This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa File: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (raw, json) Hash identifier: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs= Subject key identifier: D2:F5:22:F4:3B:3B:95:1E:5E:CF:F8:81:F8:7E:73:F0:86:EE:FE:85 Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25 Certificate serial: 019B7834CB1FA585520E3B5BC58CEB8D6D10 Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12847 IP address blocks: 194.125.240.0/24 maxlen: 24 212.93.96.0/19 maxlen: 19 212.93.96.0/24 maxlen: 24 212.93.98.0/24 maxlen: 24 212.93.124.0/23 maxlen: 23 212.93.126.0/24 maxlen: 24 2a03:ec00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cb:1f:a5:85:52:0e:3b:5b:c5:8c:eb:8d:6d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2f522f43b3b951e5ecff881f87e73f086eefe85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0e:38:38:46:b4:0f:19:61:c0:35:b8:73:f8: aa:1a:55:33:c0:9e:b8:0b:32:9c:e8:ce:2d:8b:73: 0e:9e:8c:3f:00:d0:68:f2:66:70:c5:d6:b4:d7:51: 02:f1:b4:ab:4a:9d:c3:b0:13:45:a0:23:b6:c2:db: 31:b6:0c:c4:f5:f4:e0:51:50:45:af:b6:eb:02:9a: 5a:b6:d5:36:23:7c:f7:15:77:a0:2b:b7:19:9d:c7: e8:48:61:e4:47:dc:c1:8e:7d:60:4f:2f:07:8f:f2: 49:81:1d:0c:b1:ea:a5:c1:31:7a:d2:7b:e2:74:da: ef:a8:75:dc:22:fa:5a:03:48:5a:d4:28:4c:3e:0b: c9:d7:ca:8a:45:08:f9:12:7d:49:ed:5e:5e:3f:02: de:8d:69:5d:6f:c5:54:c1:e5:82:f8:75:11:cf:63: 2e:e2:35:68:7a:cc:0e:be:41:56:59:2e:eb:ce:23: 7d:1d:0d:e2:e7:2e:df:5b:50:e9:74:7e:5e:1c:bd: 93:39:93:76:d8:16:36:61:bd:ad:37:c5:d6:2b:3a: 4a:a5:8c:9d:c7:3a:11:0f:59:c8:90:1a:0b:35:a3: bf:c0:7c:7d:c1:3a:9d:1c:7c:b4:84:b8:14:b4:e6: ec:40:13:f5:ad:05:62:28:5c:ed:ec:c9:f1:d5:6f: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F5:22:F4:3B:3B:95:1E:5E:CF:F8:81:F8:7E:73:F0:86:EE:FE:85 X509v3 Authority Key Identifier: keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.125.240.0/24 212.93.96.0/19 IPv6: 2a03:ec00::/32 Signature Algorithm: sha256WithRSAEncryption 53:c6:33:71:f4:a7:fe:37:00:d3:d3:a7:d9:92:bc:38:f4:9e: 86:34:29:b5:c0:46:ee:32:b1:2d:be:9c:00:04:1a:d0:12:b7: f0:99:da:3d:66:36:82:eb:dd:71:56:76:11:71:e4:da:bb:71: 9d:62:55:00:0d:db:64:a5:fb:7f:5e:95:14:8f:d0:7a:49:bb: c1:45:8c:3c:fe:bc:f8:10:da:88:1e:ef:c2:9e:4d:14:f6:6a: 97:fc:a1:b7:32:43:9e:2b:46:72:00:f2:29:5e:b4:0c:f8:92: 20:2c:f2:d4:2d:e2:fc:19:84:a7:8e:de:46:fb:3a:5a:c4:a7: 37:8e:55:42:7a:2f:65:24:b4:7a:d7:35:d4:fa:10:92:6a:48: 91:8f:f5:e1:b9:d6:e0:90:f3:ed:b7:96:1f:2d:17:40:0a:35: d9:ac:ff:76:ce:69:f7:f6:e1:17:f8:eb:a3:7b:d9:bb:94:3a: 55:ee:e1:f7:1b:0d:16:bb:f9:1a:73:a1:a2:f1:cf:1b:27:fd: b0:a7:eb:f7:a8:ab:bc:45:d7:fb:0b:32:88:18:86:cc:0d:f2: d5:1e:b7:41:cb:65:dc:0d:9e:c2:5e:ee:da:ef:df:dc:10:17: b8:2a:a6:30:ca:1f:19:03:27:25:6d:72:3c:ab:b5:fb:39:92: ca:e2:4b:8a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NMsfpYVSDjtbxYzrjW0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5 ZTRlMjUwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY1MjJmNDNiM2I5NTFlNWVjZmY4ODFmODdlNzNmMDg2ZWVmZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g44OEa0DxlhwDW4c/iqGlUzwJ64 CzKc6M4ti3MOnow/ANBo8mZwxda011EC8bSrSp3DsBNFoCO2wtsxtgzE9fTgUVBF r7brAppattU2I3z3FXegK7cZncfoSGHkR9zBjn1gTy8Hj/JJgR0MseqlwTF60nvi dNrvqHXcIvpaA0ha1ChMPgvJ18qKRQj5En1J7V5ePwLejWldb8VUweWC+HURz2Mu 4jVoeswOvkFWWS7rziN9HQ3i5y7fW1DpdH5eHL2TOZN22BY2Yb2tN8XWKzpKpYyd xzoRD1nIkBoLNaO/wHx9wTqdHHy0hLgUtObsQBP1rQViKFzt7Mnx1W+d4wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNL1IvQ7O5UeXs/4gfh+c/CG7v6FMB8GA1UdIwQY MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt MmFmMDY3YTEzMGFhLzEvMHZVaTlEczdsUjVlel9pQi1INXo4SWJ1X29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwn3wAwQF 1F1gMA0EAgACMAcDBQAqA+wAMA0GCSqGSIb3DQEBCwUAA4IBAQBTxjNx9Kf+NwDT 06fZkrw49J6GNCm1wEbuMrEtvpwABBrQErfwmdo9ZjaC691xVnYRceTau3GdYlUA Ddtkpft/XpUUj9B6SbvBRYw8/rz4ENqIHu/Cnk0U9mqX/KG3MkOeK0ZyAPIpXrQM +JIgLPLULeL8GYSnjt5G+zpaxKc3jlVCei9lJLR61zXU+hCSakiRj/XhudbgkPPt t5YfLRdACjXZrP92zmn39uEX+Ouje9m7lDpV7uH3Gw0Wu/kac6Gi8c8bJ/2wp+v3 qKu8Rdf7CzKIGIbMDfLVHrdBy2XcDZ7CXu7a79/cEBe4KqYwyh8ZAyclbXI8q7X7 OZLK4kuK -----END CERTIFICATE-----Generated at Mon Jan 26 01:29:41 2026 by rpki-client