This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0NrHjZGWcphCgGyBEzXpJviOnfY.roa File: 0NrHjZGWcphCgGyBEzXpJviOnfY.roa (raw, json) Hash identifier: vlKlZ36ePYjDO2ndX8On6xa7qg5XZs50JD41LNFkU18= Subject key identifier: D0:DA:C7:8D:91:96:72:98:42:80:6C:81:13:35:E9:26:F8:8E:9D:F6 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B210EB125F9D3779C83189415EEE4924C Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0NrHjZGWcphCgGyBEzXpJviOnfY.roa Signing time: Mon 15 Dec 2025 08:09:29 +0000 ROA not before: Mon 15 Dec 2025 08:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 194.146.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:0e:b1:25:f9:d3:77:9c:83:18:94:15:ee:e4:92:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 15 08:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0dac78d9196729842806c811335e926f88e9df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:2b:66:e8:61:07:cd:c2:cb:95:9c:65:0d: 21:22:67:cc:ce:99:a0:5a:f0:ab:3e:80:45:b1:c5: 84:a3:3a:c9:b5:89:f7:48:68:a0:b1:c2:82:9a:e6: 8b:30:13:05:d9:43:e7:ee:ab:f5:aa:c8:03:21:f0: 43:bf:00:12:b3:fb:fe:47:ee:10:5e:80:3a:d8:d9: 5e:3e:24:2c:2c:1d:03:c4:b2:2f:d4:70:5f:6b:50: 37:05:41:3e:4f:51:e0:17:49:37:46:3c:35:56:72: d8:d3:0a:ba:ce:a9:b8:b3:61:00:83:4a:cb:3c:56: be:55:f6:7b:88:66:60:db:ae:f9:ce:8e:aa:16:6d: b1:78:cb:a0:2d:67:d8:79:1a:07:55:cb:85:3e:92: c1:42:31:34:ff:e5:5c:57:6d:cd:7c:7e:ef:39:87: e7:d4:24:6f:8e:75:fd:1b:d4:b1:04:46:eb:cd:60: f0:4b:2f:51:81:58:96:ea:e3:da:c6:61:0a:c6:cd: 1f:1e:fa:4a:e1:95:fa:b9:3c:35:5a:3c:54:32:d5: 19:69:e3:86:f1:72:90:3d:08:6f:b7:2d:1c:81:3c: 13:75:d1:47:c5:f0:7e:95:85:c9:c5:e7:1a:de:89: 27:b3:18:6d:17:63:09:4a:e9:d2:92:71:41:24:93: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DA:C7:8D:91:96:72:98:42:80:6C:81:13:35:E9:26:F8:8E:9D:F6 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0NrHjZGWcphCgGyBEzXpJviOnfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.26.0/24 Signature Algorithm: sha256WithRSAEncryption 35:56:e3:4d:58:53:af:99:c0:37:25:e4:02:f3:09:08:7f:0f: fa:84:d1:b3:74:60:e0:8d:c5:b1:22:7a:de:97:e2:c3:9a:24: 98:61:cc:24:4f:98:bf:4a:95:fc:d4:8f:c5:e1:45:22:22:16: 63:28:1c:3d:43:a0:6f:f0:93:45:3c:d3:25:85:90:e0:e2:86: 40:75:8d:4e:a7:68:40:29:a9:66:d6:1f:7a:dd:fd:47:5e:6b: 6d:30:de:60:e4:ae:b0:4f:a7:89:c3:fd:41:b4:bf:58:80:bb: 1c:a7:32:d6:31:ad:24:88:82:35:85:81:9e:96:70:cd:91:f4: df:da:b4:87:82:d7:db:e4:c0:5b:57:00:c5:a6:95:81:1e:6e: bc:93:cf:ef:b3:3d:86:ea:dc:bf:1f:34:b4:d5:5f:bb:a2:36: 56:84:b5:c9:49:27:0b:e7:12:ed:17:d2:bf:63:67:f5:e2:24: ed:3d:51:ed:d0:9b:03:28:c7:cf:68:b9:98:d9:99:97:17:4c: 06:3a:b5:8a:c4:7d:14:56:94:8c:ce:05:83:bb:c4:1f:56:aa: 0b:b2:40:4d:ee:a3:6b:43:ce:b7:b4:03:90:a4:d0:e2:d4:c0: ed:65:b6:1a:73:96:c6:5f:dc:1d:f8:a1:06:18:db:f1:67:ac: b9:9b:87:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshDrEl+dN3nIMYlBXu5JJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjE1MDgwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGRhYzc4ZDkxOTY3Mjk4NDI4MDZjODExMzM1ZTkyNmY4OGU5ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIArZuhhB83Cy5WcZQ0hImfMzpmg WvCrPoBFscWEozrJtYn3SGigscKCmuaLMBMF2UPn7qv1qsgDIfBDvwASs/v+R+4Q XoA62NlePiQsLB0DxLIv1HBfa1A3BUE+T1HgF0k3Rjw1VnLY0wq6zqm4s2EAg0rL PFa+VfZ7iGZg2675zo6qFm2xeMugLWfYeRoHVcuFPpLBQjE0/+VcV23NfH7vOYfn 1CRvjnX9G9SxBEbrzWDwSy9RgViW6uPaxmEKxs0fHvpK4ZX6uTw1WjxUMtUZaeOG 8XKQPQhvty0cgTwTddFHxfB+lYXJxeca3oknsxhtF2MJSunSknFBJJPctwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNDax42RlnKYQoBsgRM16Sb4jp32MB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvME5ySGpaR1djcGhDZ0d5QkV6WHBKdmlPbmZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpIaMA0G CSqGSIb3DQEBCwUAA4IBAQA1VuNNWFOvmcA3JeQC8wkIfw/6hNGzdGDgjcWxInre l+LDmiSYYcwkT5i/SpX81I/F4UUiIhZjKBw9Q6Bv8JNFPNMlhZDg4oZAdY1Op2hA Kalm1h963f1HXmttMN5g5K6wT6eJw/1BtL9YgLscpzLWMa0kiII1hYGelnDNkfTf 2rSHgtfb5MBbVwDFppWBHm68k8/vsz2G6ty/HzS01V+7ojZWhLXJSScL5xLtF9K/ Y2f14iTtPVHt0JsDKMfPaLmY2ZmXF0wGOrWKxH0UVpSMzgWDu8QfVqoLskBN7qNr Q863tAOQpNDi1MDtZbYac5bGX9wd+KEGGNvxZ6y5m4cg -----END CERTIFICATE-----Generated at Tue Dec 16 18:55:48 2025 by rpki-client