This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/UAqIdWPIqmUVSwMzA6hXTX0Ailo.roa File: UAqIdWPIqmUVSwMzA6hXTX0Ailo.roa (raw, json) Hash identifier: C2S4KpTLma+Nr0C/LgZeLhVTXWrhyD4esp1prszfICc= Subject key identifier: 50:0A:88:75:63:C8:AA:65:15:4B:03:33:03:A8:57:4D:7D:00:8A:5A Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2F99C6F2F450633D12FDE56D71F8 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/UAqIdWPIqmUVSwMzA6hXTX0Ailo.roa Signing time: Fri 02 Jan 2026 08:19:20 +0000 ROA not before: Fri 02 Jan 2026 08:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44386 IP address blocks: 195.34.20.0/23 maxlen: 23 195.34.20.0/24 maxlen: 24 195.34.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2f:99:c6:f2:f4:50:63:3d:12:fd:e5:6d:71:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=500a887563c8aa65154b033303a8574d7d008a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:56:3a:56:a1:6d:0b:44:39:c9:49:dd:ae: a9:77:94:c5:b6:df:0e:bd:89:6f:02:cf:95:15:bd: 39:b1:32:c0:e8:b8:40:f8:1d:d9:35:e4:35:a3:6f: 03:d7:55:68:d2:cf:12:29:a1:93:61:99:a0:de:60: e0:7f:e9:a0:33:06:ce:0c:fd:3d:03:67:9b:49:eb: 8c:c0:23:89:02:db:0d:6f:32:3d:23:24:ac:ec:fa: f8:3c:3f:29:af:6e:73:b8:f4:ad:fc:bb:b8:67:36: 2b:b0:0e:7d:75:1b:39:fa:f9:35:d6:ac:3f:dc:32: 12:04:ea:0a:bb:9b:72:07:a0:1b:c9:fe:0b:33:45: 92:44:2a:f2:fb:7a:e2:2e:d1:38:04:0a:de:6f:6f: 77:a4:e2:01:d9:7d:54:1a:ec:18:80:68:e0:fc:81: 1b:0d:37:a5:f9:1d:61:00:9f:14:27:54:1f:a1:38: 5b:7c:49:5a:f7:97:c6:6a:56:26:77:d3:1f:8c:a8: eb:ec:38:8c:24:fb:16:36:4f:ef:b1:69:64:f2:d0: 9c:19:94:9a:e4:12:9f:c3:90:9f:91:35:1c:f6:32: 30:f4:45:48:0c:5e:f5:01:c6:95:5e:4f:93:a9:85: 90:e2:a3:97:e0:23:41:99:29:eb:d6:43:0d:d5:5e: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0A:88:75:63:C8:AA:65:15:4B:03:33:03:A8:57:4D:7D:00:8A:5A X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/UAqIdWPIqmUVSwMzA6hXTX0Ailo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.34.20.0/23 Signature Algorithm: sha256WithRSAEncryption 31:85:c2:13:23:b0:22:a3:95:c9:38:ce:ee:55:58:85:0e:1e: 24:db:55:b2:3f:39:d5:90:1a:20:06:91:6c:07:28:1c:5a:cd: 0a:52:4a:88:b5:3e:73:8a:da:f7:50:6a:af:4a:1d:c0:a5:25: 86:a5:0c:40:4f:e0:f9:7b:58:f3:c5:ed:2c:e7:c2:ef:6b:37: 21:5e:90:40:b8:9a:cb:e1:09:93:41:b4:c3:60:9f:1d:fc:33: 07:fe:5a:1d:e8:a3:72:60:f1:de:96:09:fa:72:0a:81:e4:56: fc:d3:07:d8:88:21:57:03:5c:0b:ad:2c:bb:cb:d8:2e:53:5c: 92:2f:03:ea:6e:fa:34:4b:9b:5a:e7:0d:c9:56:ea:32:e7:53: 3d:0c:bf:74:17:8f:7e:d6:e2:9f:7c:eb:97:7f:32:c5:40:aa: 58:17:af:7a:f6:c6:2f:52:b9:9c:ba:ef:44:42:17:18:61:5e: e3:76:7f:70:e1:98:05:cb:4f:46:47:76:b4:6f:4e:53:d6:cc: 49:be:2b:26:27:83:7c:85:cd:40:f5:05:f3:51:04:42:08:e5: aa:45:38:a4:03:79:b5:c9:b3:3d:d3:de:44:f4:7a:48:90:61: 41:6c:55:28:03:b7:0b:7a:4a:37:43:84:81:4b:0d:5a:85:4d: 2c:b5:af:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yi+ZxvL0UGM9Ev3lbXH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDBhODg3NTYzYzhhYTY1MTU0YjAzMzMwM2E4NTc0ZDdkMDA4YTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4JWOlahbQtEOclJ3a6pd5TFtt8O vYlvAs+VFb05sTLA6LhA+B3ZNeQ1o28D11Vo0s8SKaGTYZmg3mDgf+mgMwbODP09 A2ebSeuMwCOJAtsNbzI9IySs7Pr4PD8pr25zuPSt/Lu4ZzYrsA59dRs5+vk11qw/ 3DISBOoKu5tyB6Abyf4LM0WSRCry+3riLtE4BAreb293pOIB2X1UGuwYgGjg/IEb DTel+R1hAJ8UJ1QfoThbfEla95fGalYmd9MfjKjr7DiMJPsWNk/vsWlk8tCcGZSa 5BKfw5CfkTUc9jIw9EVIDF71AcaVXk+TqYWQ4qOX4CNBmSnr1kMN1V403QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAKiHVjyKplFUsDMwOoV019AIpaMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvVUFxSWRXUElxbVVWU3dNekE2aFhUWDBBaWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyIUMA0G CSqGSIb3DQEBCwUAA4IBAQAxhcITI7Aio5XJOM7uVViFDh4k21WyPznVkBogBpFs BygcWs0KUkqItT5zitr3UGqvSh3ApSWGpQxAT+D5e1jzxe0s58LvazchXpBAuJrL 4QmTQbTDYJ8d/DMH/lod6KNyYPHelgn6cgqB5Fb80wfYiCFXA1wLrSy7y9guU1yS LwPqbvo0S5ta5w3JVuoy51M9DL90F49+1uKffOuXfzLFQKpYF6969sYvUrmcuu9E QhcYYV7jdn9w4ZgFy09GR3a0b05T1sxJvismJ4N8hc1A9QXzUQRCCOWqRTikA3m1 ybM9095E9HpIkGFBbFUoA7cLeko3Q4SBSw1ahU0sta9q -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:26 2026 by rpki-client