This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/0VaD6F-8zTBNHRy2KgpN_ZbKhWk.roa File: 0VaD6F-8zTBNHRy2KgpN_ZbKhWk.roa (raw, json) Hash identifier: 2m4aESs63czxZo2vYBxVfxjVRvdupB8O8l9lQzPEA2w= Subject key identifier: D1:56:83:E8:5F:BC:CD:30:4D:1D:1C:B6:2A:0A:4D:FD:96:CA:85:69 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C123A65B85FABB8DBB1CC89D916919E Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/0VaD6F-8zTBNHRy2KgpN_ZbKhWk.roa Signing time: Fri 02 Jan 2026 00:18:47 +0000 ROA not before: Fri 02 Jan 2026 00:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210594 IP address blocks: 95.183.206.0/23 maxlen: 23 95.183.206.0/24 maxlen: 24 95.183.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3a:65:b8:5f:ab:b8:db:b1:cc:89:d9:16:91:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d15683e85fbccd304d1d1cb62a0a4dfd96ca8569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:bc:0e:b4:6d:f9:0d:72:ee:e8:83:f0:24: 13:50:c0:6f:60:9f:a3:bd:60:2b:e2:68:61:0d:5b: cf:1e:f7:03:6e:eb:a7:61:f2:58:84:18:d3:33:ee: f5:15:92:12:d6:32:aa:5a:8b:49:36:37:d7:bc:63: f8:93:aa:1a:98:1b:08:50:52:ef:41:66:26:72:4a: e1:d9:91:93:23:05:e6:81:09:64:ad:10:8f:ba:e7: 5e:4c:78:8c:f5:37:b3:a7:97:aa:77:cc:78:94:9b: 83:55:61:fe:5a:68:ba:52:27:b3:5f:d9:a3:4a:b2: 69:34:66:d7:d7:c5:0a:97:7e:dc:fd:44:c1:f5:69: 7f:2e:50:e1:2d:21:e4:2b:00:5e:8b:bd:d6:65:28: f4:15:eb:1b:2b:47:da:3b:8f:c2:b4:ae:36:35:57: 6c:e3:15:21:58:cd:78:84:0e:30:06:b8:27:a6:84: 09:b8:b1:35:52:f0:09:21:93:e8:5e:ac:27:a5:25: fc:da:ee:05:8c:8c:75:af:88:c2:b1:8d:63:95:ce: fb:1e:b5:bd:d6:a5:b1:02:02:79:d5:29:93:3f:ef: ce:f3:32:a7:16:14:b1:f0:c8:c3:4a:4d:78:f8:e5: f8:f1:ee:4b:ba:0d:54:56:8a:31:d3:02:e1:35:e9: fc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:83:E8:5F:BC:CD:30:4D:1D:1C:B6:2A:0A:4D:FD:96:CA:85:69 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/0VaD6F-8zTBNHRy2KgpN_ZbKhWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.183.206.0/23 Signature Algorithm: sha256WithRSAEncryption ae:ec:22:c9:d0:01:f3:30:a2:1c:eb:28:13:2a:1f:80:d4:70: ef:24:a1:16:2c:c4:5f:2e:cb:b1:b9:21:74:c1:54:df:ef:51: c2:54:1b:11:52:87:35:9b:1f:70:c4:c2:05:7d:01:48:0c:89: 48:2a:a9:7a:56:4f:00:85:bb:6a:bc:c3:8b:d6:8a:9c:93:dc: 49:40:43:90:55:1c:7f:90:1e:e6:65:b8:37:c7:3c:e5:73:e9: c5:3c:9d:50:31:5a:06:98:3a:41:d9:a1:6a:e4:bf:94:9a:c8: c4:1b:6b:93:79:3b:ed:2f:f3:ab:10:26:ba:8f:3b:2d:4a:f3: 6f:2a:47:30:e4:0c:75:5f:5d:12:40:73:23:dc:2a:cd:7c:82: db:8f:bb:c3:8e:49:d2:b7:6a:65:91:5b:be:9e:d7:1f:22:d0: 96:ab:9e:8b:70:f7:25:9f:31:40:9f:a3:cb:18:8e:ff:06:f2: 5e:05:97:47:92:43:1d:be:dc:70:25:92:08:d2:0a:5f:fc:93: a7:ad:37:6c:fc:0a:ca:18:ab:35:0d:e4:97:a7:2c:5a:e8:4a: e3:ae:ff:a3:34:a5:eb:3b:b1:dd:d7:3e:33:3c:32:c6:6c:24: 4d:99:df:aa:f8:59:c3:c4:6f:14:2e:10:29:1c:f0:a3:d0:09: 84:aa:60:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EjpluF+ruNuxzInZFpGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTU2ODNlODVmYmNjZDMwNGQxZDFjYjYyYTBhNGRmZDk2Y2E4NTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza28DrRt+Q1y7uiD8CQTUMBvYJ+j vWAr4mhhDVvPHvcDbuunYfJYhBjTM+71FZIS1jKqWotJNjfXvGP4k6oamBsIUFLv QWYmckrh2ZGTIwXmgQlkrRCPuudeTHiM9Tezp5eqd8x4lJuDVWH+Wmi6UiezX9mj SrJpNGbX18UKl37c/UTB9Wl/LlDhLSHkKwBei73WZSj0FesbK0faO4/CtK42NVds 4xUhWM14hA4wBrgnpoQJuLE1UvAJIZPoXqwnpSX82u4FjIx1r4jCsY1jlc77HrW9 1qWxAgJ51SmTP+/O8zKnFhSx8MjDSk14+OX48e5Lug1UVoox0wLhNen8pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNFWg+hfvM0wTR0ctioKTf2WyoVpMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvMFZhRDZGLTh6VEJOSFJ5MktncE5fWmJLaFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX7fOMA0G CSqGSIb3DQEBCwUAA4IBAQCu7CLJ0AHzMKIc6ygTKh+A1HDvJKEWLMRfLsuxuSF0 wVTf71HCVBsRUoc1mx9wxMIFfQFIDIlIKql6Vk8AhbtqvMOL1oqck9xJQEOQVRx/ kB7mZbg3xzzlc+nFPJ1QMVoGmDpB2aFq5L+UmsjEG2uTeTvtL/OrECa6jzstSvNv Kkcw5Ax1X10SQHMj3CrNfILbj7vDjknSt2plkVu+ntcfItCWq56LcPclnzFAn6PL GI7/BvJeBZdHkkMdvtxwJZII0gpf/JOnrTds/ArKGKs1DeSXpyxa6Erjrv+jNKXr O7Hd1z4zPDLGbCRNmd+q+FnDxG8ULhApHPCj0AmEqmBw -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:27 2026 by rpki-client