This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/15iMLkZijLxFQhyhHpyZVO_Pbh0.roa File: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (raw, json) Hash identifier: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI= Subject key identifier: D7:98:8C:2E:46:62:8C:BC:45:42:1C:A1:1E:9C:99:54:EF:CF:6E:1D Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Certificate serial: 019B7C7FAEF2A5B16A4E481FA61648B562AF Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/15iMLkZijLxFQhyhHpyZVO_Pbh0.roa Signing time: Fri 02 Jan 2026 02:18:20 +0000 ROA not before: Fri 02 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35463 IP address blocks: 93.175.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ae:f2:a5:b1:6a:4e:48:1f:a6:16:48:b5:62:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Validity Not Before: Jan 2 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7988c2e46628cbc45421ca11e9c9954efcf6e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:00:05:f1:39:bf:aa:56:a0:5b:28:3c:60: 9e:86:46:82:09:20:7b:82:b2:0b:2e:cc:7f:80:27: 44:44:d4:7f:3c:45:25:71:1f:70:1d:fd:bb:c7:37: 1e:04:d6:8a:9c:c3:00:eb:f5:cc:a1:27:b0:8e:df: e0:9d:ba:46:d3:9c:a9:17:4e:ed:9a:cd:56:a9:ae: 47:eb:19:d7:ea:3d:38:ab:94:57:2e:de:33:f2:9c: 04:44:55:62:6d:3d:5a:1b:d6:d0:a7:6c:c3:2c:38: 46:e9:f7:63:b7:13:93:35:c3:ae:fc:12:a3:57:00: e7:e1:8a:6c:0c:bd:38:20:bb:9c:de:a5:ed:18:0d: c5:c4:53:f2:1b:f1:a3:44:82:c6:d4:49:0f:c2:82: 2f:16:0f:84:d0:b2:7f:cd:c6:9d:67:2b:75:07:c4: 5b:b7:f7:0a:95:5b:92:11:3c:29:fd:1b:b6:55:58: a2:8f:3a:f3:8a:1d:2c:25:fd:2a:30:d2:aa:9f:f0: 73:ca:cc:6d:2c:d2:01:d6:70:c9:2d:95:20:33:dc: f1:5c:e0:8f:8b:48:a9:5b:ab:11:58:a8:4c:48:af: e7:c4:4f:4f:b6:c2:9b:1b:24:e8:ab:ea:d2:00:04: cb:f2:19:ea:12:46:c3:4a:49:c1:a8:6f:9a:1a:03: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:8C:2E:46:62:8C:BC:45:42:1C:A1:1E:9C:99:54:EF:CF:6E:1D X509v3 Authority Key Identifier: keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/15iMLkZijLxFQhyhHpyZVO_Pbh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.175.160.0/20 Signature Algorithm: sha256WithRSAEncryption a1:7b:9e:4c:1e:1f:bb:b1:1a:67:4a:8e:7d:24:ed:2c:c4:6c: a9:e2:0e:49:36:2f:a6:81:07:9d:67:d4:88:c9:a6:cc:6e:e8: 21:09:88:6a:fe:bd:66:e7:1c:78:1a:03:47:25:af:b2:d4:e8: f8:27:f8:07:07:f4:fb:72:bc:e7:9a:90:71:e9:db:86:09:89: 37:7c:b3:01:ba:95:89:e2:08:5c:74:05:47:e6:5a:8e:7b:83: fc:4d:b5:a4:c7:55:62:9f:29:9f:8a:99:c2:03:03:17:9b:c6: f1:88:5a:df:7a:d9:e6:bc:02:3e:41:93:6a:d8:99:2f:23:35: 06:09:e5:b4:6d:ee:60:05:74:21:a3:66:fc:97:69:8b:df:08: 1c:09:74:70:fb:21:e5:0b:12:e8:be:51:61:9f:55:75:ea:5a: 6e:f7:e6:9c:ff:61:d7:aa:17:81:eb:9e:ce:1f:7a:bc:d2:43: b2:dd:9e:87:54:41:c2:95:8a:db:35:8b:cb:f6:70:c2:82:85: 64:b3:74:d7:fb:75:88:88:1b:b0:d3:20:f7:dd:d7:91:1b:94: 70:f5:0e:95:6b:e3:db:f0:49:a1:86:a0:f8:dc:c1:c6:cf:d4: cf:e0:97:09:67:c9:73:a9:81:a6:4b:05:ee:5b:8f:2e:2a:b6: ad:e2:0b:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f67ypbFqTkgfphZItWKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTQ3OWFmZTNhOWExOGUxYzM3NGZjYTAyMmQxZmYyYTI1 NWIxYWYwHhcNMjYwMTAyMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzk4OGMyZTQ2NjI4Y2JjNDU0MjFjYTExZTljOTk1NGVmY2Y2ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr4ABfE5v6pWoFsoPGCehkaCCSB7 grILLsx/gCdERNR/PEUlcR9wHf27xzceBNaKnMMA6/XMoSewjt/gnbpG05ypF07t ms1Wqa5H6xnX6j04q5RXLt4z8pwERFVibT1aG9bQp2zDLDhG6fdjtxOTNcOu/BKj VwDn4YpsDL04ILuc3qXtGA3FxFPyG/GjRILG1EkPwoIvFg+E0LJ/zcadZyt1B8Rb t/cKlVuSETwp/Ru2VViijzrzih0sJf0qMNKqn/BzysxtLNIB1nDJLZUgM9zxXOCP i0ipW6sRWKhMSK/nxE9PtsKbGyToq+rSAATL8hnqEkbDSknBqG+aGgMnjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNeYjC5GYoy8RUIcoR6cmVTvz24dMB8GA1UdIwQY MBaAFK2Uea/jqaGOHDdPygItH/KiVbGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iMmY5NjMtMzkzOS00NGM1LTliOWQt YjE2MjQyYjliZGU3LzEvMTVpTUxrWmlqTHhGUWh5aEhweVpWT19QYmgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9iMmY5NjMtMzkzOS00NGM1LTliOWQtYjE2MjQyYjliZGU3 LzEvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXa+gMA0G CSqGSIb3DQEBCwUAA4IBAQChe55MHh+7sRpnSo59JO0sxGyp4g5JNi+mgQedZ9SI yabMbughCYhq/r1m5xx4GgNHJa+y1Oj4J/gHB/T7crznmpBx6duGCYk3fLMBupWJ 4ghcdAVH5lqOe4P8TbWkx1VinymfipnCAwMXm8bxiFrfetnmvAI+QZNq2JkvIzUG CeW0be5gBXQho2b8l2mL3wgcCXRw+yHlCxLovlFhn1V16lpu9+ac/2HXqheB657O H3q80kOy3Z6HVEHClYrbNYvL9nDCgoVks3TX+3WIiBuw0yD33deRG5Rw9Q6Va+Pb 8EmhhqD43MHGz9TP4JcJZ8lzqYGmSwXuW48uKrat4gu6 -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:15 2026 by rpki-client