This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/0aV-tHfpu8rpkUoVNaMM6FE4FdE.roa File: 0aV-tHfpu8rpkUoVNaMM6FE4FdE.roa (raw, json) Hash identifier: KP4i5VhWoAFHGaSkT7VTeYsqIMIZacJTjVM3FavYgB4= Subject key identifier: D1:A5:7E:B4:77:E9:BB:CA:E9:91:4A:15:35:A3:0C:E8:51:38:15:D1 Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647 Certificate serial: 019B76EB2A0FA3B81E74D7F9F988F064567C Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/0aV-tHfpu8rpkUoVNaMM6FE4FdE.roa Signing time: Thu 01 Jan 2026 00:18:01 +0000 ROA not before: Thu 01 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13039 IP address blocks: 195.85.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2a:0f:a3:b8:1e:74:d7:f9:f9:88:f0:64:56:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1a57eb477e9bbcae9914a1535a30ce8513815d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:60:8e:92:5e:32:68:49:b2:d6:6a:07:5a: 33:eb:e5:ed:1a:ce:17:a3:13:5c:b9:20:f8:a3:08: 8b:62:e2:9e:b2:53:5f:0c:2d:56:84:07:c9:b4:ac: c5:31:40:20:e4:43:b7:49:ab:0e:48:bd:76:3e:0c: 3c:92:2f:5a:bc:48:c1:37:b4:0a:e5:66:b7:6a:e4: 7e:04:af:fd:57:6d:9c:fe:76:85:d0:27:98:35:4b: a1:7e:c6:dc:10:45:6a:89:fb:aa:26:10:e3:0f:bf: 33:9d:fb:34:e4:96:a5:90:c9:7b:f0:54:37:73:15: 26:a6:fa:f0:cf:a8:b1:4e:44:a5:c5:37:37:51:9c: 45:a0:16:1a:1d:2d:9c:3f:47:37:d4:15:b0:8d:85: 4f:33:95:64:92:d9:a7:e2:1c:25:6c:48:0a:20:44: 11:2c:81:af:69:7c:b8:9c:04:cc:41:08:d4:d3:4e: fd:d9:6a:8b:b8:72:5a:57:5f:8f:ff:de:e4:00:28: 4d:42:38:2c:5f:54:1b:50:09:8a:7b:44:69:e3:57: 56:3e:d2:f9:c7:8a:56:78:e5:d5:87:8a:4e:33:7f: 30:ff:0a:c5:99:8e:ae:79:60:e3:59:93:a7:96:68: 8a:1f:d1:01:db:07:2f:92:5c:b5:99:64:54:c4:95: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A5:7E:B4:77:E9:BB:CA:E9:91:4A:15:35:A3:0C:E8:51:38:15:D1 X509v3 Authority Key Identifier: keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/0aV-tHfpu8rpkUoVNaMM6FE4FdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.240.0/24 Signature Algorithm: sha256WithRSAEncryption 59:dc:d2:ea:8b:7f:09:43:f1:82:3f:02:05:b1:98:47:7a:ab: 58:8a:1e:29:ef:43:9e:f7:69:f5:c6:81:1e:9d:10:86:72:57: a4:f6:bf:5b:8a:06:7e:54:39:a2:78:7e:8c:72:9f:b5:bf:54: 3d:9f:47:a2:68:29:40:6d:2e:bd:13:e1:94:ed:25:44:d8:85: 1f:14:bc:6c:79:2d:88:df:95:87:40:40:ab:c9:72:e6:a5:42: ef:1f:78:00:c1:b6:ad:2f:a4:cd:76:c1:5f:1a:db:ce:61:6b: 6c:ac:a7:b9:b4:d1:9c:cb:54:28:1c:a6:1e:0d:a0:2d:07:bd: 83:81:c1:63:04:9e:a7:a4:55:6b:48:0b:ad:e1:53:51:c7:92: 9f:0e:e3:6a:cc:a3:0f:c1:a4:24:55:32:6f:ba:ee:69:5a:1b: 66:2c:3e:d5:06:44:73:76:6e:2e:fb:55:b8:3b:3a:bf:9d:62: 35:55:e8:51:70:88:c8:49:6e:a2:e9:41:e4:c4:e3:51:3d:cf: e7:9b:8f:76:38:1a:ba:18:ab:5a:21:60:4c:b8:0a:73:1c:4a: 12:3e:3e:83:fe:c2:a1:40:90:d5:e5:6f:13:f4:ab:31:64:58: f3:63:d3:00:34:29:bb:1c:8b:3c:92:ed:0b:56:09:97:7a:e5: d5:f1:33:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yoPo7gedNf5+YjwZFZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzODFmNzIwODJlMzEyMDY5ZDgzZDlhZjRmMzE5Y2YwYWY4 MDM2NDcwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWE1N2ViNDc3ZTliYmNhZTk5MTRhMTUzNWEzMGNlODUxMzgxNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VdgjpJeMmhJstZqB1oz6+XtGs4X oxNcuSD4owiLYuKeslNfDC1WhAfJtKzFMUAg5EO3SasOSL12Pgw8ki9avEjBN7QK 5Wa3auR+BK/9V22c/naF0CeYNUuhfsbcEEVqifuqJhDjD78znfs05JalkMl78FQ3 cxUmpvrwz6ixTkSlxTc3UZxFoBYaHS2cP0c31BWwjYVPM5Vkktmn4hwlbEgKIEQR LIGvaXy4nATMQQjU00792WqLuHJaV1+P/97kAChNQjgsX1QbUAmKe0Rp41dWPtL5 x4pWeOXVh4pOM38w/wrFmY6ueWDjWZOnlmiKH9EB2wcvkly1mWRUxJUwqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGlfrR36bvK6ZFKFTWjDOhROBXRMB8GA1UdIwQY MBaAFGOB9yCC4xIGnYPZr08xnPCvgDZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAt MjBlZjQyYzliYzM4LzEvMGFWLXRIZnB1OHJwa1VvVk5hTU02RkU0RmRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAtMjBlZjQyYzliYzM4 LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XwMA0G CSqGSIb3DQEBCwUAA4IBAQBZ3NLqi38JQ/GCPwIFsZhHeqtYih4p70Oe92n1xoEe nRCGclek9r9bigZ+VDmieH6Mcp+1v1Q9n0eiaClAbS69E+GU7SVE2IUfFLxseS2I 35WHQECryXLmpULvH3gAwbatL6TNdsFfGtvOYWtsrKe5tNGcy1QoHKYeDaAtB72D gcFjBJ6npFVrSAut4VNRx5KfDuNqzKMPwaQkVTJvuu5pWhtmLD7VBkRzdm4u+1W4 Ozq/nWI1VehRcIjISW6i6UHkxONRPc/nm492OBq6GKtaIWBMuApzHEoSPj6D/sKh QJDV5W8T9KsxZFjzY9MANCm7HIs8ku0LVgmXeuXV8TO0 -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:23 2026 by rpki-client