This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/V7JW4XGk4Ry6qbzo98CUrcXD1FU.roa File: V7JW4XGk4Ry6qbzo98CUrcXD1FU.roa (raw, json) Hash identifier: z/l54hcueYtx9vtLaJiD8XN809wHpE2YDLsMsyM+GA0= Subject key identifier: 57:B2:56:E1:71:A4:E1:1C:BA:A9:BC:E8:F7:C0:94:AD:C5:C3:D4:55 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F0635DB803CBB8456806A2EA67CD Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/V7JW4XGk4Ry6qbzo98CUrcXD1FU.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208949 IP address blocks: 195.211.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f0:63:5d:b8:03:cb:b8:45:68:06:a2:ea:67:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57b256e171a4e11cbaa9bce8f7c094adc5c3d455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a7:01:88:37:79:61:c7:61:fa:58:06:7b:55: e9:1b:f3:2e:4e:fb:da:53:04:fb:c4:c3:2e:b8:40: 10:80:f6:c8:dc:ff:5e:53:bb:ff:b4:fb:7c:df:32: c2:f1:8a:fa:2b:27:35:fa:fa:6d:2d:42:d4:82:80: 16:40:4a:f0:7f:14:2a:e2:65:b4:0b:38:b8:6b:09: b1:9c:8c:1a:38:7f:0b:4d:d8:c1:04:6a:69:ff:cb: 14:9c:b2:a0:dc:0b:2b:f9:6d:76:c8:2e:f9:a7:f1: ce:7c:dc:8c:1b:2a:b2:dd:37:47:4a:e9:f5:4a:2d: 8e:04:4f:79:7a:c9:89:d9:4b:4d:87:42:25:1d:e3: 11:ab:30:6d:6f:0e:47:37:db:3a:ca:45:a7:f9:ab: 8f:1d:9a:c5:d4:6c:44:21:7e:fb:0e:14:c5:3c:18: bd:87:e3:de:2f:10:69:db:03:48:59:4d:b9:a9:ed: a0:a3:8f:99:d2:27:f6:be:60:27:25:97:32:5d:bb: 08:37:be:17:93:bc:82:03:19:82:48:85:d3:bf:a8: 9c:81:fb:7f:44:7c:82:db:c6:c4:f8:24:4c:e2:f1: 55:61:97:05:dc:5d:f0:31:71:23:46:9e:ef:3e:25: be:dc:18:53:e8:bb:51:51:1a:76:7c:f6:3c:2b:ea: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:56:E1:71:A4:E1:1C:BA:A9:BC:E8:F7:C0:94:AD:C5:C3:D4:55 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/V7JW4XGk4Ry6qbzo98CUrcXD1FU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.191.0/24 Signature Algorithm: sha256WithRSAEncryption 08:12:9b:df:23:fc:4e:4d:78:97:e6:ee:9e:3a:e2:76:72:b0: 93:d9:2e:e2:d9:ab:75:78:ef:54:28:35:19:9d:d4:80:ee:a3: ae:f6:38:6b:4c:aa:bf:3b:46:15:1e:49:f8:4d:f5:86:cd:78: c5:5e:84:fa:3e:96:3b:05:58:0e:35:97:72:f3:da:66:41:a1: 32:87:2e:d2:be:86:b1:a1:bb:db:4f:a1:1c:7c:c2:49:b9:0b: ea:4b:68:1f:df:d5:19:02:8a:0a:65:fc:3a:d8:88:d3:33:49: ff:98:41:c3:3c:c3:c4:c5:18:80:4f:da:9d:cf:da:e5:6e:0d: e0:91:16:a1:f0:f9:f7:eb:1d:b0:7a:88:37:a2:4f:78:28:71: 58:ac:b9:83:03:62:35:07:1f:9a:07:a9:e4:84:6e:d6:b9:ea: d8:fe:e1:6b:bd:88:c8:9b:b8:d7:af:f4:02:29:53:e6:75:23: 68:23:22:20:fc:ff:87:d9:e1:a0:7d:64:ad:b2:19:5d:95:e0: 43:2e:cb:2f:b4:aa:c3:e7:06:7e:05:00:60:63:46:b4:f5:8d: c6:15:87:0b:04:77:59:b6:41:0d:ff:4c:4c:95:3b:e0:19:aa: 7c:a0:e1:f6:a6:54:99:4e:b7:f4:a1:4a:1e:68:7c:3a:dd:9c: c7:b6:1b:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfBjXbgDy7hFaAai6mfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2IyNTZlMTcxYTRlMTFjYmFhOWJjZThmN2MwOTRhZGM1YzNkNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KcBiDd5Ycdh+lgGe1XpG/MuTvva UwT7xMMuuEAQgPbI3P9eU7v/tPt83zLC8Yr6Kyc1+vptLULUgoAWQErwfxQq4mW0 Czi4awmxnIwaOH8LTdjBBGpp/8sUnLKg3Asr+W12yC75p/HOfNyMGyqy3TdHSun1 Si2OBE95esmJ2UtNh0IlHeMRqzBtbw5HN9s6ykWn+auPHZrF1GxEIX77DhTFPBi9 h+PeLxBp2wNIWU25qe2go4+Z0if2vmAnJZcyXbsIN74Xk7yCAxmCSIXTv6icgft/ RHyC28bE+CRM4vFVYZcF3F3wMXEjRp7vPiW+3BhT6LtRURp2fPY8K+pU9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFeyVuFxpOEcuqm86PfAlK3Fw9RVMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvVjdKVzRYR2s0Unk2cWJ6bzk4Q1VyY1hEMUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9O/MA0G CSqGSIb3DQEBCwUAA4IBAQAIEpvfI/xOTXiX5u6eOuJ2crCT2S7i2at1eO9UKDUZ ndSA7qOu9jhrTKq/O0YVHkn4TfWGzXjFXoT6PpY7BVgONZdy89pmQaEyhy7Svoax obvbT6EcfMJJuQvqS2gf39UZAooKZfw62IjTM0n/mEHDPMPExRiAT9qdz9rlbg3g kRah8Pn36x2weog3ok94KHFYrLmDA2I1Bx+aB6nkhG7WuerY/uFrvYjIm7jXr/QC KVPmdSNoIyIg/P+H2eGgfWStshldleBDLssvtKrD5wZ+BQBgY0a09Y3GFYcLBHdZ tkEN/0xMlTvgGap8oOH2plSZTrf0oUoeaHw63ZzHthu4 -----END CERTIFICATE-----Generated at Tue Jan 6 20:50:41 2026 by rpki-client