This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S0Vv1AZ6PH4NTyrlXuab-ZSaBI0.roa File: S0Vv1AZ6PH4NTyrlXuab-ZSaBI0.roa (raw, json) Hash identifier: YDHdWhmKNsQhgMqVK0ahLhqflq0s00BhIoy8pwEOu9c= Subject key identifier: 4B:45:6F:D4:06:7A:3C:7E:0D:4F:2A:E5:5E:E6:9B:F9:94:9A:04:8D Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8561420D2FF1E5A4370464AB35ED4C Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S0Vv1AZ6PH4NTyrlXuab-ZSaBI0.roa Signing time: Fri 02 Jan 2026 16:23:26 +0000 ROA not before: Fri 02 Jan 2026 16:23:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 195.133.37.0/24 maxlen: 24 212.193.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:61:42:0d:2f:f1:e5:a4:37:04:64:ab:35:ed:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b456fd4067a3c7e0d4f2ae55ee69bf9949a048d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:ed:45:27:f6:df:46:27:24:7d:5f:6a:c0: 68:a3:db:29:35:d7:8d:55:71:c2:71:25:16:78:33: 28:6c:53:8a:b8:1a:80:96:59:c8:86:b5:9d:4b:f7: 42:74:f4:5d:de:07:14:9e:56:f2:c8:83:03:b0:c5: b6:8f:a9:7d:6c:37:65:ac:79:5e:97:73:8c:2a:79: ca:a2:ee:5d:11:90:71:68:38:6c:4f:fb:37:07:c6: 9b:82:49:f0:2e:32:a2:68:f7:17:0d:ae:aa:2a:c5: 07:ee:56:e1:f0:d7:06:cc:bf:27:a0:a8:aa:75:1f: a5:ff:ab:4d:fe:48:28:da:5e:b8:43:ed:6f:03:b3: e5:4b:60:4d:71:5a:92:aa:cd:84:68:ae:4a:80:47: d8:14:91:e9:2a:b3:66:7b:48:a9:a5:98:0e:9f:84: 2f:bf:b7:89:05:10:23:c5:8c:95:c4:4e:36:2b:fd: 1f:c7:85:f0:25:6f:e1:ed:3d:3a:df:ae:49:de:0e: 9d:cf:74:58:dd:5c:24:88:6d:a6:20:bb:f1:64:04: e4:a8:44:c1:f9:2a:b0:3c:2e:29:71:20:9e:e0:6b: 12:af:4b:77:03:34:62:c1:a8:87:6e:2d:77:5e:10: fe:f1:ea:9d:e4:9f:d5:66:23:9f:05:b6:35:d0:66: b2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:45:6F:D4:06:7A:3C:7E:0D:4F:2A:E5:5E:E6:9B:F9:94:9A:04:8D X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S0Vv1AZ6PH4NTyrlXuab-ZSaBI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.133.37.0/24 212.193.11.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:f1:98:41:a7:47:b7:8f:75:7d:4f:b7:d9:24:5c:9f:d3:e3: 63:ee:2d:c4:b7:56:b1:4d:63:2e:fa:18:fc:83:b3:09:59:be: 8b:6f:77:31:2b:52:04:df:6f:9c:8e:81:7b:21:a5:d7:58:ea: 32:9b:e0:cb:76:62:04:ae:23:2b:8c:31:a0:5f:35:8d:4b:53: 4e:12:f9:29:85:90:62:6f:04:79:05:38:68:43:7f:00:52:2c: 7c:35:40:a2:5b:68:9d:4f:10:94:85:0c:1a:b3:69:a6:c0:31: 0a:67:c7:12:eb:8d:62:32:51:d3:4a:8b:90:b1:27:67:5b:a8: 41:0b:36:86:25:e1:bc:04:e8:87:6b:87:fa:77:06:d3:b3:84: 9e:49:32:17:6c:69:5e:a4:71:73:3b:6c:df:f3:a5:5a:4f:57: 17:02:30:10:4b:70:88:43:f6:76:86:a3:5a:21:cb:1a:bb:58: 44:0a:c2:9c:10:fc:c1:4c:29:a9:0b:83:84:dc:54:87:57:7e: 5e:23:b7:1c:3c:fc:ca:7a:9a:42:99:e1:f8:42:28:0d:ae:ac: 9a:66:d2:5c:fd:13:09:ba:f7:2c:bb:17:71:66:71:ed:e7:6f: 19:7c:bc:6c:be:00:98:52:08:4a:e1:e5:36:38:0b:3c:8e:3e: c5:3b:6f:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hWFCDS/x5aQ3BGSrNe1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjQ1NmZkNDA2N2EzYzdlMGQ0ZjJhZTU1ZWU2OWJmOTk0OWEwNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirbtRSf230YnJH1fasBoo9spNdeN VXHCcSUWeDMobFOKuBqAllnIhrWdS/dCdPRd3gcUnlbyyIMDsMW2j6l9bDdlrHle l3OMKnnKou5dEZBxaDhsT/s3B8abgknwLjKiaPcXDa6qKsUH7lbh8NcGzL8noKiq dR+l/6tN/kgo2l64Q+1vA7PlS2BNcVqSqs2EaK5KgEfYFJHpKrNme0ippZgOn4Qv v7eJBRAjxYyVxE42K/0fx4XwJW/h7T06365J3g6dz3RY3VwkiG2mILvxZATkqETB +SqwPC4pcSCe4GsSr0t3AzRiwaiHbi13XhD+8eqd5J/VZiOfBbY10GaybwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEtFb9QGejx+DU8q5V7mm/mUmgSNMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvUzBWdjFBWjZQSDROVHlybFh1YWItWlNhQkkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4UlAwQA 1MELMA0GCSqGSIb3DQEBCwUAA4IBAQCN8ZhBp0e3j3V9T7fZJFyf0+Nj7i3Et1ax TWMu+hj8g7MJWb6Lb3cxK1IE32+cjoF7IaXXWOoym+DLdmIEriMrjDGgXzWNS1NO EvkphZBibwR5BThoQ38AUix8NUCiW2idTxCUhQwas2mmwDEKZ8cS641iMlHTSouQ sSdnW6hBCzaGJeG8BOiHa4f6dwbTs4SeSTIXbGlepHFzO2zf86VaT1cXAjAQS3CI Q/Z2hqNaIcsau1hECsKcEPzBTCmpC4OE3FSHV35eI7ccPPzKeppCmeH4QigNrqya ZtJc/RMJuvcsuxdxZnHt528ZfLxsvgCYUghK4eU2OAs8jj7FO28W -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:06 2026 by rpki-client