This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/fIkb69ZuPAj_lkNlkF5stv3pzy8.roa File: fIkb69ZuPAj_lkNlkF5stv3pzy8.roa (raw, json) Hash identifier: HcfpVtDwRtdGIEcmlCtRPcGYYq9FoTPjwQjdNlk5s8E= Subject key identifier: 7C:89:1B:EB:D6:6E:3C:08:FF:96:43:65:90:5E:6C:B6:FD:E9:CF:2F Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c Certificate serial: 019B7F85582D4FDF0B91376CD4A83BED59EF Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/fIkb69ZuPAj_lkNlkF5stv3pzy8.roa Signing time: Fri 02 Jan 2026 16:23:23 +0000 ROA not before: Fri 02 Jan 2026 16:23:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51021 IP address blocks: 195.182.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:58:2d:4f:df:0b:91:37:6c:d4:a8:3b:ed:59:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aae19678aa37525512229a94e7890147183273c Validity Not Before: Jan 2 16:23:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c891bebd66e3c08ff964365905e6cb6fde9cf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:82:f7:da:da:14:2d:2d:8b:32:5d:66:1d:54: 84:48:87:3e:87:f1:3b:45:42:27:1f:62:d7:c8:3f: b7:1b:dc:6e:78:50:9c:e0:de:23:62:65:33:35:c0: e7:86:8a:47:36:bc:8f:04:9d:e2:af:11:67:a7:1b: 97:6c:d1:1b:bc:42:88:fe:0c:da:fb:35:ae:96:77: f1:86:16:ad:43:3f:1d:f2:3d:72:a7:44:e6:26:ce: 28:c0:3f:dc:92:9a:cd:cd:88:7d:6b:da:61:b9:4e: 42:68:42:0d:f5:34:34:4e:bc:50:30:9c:87:42:16: 8c:57:95:c1:b9:e0:37:7b:30:7d:78:e9:48:fb:a0: 26:1b:25:4a:2d:28:b4:f8:f9:3f:0b:6a:79:b5:73: 53:c6:2c:7f:56:c8:1b:de:ac:b0:ef:9a:cf:de:69: 60:53:de:29:90:7f:c1:fa:f3:55:9e:e6:23:71:fb: 9f:c5:68:26:ad:95:1a:f8:ea:70:08:4b:07:9f:63: 65:2c:3d:a9:31:69:b9:fe:52:63:6b:af:67:55:ec: c5:03:26:bb:0f:8f:d7:ee:f1:8f:f0:be:30:35:08: 01:55:a2:a2:c0:82:15:37:89:18:b6:90:02:56:87: e6:ab:d4:f4:3e:0f:90:92:b8:10:7f:ef:eb:13:b8: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:1B:EB:D6:6E:3C:08:FF:96:43:65:90:5E:6C:B6:FD:E9:CF:2F X509v3 Authority Key Identifier: keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/fIkb69ZuPAj_lkNlkF5stv3pzy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.42.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:80:c9:a9:11:2d:fc:4e:00:02:7c:36:bf:cf:c9:61:3c:d4: 71:9a:ed:60:0b:ea:71:aa:f7:eb:99:70:9e:bc:a0:a9:e1:c9: 55:fb:67:42:97:55:f5:40:d2:b9:52:06:eb:b4:6a:03:8b:46: 53:fb:9b:48:2c:f0:ae:de:c4:2a:8d:41:7a:b4:57:54:ab:30: 3c:75:68:35:87:56:9d:98:94:d5:cb:f9:bb:1a:14:a9:5b:41: ed:fa:e9:14:e8:ec:be:9d:62:c7:d8:c8:16:b2:e4:94:99:3e: 50:de:b3:b7:0b:9b:cb:1d:a3:84:18:27:3a:9e:aa:d5:b6:ec: b1:89:84:3b:32:34:30:e9:c4:fe:82:56:da:24:dd:8e:39:26: fb:db:b4:c3:22:e2:96:4b:a4:7a:7b:7e:31:1d:50:36:9f:1b: 13:7e:cb:59:8e:21:a7:04:a9:b3:c4:97:4e:40:aa:83:51:05: 29:e4:93:78:48:20:53:0f:97:9d:17:ca:ef:43:89:e5:7c:1d: e5:f0:14:f8:ba:90:12:ac:0d:41:4d:bb:5b:0c:20:5f:70:14: 0f:fa:6e:7c:70:72:79:6c:12:78:27:44:c3:85:e1:39:6c:e7: 26:3a:80:61:8c:a3:06:aa:e8:88:20:7c:11:0d:3a:ca:ed:56: 37:76:50:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hVgtT98LkTds1Kg77VnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYWUxOTY3OGFhMzc1MjU1MTIyMjlhOTRlNzg5MDE0NzE4 MzI3M2MwHhcNMjYwMTAyMTYyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzg5MWJlYmQ2NmUzYzA4ZmY5NjQzNjU5MDVlNmNiNmZkZTljZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoL32toULS2LMl1mHVSESIc+h/E7 RUInH2LXyD+3G9xueFCc4N4jYmUzNcDnhopHNryPBJ3irxFnpxuXbNEbvEKI/gza +zWulnfxhhatQz8d8j1yp0TmJs4owD/ckprNzYh9a9phuU5CaEIN9TQ0TrxQMJyH QhaMV5XBueA3ezB9eOlI+6AmGyVKLSi0+Pk/C2p5tXNTxix/Vsgb3qyw75rP3mlg U94pkH/B+vNVnuYjcfufxWgmrZUa+OpwCEsHn2NlLD2pMWm5/lJja69nVezFAya7 D4/X7vGP8L4wNQgBVaKiwIIVN4kYtpACVofmq9T0Pg+QkrgQf+/rE7g3GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyJG+vWbjwI/5ZDZZBebLb96c8vMB8GA1UdIwQY MBaAFFquGWeKo3UlUSIpqU54kBRxgyc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YTkwZDktOTQ4YS00NmMyLTk3N2Et NjQzZjAyZGFlYjllLzEvZklrYjY5WnVQQWpfbGtObGtGNXN0djNwenk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84YTkwZDktOTQ4YS00NmMyLTk3N2EtNjQzZjAyZGFlYjll LzEvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YqMA0G CSqGSIb3DQEBCwUAA4IBAQBNgMmpES38TgACfDa/z8lhPNRxmu1gC+pxqvfrmXCe vKCp4clV+2dCl1X1QNK5UgbrtGoDi0ZT+5tILPCu3sQqjUF6tFdUqzA8dWg1h1ad mJTVy/m7GhSpW0Ht+ukU6Oy+nWLH2MgWsuSUmT5Q3rO3C5vLHaOEGCc6nqrVtuyx iYQ7MjQw6cT+glbaJN2OOSb727TDIuKWS6R6e34xHVA2nxsTfstZjiGnBKmzxJdO QKqDUQUp5JN4SCBTD5edF8rvQ4nlfB3l8BT4upASrA1BTbtbDCBfcBQP+m58cHJ5 bBJ4J0TDheE5bOcmOoBhjKMGquiIIHwRDTrK7VY3dlBV -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:18 2026 by rpki-client