This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0d15hs6sBv8GAk_2g2RAoPYnZOM.roa File: 0d15hs6sBv8GAk_2g2RAoPYnZOM.roa (raw, json) Hash identifier: cp2Vja5rdBd1gVNgqx+IsAve8keQHohaILdxUqT1jek= Subject key identifier: D1:DD:79:86:CE:AC:06:FF:06:02:4F:F6:83:64:40:A0:F6:27:64:E3 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB13103F13964CDA3851E4B1128057 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0d15hs6sBv8GAk_2g2RAoPYnZOM.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202599 IP address blocks: 185.159.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:13:10:3f:13:96:4c:da:38:51:e4:b1:12:80:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1dd7986ceac06ff06024ff6836440a0f62764e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:a1:97:13:d4:e4:77:07:34:aa:8d:da:c2: 4c:67:a5:4f:a3:97:83:b9:b4:09:84:da:ce:8e:8d: 19:65:43:38:91:d9:1b:32:34:ab:1d:af:82:a0:78: 9d:57:81:7d:73:d5:c4:ad:bf:75:76:48:fa:74:70: 2b:db:c5:cc:ea:87:38:3b:80:40:48:4c:ed:d6:ed: af:b9:e6:c7:b6:ae:ee:bf:07:f5:7a:0a:70:4c:ec: 3b:09:e3:0a:38:67:3f:03:75:7d:e6:3e:a7:af:e4: d2:de:24:99:46:42:00:69:d2:db:f6:23:1a:55:9e: fd:92:c3:a0:be:26:75:b2:78:71:1f:9a:c1:4f:16: ef:0b:e3:4e:66:47:98:f5:f8:47:67:92:76:bb:3c: 20:1b:6f:f8:34:33:0d:0b:9d:fe:08:65:7a:36:96: 49:c9:3f:01:ab:28:82:f6:2f:e2:ac:cf:17:56:93: ac:ea:a5:80:a9:f6:00:cc:fb:c6:54:46:8e:27:76: f4:04:f8:10:d0:bb:c3:6a:1f:cc:6a:4d:ed:6d:9c: 0b:39:1e:95:ab:12:46:87:37:cc:3a:29:fe:f0:d0: e9:06:5f:4f:6f:12:a2:02:fd:8d:cf:f5:fb:33:e5: 95:28:ee:34:bd:87:6d:10:81:51:51:00:b4:1f:52: 4a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:79:86:CE:AC:06:FF:06:02:4F:F6:83:64:40:A0:F6:27:64:E3 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0d15hs6sBv8GAk_2g2RAoPYnZOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.212.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:57:6a:e0:e9:72:c0:89:96:2e:4e:8c:04:29:40:5c:94:57: 04:c1:a5:67:ee:26:77:9f:13:3d:92:24:90:1b:10:77:7e:0b: 88:57:1a:53:cb:df:35:81:f8:dd:14:83:76:5d:67:2c:a0:b2: 79:25:ac:b2:3b:56:00:aa:06:44:f3:c5:35:44:db:b8:fa:6c: 3b:65:6e:49:41:02:45:ce:26:83:b6:18:4a:7e:25:2e:0e:30: 92:ef:f3:6e:c4:eb:7c:71:9e:00:11:f4:39:44:39:70:c8:31: 51:97:ce:87:e1:8f:3d:3b:52:51:fb:04:97:65:3f:0e:46:8b: f4:4a:f0:01:a2:aa:38:9d:87:44:8d:7e:17:a3:2a:8e:98:1a: 6f:aa:ba:9a:58:b5:78:54:e4:0d:7b:a0:25:93:4f:cd:d1:aa: 8d:e7:0a:64:5a:e4:21:63:a1:0a:67:c6:cf:d2:b8:9d:22:97: 5d:66:43:d5:f4:94:83:7f:4c:37:9c:fd:f3:30:a6:d4:27:bc: c5:6f:5c:ec:ba:d4:ba:80:1c:ac:f7:6d:9b:7e:ff:34:9b:f4: 89:41:1f:03:34:9b:36:27:a3:4a:34:74:75:e5:d5:53:e8:c6: 16:6c:74:75:c1:26:0a:17:50:2e:a8:35:f7:84:c0:17:06:28: b0:76:8e:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xMQPxOWTNo4UeSxEoBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWRkNzk4NmNlYWMwNmZmMDYwMjRmZjY4MzY0NDBhMGY2Mjc2NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/qhlxPU5HcHNKqN2sJMZ6VPo5eD ubQJhNrOjo0ZZUM4kdkbMjSrHa+CoHidV4F9c9XErb91dkj6dHAr28XM6oc4O4BA SEzt1u2vuebHtq7uvwf1egpwTOw7CeMKOGc/A3V95j6nr+TS3iSZRkIAadLb9iMa VZ79ksOgviZ1snhxH5rBTxbvC+NOZkeY9fhHZ5J2uzwgG2/4NDMNC53+CGV6NpZJ yT8BqyiC9i/irM8XVpOs6qWAqfYAzPvGVEaOJ3b0BPgQ0LvDah/Mak3tbZwLOR6V qxJGhzfMOin+8NDpBl9PbxKiAv2Nz/X7M+WVKO40vYdtEIFRUQC0H1JKaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNHdeYbOrAb/BgJP9oNkQKD2J2TjMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMGQxNWhzNnNCdjhHQWtfMmcyUkFvUFluWk9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ/UMA0G CSqGSIb3DQEBCwUAA4IBAQA6V2rg6XLAiZYuTowEKUBclFcEwaVn7iZ3nxM9kiSQ GxB3fguIVxpTy981gfjdFIN2XWcsoLJ5JayyO1YAqgZE88U1RNu4+mw7ZW5JQQJF ziaDthhKfiUuDjCS7/NuxOt8cZ4AEfQ5RDlwyDFRl86H4Y89O1JR+wSXZT8ORov0 SvABoqo4nYdEjX4XoyqOmBpvqrqaWLV4VOQNe6Alk0/N0aqN5wpkWuQhY6EKZ8bP 0ridIpddZkPV9JSDf0w3nP3zMKbUJ7zFb1zsutS6gBys922bfv80m/SJQR8DNJs2 J6NKNHR15dVT6MYWbHR1wSYKF1AuqDX3hMAXBiiwdo55 -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:11 2026 by rpki-client