This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h5Z6ze_Nc0-aRHnUmJ_kgoZsgc0.roa File: h5Z6ze_Nc0-aRHnUmJ_kgoZsgc0.roa (raw, json) Hash identifier: f0g1s6CqV8zteaZBXipFRRl+PzpTrL2voUErocdn4Ic= Subject key identifier: 87:96:7A:CD:EF:CD:73:4F:9A:44:79:D4:98:9F:E4:82:86:6C:81:CD Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85503E1C193A46BE628EE980DABA8E Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h5Z6ze_Nc0-aRHnUmJ_kgoZsgc0.roa Signing time: Fri 02 Jan 2026 16:23:21 +0000 ROA not before: Fri 02 Jan 2026 16:23:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 195.133.54.0/24 maxlen: 24 195.133.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:50:3e:1c:19:3a:46:be:62:8e:e9:80:da:ba:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87967acdefcd734f9a4479d4989fe482866c81cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:fb:8b:26:60:82:08:d7:33:59:89:3f:7c: 5f:1a:3c:88:94:b4:fe:ae:0a:01:7c:86:a3:18:2a: 9b:5d:ef:20:98:33:8b:64:44:69:38:92:ce:a0:f3: 4b:ae:c9:84:89:30:eb:e9:63:d4:bc:79:cb:32:f6: 40:62:04:04:ba:e1:f6:3c:c3:53:5e:6f:05:ae:61: 2a:c6:f6:ca:09:bb:e6:6c:54:fe:90:a3:1e:2e:7d: 3b:64:1b:81:cb:39:fa:96:fd:30:7f:ad:da:34:21: 37:8c:1a:f8:67:cc:95:b9:8f:13:9a:d0:18:26:14: 11:62:b6:7f:ae:24:a5:09:26:16:40:37:47:62:49: 48:fb:dc:14:c8:69:b9:4e:69:f6:a4:ea:11:1b:7e: 88:03:dc:5c:1f:7a:a3:21:09:c1:72:c5:05:9c:9c: 09:20:7d:9b:2d:32:0a:00:c4:e9:94:20:ea:8d:ca: 79:45:1a:bd:ce:49:e1:a4:57:27:87:b6:d4:cd:6a: d1:e0:a9:e0:14:c0:7d:f5:4e:44:ae:cb:6c:97:78: 8f:ea:46:d0:d3:a0:e2:ef:00:7f:43:11:49:b0:6d: bc:69:95:9f:27:8a:f3:d7:13:07:e4:98:d0:6a:80: e8:48:f1:dd:bd:9c:f0:c7:21:17:31:63:0f:e4:b1: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:96:7A:CD:EF:CD:73:4F:9A:44:79:D4:98:9F:E4:82:86:6C:81:CD X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h5Z6ze_Nc0-aRHnUmJ_kgoZsgc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.133.54.0/24 195.133.74.0/24 Signature Algorithm: sha256WithRSAEncryption 17:a6:4c:fa:51:ad:6b:57:3c:a2:80:e5:a6:a0:72:c5:69:76: 38:e3:fc:22:9d:b7:ef:06:85:2c:a5:50:9e:f0:c5:20:3c:e8: 6e:9e:04:a9:bd:80:bc:16:ee:7c:a8:db:e5:1d:3d:95:af:f2: 27:04:53:64:f9:fd:dc:e3:77:59:d7:13:e9:cc:ba:6e:64:d7: ca:6d:92:12:9c:2e:9a:18:d4:8c:5a:67:c6:a7:a3:79:a9:11: cf:1a:9f:ae:c0:8a:e4:61:6a:81:60:4f:48:61:9f:a6:12:d6: 5c:82:e0:fe:a4:c5:11:82:0b:9b:48:75:60:0e:05:61:8d:72: b9:ff:db:29:4d:59:d2:25:c8:f8:59:b9:cd:c5:de:c5:bd:ad: ef:55:fc:af:b7:44:30:fc:73:10:0a:56:2b:77:a5:91:69:81: ba:c4:13:3f:95:1b:9f:ff:08:b4:8c:f3:61:1a:48:13:20:63: 29:17:35:a5:76:08:89:a9:c8:cd:b3:ac:75:c9:43:6b:b1:47: 50:be:a8:f2:30:12:49:92:2d:09:28:97:34:8f:d5:3e:61:b7: 2e:66:9e:f2:07:9a:d8:6a:e0:c1:a5:6a:82:f7:11:2d:a0:9e: bd:f4:6d:dd:59:e2:ba:7e:a2:87:1d:9e:bb:5f:f8:25:61:37: ad:c1:1f:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hVA+HBk6Rr5ijumA2rqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzk2N2FjZGVmY2Q3MzRmOWE0NDc5ZDQ5ODlmZTQ4Mjg2NmM4MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL/7iyZgggjXM1mJP3xfGjyIlLT+ rgoBfIajGCqbXe8gmDOLZERpOJLOoPNLrsmEiTDr6WPUvHnLMvZAYgQEuuH2PMNT Xm8FrmEqxvbKCbvmbFT+kKMeLn07ZBuByzn6lv0wf63aNCE3jBr4Z8yVuY8TmtAY JhQRYrZ/riSlCSYWQDdHYklI+9wUyGm5Tmn2pOoRG36IA9xcH3qjIQnBcsUFnJwJ IH2bLTIKAMTplCDqjcp5RRq9zknhpFcnh7bUzWrR4KngFMB99U5Erstsl3iP6kbQ 06Di7wB/QxFJsG28aZWfJ4rz1xMH5JjQaoDoSPHdvZzwxyEXMWMP5LH7JwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIeWes3vzXNPmkR51Jif5IKGbIHNMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvaDVaNnplX05jMC1hUkhuVW1KX2tnb1pzZ2MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4U2AwQA w4VKMA0GCSqGSIb3DQEBCwUAA4IBAQAXpkz6Ua1rVzyigOWmoHLFaXY44/winbfv BoUspVCe8MUgPOhungSpvYC8Fu58qNvlHT2Vr/InBFNk+f3c43dZ1xPpzLpuZNfK bZISnC6aGNSMWmfGp6N5qRHPGp+uwIrkYWqBYE9IYZ+mEtZcguD+pMURggubSHVg DgVhjXK5/9spTVnSJcj4WbnNxd7Fva3vVfyvt0Qw/HMQClYrd6WRaYG6xBM/lRuf /wi0jPNhGkgTIGMpFzWldgiJqcjNs6x1yUNrsUdQvqjyMBJJki0JKJc0j9U+Ybcu Zp7yB5rYauDBpWqC9xEtoJ699G3dWeK6fqKHHZ67X/glYTetwR/l -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:01 2026 by rpki-client