This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/k0coC-QadGBljeKScMCAtx8QX4Q.roa File: k0coC-QadGBljeKScMCAtx8QX4Q.roa (raw, json) Hash identifier: E/h3yL1SbATGtsfEf3MJ69IbI4RkOLbjL6ffYtoQXYE= Subject key identifier: 93:47:28:0B:E4:1A:74:60:65:8D:E2:92:70:C0:80:B7:1F:10:5F:84 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C72FFBEA3884C68B71E54D46296DBB Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/k0coC-QadGBljeKScMCAtx8QX4Q.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34879 IP address blocks: 195.208.64.0/24 maxlen: 24 195.208.65.0/24 maxlen: 24 195.208.66.0/24 maxlen: 24 195.208.67.0/24 maxlen: 24 195.208.68.0/24 maxlen: 24 195.208.69.0/24 maxlen: 24 195.208.70.0/24 maxlen: 24 195.208.71.0/24 maxlen: 24 195.208.72.0/24 maxlen: 24 195.208.73.0/24 maxlen: 24 195.208.74.0/24 maxlen: 24 195.208.75.0/24 maxlen: 24 195.208.76.0/24 maxlen: 24 195.208.77.0/24 maxlen: 24 195.209.64.0/24 maxlen: 24 195.209.65.0/24 maxlen: 24 195.209.66.0/24 maxlen: 24 195.209.67.0/24 maxlen: 24 195.209.68.0/24 maxlen: 24 195.209.69.0/24 maxlen: 24 195.209.70.0/24 maxlen: 24 195.209.71.0/24 maxlen: 24 195.209.72.0/23 maxlen: 24 195.209.74.0/24 maxlen: 24 195.209.75.0/24 maxlen: 24 195.209.76.0/24 maxlen: 24 195.209.77.0/24 maxlen: 24 195.209.78.0/24 maxlen: 24 195.209.79.0/24 maxlen: 24 195.209.80.0/24 maxlen: 24 195.209.81.0/24 maxlen: 24 195.209.82.0/24 maxlen: 24 195.209.83.0/24 maxlen: 24 195.209.84.0/24 maxlen: 24 195.209.85.0/24 maxlen: 24 195.209.86.0/24 maxlen: 24 195.209.87.0/24 maxlen: 24 195.209.88.0/21 maxlen: 24 195.209.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2f:fb:ea:38:84:c6:8b:71:e5:4d:46:29:6d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9347280be41a7460658de29270c080b71f105f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:5b:57:63:09:64:f6:73:ee:dd:c6:59:89: aa:c7:cf:78:10:3f:3a:22:ab:6a:3c:a9:16:df:8a: 4f:7d:a8:18:97:17:b8:fe:a3:e4:b7:c6:12:5c:7f: 21:be:24:50:4a:e9:9b:3b:1a:74:18:a1:c2:c4:f3: 87:65:7f:64:6e:bd:0f:7b:bf:4c:c4:70:f8:00:f8: 7a:fa:27:21:70:5c:90:50:12:3a:e6:22:54:c2:71: 5c:78:b8:9d:5a:56:7d:89:e6:8b:e9:19:fb:c9:22: 23:45:90:a4:07:e7:b1:33:48:1b:5c:19:e2:b0:1b: b3:1d:22:af:72:0b:fc:48:c8:34:f3:bb:8b:af:ae: 26:c8:28:45:b2:d2:5d:cc:47:b6:4a:d7:5e:a0:39: 3c:7d:ab:85:b7:ba:9b:0c:06:09:16:68:5e:2b:6f: b5:d0:b9:da:7f:78:1c:20:20:8c:3f:27:04:16:ad: 53:89:02:fd:46:0d:d7:bb:c9:1a:98:3b:ef:73:36: e8:42:9e:c7:8e:95:7a:a8:66:5d:bf:2e:0a:f5:30: 9c:ac:8f:1e:19:64:1f:a7:b5:94:58:5e:8e:20:b6: