This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/0-jMAvh0Spb5-xmRErQMwSZjKoM.roa File: 0-jMAvh0Spb5-xmRErQMwSZjKoM.roa (raw, json) Hash identifier: +jeSUtpRT2LXECnK0ZPglZoRmjktcmKAgTbcZjeh29w= Subject key identifier: D3:E8:CC:02:F8:74:4A:96:F9:FB:19:91:12:B4:0C:C1:26:63:2A:83 Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089 Certificate serial: 019B791054B6439F3F880310EFB8591B1CCC Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/0-jMAvh0Spb5-xmRErQMwSZjKoM.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 195.242.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:54:b6:43:9f:3f:88:03:10:ef:b8:59:1b:1c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3e8cc02f8744a96f9fb199112b40cc126632a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:a9:c1:a5:f2:11:a0:08:69:e3:4d:6f:b9: 85:eb:c4:2c:90:38:05:a0:d6:20:55:7e:d3:f6:fa: 0a:e5:1f:22:f4:b5:d5:e3:34:c6:59:f0:5e:87:f5: 88:a4:8a:c5:20:f6:54:48:8e:a1:3f:1c:96:1b:f3: dd:a0:26:dd:13:54:ff:5b:f6:10:f9:73:3a:91:3a: a5:14:e4:a8:b3:45:8d:7b:02:2e:01:65:63:53:73: 94:8c:9d:c1:7b:64:3f:90:d6:e7:3f:98:00:45:16: 8b:47:e9:fe:58:05:8b:c8:0b:e2:73:2f:2d:60:04: 38:ba:0a:79:fa:5c:7d:17:e0:33:e8:ca:56:2d:e2: 14:dd:d8:f4:c5:18:13:4c:fc:14:14:cd:98:d8:5d: 75:1f:8b:93:dc:48:8d:8d:70:6d:ff:e3:d8:88:10: 57:4f:3f:d6:49:ca:92:9a:ba:14:a3:6b:8d:10:40: c3:41:e0:6b:08:61:b8:af:cc:25:d6:36:f0:60:17: ac:32:bc:e4:fd:46:fc:b4:7d:cb:16:59:a1:4a:92: a3:27:95:7f:17:a8:d8:e7:7a:1c:dc:8d:fd:98:72: 3b:b4:8e:f9:53:28:3d:3b:d3:76:cb:f9:4e:aa:43: f3:40:c8:21:50:51:52:aa:32:62:a2:2b:47:12:df: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E8:CC:02:F8:74:4A:96:F9:FB:19:91:12:B4:0C:C1:26:63:2A:83 X509v3 Authority Key Identifier: keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/0-jMAvh0Spb5-xmRErQMwSZjKoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.237.0/24 Signature Algorithm: sha256WithRSAEncryption 49:fd:06:9c:50:1e:ee:ad:06:48:31:27:70:70:07:f4:e5:61: 4f:be:48:86:12:29:27:bf:77:5d:2d:0e:87:3c:ae:7b:99:76: 73:e8:74:49:63:96:95:7f:ea:5a:67:c2:f1:7c:55:ec:05:c6: 0a:b3:40:f2:ec:66:71:fc:95:8f:65:40:8c:6b:fe:d7:0c:67: 20:6b:e5:79:d2:10:95:7c:6f:78:86:21:c3:98:58:c7:6d:c1: 6c:0a:41:4e:59:6d:df:5e:08:3c:f0:44:6d:ce:17:70:15:6c: 1f:4e:64:97:2f:62:ce:e4:94:f4:f6:0c:fa:e2:9b:6e:eb:81: f0:fd:1b:fd:d9:f7:81:e1:93:2a:c7:0e:d8:1f:98:98:d5:56: b1:c8:05:81:87:9b:6a:e9:47:17:66:83:10:8d:fb:93:e7:c5: 1d:07:88:b9:00:60:50:fc:1f:74:28:77:1b:28:00:4f:23:ec: 6f:00:88:a2:aa:fa:8a:1b:e8:e0:f8:26:d7:76:ee:68:62:03: 69:46:4a:9a:7f:84:00:1f:2e:b9:9a:8c:e3:be:54:b7:99:a9: 52:74:61:69:85:56:75:d8:a6:d8:cd:b0:9b:07:99:a2:1b:e3: b7:6a:ae:da:50:05:7b:7a:ad:21:bd:c7:3e:31:94:1f:81:0e: e1:13:5f:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFS2Q58/iAMQ77hZGxzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj NjYwODkwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2U4Y2MwMmY4NzQ0YTk2ZjlmYjE5OTExMmI0MGNjMTI2NjMyYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuWpwaXyEaAIaeNNb7mF68QskDgF oNYgVX7T9voK5R8i9LXV4zTGWfBeh/WIpIrFIPZUSI6hPxyWG/PdoCbdE1T/W/YQ +XM6kTqlFOSos0WNewIuAWVjU3OUjJ3Be2Q/kNbnP5gARRaLR+n+WAWLyAvicy8t YAQ4ugp5+lx9F+Az6MpWLeIU3dj0xRgTTPwUFM2Y2F11H4uT3EiNjXBt/+PYiBBX Tz/WScqSmroUo2uNEEDDQeBrCGG4r8wl1jbwYBesMrzk/Ub8tH3LFlmhSpKjJ5V/ F6jY53oc3I39mHI7tI75Uyg9O9N2y/lOqkPzQMghUFFSqjJioitHEt/wFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPozAL4dEqW+fsZkRK0DMEmYyqDMB8GA1UdIwQY MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt NTRhMjVlMmNkYWE5LzEvMC1qTUF2aDBTcGI1LXhtUkVyUU13U1pqS29NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5 LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/LtMA0G CSqGSIb3DQEBCwUAA4IBAQBJ/QacUB7urQZIMSdwcAf05WFPvkiGEiknv3ddLQ6H PK57mXZz6HRJY5aVf+paZ8LxfFXsBcYKs0Dy7GZx/JWPZUCMa/7XDGcga+V50hCV fG94hiHDmFjHbcFsCkFOWW3fXgg88ERtzhdwFWwfTmSXL2LO5JT09gz64ptu64Hw /Rv92feB4ZMqxw7YH5iY1VaxyAWBh5tq6UcXZoMQjfuT58UdB4i5AGBQ/B90KHcb KABPI+xvAIiiqvqKG+jg+CbXdu5oYgNpRkqaf4QAHy65mozjvlS3malSdGFphVZ1 2KbYzbCbB5miG+O3aq7aUAV7eq0hvcc+MZQfgQ7hE18v -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:41 2026 by rpki-client