This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/sT5NvgSrjzuwTioYpNTeZgud1ao.roa File: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (raw, json) Hash identifier: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34= Subject key identifier: B1:3E:4D:BE:04:AB:8F:3B:B0:4E:2A:18:A4:D4:DE:66:0B:9D:D5:AA Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Certificate serial: 019B79EC2C7DF3C6E0B9B58C9337DCDF5D99 Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/sT5NvgSrjzuwTioYpNTeZgud1ao.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197823 IP address blocks: 194.152.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2c:7d:f3:c6:e0:b9:b5:8c:93:37:dc:df:5d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b13e4dbe04ab8f3bb04e2a18a4d4de660b9dd5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:1b:32:a5:be:a8:5d:31:cc:e6:be:4e:12: 3a:56:ec:83:85:91:e8:f5:e6:7b:2b:ff:78:26:f9: e9:fb:68:38:ac:3d:4b:71:16:64:8a:c8:4c:2a:e6: e6:3b:2c:ad:ec:85:ef:00:3b:3f:d1:e6:a3:92:bb: 49:47:1a:d0:d1:76:98:7a:dd:2e:7a:f8:9c:20:13: 02:1a:d0:7c:98:4c:b4:9d:04:04:4a:3c:75:05:71: 01:24:50:2e:a6:54:6b:0b:76:74:bc:d1:c4:25:d3: 11:eb:98:fc:de:0b:18:b4:c5:77:c9:21:e9:61:51: 97:e5:f7:88:d9:cc:9f:52:85:e4:62:34:19:cb:ac: 8d:40:11:a3:9b:4d:da:66:54:f6:fc:24:0b:6d:d8: 09:7e:4b:04:e0:da:26:a6:24:b6:ea:44:e4:41:54: 4c:15:43:a0:12:a4:07:f3:93:38:d3:dc:38:01:37: 43:80:2a:21:f2:81:d3:94:62:2a:16:0e:c0:b3:c2: 7d:ee:e1:ca:1f:44:be:8a:ec:65:f6:f5:f4:8b:5c: 84:70:77:57:5d:07:08:00:93:fc:67:1f:3d:35:18: 24:61:f9:3b:1f:68:ba:37:49:f6:df:62:d2:2d:f8: dc:8e:43:ae:0d:2f:72:da:a5:ee:0c:32:bd:65:73: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3E:4D:BE:04:AB:8F:3B:B0:4E:2A:18:A4:D4:DE:66:0B:9D:D5:AA X509v3 Authority Key Identifier: keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/sT5NvgSrjzuwTioYpNTeZgud1ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.152.215.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:9d:1a:8f:12:ad:0a:7d:9b:2f:20:d1:ca:7f:28:a4:b0:1f: 58:1f:3e:01:fd:c8:fa:e5:cf:3d:3c:47:77:da:c3:29:43:8d: be:0f:39:d5:3b:4c:31:3c:b2:38:d9:8a:58:2d:fe:4e:74:d5: c4:ea:ef:21:a6:a1:72:d0:9d:31:29:82:b4:94:bb:c0:84:50: f9:1e:82:8e:e0:35:79:e2:8b:cc:df:8d:59:c2:f7:5a:ef:a6: 0d:23:94:6c:3c:17:77:1b:9b:f3:8f:d6:e0:3d:92:d9:f4:1e: 13:48:87:c4:76:b9:a1:6b:76:57:d6:b2:96:6d:d0:90:51:05: c7:10:98:bf:e4:cd:da:d6:3b:e8:cd:00:06:5a:ed:12:01:60: e6:37:02:6b:c4:5d:e6:09:fc:29:86:59:37:a9:6a:b7:d0:2b: 9c:9b:73:47:0e:f5:39:81:2f:09:d9:92:c7:4d:ff:4d:79:d7: 83:69:4c:ff:f8:77:f2:5e:ec:74:5d:fb:cd:ac:bc:2c:5e:12: 34:2c:ff:4d:ea:e9:bc:08:f8:60:73:71:f4:a9:51:46:92:e4: 2b:ca:2c:76:3e:ba:27:92:b7:df:e0:48:b8:9d:74:e8:74:f4: c3:c4:dd:ad:87:ae:f8:4a:a0:8a:93:51:20:c8:21:55:fe:15: d1:9f:d3:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Cx988bgubWMkzfc312ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5 YzlhMjMwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTNlNGRiZTA0YWI4ZjNiYjA0ZTJhMThhNGQ0ZGU2NjBiOWRkNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c8bMqW+qF0xzOa+ThI6VuyDhZHo 9eZ7K/94Jvnp+2g4rD1LcRZkishMKubmOyyt7IXvADs/0eajkrtJRxrQ0XaYet0u evicIBMCGtB8mEy0nQQESjx1BXEBJFAuplRrC3Z0vNHEJdMR65j83gsYtMV3ySHp YVGX5feI2cyfUoXkYjQZy6yNQBGjm03aZlT2/CQLbdgJfksE4NompiS26kTkQVRM FUOgEqQH85M409w4ATdDgCoh8oHTlGIqFg7As8J97uHKH0S+iuxl9vX0i1yEcHdX XQcIAJP8Zx89NRgkYfk7H2i6N0n232LSLfjcjkOuDS9y2qXuDDK9ZXMFkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLE+Tb4Eq487sE4qGKTU3mYLndWqMB8GA1UdIwQY MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt YzAxZjgwYTFjODA1LzEvc1Q1TnZnU3JqenV3VGlvWXBOVGVaZ3VkMWFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1 LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpjXMA0G CSqGSIb3DQEBCwUAA4IBAQCenRqPEq0KfZsvINHKfyiksB9YHz4B/cj65c89PEd3 2sMpQ42+DznVO0wxPLI42YpYLf5OdNXE6u8hpqFy0J0xKYK0lLvAhFD5HoKO4DV5 4ovM341Zwvda76YNI5RsPBd3G5vzj9bgPZLZ9B4TSIfEdrmha3ZX1rKWbdCQUQXH EJi/5M3a1jvozQAGWu0SAWDmNwJrxF3mCfwphlk3qWq30Cucm3NHDvU5gS8J2ZLH Tf9NedeDaUz/+HfyXux0XfvNrLwsXhI0LP9N6um8CPhgc3H0qVFGkuQryix2Pron krff4Ei4nXTodPTDxN2th674SqCKk1EgyCFV/hXRn9N/ -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:50 2026 by rpki-client