This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/1VDI8LOlZotQXEwbdB6SzbnLPM4.roa File: 1VDI8LOlZotQXEwbdB6SzbnLPM4.roa (raw, json) Hash identifier: l27UrnMvu8nzJebzCXh2pQXrYsMLQuNNu0v0Sq6JVOs= Subject key identifier: D5:50:C8:F0:B3:A5:66:8B:50:5C:4C:1B:74:1E:92:CD:B9:CB:3C:CE Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b Certificate serial: 019B7758D3388B3AD200422FDB486B2BDC1D Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/1VDI8LOlZotQXEwbdB6SzbnLPM4.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204457 IP address blocks: 195.170.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d3:38:8b:3a:d2:00:42:2f:db:48:6b:2b:dc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d550c8f0b3a5668b505c4c1b741e92cdb9cb3cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:13:ce:65:29:41:b3:78:1c:04:f0:30:a3: 63:1b:27:6c:ef:7e:a0:e0:d7:52:e1:dc:dd:6d:ce: cc:83:15:7d:3a:ae:c5:00:6f:17:9c:9b:34:54:ca: 20:01:92:04:84:4b:25:f7:c0:de:cf:1c:11:6d:b1: 23:89:bc:3e:70:58:76:62:35:b6:e9:61:96:ec:3f: 34:01:aa:d2:c7:34:67:da:bb:8a:a6:9f:7e:6b:1a: da:b8:c0:45:be:e1:db:0c:6f:2d:e0:01:dd:2d:be: 17:fd:b1:98:de:6c:d2:76:34:6c:de:30:b4:6a:9a: a0:63:96:15:b9:75:f5:96:48:cb:17:f5:5c:60:8a: 36:aa:db:af:8a:d3:05:f3:f9:40:0d:48:04:59:7b: 27:aa:f9:77:f8:2f:34:aa:65:32:68:95:5a:e7:ff: e8:53:2f:b7:37:df:4e:d3:a9:5c:84:d8:9b:88:1a: 93:ce:0f:b2:91:21:df:c8:1d:89:c0:86:16:db:01: 04:af:ab:1d:c5:35:25:2d:6d:3b:ae:f0:1f:b2:41: fc:45:50:87:ea:66:dd:1c:f8:7b:04:56:c9:05:a4: 4c:8b:66:50:6d:c4:60:f4:84:38:71:0a:23:a6:9c: 62:5e:d5:66:3b:19:59:33:9e:e8:76:9c:e6:0d:08: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:50:C8:F0:B3:A5:66:8B:50:5C:4C:1B:74:1E:92:CD:B9:CB:3C:CE X509v3 Authority Key Identifier: keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/1VDI8LOlZotQXEwbdB6SzbnLPM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.170.186.0/24 Signature Algorithm: sha256WithRSAEncryption 54:4e:0b:4e:94:63:bb:d3:83:91:0a:0d:8f:fc:8a:3b:c0:e8: 1c:e1:b4:24:d6:f6:cc:74:5e:34:7e:ab:47:fd:c5:3c:36:19: c6:ad:63:65:f8:23:62:f0:a3:95:f6:7e:5b:45:71:0a:8c:79: 6b:a2:2e:02:cc:57:f1:09:f8:42:dc:d0:78:25:67:aa:52:9b: a4:12:8d:c8:bd:bd:4f:6d:c1:cb:63:e2:e5:d0:b7:f0:77:e7: a9:81:66:16:60:09:1d:4c:f7:09:62:f2:d7:0a:63:3b:d8:cc: a6:5e:4c:04:5e:bb:4c:63:f4:cd:49:d4:d0:56:85:4b:4e:51: aa:4d:5d:66:ef:67:63:c9:d8:96:7b:a1:df:16:04:1f:91:3c: b9:79:26:8e:0e:bc:ab:fd:3e:9c:38:38:01:39:19:3c:42:55: 32:32:72:53:ec:f9:c9:c6:d5:1b:fe:ef:43:f2:2e:6d:30:fa: 15:e0:d5:d7:f4:44:9a:c9:a3:cd:49:54:92:71:e5:e2:16:7d: b2:21:03:fc:74:60:41:a6:10:10:42:b8:13:ba:28:ac:f3:15: e8:47:59:f8:3e:80:20:f0:4c:ff:8c:18:b3:0f:b2:9c:e7:e0: 57:26:dc:dd:f8:69:62:c9:f2:92:9e:d6:29:f1:c0:a0:73:88: bb:5d:17:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNM4izrSAEIv20hrK9wdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTEyZTJjNjFkMmE4MGU3YzQzODVjNjA4NThjOTFkNzVm MzFlN2IwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTUwYzhmMGIzYTU2NjhiNTA1YzRjMWI3NDFlOTJjZGI5Y2IzY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz8TzmUpQbN4HATwMKNjGyds736g 4NdS4dzdbc7MgxV9Oq7FAG8XnJs0VMogAZIEhEsl98DezxwRbbEjibw+cFh2YjW2 6WGW7D80AarSxzRn2ruKpp9+axrauMBFvuHbDG8t4AHdLb4X/bGY3mzSdjRs3jC0 apqgY5YVuXX1lkjLF/VcYIo2qtuvitMF8/lADUgEWXsnqvl3+C80qmUyaJVa5//o Uy+3N99O06lchNibiBqTzg+ykSHfyB2JwIYW2wEEr6sdxTUlLW07rvAfskH8RVCH 6mbdHPh7BFbJBaRMi2ZQbcRg9IQ4cQojppxiXtVmOxlZM57odpzmDQjUhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNVQyPCzpWaLUFxMG3Qeks25yzzOMB8GA1UdIwQY MBaAFC4RLixh0qgOfEOFxghYyR118x57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEt OTZkMjI4NjFhOTIyLzEvMVZESThMT2xab3RRWEV3YmRCNlN6Ym5MUE00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEtOTZkMjI4NjFhOTIy LzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6q6MA0G CSqGSIb3DQEBCwUAA4IBAQBUTgtOlGO704ORCg2P/Io7wOgc4bQk1vbMdF40fqtH /cU8NhnGrWNl+CNi8KOV9n5bRXEKjHlroi4CzFfxCfhC3NB4JWeqUpukEo3Ivb1P bcHLY+Ll0Lfwd+epgWYWYAkdTPcJYvLXCmM72MymXkwEXrtMY/TNSdTQVoVLTlGq TV1m72djydiWe6HfFgQfkTy5eSaODryr/T6cODgBORk8QlUyMnJT7PnJxtUb/u9D 8i5tMPoV4NXX9ESayaPNSVSSceXiFn2yIQP8dGBBphAQQrgTuiis8xXoR1n4PoAg 8Ez/jBizD7Kc5+BXJtzd+GliyfKSntYp8cCgc4i7XRcZ -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:54 2026 by rpki-client