This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_pI--GSV4dHSJWec5J4WzJ2ODaw.roa File: _pI--GSV4dHSJWec5J4WzJ2ODaw.roa (raw, json) Hash identifier: YYZpflVIIoKS8NkdJ/yvfs2ELIL2BGiJPB4ZJp9gUG0= Subject key identifier: FE:92:3E:F8:64:95:E1:D1:D2:25:67:9C:E4:9E:16:CC:9D:8E:0D:AC Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F9D86732E7CECC5290E29E6D3DEC Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_pI--GSV4dHSJWec5J4WzJ2ODaw.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215765 IP address blocks: 195.62.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f9:d8:67:32:e7:ce:cc:52:90:e2:9e:6d:3d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe923ef86495e1d1d225679ce49e16cc9d8e0dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:3f:43:1d:00:20:46:3a:e1:bd:d4:c3:47: 2d:11:3d:1a:9f:92:97:d5:95:6a:c6:3a:b7:c7:98: d1:74:aa:d7:a8:b0:73:5f:f3:ab:2d:51:9e:5a:20: f5:7b:70:15:b9:6c:49:06:25:fa:b7:51:2b:6e:cd: e7:e5:3c:98:16:5c:02:96:8b:76:a7:27:e6:e1:fb: 4d:ea:88:9e:19:78:a5:87:6d:ec:c7:d0:cd:dd:70: 80:d4:f2:f1:12:cc:e6:60:64:35:44:da:a6:ff:36: f9:f3:4a:7a:8a:98:d6:ac:30:68:53:93:ce:4e:0d: 20:fe:b8:93:f9:be:d0:7b:50:4b:ac:59:c6:44:fb: 9b:e4:e8:71:3a:39:1a:0c:59:3c:da:29:ba:a5:5c: 5f:bb:29:25:cc:fa:13:bc:37:58:45:3c:2d:58:e2: f7:5d:b4:07:f8:4b:e8:0b:27:f6:80:22:cf:86:5a: 31:fc:8e:2d:ff:72:ca:eb:40:34:8c:c7:2d:9a:42: d9:e1:7b:63:08:03:d2:58:ce:75:d4:06:54:df:14: a0:f8:bc:9f:96:0c:d0:b7:59:4c:50:15:dc:90:93: 30:07:7c:4c:62:9d:17:d7:e6:88:df:69:ec:77:e4: e0:d9:e0:7e:93:b5:15:40:49:eb:31:97:4a:48:a1: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:92:3E:F8:64:95:E1:D1:D2:25:67:9C:E4:9E:16:CC:9D:8E:0D:AC X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_pI--GSV4dHSJWec5J4WzJ2ODaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.24.0/24 Signature Algorithm: sha256WithRSAEncryption 75:1b:a3:31:ea:09:dd:7d:21:5e:4d:1b:4b:b3:8e:2f:fb:af: 19:f3:b4:2b:b2:c9:05:e0:b6:f6:fc:f0:fb:2a:7a:2f:74:80: e7:ca:6a:87:1c:d8:55:68:a9:ce:91:8c:55:1a:aa:9e:68:ad: 24:85:7f:a2:c4:2b:93:61:1d:3d:1d:9f:c5:16:b2:a9:56:28: 8b:10:4f:d1:c3:60:02:d9:69:b4:51:a6:7b:af:52:3e:b7:d7: 9f:8d:c2:c5:7a:d3:9d:c0:01:cb:91:13:d3:c4:18:80:4a:ad: 80:2c:7e:0c:fa:08:97:86:c1:21:ad:32:cd:1c:30:4a:4d:40: 3e:8a:db:52:c5:cd:68:21:1e:e4:e8:d0:16:8f:e7:04:fa:d3: 44:38:81:97:e7:ad:07:51:94:2c:38:6d:e4:a6:4f:ac:fb:3f: 88:b4:de:aa:c1:23:0d:00:68:c0:1e:a1:42:ea:7a:d9:c7:2c: 3f:a5:60:2f:1a:a3:53:a0:b2:12:6a:23:4b:ed:d5:c6:9b:c0: 5a:a7:db:de:b1:80:2c:15:b9:4d:c4:e7:53:36:c1:dc:26:59: 80:d9:de:ba:86:fd:36:a5:4b:1f:ca:bc:dc:7e:26:0d:82:1a: d3:b1:fb:54:58:41:32:71:1a:b3:ec:a5:7f:84:2e:45:45:20: 47:c5:0d:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfnYZzLnzsxSkOKebT3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTkyM2VmODY0OTVlMWQxZDIyNTY3OWNlNDllMTZjYzlkOGUwZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGk/Qx0AIEY64b3Uw0ctET0an5KX 1ZVqxjq3x5jRdKrXqLBzX/OrLVGeWiD1e3AVuWxJBiX6t1Erbs3n5TyYFlwClot2 pyfm4ftN6oieGXilh23sx9DN3XCA1PLxEszmYGQ1RNqm/zb580p6ipjWrDBoU5PO Tg0g/riT+b7Qe1BLrFnGRPub5OhxOjkaDFk82im6pVxfuyklzPoTvDdYRTwtWOL3 XbQH+EvoCyf2gCLPhlox/I4t/3LK60A0jMctmkLZ4XtjCAPSWM511AZU3xSg+Lyf lgzQt1lMUBXckJMwB3xMYp0X1+aI32nsd+Tg2eB+k7UVQEnrMZdKSKG4ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP6SPvhkleHR0iVnnOSeFsydjg2sMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvX3BJLS1HU1Y0ZEhTSldlYzVKNFd6SjJPRGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4YMA0G CSqGSIb3DQEBCwUAA4IBAQB1G6Mx6gndfSFeTRtLs44v+68Z87QrsskF4Lb2/PD7 KnovdIDnymqHHNhVaKnOkYxVGqqeaK0khX+ixCuTYR09HZ/FFrKpViiLEE/Rw2AC 2Wm0UaZ7r1I+t9efjcLFetOdwAHLkRPTxBiASq2ALH4M+giXhsEhrTLNHDBKTUA+ ittSxc1oIR7k6NAWj+cE+tNEOIGX560HUZQsOG3kpk+s+z+ItN6qwSMNAGjAHqFC 6nrZxyw/pWAvGqNToLISaiNL7dXGm8Bap9vesYAsFblNxOdTNsHcJlmA2d66hv02 pUsfyrzcfiYNghrTsftUWEEycRqz7KV/hC5FRSBHxQ03 -----END CERTIFICATE-----Generated at Tue Jan 6 20:50:45 2026 by rpki-client