23:22:3E:11:B4:06:C3:F9:45 Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d Certificate serial: 019B7B36884FCC565B87FD1D34D31D5AC82F Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/0vxysV8K8K16kmkjIj4RtAbD-UU.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199195 IP address blocks: 194.39.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:88:4f:cc:56:5b:87:fd:1d:34:d3:1d:5a:c8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2fc72b15f0af0ad7a926923223e11b406c3f945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:0c:d2:05:cf:9a:85:1a:88:79:c3:17:ae: 88:73:ef:27:ef:38:23:04:be:b8:55:90:45:77:54: 83:d0:ab:1c:72:bf:b9:92:af:d0:f7:db:c2:f8:f7: ce:71:98:e8:09:3a:14:d3:3c:5d:c8:84:81:74:03: b4:2b:42:35:9d:16:ea:2f:11:5e:dc:a9:f7:df:25: 29:3a:83:83:89:48:39:0e:5e:0f:29:3f:54:6d:66: 4f:f9:a5:4f:24:31:6d:25:4e:3e:07:15:10:3d:cf: 27:bf:a3:7f:30:b3:50:39:2a:1c:75:05:4d:0b:0a: ad:d1:ee:98:8e:1e:dd:f6:1d:92:e5:53:84:20:b4: 21:21:72:8a:2b:3d:f6:a9:e4:61:01:f6:29:6b:1a: 67:24:35:96:b4:df:43:0c:08:41:5a:8b:f4:b7:f1: 2c:77:31:48:ee:da:92:d1:06:6b:86:a1:4e:e2:72: c9:9d:f8:b5:01:da:f9:3b:28:52:6c:cb:7b:0d:13: 58:fa:42:75:12:f0:33:ea:66:09:9b:e1:e8:00:c0: b2:b0:02:43:58:ab:f8:d5:90:b2:d3:7d:13:bd:ee: 1e:4f:94:d5:14:9d:2f:57:0d:e4:68:be:91:d3:65: c6:ef:0d:3e:03:e5:c0:82:f3:16:04:31:6a:49:0c: 34:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FC:72:B1:5F:0A:F0:AD:7A:92:69:23:22:3E:11:B4:06:C3:F9:45 X509v3 Authority Key Identifier: keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/0vxysV8K8K16kmkjIj4RtAbD-UU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.253.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:52:b9:67:41:5f:a7:18:e4:8e:3d:d6:05:e0:a0:fc:40:43: 99:b6:a6:21:3f:f3:df:dd:07:07:c1:e5:fa:c2:73:27:c1:d9: 6c:71:e0:31:e3:25:38:95:f4:5f:ae:4c:8b:55:3e:a5:35:52: a1:eb:df:ac:ed:85:60:d7:df:02:78:44:c6:8c:32:b4:79:4f: 19:5d:f9:41:dc:62:3a:c4:a5:aa:f9:9b:e8:ad:1b:2d:87:a6: 22:aa:a3:0f:dd:17:81:2b:44:87:ad:d1:ae:f2:52:e3:44:c2: 3e:5f:e0:0c:ce:2f:38:3a:51:19:63:48:1c:ef:4d:f9:db:3d: 9a:ed:76:eb:ce:a5:47:f3:af:53:dd:e1:57:34:7b:de:5a:f9: 3c:d7:98:41:55:62:72:eb:6e:7d:21:69:f3:d7:16:52:3d:2c: ca:b3:b6:17:55:a0:2a:5d:18:9c:d8:d4:06:c8:f5:d3:b3:fb: 91:0e:d0:5f:c4:00:81:db:86:c4:5b:3a:a1:04:b5:d6:66:80: aa:6f:e6:90:b0:ef:3f:b6:de:d8:d4:3d:be:e2:84:42:5d:ab: fb:d6:b3:0e:d5:83:40:4b:58:d8:c0:2f:9d:bb:de:30:9c:25: a9:c4:a0:47:10:b0:3e:96:f6:bd:f3:79:b8:f2:e1:93:fa:76: 8b:31:8a:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NohPzFZbh/0dNNMdWsgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YWU1NTFhZjBiYjVkNzk3N2VhNzNmNjg5NmYyNWYxZWNh MjhmOWQwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmZjNzJiMTVmMGFmMGFkN2E5MjY5MjMyMjNlMTFiNDA2YzNmOTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTIM0gXPmoUaiHnDF66Ic+8n7zgj BL64VZBFd1SD0Ksccr+5kq/Q99vC+PfOcZjoCToU0zxdyISBdAO0K0I1nRbqLxFe 3Kn33yUpOoODiUg5Dl4PKT9UbWZP+aVPJDFtJU4+BxUQPc8nv6N/MLNQOSocdQVN Cwqt0e6Yjh7d9h2S5VOEILQhIXKKKz32qeRhAfYpaxpnJDWWtN9DDAhBWov0t/Es dzFI7tqS0QZrhqFO4nLJnfi1Adr5OyhSbMt7DRNY+kJ1EvAz6mYJm+HoAMCysAJD WKv41ZCy030Tve4eT5TVFJ0vVw3kaL6R02XG7w0+A+XAgvMWBDFqSQw0eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNL8crFfCvCtepJpIyI+EbQGw/lFMB8GA1UdIwQY MBaAFCWuVRrwu115d+pz9olvJfHsoo+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjkt MjE0MmY4ZmI2NzZlLzEvMHZ4eXNWOEs4SzE2a21raklqNFJ0QWJELVVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjktMjE0MmY4ZmI2NzZl LzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwif9MA0G CSqGSIb3DQEBCwUAA4IBAQCaUrlnQV+nGOSOPdYF4KD8QEOZtqYhP/Pf3QcHweX6 wnMnwdlsceAx4yU4lfRfrkyLVT6lNVKh69+s7YVg198CeETGjDK0eU8ZXflB3GI6 xKWq+ZvorRsth6YiqqMP3ReBK0SHrdGu8lLjRMI+X+AMzi84OlEZY0gc70352z2a 7XbrzqVH869T3eFXNHveWvk815hBVWJy6259IWnz1xZSPSzKs7YXVaAqXRic2NQG yPXTs/uRDtBfxACB24bEWzqhBLXWZoCqb+aQsO8/tt7Y1D2+4oRCXav71rMO1YNA S1jYwC+du94wnCWpxKBHELA+lva983m48uGT+naLMYoa -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:57 2026 by rpki-client