This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/15RDhqpZZkgsTOPSNsBqQRpBKw0.roa File: 15RDhqpZZkgsTOPSNsBqQRpBKw0.roa (raw, json) Hash identifier: y1ueTNG9EINspskOLQGA36UFgKcaoRxo8MZbGAJPhNA= Subject key identifier: D7:94:43:86:AA:59:66:48:2C:4C:E3:D2:36:C0:6A:41:1A:41:2B:0D Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8 Certificate serial: 019B7B3582A241BE049D4290626003D6A358 Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/15RDhqpZZkgsTOPSNsBqQRpBKw0.roa Signing time: Thu 01 Jan 2026 20:17:42 +0000 ROA not before: Thu 01 Jan 2026 20:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 94.185.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:82:a2:41:be:04:9d:42:90:62:60:03:d6:a3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8 Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7944386aa5966482c4ce3d236c06a411a412b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d2:1d:d5:95:06:7f:89:87:e2:7d:25:51:21: 63:53:69:12:b8:3f:0e:37:b8:5b:6b:be:35:04:71: 0c:e4:bd:4a:8a:7e:39:65:f1:4c:38:f8:c9:30:b0: 25:a7:40:30:0c:c5:2b:46:b5:3c:fb:8e:b3:b6:c9: 66:0f:8f:82:d6:1d:7a:de:9c:97:32:96:7b:9f:a7: bd:34:a0:40:f0:77:c3:46:c6:91:50:c2:ae:f6:0f: 7d:e3:1e:a9:40:fc:ae:2c:3c:03:f4:d0:e6:6d:bf: f3:f0:7c:69:86:54:eb:f1:07:b6:69:d8:24:d5:1b: ff:12:76:8b:4e:ff:8e:f5:24:07:85:a1:93:d6:8c: 61:27:68:15:e5:fe:ad:9e:1f:d3:81:ff:eb:49:af: e9:9c:e6:7c:d7:62:54:97:13:09:cf:2d:81:a1:a7: 8c:4b:5d:e7:db:0e:36:4d:5a:95:8a:ff:fb:fc:d0: d0:18:00:15:e5:0e:8c:c4:b0:04:7e:f4:35:71:8b: 7e:71:00:5d:1f:35:88:17:0e:b5:f2:cd:cc:b6:e9: 1e:6e:e6:82:12:09:a6:75:83:5f:93:ff:2e:e8:c7: 92:8b:8d:2a:53:46:e2:4e:8e:ad:9d:b0:55:e2:f6: 50:ff:f8:cc:49:fe:d6:b2:c1:bc:2d:ac:82:61:0b: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:94:43:86:AA:59:66:48:2C:4C:E3:D2:36:C0:6A:41:1A:41:2B:0D X509v3 Authority Key Identifier: keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/15RDhqpZZkgsTOPSNsBqQRpBKw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.185.115.0/24 Signature Algorithm: sha256WithRSAEncryption 55:23:6f:a5:12:d8:a4:49:7e:17:fc:08:22:b1:aa:03:a2:03: e2:7d:29:a7:43:9a:56:d8:a1:55:82:88:0b:82:6a:30:27:29: 80:c7:f5:c5:49:fe:48:13:14:84:d6:b9:4d:33:af:e2:a3:cb: 50:64:bf:d9:81:ee:b0:b3:b2:f3:a6:39:d9:12:f4:d4:8a:b9: 00:34:f3:b7:ae:c4:06:8c:9b:31:74:6b:f6:c6:45:4e:d6:1e: da:94:94:cf:1e:21:73:70:98:d7:a1:81:10:32:e6:52:24:71: 01:8d:24:3d:f5:0f:df:b4:72:75:b8:5e:05:f2:47:e6:c0:99: b0:a4:cd:ed:78:bd:b9:75:13:9e:ab:e0:fa:63:d4:52:e5:dd: 89:4e:46:08:93:2d:ce:f7:ab:85:89:7b:60:2e:c5:9a:7e:50: df:3e:08:d6:73:86:07:24:d2:6d:e9:46:ee:51:73:27:15:51: 03:1b:65:8f:b2:11:26:5d:17:e0:29:ac:49:93:9f:ec:d8:37: 1a:c0:3d:64:90:a1:ec:5c:d0:f5:2c:3e:52:b5:fb:df:1b:6d: 60:bd:3d:cd:cb:e2:bb:a7:f5:d5:3e:f5:b7:fe:9d:68:5c:49: 07:28:5d:d1:ac:d1:84:d3:20:5f:0a:6e:ba:99:a1:1d:a9:86: 75:56:ca:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NYKiQb4EnUKQYmAD1qNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ODhiMWI1NjBmOTk4ZWNjZDNhNmVmZjQwNTQzYjU5MjA0 ZDY3YjgwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzk0NDM4NmFhNTk2NjQ4MmM0Y2UzZDIzNmMwNmE0MTFhNDEyYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NId1ZUGf4mH4n0lUSFjU2kSuD8O N7hba741BHEM5L1Kin45ZfFMOPjJMLAlp0AwDMUrRrU8+46ztslmD4+C1h163pyX MpZ7n6e9NKBA8HfDRsaRUMKu9g994x6pQPyuLDwD9NDmbb/z8HxphlTr8Qe2adgk 1Rv/EnaLTv+O9SQHhaGT1oxhJ2gV5f6tnh/Tgf/rSa/pnOZ812JUlxMJzy2BoaeM S13n2w42TVqViv/7/NDQGAAV5Q6MxLAEfvQ1cYt+cQBdHzWIFw618s3MtukebuaC EgmmdYNfk/8u6MeSi40qU0biTo6tnbBV4vZQ//jMSf7WssG8LayCYQuJ9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNeUQ4aqWWZILEzj0jbAakEaQSsNMB8GA1UdIwQY MBaAFCWIsbVg+ZjszTpu/0BUO1kgTWe4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSllpeHRXRDVtT3pOT203X1FGUTdXU0JOWjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xOGQ2ZDUtNmM4Ni00MmMxLTg0ZjEt OTlhMDE4OTg4OGI1LzEvMTVSRGhxcFpaa2dzVE9QU05zQnFRUnBCS3cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xOGQ2ZDUtNmM4Ni00MmMxLTg0ZjEtOTlhMDE4OTg4OGI1 LzEvSllpeHRXRDVtT3pOT203X1FGUTdXU0JOWjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrlzMA0G CSqGSIb3DQEBCwUAA4IBAQBVI2+lEtikSX4X/AgisaoDogPifSmnQ5pW2KFVgogL gmowJymAx/XFSf5IExSE1rlNM6/io8tQZL/Zge6ws7LzpjnZEvTUirkANPO3rsQG jJsxdGv2xkVO1h7alJTPHiFzcJjXoYEQMuZSJHEBjSQ99Q/ftHJ1uF4F8kfmwJmw pM3teL25dROeq+D6Y9RS5d2JTkYIky3O96uFiXtgLsWaflDfPgjWc4YHJNJt6Ubu UXMnFVEDG2WPshEmXRfgKaxJk5/s2DcawD1kkKHsXND1LD5StfvfG21gvT3Ny+K7 p/XVPvW3/p1oXEkHKF3RrNGE0yBfCm66maEdqYZ1VspW -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:37 2026 by rpki-client