This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cXX9bAZ77mllTc24Rs11ApMBOt4.roa File: cXX9bAZ77mllTc24Rs11ApMBOt4.roa (raw, json) Hash identifier: u6kZlsRKN4vR06ERgmYB+NC0fmg6/3nuEqaSfJpiAHM= Subject key identifier: 71:75:FD:6C:06:7B:EE:69:65:4D:CD:B8:46:CD:75:02:93:01:3A:DE Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13EFC64C8527C8E02D89CC2054FAD3 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cXX9bAZ77mllTc24Rs11ApMBOt4.roa Signing time: Fri 02 Jan 2026 14:19:31 +0000 ROA not before: Fri 02 Jan 2026 14:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42218 IP address blocks: 195.54.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:ef:c6:4c:85:27:c8:e0:2d:89:cc:20:54:fa:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7175fd6c067bee69654dcdb846cd750293013ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:d7:16:2f:94:92:05:53:f3:52:39:e3:cb: 1c:0a:38:92:ad:cd:bb:ef:62:bf:40:ab:88:19:34: 7b:1f:99:78:22:c0:1d:e5:a8:50:69:44:07:b9:c3: c6:1c:d4:02:23:ae:d6:97:72:82:39:ef:a5:80:c2: 82:11:df:7c:4e:e3:20:a5:f4:f3:47:d2:49:d9:54: 0e:61:06:4e:09:30:05:f6:3b:c0:00:2d:97:f3:71: 95:fc:9d:26:dd:4c:c1:b4:40:e1:ad:a9:79:78:48: 8a:ed:6b:ce:bd:06:3d:90:18:22:a9:87:38:4c:7f: d8:82:33:8e:12:ef:37:c3:af:68:78:e7:65:58:9f: 67:e9:b4:ee:5b:f9:b5:cd:56:8e:92:21:c5:d1:b3: 9a:07:02:7c:15:00:bd:3e:9c:26:1b:85:81:6c:17: 08:f9:21:68:a5:70:ce:29:cd:fd:60:de:7d:f0:64: f5:e1:db:7f:f6:4d:bb:bd:44:3e:3c:72:87:ce:01: 30:92:85:db:37:43:16:1a:6b:61:7a:6e:31:f5:d2: ef:c6:65:a8:c7:d9:11:8f:6b:e9:6c:d9:ef:62:3a: 38:3d:7d:07:60:89:09:f7:73:f8:4b:11:45:b9:88: d6:8d:1c:15:70:ed:2b:a8:39:f8:11:5c:04:90:4c: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:75:FD:6C:06:7B:EE:69:65:4D:CD:B8:46:CD:75:02:93:01:3A:DE X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cXX9bAZ77mllTc24Rs11ApMBOt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.204.0/22 Signature Algorithm: sha256WithRSAEncryption 55:55:87:4f:ba:9f:28:c5:3b:9e:45:cf:9b:ad:0f:65:9d:b4: cd:55:69:2e:29:d4:29:b4:11:8c:da:3d:8b:44:6c:eb:9d:14: 8d:b1:59:e8:f3:30:91:14:f7:7a:c3:8e:24:72:d2:ce:fe:15: d8:79:9a:5a:33:4e:47:6b:9b:ce:1b:1e:a3:a3:76:4f:21:39: 04:f7:04:f6:13:b5:4d:33:35:02:c5:0b:8d:52:e2:6a:7d:02: 21:a6:20:f5:24:c5:21:e2:ff:7f:1c:03:9c:d7:2d:db:64:15: 57:a7:7d:a7:49:9b:eb:66:1c:23:1a:aa:c7:f3:47:2a:ad:65: a2:d8:33:96:52:b0:e5:ab:67:a6:50:9d:85:59:91:6d:bb:95: 41:a8:f4:62:ab:1c:ac:6e:27:7d:e8:d6:e7:11:e6:d4:88:75: c6:11:25:90:eb:0f:6e:70:25:20:d0:cf:01:eb:f9:7c:a4:a4: 0c:6e:05:70:20:09:0d:fa:7f:f1:c1:7b:45:01:73:ac:4d:d7: c3:9a:a1:dd:68:92:7c:29:e1:c4:1c:0d:18:17:3a:a3:87:8d: 5c:08:25:87:06:14:16:27:3e:bf:fd:f4:81:54:2a:90:a0:63: 49:e7:79:b1:fb:2a:3c:ca:e9:e7:2d:a4:ff:a9:e7:4c:fc:11: 52:e2:43:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E+/GTIUnyOAticwgVPrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTc1ZmQ2YzA2N2JlZTY5NjU0ZGNkYjg0NmNkNzUwMjkzMDEzYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF3XFi+UkgVT81I548scCjiSrc27 72K/QKuIGTR7H5l4IsAd5ahQaUQHucPGHNQCI67Wl3KCOe+lgMKCEd98TuMgpfTz R9JJ2VQOYQZOCTAF9jvAAC2X83GV/J0m3UzBtEDhral5eEiK7WvOvQY9kBgiqYc4 TH/YgjOOEu83w69oeOdlWJ9n6bTuW/m1zVaOkiHF0bOaBwJ8FQC9PpwmG4WBbBcI +SFopXDOKc39YN598GT14dt/9k27vUQ+PHKHzgEwkoXbN0MWGmthem4x9dLvxmWo x9kRj2vpbNnvYjo4PX0HYIkJ93P4SxFFuYjWjRwVcO0rqDn4EVwEkEwQkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHF1/WwGe+5pZU3NuEbNdQKTATreMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvY1hYOWJBWjc3bWxsVGMyNFJzMTFBcE1CT3Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwzbMMA0G CSqGSIb3DQEBCwUAA4IBAQBVVYdPup8oxTueRc+brQ9lnbTNVWkuKdQptBGM2j2L RGzrnRSNsVno8zCRFPd6w44kctLO/hXYeZpaM05Ha5vOGx6jo3ZPITkE9wT2E7VN MzUCxQuNUuJqfQIhpiD1JMUh4v9/HAOc1y3bZBVXp32nSZvrZhwjGqrH80cqrWWi 2DOWUrDlq2emUJ2FWZFtu5VBqPRiqxysbid96NbnEebUiHXGESWQ6w9ucCUg0M8B 6/l8pKQMbgVwIAkN+n/xwXtFAXOsTdfDmqHdaJJ8KeHEHA0YFzqjh41cCCWHBhQW Jz6//fSBVCqQoGNJ53mx+yo8yunnLaT/qedM/BFS4kPi -----END CERTIFICATE-----Generated at Thu Feb 5 05:53:45 2026 by rpki-client