This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa File: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (raw, json) Hash identifier: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo= Subject key identifier: B2:53:D4:43:3A:40:27:5D:88:87:D2:73:AA:78:F9:17:44:8A:03:18 Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5 Certificate serial: 019B77C68DE9F7E089BB4883EA9445AC3E73 Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 109.95.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8d:e9:f7:e0:89:bb:48:83:ea:94:45:ac:3e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b253d4433a40275d8887d273aa78f917448a0318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5a:01:21:31:46:a4:5e:42:30:7b:96:13:ec: d1:7c:34:7d:94:83:06:a6:a0:b6:42:1b:dc:a0:c8: a3:56:80:5d:36:fc:9f:63:dd:c6:82:28:a9:32:f9: cb:8a:56:9c:10:0e:79:d0:6f:1d:ac:bb:29:aa:37: de:3a:16:2c:d8:7a:eb:5d:25:2d:61:70:8a:08:f8: c4:21:9f:f2:fa:69:9e:89:ba:bf:2f:71:7d:07:9f: 09:e6:36:37:2e:e8:b7:f2:d8:ae:1e:74:98:00:b8: df:85:8d:97:00:17:56:cc:7b:41:04:67:e5:f6:1c: b8:e4:86:03:e1:52:bb:35:82:f2:2f:4b:ca:17:f9: d7:46:d4:5e:9b:58:69:f8:e3:7e:ff:b2:97:7b:25: 10:76:18:41:fe:d2:b8:85:47:36:70:46:aa:47:5f: 0b:68:4c:67:97:d9:f8:07:05:6f:d1:80:fc:2d:58: c7:01:47:00:73:6c:5f:1a:b0:2d:1e:9e:0e:16:5b: 91:f3:a5:c9:74:1e:38:fa:9c:17:6b:5e:7d:07:22: 22:b4:58:3e:f0:4c:7e:d5:8f:f9:92:a4:c8:d8:54: 92:fb:ee:75:dd:23:d3:04:34:36:41:08:bd:55:2d: 3c:ce:1d:48:5c:6e:4b:b1:ff:4d:d4:c7:5c:7f:a2: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:53:D4:43:3A:40:27:5D:88:87:D2:73:AA:78:F9:17:44:8A:03:18 X509v3 Authority Key Identifier: keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.95.191.0/24 Signature Algorithm: sha256WithRSAEncryption 85:94:e6:ec:2b:30:a1:a7:90:81:6f:50:5f:4e:1b:d0:36:a4: 01:bf:63:87:40:73:b4:d1:d0:8c:05:b9:ea:db:cc:82:80:81: 09:3a:69:76:ed:d1:8f:fb:e3:7d:6f:78:e0:71:a1:47:f3:82: 10:5b:65:dd:9d:da:f2:b8:64:f4:9b:f5:68:d8:14:c0:27:cd: 06:25:0b:eb:53:38:db:48:a7:9c:89:8d:96:e3:da:21:8c:66: f0:f8:a4:12:e4:fb:80:be:65:e9:07:c0:d0:b2:46:9a:13:34: 56:47:a4:32:1d:61:b2:d2:6a:2d:50:55:6c:95:8b:07:1e:d4: dc:2d:f7:83:09:da:5c:59:0d:17:bc:61:de:7b:94:90:c9:e8: 88:00:bf:19:64:3b:c4:9b:3e:9a:3f:00:fd:1f:60:0e:e3:55: a7:ab:fc:cb:84:8e:65:de:1b:e3:26:0c:1f:79:66:7b:9c:65: f9:cc:11:1c:3d:87:ea:1a:84:e9:98:58:07:c4:cc:52:44:28: e8:e7:e7:81:34:4a:b4:29:d3:f6:7b:32:0a:14:1a:9b:15:cb: f0:13:ef:cb:60:66:7a:12:77:aa:36:a9:4d:a7:4e:46:85:7a: 19:3f:1b:16:66:68:27:1a:5a:57:a6:e2:80:8f:61:22:3e:19: d6:78:d5:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo3p9+CJu0iD6pRFrD5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5 ZWMwYjUwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjUzZDQ0MzNhNDAyNzVkODg4N2QyNzNhYTc4ZjkxNzQ0OGEwMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoloBITFGpF5CMHuWE+zRfDR9lIMG pqC2QhvcoMijVoBdNvyfY93GgiipMvnLilacEA550G8drLspqjfeOhYs2HrrXSUt YXCKCPjEIZ/y+mmeibq/L3F9B58J5jY3Lui38tiuHnSYALjfhY2XABdWzHtBBGfl 9hy45IYD4VK7NYLyL0vKF/nXRtRem1hp+ON+/7KXeyUQdhhB/tK4hUc2cEaqR18L aExnl9n4BwVv0YD8LVjHAUcAc2xfGrAtHp4OFluR86XJdB44+pwXa159ByIitFg+ 8Ex+1Y/5kqTI2FSS++513SPTBDQ2QQi9VS08zh1IXG5Lsf9N1Mdcf6I0rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLJT1EM6QCddiIfSc6p4+RdEigMYMB8GA1UdIwQY MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt MTlkZjViNGQxMDE0LzEvc2xQVVF6cEFKMTJJaDlKenFuajVGMFNLQXhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0 LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbV+/MA0G CSqGSIb3DQEBCwUAA4IBAQCFlObsKzChp5CBb1BfThvQNqQBv2OHQHO00dCMBbnq 28yCgIEJOml27dGP++N9b3jgcaFH84IQW2XdndryuGT0m/Vo2BTAJ80GJQvrUzjb SKeciY2W49ohjGbw+KQS5PuAvmXpB8DQskaaEzRWR6QyHWGy0motUFVslYsHHtTc LfeDCdpcWQ0XvGHee5SQyeiIAL8ZZDvEmz6aPwD9H2AO41Wnq/zLhI5l3hvjJgwf eWZ7nGX5zBEcPYfqGoTpmFgHxMxSRCjo5+eBNEq0KdP2ezIKFBqbFcvwE+/LYGZ6 EneqNqlNp05GhXoZPxsWZmgnGlpXpuKAj2EiPhnWeNWS -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:15 2026 by rpki-client