This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/O15z78Is0xDZGb6V-XxjWvqW-fU.roa File: O15z78Is0xDZGb6V-XxjWvqW-fU.roa (raw, json) Hash identifier: 3jxrcGr0TAAjJCawhAxJyoF0T4BQmt2G2OYfylB02Ko= Subject key identifier: 3B:5E:73:EF:C2:2C:D3:10:D9:19:BE:95:F9:7C:63:5A:FA:96:F9:F5 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7860B86551C7587843B3BA5679066 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/O15z78Is0xDZGb6V-XxjWvqW-fU.roa Signing time: Thu 01 Jan 2026 04:18:43 +0000 ROA not before: Thu 01 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199389 IP address blocks: 195.136.200.0/24 maxlen: 24 195.136.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:86:0b:86:55:1c:75:87:84:3b:3b:a5:67:90:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b5e73efc22cd310d919be95f97c635afa96f9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:80:d3:c0:0a:55:34:a8:35:5f:51:41:18: 7c:f2:4d:39:41:cb:97:6d:94:9e:45:f3:4c:61:9d: ee:b8:76:a2:51:73:58:88:ae:22:ea:8a:fb:e8:7d: 83:28:b6:a2:8e:86:56:41:8e:78:63:c9:9a:1e:c3: 1b:39:8f:3f:9f:80:84:2e:a7:40:8b:ef:6f:e8:91: d8:72:4a:57:e3:fa:0e:59:bc:5b:ac:65:9e:ab:31: 71:0f:ca:1f:f9:3b:ae:c1:ed:a9:f4:9a:de:7a:ab: 6c:75:52:76:af:93:80:f4:bd:88:c8:a0:80:66:be: fc:3b:14:1c:4f:d8:1c:a8:ca:38:47:f3:af:ce:02: 42:80:45:96:0c:2c:7d:28:19:dd:f0:1f:64:78:54: cd:8f:d8:60:33:af:a1:f4:9f:5d:3c:5e:5a:1e:28: ef:42:6a:c6:8e:3f:a7:ba:43:51:1b:c0:d7:a9:24: 2b:1a:7a:c8:01:34:2a:0a:11:74:50:48:ae:bc:93: 41:45:ec:37:f7:fd:17:cd:57:0d:9b:9d:aa:70:21: 94:a5:94:4b:b4:ab:20:3a:f4:11:99:1f:70:8e:48: 5e:87:0d:6a:47:78:fb:f7:f0:04:b3:12:48:b7:68: 70:ed:da:1b:11:5f:e9:b1:65:bc:f9:5a:db:9b:ec: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5E:73:EF:C2:2C:D3:10:D9:19:BE:95:F9:7C:63:5A:FA:96:F9:F5 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/O15z78Is0xDZGb6V-XxjWvqW-fU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.200.0/24 195.136.224.0/21 Signature Algorithm: sha256WithRSAEncryption 10:6e:20:57:9e:da:f3:77:eb:65:5a:cf:6e:e7:9b:ad:e0:f3: fc:11:a4:a6:95:c0:8e:ff:6f:2b:31:fc:ed:29:17:e2:10:f8: 5f:4b:4b:ce:02:51:01:af:82:5a:21:c0:b7:43:8f:cc:c5:75: ea:d2:ec:f7:ed:64:42:e9:f8:f0:b6:c3:07:e8:5e:68:8b:76: fd:c8:39:84:56:86:b2:6f:3c:52:78:ed:9f:b6:bb:b5:e9:63: 9f:c1:ac:a9:ac:5f:c4:72:fc:8e:cf:ed:6a:72:c0:a5:39:12: 6d:93:18:d3:98:8c:14:a7:67:1e:37:23:cc:8d:0e:f1:71:33: 8e:57:8e:e8:25:16:b0:bf:ed:ef:3f:7c:49:fd:42:ec:89:a7: 33:18:40:30:99:fb:bd:2a:5d:3d:bc:49:99:83:b5:4e:97:cf: 4a:35:61:7f:2c:5b:fb:98:ef:77:e5:ee:77:92:d6:7e:fb:e9: 78:3a:9d:cf:e1:83:d6:69:a9:ec:3c:7e:fa:22:09:fc:48:85: 82:28:d5:44:d8:0c:7f:b9:ad:9e:9c:3f:9f:b4:61:a2:7c:32: 3c:11:d4:14:7b:ed:3c:63:d3:b5:eb:dc:47:e2:a5:35:c7:18: 09:7b:94:9e:88:ac:7b:b4:bf:7e:dd:29:c0:2f:66:af:58:37: 9d:9f:cd:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x4YLhlUcdYeEOzulZ5BmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjVlNzNlZmMyMmNkMzEwZDkxOWJlOTVmOTdjNjM1YWZhOTZmOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MmA08AKVTSoNV9RQRh88k05QcuX bZSeRfNMYZ3uuHaiUXNYiK4i6or76H2DKLaijoZWQY54Y8maHsMbOY8/n4CELqdA i+9v6JHYckpX4/oOWbxbrGWeqzFxD8of+Tuuwe2p9JreeqtsdVJ2r5OA9L2IyKCA Zr78OxQcT9gcqMo4R/OvzgJCgEWWDCx9KBnd8B9keFTNj9hgM6+h9J9dPF5aHijv QmrGjj+nukNRG8DXqSQrGnrIATQqChF0UEiuvJNBRew39/0XzVcNm52qcCGUpZRL tKsgOvQRmR9wjkhehw1qR3j79/AEsxJIt2hw7dobEV/psWW8+Vrbm+zKgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDtec+/CLNMQ2Rm+lfl8Y1r6lvn1MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvTzE1ejc4SXMweERaR2I2Vi1YeGpXdnFXLWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4jIAwQD w4jgMA0GCSqGSIb3DQEBCwUAA4IBAQAQbiBXntrzd+tlWs9u55ut4PP8EaSmlcCO /28rMfztKRfiEPhfS0vOAlEBr4JaIcC3Q4/MxXXq0uz37WRC6fjwtsMH6F5oi3b9 yDmEVoaybzxSeO2ftru16WOfwayprF/EcvyOz+1qcsClORJtkxjTmIwUp2ceNyPM jQ7xcTOOV47oJRawv+3vP3xJ/ULsiaczGEAwmfu9Kl09vEmZg7VOl89KNWF/LFv7 mO935e53ktZ+++l4Op3P4YPWaansPH76Ign8SIWCKNVE2Ax/ua2enD+ftGGifDI8 EdQUe+08Y9O169xH4qU1xxgJe5SeiKx7tL9+3SnAL2avWDedn82W -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:15 2026 by rpki-client