This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/Do7LVZlKxOpFLhQk4utS2y9-GH0.roa File: Do7LVZlKxOpFLhQk4utS2y9-GH0.roa (raw, json) Hash identifier: yUU9KHVXsH2kllJ9B9AdvusBySi+NzlMxs4jnEA4zmI= Subject key identifier: 0E:8E:CB:55:99:4A:C4:EA:45:2E:14:24:E2:EB:52:DB:2F:7E:18:7D Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Certificate serial: 019B77591A58D87FC7B1A559B1D9A1BD78C8 Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/Do7LVZlKxOpFLhQk4utS2y9-GH0.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8495 IP address blocks: 193.25.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1a:58:d8:7f:c7:b1:a5:59:b1:d9:a1:bd:78:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e8ecb55994ac4ea452e1424e2eb52db2f7e187d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:10:68:01:af:20:02:39:5e:c2:4b:9d:0e: ee:db:2a:3b:60:98:20:ab:3e:1e:60:65:88:05:0c: 6e:84:f0:74:23:3e:35:f3:f1:4a:a6:29:a8:5e:a1: 9a:fe:b3:c2:77:9d:e8:2d:69:08:4c:c9:68:fb:6b: fc:87:b6:3a:38:12:d9:79:66:e6:dd:f8:95:d5:47: 26:be:ec:79:ac:97:bd:e9:b2:34:41:41:06:09:c0: 65:0b:ca:83:b4:0c:84:c4:25:9c:f8:5e:4f:40:eb: c6:a6:10:b1:8f:c9:e4:21:ac:a9:4b:90:91:41:6a: 2b:c2:d5:de:2c:00:1f:68:5a:eb:d9:84:fd:59:27: 2a:c8:95:ea:d6:34:2a:03:d7:8f:6d:9f:9c:a5:f6: fa:f2:27:ef:a0:86:1c:55:5a:62:cf:e2:e9:66:ee: da:d1:d4:e1:62:6f:38:31:74:76:9a:3d:d0:9d:2c: b1:c2:c9:87:7b:af:fa:db:18:a9:c5:fe:6e:5e:b4: ac:c0:54:a6:a6:f2:bd:be:56:c9:90:6e:0f:26:42: 2d:43:bb:e0:b0:fd:5a:0a:22:a9:f0:9b:f5:18:57: fe:13:be:ec:38:1d:a3:a0:60:05:2f:d7:66:ad:18: ef:68:79:9a:e2:ac:8f:7f:66:bc:17:e0:24:47:09: 99:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:CB:55:99:4A:C4:EA:45:2E:14:24:E2:EB:52:DB:2F:7E:18:7D X509v3 Authority Key Identifier: keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/Do7LVZlKxOpFLhQk4utS2y9-GH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.172.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:e2:50:4b:6c:1a:e6:38:9a:5a:36:73:c5:fa:47:00:0b:86: 78:0d:b7:1f:5f:45:54:f1:06:5d:4d:42:8a:d6:cf:a5:fd:56: e0:c5:64:62:ac:12:fa:87:49:66:e2:11:40:1a:67:c8:3a:a3: 80:a5:0f:51:9e:d2:13:ca:eb:34:54:9c:73:1b:96:bc:7f:a8: 30:33:ed:18:5a:72:cd:47:2e:aa:fb:2d:25:a2:95:a3:b7:0b: 5f:ef:22:d8:8e:04:d7:2f:8b:fa:dc:98:d3:39:50:5a:2b:b2: a0:18:6b:52:51:96:63:26:7d:c7:32:0e:a9:74:00:7d:2e:c4: 48:1e:2d:08:dc:0a:40:1e:86:61:fe:2d:e5:df:97:93:9b:26: 04:74:3f:02:14:8e:a6:74:d1:05:ec:bd:34:98:f2:bb:0d:40: c3:53:cb:66:5c:df:52:93:fc:fc:40:cb:06:94:75:de:e2:4b: 7b:2d:a5:9d:fa:b9:b0:c2:a1:1d:62:ca:ca:d6:79:e5:0c:64: 19:af:f5:a5:ed:cb:e7:8f:90:38:98:c4:6e:c5:e4:cc:b0:60: 35:11:03:6c:6f:08:cc:20:e8:09:2f:32:66:7e:e9:1b:02:3f: 52:fd:69:34:0e:bb:f0:25:50:e2:bb:85:e2:eb:8d:18:2f:4b: 8d:45:bd:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRpY2H/HsaVZsdmhvXjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTgzZDYxZjJlNTdhNmIxNmVhNGIxYTljYTI3YmIyNTBk NzQ4ZWYwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZThlY2I1NTk5NGFjNGVhNDUyZTE0MjRlMmViNTJkYjJmN2UxODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6oQaAGvIAI5XsJLnQ7u2yo7YJgg qz4eYGWIBQxuhPB0Iz418/FKpimoXqGa/rPCd53oLWkITMlo+2v8h7Y6OBLZeWbm 3fiV1Ucmvux5rJe96bI0QUEGCcBlC8qDtAyExCWc+F5PQOvGphCxj8nkIaypS5CR QWorwtXeLAAfaFrr2YT9WScqyJXq1jQqA9ePbZ+cpfb68ifvoIYcVVpiz+LpZu7a 0dThYm84MXR2mj3QnSyxwsmHe6/62xipxf5uXrSswFSmpvK9vlbJkG4PJkItQ7vg sP1aCiKp8Jv1GFf+E77sOB2joGAFL9dmrRjvaHma4qyPf2a8F+AkRwmZtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6Oy1WZSsTqRS4UJOLrUtsvfhh9MB8GA1UdIwQY MBaAFOpYPWHy5XprFupLGpyie7JQ10jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUt OTljMWIwY2ZjM2E4LzEvRG83TFZabEt4T3BGTGhRazR1dFMyeTktR0gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUtOTljMWIwY2ZjM2E4 LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRmsMA0G CSqGSIb3DQEBCwUAA4IBAQBc4lBLbBrmOJpaNnPF+kcAC4Z4DbcfX0VU8QZdTUKK 1s+l/VbgxWRirBL6h0lm4hFAGmfIOqOApQ9RntITyus0VJxzG5a8f6gwM+0YWnLN Ry6q+y0lopWjtwtf7yLYjgTXL4v63JjTOVBaK7KgGGtSUZZjJn3HMg6pdAB9LsRI Hi0I3ApAHoZh/i3l35eTmyYEdD8CFI6mdNEF7L00mPK7DUDDU8tmXN9Sk/z8QMsG lHXe4kt7LaWd+rmwwqEdYsrK1nnlDGQZr/Wl7cvnj5A4mMRuxeTMsGA1EQNsbwjM IOgJLzJmfukbAj9S/Wk0DrvwJVDiu4Xi640YL0uNRb2Q -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:39 2026 by rpki-client