This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/0LzCBx0QZRSAfZaRMo_cS4BQtQE.roa File: 0LzCBx0QZRSAfZaRMo_cS4BQtQE.roa (raw, json) Hash identifier: 7o32IoSE1cfCxEZcczuy7FXmMXs2mDb+wYFqA7QXBeM= Subject key identifier: D0:BC:C2:07:1D:10:65:14:80:7D:96:91:32:8F:DC:4B:80:50:B5:01 Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Certificate serial: 019B79ED080AF3899CACCBC70EACDDF1DD27 Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/0LzCBx0QZRSAfZaRMo_cS4BQtQE.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36385 IP address blocks: 185.25.30.0/24 maxlen: 24 2a00:79e0:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:08:0a:f3:89:9c:ac:cb:c7:0e:ac:dd:f1:dd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0bcc2071d106514807d9691328fdc4b8050b501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:6a:73:31:5b:4f:e7:87:64:c1:ab:12:d4: 14:3c:7d:87:b9:cd:7a:8a:49:8e:e9:80:ab:f4:a3: d3:e4:8b:96:5b:cc:33:e1:e7:5a:c8:7a:c7:f4:e0: aa:0b:cc:cf:e5:40:fc:61:f1:39:a2:3a:66:80:55: 1c:b8:38:a2:fd:18:7d:be:12:44:9f:65:84:2b:db: ac:70:c2:66:2b:0b:e9:ba:9d:79:a1:e6:c4:0a:da: 65:8f:77:38:a5:17:26:28:dc:dc:57:93:0d:71:83: df:d8:60:b2:a0:51:8c:84:0b:0f:ff:66:12:21:d2: 0d:6f:00:41:a9:54:c7:9d:83:97:1c:69:53:60:60: 36:76:d4:1b:38:06:6d:f7:58:15:af:69:90:78:8a: 37:36:1c:a7:9d:6a:15:70:ad:af:04:c6:95:30:b9: 2c:7c:0c:26:f2:00:9e:fc:3a:74:a1:be:eb:7b:21: 89:59:c4:3b:64:9f:91:0a:aa:e7:73:9e:0a:22:99: 13:c0:2d:14:02:d8:c4:ab:5f:28:4d:c3:c4:8e:cc: 4b:17:3d:80:95:62:54:84:92:51:d9:c6:4e:9f:b6: 5b:2b:31:b1:dc:0b:60:19:24:ec:3b:ad:bf:fa:c8: 14:53:4c:3f:de:d1:eb:f8:bb:4c:49:8f:b8:5b:1b: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BC:C2:07:1D:10:65:14:80:7D:96:91:32:8F:DC:4B:80:50:B5:01 X509v3 Authority Key Identifier: keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/0LzCBx0QZRSAfZaRMo_cS4BQtQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.30.0/24 IPv6: 2a00:79e0:101::/48 Signature Algorithm: sha256WithRSAEncryption 86:0c:f9:d0:12:71:86:96:6c:83:34:26:7c:c5:76:0b:d1:98: 59:cd:53:5d:e4:23:b3:fc:b0:73:b4:88:54:f6:37:a0:4f:ff: 08:e6:d5:d1:c7:54:8b:35:b9:87:78:3b:e8:7c:70:70:8f:03: 6f:0a:f2:01:34:ae:8e:03:49:c5:28:56:c5:f0:08:cd:b1:84: 9d:03:f5:f1:b0:86:b0:e8:86:1b:c9:b4:59:0b:1a:c7:38:49: 7c:2a:2f:d7:52:c9:b3:5b:86:0a:14:9e:fd:25:5d:b2:09:b9: f2:a1:dd:14:b4:72:65:72:62:2d:1a:40:15:e4:db:07:a0:a3: de:53:1f:1a:e0:15:ce:2f:70:37:49:fb:bc:31:a7:95:8a:f9: 75:ea:54:c2:e1:7b:bf:b6:33:0d:b7:b1:cb:5b:96:c2:59:46: 29:2f:69:d0:e3:19:00:ed:bb:93:0d:2b:a3:64:7f:72:77:0a: b2:1c:82:34:ec:e3:9e:76:cb:77:8f:a0:90:90:81:e4:fc:da: 7f:85:06:c2:13:8d:c1:96:7a:8d:1b:09:93:0d:b4:77:1b:fe: ab:e0:5a:50:d5:28:9d:17:9a:a2:e5:47:94:42:3e:25:31:ea: f9:b3:26:8b:c9:19:65:67:fc:34:bd:ca:55:7c:78:73:63:c0: 4b:c6:25:bb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57QgK84mcrMvHDqzd8d0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzQ3ZmJlMjZjOWNkZDc2MjhhZGZlZGI1N2I3OGJlOGRl NzVlMjkwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGJjYzIwNzFkMTA2NTE0ODA3ZDk2OTEzMjhmZGM0YjgwNTBiNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt65qczFbT+eHZMGrEtQUPH2Huc16 ikmO6YCr9KPT5IuWW8wz4edayHrH9OCqC8zP5UD8YfE5ojpmgFUcuDii/Rh9vhJE n2WEK9uscMJmKwvpup15oebECtplj3c4pRcmKNzcV5MNcYPf2GCyoFGMhAsP/2YS IdINbwBBqVTHnYOXHGlTYGA2dtQbOAZt91gVr2mQeIo3NhynnWoVcK2vBMaVMLks fAwm8gCe/Dp0ob7reyGJWcQ7ZJ+RCqrnc54KIpkTwC0UAtjEq18oTcPEjsxLFz2A lWJUhJJR2cZOn7ZbKzGx3AtgGSTsO62/+sgUU0w/3tHr+LtMSY+4WxsOSwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNC8wgcdEGUUgH2WkTKP3EuAULUBMB8GA1UdIwQY MBaAFMB0f74myc3XYorf7bV7eL6N514pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDIt MzY4NjA4Mzg1ODgzLzEvMEx6Q0J4MFFaUlNBZlphUk1vX2NTNEJRdFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDItMzY4NjA4Mzg1ODgz LzEvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuRkeMA8E AgACMAkDBwAqAHngAQEwDQYJKoZIhvcNAQELBQADggEBAIYM+dAScYaWbIM0JnzF dgvRmFnNU13kI7P8sHO0iFT2N6BP/wjm1dHHVIs1uYd4O+h8cHCPA28K8gE0ro4D ScUoVsXwCM2xhJ0D9fGwhrDohhvJtFkLGsc4SXwqL9dSybNbhgoUnv0lXbIJufKh 3RS0cmVyYi0aQBXk2wego95THxrgFc4vcDdJ+7wxp5WK+XXqVMLhe7+2Mw23sctb lsJZRikvadDjGQDtu5MNK6Nkf3J3CrIcgjTs4552y3ePoJCQgeT82n+FBsITjcGW eo0bCZMNtHcb/qvgWlDVKJ0XmqLlR5RCPiUx6vmzJovJGWVn/DS9ylV8eHNjwEvG Jbs= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:42 2026 by rpki-client