c4:50:51:94:08:0d:22:fc:81:ea:00:43:d4:cd:ae: a5:17:77:e3:f3:f7:91:89:51:51:bf:f0:c3:cf:25: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:47:28:0B:E4:1A:74:60:65:8D:E2:92:70:C0:80:B7:1F:10:5F:84 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/k0coC-QadGBljeKScMCAtx8QX4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.208.64.0-195.208.77.255 195.209.64.0/19 195.209.192.0/20 Signature Algorithm: sha256WithRSAEncryption b3:8f:58:ce:23:a3:43:28:08:17:dd:42:e3:b2:59:e9:c3:65: b4:2a:f6:53:05:7c:40:2d:4a:d0:c0:d1:b3:9a:cb:36:3c:65: c2:2b:0d:3e:bd:44:13:c2:fe:02:23:88:2d:8d:29:f0:7c:f8: 17:23:99:52:34:6e:0a:69:1c:33:f0:d8:e0:2a:cc:01:c9:b3: 72:3b:c7:e5:d1:72:a3:4b:2d:bd:2d:36:04:1d:e9:d0:ab:77: f1:07:36:53:ce:95:9b:0c:1f:82:56:e2:1f:2d:ab:ae:16:a6: 24:4f:29:ca:57:0b:c2:61:97:16:8c:8e:6c:ab:85:98:74:a4: 07:cd:da:a0:65:e9:c8:59:cd:84:be:b9:0b:9a:2d:5a:2d:f0: 8c:b5:28:8d:a6:34:ab:72:c2:c3:7b:5f:6c:1f:39:f8:4d:a5: a1:ac:c1:99:a0:ba:d8:40:40:d2:94:eb:5f:45:b6:2e:84:9a: 41:c7:3b:0a:46:8d:2e:e0:d0:97:37:57:04:51:8b:ba:b8:ce: 0c:0e:e2:d6:8d:5c:e2:c2:63:f4:51:89:df:2a:82:e7:5f:07: 8b:07:a0:c0:d8:01:7f:35:de:27:5e:25:21:90:18:aa:4b:66: 2d:4e:53:4f:2e:43:b3:05:4a:63:39:30:88:44:58:01:cf:79: d1:c3:f1:4b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3xy/76jiExotx5U1GKW27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzQ3MjgwYmU0MWE3NDYwNjU4ZGUyOTI3MGMwODBiNzFmMTA1Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup1bV2MJZPZz7t3GWYmqx894ED86 IqtqPKkW34pPfagYlxe4/qPkt8YSXH8hviRQSumbOxp0GKHCxPOHZX9kbr0Pe79M xHD4APh6+ichcFyQUBI65iJUwnFceLidWlZ9ieaL6Rn7ySIjRZCkB+exM0gbXBni sBuzHSKvcgv8SMg087uLr64myChFstJdzEe2StdeoDk8fauFt7qbDAYJFmheK2+1 0Lnaf3gcICCMPycEFq1TiQL9Rg3Xu8kamDvvczboQp7HjpV6qGZdvy4K9TCcrI8e GWQfp7WUWF6OILbEUFGUCA0i/IHqAEPUza6lF3fj8/eRiVFRv/DDzyUlswIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJNHKAvkGnRgZY3iknDAgLcfEF+EMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvazBjb0MtUWFkR0JsamVLU2NNQ0F0eDhRWDRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAbD0EAD BAHD0EwDBAXD0UADBATD0cAwDQYJKoZIhvcNAQELBQADggEBALOPWM4jo0MoCBfd QuOyWenDZbQq9lMFfEAtStDA0bOayzY8ZcIrDT69RBPC/gIjiC2NKfB8+BcjmVI0 bgppHDPw2OAqzAHJs3I7x+XRcqNLLb0tNgQd6dCrd/EHNlPOlZsMH4JW4h8tq64W piRPKcpXC8JhlxaMjmyrhZh0pAfN2qBl6chZzYS+uQuaLVot8Iy1KI2mNKtywsN7 X2wfOfhNpaGswZmguthAQNKU619Fti6EmkHHOwpGjS7g0Jc3VwRRi7q4zgwO4taN XOLCY/RRid8qgudfB4sHoMDYAX813ideJSGQGKpLZi1OU08uQ7MFSmM5MIhEWAHP edHD8Us= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:51 2026 by rpki-client