This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/0CSlGIx0OwbwIhlMLuRynXyuKoY.roa File: 0CSlGIx0OwbwIhlMLuRynXyuKoY.roa (raw, json) Hash identifier: lWoSiXzEyVBM+dBqTVH3J+MjpuIW59UUJj+VrqqRdHY= Subject key identifier: D0:24:A5:18:8C:74:3B:06:F0:22:19:4C:2E:E4:72:9D:7C:AE:2A:86 Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Certificate serial: 019A8B9E96B3B56BCA519422533B88455641 Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/0CSlGIx0OwbwIhlMLuRynXyuKoY.roa Signing time: Sun 16 Nov 2025 07:43:37 +0000 ROA not before: Sun 16 Nov 2025 07:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58180 IP address blocks: 86.54.201.0/24 maxlen: 24 195.206.120.0/24 maxlen: 24 2a14:9380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8b:9e:96:b3:b5:6b:ca:51:94:22:53:3b:88:45:56:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Validity Not Before: Nov 16 07:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d024a5188c743b06f022194c2ee4729d7cae2a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d3:46:16:d1:77:e2:d7:e5:58:36:c7:3d:62: 62:5a:99:99:29:30:ac:c3:44:13:02:f2:0f:ba:b2: 7a:97:6d:a9:38:ff:2d:31:8c:11:82:b0:02:b1:3f: 4d:31:e3:6d:80:a1:06:c9:8a:98:51:a5:99:51:4e: 03:8c:42:a1:ba:a0:95:3f:e0:47:ef:f2:92:b0:59: 29:fe:8f:8b:bc:f3:ec:74:c3:db:8e:5e:19:ca:82: fc:dc:aa:51:bd:f0:c5:6e:e8:c6:0c:a2:f0:f0:77: 12:aa:f5:8e:3b:42:27:af:e1:30:25:37:8b:b8:80: 8c:0e:1f:7a:36:cd:e0:27:67:59:3b:2f:a7:51:4e: f5:6c:96:03:5f:75:a7:ac:fc:d1:b4:19:5b:df:f2: 25:7a:4d:64:29:2e:03:ff:ea:eb:ee:d0:63:2a:c7: 03:d4:e1:53:43:85:24:96:a3:ad:1f:3b:1e:b8:11: 57:eb:4c:78:1b:77:f9:4d:e7:8a:4d:10:30:6c:eb: bd:35:50:21:af:4d:7d:9d:f8:63:44:93:52:94:65: 7f:96:c8:f8:5f:66:e9:39:7e:52:2b:84:e1:0d:17: 9b:d1:8a:84:83:84:44:b6:80:dd:80:5a:55:b7:6d: ba:0f:c2:93:56:20:de:15:3d:95:3b:03:de:1f:f3: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:24:A5:18:8C:74:3B:06:F0:22:19:4C:2E:E4:72:9D:7C:AE:2A:86 X509v3 Authority Key Identifier: keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/0CSlGIx0OwbwIhlMLuRynXyuKoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.201.0/24 195.206.120.0/24 IPv6: 2a14:9380::/32 Signature Algorithm: sha256WithRSAEncryption 48:4e:6c:e8:b0:a5:48:24:1f:6e:b3:ea:b5:5e:50:04:ee:74: ba:85:73:80:b9:16:f3:01:98:9d:c2:df:6e:42:db:aa:91:12: aa:4f:dc:95:ea:f6:26:60:b9:de:ad:8e:21:b5:9f:11:e5:44: 05:70:a4:c5:1b:43:24:6f:da:5f:4f:75:29:c2:53:ec:f0:05: 05:3a:e6:2b:fd:43:93:da:99:56:a0:f5:59:33:f9:ea:94:4b: 46:c9:48:15:b5:cf:62:f8:a3:c9:f0:d3:05:ca:0b:b1:f3:b6: ee:94:4e:cc:ef:20:8e:da:f9:b2:3a:e9:d3:ef:c0:d6:ee:25: dd:d5:1d:0f:2f:64:ce:4d:a7:76:66:ea:d6:79:43:a5:a3:a0: 4c:99:73:7c:0b:4f:26:ae:33:47:39:59:19:f8:5f:aa:a3:ea: b8:3f:cd:bf:88:21:96:b7:58:d4:36:ba:23:95:bf:29:c7:fa: 80:eb:b5:dc:b1:3e:ce:ff:35:80:c6:6a:2f:8e:53:49:7d:f5: 8e:11:a8:ea:93:1d:ef:06:c4:72:c3:03:dd:ff:77:2a:66:4f: 8f:50:f3:a5:8a:dc:1d:cd:84:08:4f:62:d4:0d:35:8d:06:52: 2c:41:73:9b:46:97:e0:ce:10:76:4c:52:bb:9c:3f:18:da:20: 98:68:51:06 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqLnpaztWvKUZQiUzuIRVZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMTIyOGEzYTNkMDA2NTRkNGIxMTE3MzM4NzRlMzFkODBj MGEyMGMwHhcNMjUxMTE2MDc0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDI0YTUxODhjNzQzYjA2ZjAyMjE5NGMyZWU0NzI5ZDdjYWUyYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39NGFtF34tflWDbHPWJiWpmZKTCs w0QTAvIPurJ6l22pOP8tMYwRgrACsT9NMeNtgKEGyYqYUaWZUU4DjEKhuqCVP+BH 7/KSsFkp/o+LvPPsdMPbjl4ZyoL83KpRvfDFbujGDKLw8HcSqvWOO0Inr+EwJTeL uICMDh96Ns3gJ2dZOy+nUU71bJYDX3WnrPzRtBlb3/Ilek1kKS4D/+rr7tBjKscD 1OFTQ4UklqOtHzseuBFX60x4G3f5TeeKTRAwbOu9NVAhr019nfhjRJNSlGV/lsj4 X2bpOX5SK4ThDReb0YqEg4REtoDdgFpVt226D8KTViDeFT2VOwPeH/MCFwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNAkpRiMdDsG8CIZTC7kcp18riqGMB8GA1UdIwQY MBaAFM4SKKOj0AZU1LERczh04x2AwKIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMt ZmQ3ZGJkZjhlMzAwLzEvMENTbEdJeDBPd2J3SWhsTUx1UnluWHl1S29ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMtZmQ3ZGJkZjhlMzAw LzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVjbJAwQA w854MA0EAgACMAcDBQAqFJOAMA0GCSqGSIb3DQEBCwUAA4IBAQBITmzosKVIJB9u s+q1XlAE7nS6hXOAuRbzAZidwt9uQtuqkRKqT9yV6vYmYLnerY4htZ8R5UQFcKTF G0Mkb9pfT3UpwlPs8AUFOuYr/UOT2plWoPVZM/nqlEtGyUgVtc9i+KPJ8NMFygux 87bulE7M7yCO2vmyOunT78DW7iXd1R0PL2TOTad2ZurWeUOlo6BMmXN8C08mrjNH OVkZ+F+qo+q4P82/iCGWt1jUNrojlb8px/qA67XcsT7O/zWAxmovjlNJffWOEajq kx3vBsRywwPd/3cqZk+PUPOlitwdzYQIT2LUDTWNBlIsQXObRpfgzhB2TFK7nD8Y 2iCYaFEG -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:08 2025 by rpki-client