This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/1-aGDqZW0qQT1CMUWfY2StRi45As.roa File: 1-aGDqZW0qQT1CMUWfY2StRi45As.roa (raw, json) Hash identifier: B8Rl9Gai4vi9Uu6NQRhUSO+YTREX6IaIlJN6RMt60oA= Subject key identifier: F9:A1:83:A9:95:B4:A9:04:F5:08:C5:16:7D:8D:92:B5:18:B8:E4:0B Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8 Certificate serial: 019B7759695F6DF515991679F3F6C22F1143 Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/1-aGDqZW0qQT1CMUWfY2StRi45As.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28951 IP address blocks: 195.47.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:69:5f:6d:f5:15:99:16:79:f3:f6:c2:2f:11:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9a183a995b4a904f508c5167d8d92b518b8e40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:3f:69:15:1e:ee:69:13:86:36:9f:27:0f: de:11:40:73:0d:b8:bc:ff:c8:a9:d6:16:dc:21:1d: fb:1c:4e:c9:62:9c:9f:c5:6b:2d:27:10:62:29:31: 4a:70:c9:b9:63:53:8f:88:b9:68:92:35:c6:84:14: b0:2f:61:7e:4f:b4:f0:fa:a4:06:94:c3:d9:c6:5f: d7:b0:97:d3:c9:fc:89:b7:37:02:fd:b1:3d:c9:50: b5:c2:46:0a:7e:72:c4:a7:05:61:ee:64:0a:b8:e1: 57:62:b1:06:72:ee:97:c2:a4:78:b8:f0:c7:6c:5a: 4f:ff:fb:83:9a:41:d8:4c:cc:83:d3:a0:e8:fb:da: af:91:67:12:0a:38:35:32:a1:00:d0:aa:06:b1:8d: 7e:f1:82:8e:93:f5:31:b5:62:e7:b2:a5:bb:ac:42: 31:9a:af:d7:bb:72:54:55:3a:31:6a:66:32:d1:d2: d9:f0:09:a2:67:bc:e1:ad:6d:ab:c7:d9:0d:a6:e7: 46:9f:0b:27:9a:97:83:ff:d2:7c:1c:7d:59:e7:fc: 0c:dd:32:49:08:f0:9c:b5:66:74:b2:ad:82:86:f7: 7b:3e:35:7e:cd:89:ef:a8:d6:3e:04:47:5f:a2:ea: 22:66:68:9d:a6:c3:8b:0b:49:b9:80:f0:d0:ff:ef: 5c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A1:83:A9:95:B4:A9:04:F5:08:C5:16:7D:8D:92:B5:18:B8:E4:0B X509v3 Authority Key Identifier: keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/1-aGDqZW0qQT1CMUWfY2StRi45As.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.213.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:ae:b9:5c:f3:cc:c3:98:52:01:b7:c5:94:bb:b8:cd:7c:aa: bb:df:73:85:a1:89:56:8a:ca:10:de:12:22:c8:13:af:ec:f6: b8:bf:27:75:8e:01:c1:c6:1b:13:ae:92:b1:3b:d0:7a:90:5b: e0:fc:16:5d:b3:1a:12:8c:ff:07:3d:18:70:f8:87:f6:20:38: 60:21:5b:50:c7:b6:a9:52:09:96:61:af:7a:93:aa:1f:58:68: 85:9a:e2:b8:b3:ae:af:b6:11:9c:83:a0:33:9e:4a:b9:a3:9f: f9:9a:8a:74:6a:90:ab:b8:c8:53:c5:7b:61:b5:60:cc:55:48: 10:b1:1f:de:1a:6f:70:eb:23:ab:26:98:1e:b1:2b:89:be:97: 62:7c:1b:2a:72:f9:b0:b9:f0:56:de:1e:b9:47:8a:fc:d4:5b: b8:88:dc:48:95:fe:8b:9a:b5:78:df:2b:6c:02:e0:da:91:14: 59:06:2b:c4:28:33:d7:85:ff:b9:86:19:68:2b:67:c5:8c:5d: 8d:2f:58:c1:3e:e5:61:9a:2f:ec:11:0f:29:af:34:eb:ae:ab: 7b:52:3f:7d:0b:b3:9a:32:41:d4:79:4b:72:bb:af:36:8a:2f: e5:6e:fc:65:01:0d:93:14:d5:95:70:70:01:b9:2f:4f:94:1a: bb:2e:8c:e5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WWlfbfUVmRZ58/bCLxFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0 ZDk2YzgwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWExODNhOTk1YjRhOTA0ZjUwOGM1MTY3ZDhkOTJiNTE4YjhlNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNY/aRUe7mkThjafJw/eEUBzDbi8 /8ip1hbcIR37HE7JYpyfxWstJxBiKTFKcMm5Y1OPiLlokjXGhBSwL2F+T7Tw+qQG lMPZxl/XsJfTyfyJtzcC/bE9yVC1wkYKfnLEpwVh7mQKuOFXYrEGcu6XwqR4uPDH bFpP//uDmkHYTMyD06Do+9qvkWcSCjg1MqEA0KoGsY1+8YKOk/UxtWLnsqW7rEIx mq/Xu3JUVToxamYy0dLZ8AmiZ7zhrW2rx9kNpudGnwsnmpeD/9J8HH1Z5/wM3TJJ CPCctWZ0sq2Chvd7PjV+zYnvqNY+BEdfouoiZmidpsOLC0m5gPDQ/+9cOwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmhg6mVtKkE9QjFFn2NkrUYuOQLMB8GA1UdIwQY MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt ZDMwNTczMGI1MzY4LzEvMS1hR0RxWlcwcVFUMUNNVVdmWTJTdFJpNDVBcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmYvODE4MTQyLWMxMzgtNDRiYi05MjJiLWQzMDU3MzBiNTM2 OC8xLzNWS3RDUXRVWjQ0SmFPYVpWY0pRU1VOTmxzZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMv1TAN BgkqhkiG9w0BAQsFAAOCAQEAj665XPPMw5hSAbfFlLu4zXyqu99zhaGJVorKEN4S IsgTr+z2uL8ndY4BwcYbE66SsTvQepBb4PwWXbMaEoz/Bz0YcPiH9iA4YCFbUMe2 qVIJlmGvepOqH1hohZriuLOur7YRnIOgM55KuaOf+ZqKdGqQq7jIU8V7YbVgzFVI ELEf3hpvcOsjqyaYHrErib6XYnwbKnL5sLnwVt4euUeK/NRbuIjcSJX+i5q1eN8r bALg2pEUWQYrxCgz14X/uYYZaCtnxYxdjS9YwT7lYZov7BEPKa80666re1I/fQuz mjJB1HlLcruvNoov5W78ZQENkxTVlXBwAbkvT5Qauy6M5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:07 2026 by rpki-client