This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/xU2EDS3A1kqxHB5fmWawALQua5w.roa File: xU2EDS3A1kqxHB5fmWawALQua5w.roa (raw, json) Hash identifier: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug= Subject key identifier: C5:4D:84:0D:2D:C0:D6:4A:B1:1C:1E:5F:99:66:B0:00:B4:2E:6B:9C Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f Certificate serial: 019B7EA540C489050F06D3E679C5E0F67274 Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/xU2EDS3A1kqxHB5fmWawALQua5w.roa Signing time: Fri 02 Jan 2026 12:18:37 +0000 ROA not before: Fri 02 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47396 IP address blocks: 195.216.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:40:c4:89:05:0f:06:d3:e6:79:c5:e0:f6:72:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f Validity Not Before: Jan 2 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c54d840d2dc0d64ab11c1e5f9966b000b42e6b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c4:6b:4a:57:10:93:ef:31:f5:a5:3a:3d:7c: 84:42:a6:35:4d:6c:99:66:77:1b:92:b8:65:cf:47: ef:cc:75:a0:3f:1c:84:bc:53:3c:1e:c5:9c:ac:c2: e1:95:97:87:c3:c0:27:d8:73:80:d1:04:b9:f1:a6: 96:19:6c:d9:1b:d8:e8:3f:bd:ec:03:d6:29:ae:cd: a5:7c:76:a6:bf:d1:2c:ec:f6:77:18:a0:e6:ae:b3: 99:b7:00:fb:41:76:da:aa:20:c5:1b:c0:8d:d9:5b: c7:77:df:d4:32:9a:40:af:49:71:13:a9:98:c8:e6: 66:3a:67:c2:97:70:28:d1:98:17:0e:1d:1a:b7:f8: 5e:01:e3:dd:d0:0a:ad:1f:63:d5:5c:d6:30:b8:60: 08:cb:12:e6:34:cb:5b:de:45:87:ff:1e:54:99:18: a7:9d:8f:81:b9:d7:8d:89:f9:c6:eb:55:ef:9a:16: 50:6f:ef:99:3e:b3:51:70:85:83:e3:b6:9b:f7:0b: 03:17:cc:c3:41:59:8e:98:28:4a:86:d6:b7:2d:2e: b0:3a:f0:a8:dc:23:e2:e1:fb:c2:12:c8:a4:27:cb: 2d:de:2b:17:ce:5b:69:c9:a4:e9:1e:08:00:8d:0f: ec:2a:e0:60:e1:c0:39:34:cd:13:ea:fb:91:b8:a7: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:84:0D:2D:C0:D6:4A:B1:1C:1E:5F:99:66:B0:00:B4:2E:6B:9C X509v3 Authority Key Identifier: keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/xU2EDS3A1kqxHB5fmWawALQua5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.250.0/24 Signature Algorithm: sha256WithRSAEncryption a6:fa:55:e5:09:5e:60:ab:6e:9e:5f:78:8e:58:af:2a:34:38: 2f:cd:53:e2:ee:5b:8e:1c:6b:61:c3:fa:9f:bd:70:f6:5c:29: dd:9a:9c:93:49:2f:2b:50:0d:55:c9:67:48:46:32:d8:61:99: 55:96:97:e2:a1:e6:69:94:c8:92:8b:2b:2c:c8:8a:5a:45:f8: 5d:bf:9d:d8:29:62:17:9c:d4:0b:96:d7:a2:6e:7e:b6:f2:d9: 33:f3:7a:de:2d:90:c4:cb:c1:32:57:ef:26:de:57:07:f0:43: 09:39:4d:db:10:d2:93:41:27:92:0d:71:cd:96:fb:f3:7e:80: d1:cf:69:78:b9:bf:e3:0e:5b:07:8f:10:ed:b3:63:c4:9a:1e: f2:e7:e1:8a:19:db:6e:a5:83:f3:32:da:90:7a:3d:52:ee:89: 8a:4c:11:76:e0:0e:19:f8:7e:fd:a3:f1:c6:c1:dc:9e:04:fe: 35:5c:e6:14:8a:92:0b:cd:d2:d3:84:b6:40:f8:b1:37:94:f2: 94:96:c7:30:76:8f:5e:11:80:7b:6a:c2:f8:ff:00:4b:ea:7f: c5:b0:b4:d8:4c:b5:e4:5e:3d:9c:f6:31:b6:4d:00:8c:74:73: 1a:a9:84:fe:72:e3:78:a6:bb:f8:e6:aa:88:56:69:b3:5b:f2: f5:b0:c7:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pUDEiQUPBtPmecXg9nJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMmI1Y2JmOTY3YTAzNDlkODg5NzA0YmI0ZDYxZmE1MjZh MzFkNmYwHhcNMjYwMTAyMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTRkODQwZDJkYzBkNjRhYjExYzFlNWY5OTY2YjAwMGI0MmU2YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sRrSlcQk+8x9aU6PXyEQqY1TWyZ Zncbkrhlz0fvzHWgPxyEvFM8HsWcrMLhlZeHw8An2HOA0QS58aaWGWzZG9joP73s A9Yprs2lfHamv9Es7PZ3GKDmrrOZtwD7QXbaqiDFG8CN2VvHd9/UMppAr0lxE6mY yOZmOmfCl3Ao0ZgXDh0at/heAePd0AqtH2PVXNYwuGAIyxLmNMtb3kWH/x5UmRin nY+BudeNifnG61XvmhZQb++ZPrNRcIWD47ab9wsDF8zDQVmOmChKhta3LS6wOvCo 3CPi4fvCEsikJ8st3isXzltpyaTpHggAjQ/sKuBg4cA5NM0T6vuRuKcsnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMVNhA0twNZKsRweX5lmsAC0LmucMB8GA1UdIwQY MBaAFN4rXL+WegNJ2IlwS7TWH6Umox1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2l0Y3Y1WjZBMG5ZaVhCTHROWWZwU2FqSFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82NDZlN2QtNGY0Ni00MDdjLWJkZDAt ZmQ3MmQ5NjJkZjI3LzEveFUyRURTM0Exa3F4SEI1Zm1XYXdBTFF1YTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi82NDZlN2QtNGY0Ni00MDdjLWJkZDAtZmQ3MmQ5NjJkZjI3 LzEvM2l0Y3Y1WjZBMG5ZaVhCTHROWWZwU2FqSFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9j6MA0G CSqGSIb3DQEBCwUAA4IBAQCm+lXlCV5gq26eX3iOWK8qNDgvzVPi7luOHGthw/qf vXD2XCndmpyTSS8rUA1VyWdIRjLYYZlVlpfioeZplMiSiyssyIpaRfhdv53YKWIX nNQLlteibn628tkz83reLZDEy8EyV+8m3lcH8EMJOU3bENKTQSeSDXHNlvvzfoDR z2l4ub/jDlsHjxDts2PEmh7y5+GKGdtupYPzMtqQej1S7omKTBF24A4Z+H79o/HG wdyeBP41XOYUipILzdLThLZA+LE3lPKUlscwdo9eEYB7asL4/wBL6n/FsLTYTLXk Xj2c9jG2TQCMdHMaqYT+cuN4prv45qqIVmmzW/L1sMck -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:54 2026 by rpki-client