This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa File: CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa (raw, json) Hash identifier: gRQv5O+XgMBfojo8WrrSJ295oJBia/Hac6oJn0s/JA4= Subject key identifier: 09:5D:03:6B:48:43:85:32:26:3C:07:CD:10:A8:35:66:6A:BE:B7:86 Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Certificate serial: 019B7B365794409CB0C5097BC2220D6D586C Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2541 IP address blocks: 193.169.144.0/24 maxlen: 24 193.169.145.0/24 maxlen: 24 195.78.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:57:94:40:9c:b0:c5:09:7b:c2:22:0d:6d:58:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=095d036b48438532263c07cd10a835666abeb786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1d:0e:ab:81:4c:37:a3:d4:8a:72:40:94:5b: 5a:a8:98:61:54:3f:10:e9:3d:5f:5d:1d:c3:44:a9: 65:50:58:8a:59:76:f2:a1:e6:0d:76:9e:77:d3:ce: b1:12:0b:64:8c:b7:7d:1a:fe:e9:25:cc:53:0d:cf: da:36:b7:79:ac:7f:87:05:1b:b3:c6:8b:42:71:7c: 8f:5c:2b:75:20:b6:f5:b6:d0:74:38:55:b9:f7:30: e5:3b:44:5e:80:27:28:bd:ab:f0:97:c5:2b:12:fc: 01:4d:bb:62:c0:2d:47:b4:f4:6e:36:81:d2:93:6c: 00:38:aa:08:ef:47:81:88:5a:64:7b:d2:21:96:8c: 0b:37:ac:f8:4f:10:f8:22:c3:40:c4:6a:dd:77:65: 01:6c:de:77:2a:65:39:15:8e:ff:57:3a:80:c8:35: fb:b1:30:6a:9b:16:b7:00:06:48:73:41:af:e9:54: d7:78:1e:37:1b:60:ff:a1:75:78:85:17:7c:29:8b: a4:65:f2:5a:bd:19:b7:0c:f1:04:9b:49:b5:e9:01: d4:95:b9:8a:13:6f:6c:15:7b:aa:9c:bb:e0:3e:32: f2:6a:53:21:61:4e:90:a1:3e:f3:1f:4c:bb:fb:a3: 0c:fa:f2:12:81:34:ad:b9:69:1d:38:1d:cd:fa:24: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5D:03:6B:48:43:85:32:26:3C:07:CD:10:A8:35:66:6A:BE:B7:86 X509v3 Authority Key Identifier: keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.144.0/23 195.78.124.0/24 Signature Algorithm: sha256WithRSAEncryption 77:30:51:8d:d0:5b:3f:f7:b7:9b:17:6d:26:c3:f4:f4:0e:de: 83:06:7e:95:00:38:5b:d2:19:21:07:ff:82:09:6e:40:78:20: a7:40:14:50:47:58:c4:55:67:6f:56:b2:f4:c0:dd:77:56:cb: 56:49:c9:8e:cc:4f:45:a0:76:94:b3:a0:d8:ce:6e:a0:b7:d7: b1:52:6e:8e:f7:2f:d3:25:e2:46:69:3a:e1:cd:ce:70:b3:04: 07:c0:0d:db:22:8d:f2:3c:90:45:65:ce:50:bb:1d:f9:3e:d0: 31:45:d2:0c:b6:c0:67:91:8e:2a:e1:1f:4d:61:59:63:90:aa: 9b:fd:dc:f9:a0:58:ad:8a:43:79:e9:03:fe:5d:91:4d:e9:f7: 87:c9:db:a4:7b:96:97:1d:43:82:7f:d0:5b:5a:be:9a:ad:22: 54:75:73:06:a7:9d:a7:1b:96:3d:6a:10:4b:7c:0a:f1:e3:0f: ea:96:0e:18:d7:8c:20:84:a3:9c:4a:58:18:c0:c4:57:b1:7b: 2c:bb:2c:d5:c2:3a:97:05:93:99:60:3c:3f:97:55:29:35:6e: a6:a6:23:a0:6d:8b:bf:9b:1a:7b:c1:6a:d0:d6:47:21:12:87: f6:7f:7d:a0:4d:f9:06:a4:6b:14:98:30:7a:d8:9e:f6:f2:b7: 92:26:e5:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NleUQJywxQl7wiINbVhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4 MTNjNWYwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTVkMDM2YjQ4NDM4NTMyMjYzYzA3Y2QxMGE4MzU2NjZhYmViNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x0Oq4FMN6PUinJAlFtaqJhhVD8Q 6T1fXR3DRKllUFiKWXbyoeYNdp53086xEgtkjLd9Gv7pJcxTDc/aNrd5rH+HBRuz xotCcXyPXCt1ILb1ttB0OFW59zDlO0RegCcovavwl8UrEvwBTbtiwC1HtPRuNoHS k2wAOKoI70eBiFpke9IhlowLN6z4TxD4IsNAxGrdd2UBbN53KmU5FY7/VzqAyDX7 sTBqmxa3AAZIc0Gv6VTXeB43G2D/oXV4hRd8KYukZfJavRm3DPEEm0m16QHUlbmK E29sFXuqnLvgPjLyalMhYU6QoT7zH0y7+6MM+vISgTStuWkdOB3N+iSMNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAldA2tIQ4UyJjwHzRCoNWZqvreGMB8GA1UdIwQY MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt ZDQ4YjQyZWYxNTliLzEvQ1YwRGEwaERoVEltUEFmTkVLZzFabXEtdDRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwamQAwQA w058MA0GCSqGSIb3DQEBCwUAA4IBAQB3MFGN0Fs/97ebF20mw/T0Dt6DBn6VADhb 0hkhB/+CCW5AeCCnQBRQR1jEVWdvVrL0wN13VstWScmOzE9FoHaUs6DYzm6gt9ex Um6O9y/TJeJGaTrhzc5wswQHwA3bIo3yPJBFZc5Qux35PtAxRdIMtsBnkY4q4R9N YVljkKqb/dz5oFitikN56QP+XZFN6feHyduke5aXHUOCf9BbWr6arSJUdXMGp52n G5Y9ahBLfArx4w/qlg4Y14wghKOcSlgYwMRXsXssuyzVwjqXBZOZYDw/l1UpNW6m piOgbYu/mxp7wWrQ1kchEof2f32gTfkGpGsUmDB62J728reSJuXF -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:21 2026 by rpki-client