This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/cUjXL3AkU0vzCeL7XNA5hx74zv4.roa File: cUjXL3AkU0vzCeL7XNA5hx74zv4.roa (raw, json) Hash identifier: M5YlQ4HoZ45gNTliPTDu0USjnaLFnkhBumUlmweXtD8= Subject key identifier: 71:48:D7:2F:70:24:53:4B:F3:09:E2:FB:5C:D0:39:87:1E:F8:CE:FE Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821 Certificate serial: 019B7F84005FD3817EBEC7AA19171B173CE4 Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/cUjXL3AkU0vzCeL7XNA5hx74zv4.roa Signing time: Fri 02 Jan 2026 16:21:55 +0000 ROA not before: Fri 02 Jan 2026 16:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41504 IP address blocks: 195.3.212.0/22 maxlen: 24 2001:67c:2378::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:00:5f:d3:81:7e:be:c7:aa:19:17:1b:17:3c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821 Validity Not Before: Jan 2 16:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7148d72f7024534bf309e2fb5cd039871ef8cefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:0a:95:81:cc:73:5e:ac:06:85:a0:11:cb: a4:70:5a:04:bf:26:0e:9e:16:e7:25:f8:6d:b3:44: 80:45:f1:81:2f:83:ea:52:01:27:68:18:27:b6:ba: 31:b7:02:2d:e3:12:53:eb:ea:ae:f4:8b:85:bf:ba: 73:0d:91:ee:79:00:56:f0:e8:b6:49:0e:07:a7:d6: e0:0d:9e:d3:e9:47:12:c7:f2:e3:32:e2:d0:8b:f1: d3:4d:05:8d:fd:18:e3:d1:be:d9:fa:fb:9c:bb:58: 7f:8a:91:1c:92:70:fe:56:ad:36:89:02:ef:e5:b2: fb:8b:04:6e:f8:d8:7e:fd:d0:6a:ff:00:d4:57:66: 5b:ff:8e:19:e1:89:4b:9c:ee:35:56:2c:65:81:19: 54:38:52:1a:4b:07:58:0d:aa:f2:d0:8f:55:12:4e: d4:4a:a0:d0:f5:a9:08:6b:ae:69:e5:ea:7b:99:ae: 6e:79:b0:6a:82:83:4c:a5:32:d6:6d:25:2d:fe:ca: 9f:70:d4:85:ca:97:2e:e1:c6:2d:dd:88:c8:94:7f: dc:1a:00:58:c4:65:97:01:01:85:9f:27:9c:48:7d: f4:6a:91:12:06:6e:26:80:33:8d:b1:96:35:a0:35: 2a:d9:65:dd:04:96:45:4b:8b:5d:62:bd:fe:9e:d5: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:48:D7:2F:70:24:53:4B:F3:09:E2:FB:5C:D0:39:87:1E:F8:CE:FE X509v3 Authority Key Identifier: keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/cUjXL3AkU0vzCeL7XNA5hx74zv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.3.212.0/22 IPv6: 2001:67c:2378::/48 Signature Algorithm: sha256WithRSAEncryption 17:c1:8d:8e:18:41:82:b5:fb:5f:be:ae:1d:c4:62:38:5f:4b: b0:c9:7b:1b:7f:ae:cf:ad:28:3c:ed:38:37:cb:7d:09:d3:68: b3:b0:66:43:44:76:a9:9e:4e:9a:a5:2e:59:57:a3:f5:93:2f: 3c:03:53:20:90:8f:c3:47:fd:96:e2:9b:0a:aa:36:dd:56:a5: af:23:17:2c:71:89:4f:18:6b:e0:f0:cf:e2:6f:5a:c3:c8:5d: 00:e1:63:4d:b6:17:34:af:b1:1e:59:7a:de:93:4d:97:5f:f3: e1:0d:42:f3:52:2b:b1:bb:ea:ad:c9:f8:f5:0d:24:e5:e2:f2: 77:bb:21:07:35:9b:a6:1c:cf:48:68:26:96:a3:2e:99:a4:fd: 93:1e:eb:c4:00:6f:fc:34:28:de:78:39:6b:dd:99:23:9b:ee: 30:d8:c5:2d:ec:10:41:8f:61:86:c6:8b:fd:83:45:01:14:d3: 75:dc:9d:12:ca:eb:20:5a:16:0d:82:77:e8:9e:58:1b:7e:5a: 22:a2:08:55:35:d4:fe:51:47:d1:f9:e3:90:88:8a:3e:b4:28: ca:93:9c:19:69:c0:06:b0:e7:35:7c:eb:9d:7d:93:2d:3d:03: 45:d3:0d:0a:be:58:da:bc:a8:59:b2:33:70:03:45:54:74:a4: ca:07:10:d1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hABf04F+vseqGRcbFzzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjExYTMxNjBkYjhjZTc5MThiZjNlYzU4YjVjNWUxZTNl OTM4MjEwHhcNMjYwMTAyMTYyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTQ4ZDcyZjcwMjQ1MzRiZjMwOWUyZmI1Y2QwMzk4NzFlZjhjZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXIKlYHMc16sBoWgEcukcFoEvyYO nhbnJfhts0SARfGBL4PqUgEnaBgntroxtwIt4xJT6+qu9IuFv7pzDZHueQBW8Oi2 SQ4Hp9bgDZ7T6UcSx/LjMuLQi/HTTQWN/Rjj0b7Z+vucu1h/ipEcknD+Vq02iQLv 5bL7iwRu+Nh+/dBq/wDUV2Zb/44Z4YlLnO41VixlgRlUOFIaSwdYDary0I9VEk7U SqDQ9akIa65p5ep7ma5uebBqgoNMpTLWbSUt/sqfcNSFypcu4cYt3YjIlH/cGgBY xGWXAQGFnyecSH30apESBm4mgDONsZY1oDUq2WXdBJZFS4tdYr3+ntXZYQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHFI1y9wJFNL8wni+1zQOYce+M7+MB8GA1UdIwQY MBaAFH3xGjFg24znkYvz7Fi1xeHj6TghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0Mzkt ZTRiNjZhM2ZlNWJjLzEvY1VqWEwzQWtVMHZ6Q2VMN1hOQTVoeDc0enY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0MzktZTRiNjZhM2ZlNWJj LzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwwPUMA8E AgACMAkDBwAgAQZ8I3gwDQYJKoZIhvcNAQELBQADggEBABfBjY4YQYK1+1++rh3E YjhfS7DJext/rs+tKDztODfLfQnTaLOwZkNEdqmeTpqlLllXo/WTLzwDUyCQj8NH /ZbimwqqNt1Wpa8jFyxxiU8Ya+Dwz+JvWsPIXQDhY022FzSvsR5Zet6TTZdf8+EN QvNSK7G76q3J+PUNJOXi8ne7IQc1m6Ycz0hoJpajLpmk/ZMe68QAb/w0KN54OWvd mSOb7jDYxS3sEEGPYYbGi/2DRQEU03XcnRLK6yBaFg2Cd+ieWBt+WiKiCFU11P5R R9H545CIij60KMqTnBlpwAaw5zV86519ky09A0XTDQq+WNq8qFmyM3ADRVR0pMoH ENE= -----END CERTIFICATE-----Generated at Tue Feb 10 02:28:20 2026 by rpki-client