This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa File: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (raw, json) Hash identifier: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k= Subject key identifier: 07:20:19:66:F0:FA:64:EE:1D:15:51:99:08:EA:31:FC:81:F0:77:3A Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Certificate serial: 019B79EC2A5CDF763F00ADD76DEDC9FD6873 Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1902 IP address blocks: 188.125.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2a:5c:df:76:3f:00:ad:d7:6d:ed:c9:fd:68:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07201966f0fa64ee1d15519908ea31fc81f0773a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:4e:21:58:41:b1:46:f8:e2:03:df:ac:92: df:bc:cd:13:f5:a2:f0:f1:a7:01:4a:e9:36:e4:a3: 04:ad:ef:8b:5b:26:b1:44:b1:72:70:5b:c0:3f:84: 6d:95:8c:87:3c:f1:f8:02:4b:03:75:5c:44:40:06: 89:bb:2d:b1:7b:7d:0f:5e:d9:ea:72:03:56:da:26: 8e:83:bc:12:14:9d:c2:ec:88:93:54:c9:94:87:9f: c5:22:a2:7c:92:f9:54:66:99:1f:95:d8:a9:7e:52: 93:c2:50:13:2f:48:ab:d3:fd:1c:11:ba:e3:2e:a5: b1:5d:15:51:cc:7a:1e:3b:aa:54:22:c8:24:80:51: 94:ad:c4:45:0b:f4:06:fa:0f:90:36:34:18:5d:b3: f4:0d:b2:42:97:58:d9:af:b6:bb:7c:05:9c:0f:ad: a0:bb:d8:81:e9:c6:5c:cc:9c:65:25:4e:f3:bc:4e: 5c:74:87:5b:d3:5f:76:88:41:bf:5e:b2:19:d1:ac: b5:d5:74:dc:33:d9:79:b7:11:1a:9b:72:19:77:19: 51:11:19:e9:e1:b6:33:d2:d5:27:1d:bc:26:ee:48: f4:b0:f0:1b:cb:57:8f:0d:38:8b:3f:1e:f2:92:1c: be:78:80:b7:46:42:2c:f2:45:c3:88:77:05:ed:1a: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:20:19:66:F0:FA:64:EE:1D:15:51:99:08:EA:31:FC:81:F0:77:3A X509v3 Authority Key Identifier: keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.16.0/20 Signature Algorithm: sha256WithRSAEncryption 94:b2:c4:8a:d7:77:38:1f:da:64:fc:c1:06:f7:62:31:b7:3f: 72:ff:ca:fe:d0:54:13:c0:89:8f:39:fa:ee:75:8b:ac:e4:90: 94:aa:bb:51:f6:f6:40:70:5b:69:d7:e8:8f:7c:1b:5c:b4:0e: 0d:38:97:bb:ae:de:89:2a:6c:02:a1:0c:5d:ff:81:f8:da:79: db:dc:87:1b:fb:06:68:93:1b:ae:71:72:c7:1d:1a:eb:c4:0c: aa:61:06:1f:0b:37:48:29:38:3a:3f:05:f0:c6:77:9f:31:3b: ed:78:5b:db:16:2b:6a:4c:3a:52:3a:4e:fb:be:c7:c4:47:c6: a1:e4:2f:41:0f:8a:b5:68:08:c4:20:c7:c0:a4:4c:f8:99:6a: 7f:e9:79:d8:28:92:90:b8:a9:61:0d:da:a4:59:9f:52:2f:ac: e0:a7:16:b1:63:3f:9b:56:f4:e4:2e:95:92:33:27:88:ba:9c: b4:b2:4a:a3:b2:3f:5c:fb:eb:e1:e3:bf:fe:ac:70:76:6a:66: 61:53:f5:93:60:67:d0:1c:33:89:25:ac:b3:e0:f7:5f:66:1b: 77:db:25:6a:e8:af:6b:18:76:64:3f:1f:ac:6e:ee:38:44:6a: 3a:ab:45:5c:b0:3a:f9:84:32:c8:42:80:2b:59:7d:bc:f8:93: 18:1c:3e:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Cpc33Y/AK3Xbe3J/WhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5 YzlhMjMwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzIwMTk2NmYwZmE2NGVlMWQxNTUxOTkwOGVhMzFmYzgxZjA3NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX5OIVhBsUb44gPfrJLfvM0T9aLw 8acBSuk25KMEre+LWyaxRLFycFvAP4RtlYyHPPH4AksDdVxEQAaJuy2xe30PXtnq cgNW2iaOg7wSFJ3C7IiTVMmUh5/FIqJ8kvlUZpkfldipflKTwlATL0ir0/0cEbrj LqWxXRVRzHoeO6pUIsgkgFGUrcRFC/QG+g+QNjQYXbP0DbJCl1jZr7a7fAWcD62g u9iB6cZczJxlJU7zvE5cdIdb0192iEG/XrIZ0ay11XTcM9l5txEam3IZdxlRERnp 4bYz0tUnHbwm7kj0sPAby1ePDTiLPx7ykhy+eIC3RkIs8kXDiHcF7Rr4MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcgGWbw+mTuHRVRmQjqMfyB8Hc6MB8GA1UdIwQY MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt YzAxZjgwYTFjODA1LzEvQnlBWlp2RDZaTzRkRlZHWkNPb3hfSUh3ZHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1 LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvH0QMA0G CSqGSIb3DQEBCwUAA4IBAQCUssSK13c4H9pk/MEG92Ixtz9y/8r+0FQTwImPOfru dYus5JCUqrtR9vZAcFtp1+iPfBtctA4NOJe7rt6JKmwCoQxd/4H42nnb3Icb+wZo kxuucXLHHRrrxAyqYQYfCzdIKTg6PwXwxnefMTvteFvbFitqTDpSOk77vsfER8ah 5C9BD4q1aAjEIMfApEz4mWp/6XnYKJKQuKlhDdqkWZ9SL6zgpxaxYz+bVvTkLpWS MyeIupy0skqjsj9c++vh47/+rHB2amZhU/WTYGfQHDOJJayz4PdfZht32yVq6K9r GHZkPx+sbu44RGo6q0VcsDr5hDLIQoArWX28+JMYHD4g -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:28 2026 by rpki-client