This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-JZnhggQE_TbXo85vD0kFs0tnZY.roa File: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (raw, json) Hash identifier: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4= Subject key identifier: F8:96:67:86:08:10:13:F4:DB:5E:8F:39:BC:3D:24:16:CD:2D:9D:96 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38B13F279DB8329D682E060681526B Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-JZnhggQE_TbXo85vD0kFs0tnZY.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213129 IP address blocks: 195.178.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b1:3f:27:9d:b8:32:9d:68:2e:06:06:81:52:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8966786081013f4db5e8f39bc3d2416cd2d9d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:a0:11:65:39:f7:0c:6b:af:dd:c2:f6:88: 14:e8:a9:06:3d:2e:b8:d1:5e:76:d7:74:45:c2:d7: 6a:22:a6:39:62:8a:ce:ff:a4:b7:4c:ef:64:e6:ad: 7f:01:00:b0:66:21:e6:d7:3f:55:e7:cf:7d:cf:fe: a5:22:fb:81:09:f5:fc:e3:56:65:5a:1a:22:3d:08: 09:ea:e1:b2:bb:18:5e:ca:2b:73:0c:96:88:ba:8d: 38:b0:30:52:60:53:6e:c5:c4:f9:a7:66:b5:c0:de: dc:47:ca:e0:8f:2c:5c:02:df:5f:b1:0a:4a:0e:ec: 4f:bb:e5:72:b0:b1:37:0d:1b:14:6f:c8:70:29:88: f1:04:61:82:c2:87:2b:77:c2:01:88:57:c6:1c:9e: 55:d4:04:bf:b3:49:54:14:dc:80:20:c5:61:72:fb: 67:9b:e5:b6:d5:ba:ef:a1:fe:c1:8d:56:3d:d2:66: 3c:6c:6e:d1:40:6f:0f:4e:13:ac:a9:d6:31:39:98: e7:83:f6:31:a9:96:88:36:44:75:3e:94:38:b7:2a: 25:b5:2f:ba:af:29:38:58:6b:23:3b:71:b0:1b:36: eb:45:67:24:06:27:c6:0d:ee:a2:f0:21:23:bc:26: 8b:bd:dd:b3:c8:0d:b6:73:62:34:ae:4a:62:db:58: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:96:67:86:08:10:13:F4:DB:5E:8F:39:BC:3D:24:16:CD:2D:9D:96 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-JZnhggQE_TbXo85vD0kFs0tnZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.158.0/24 Signature Algorithm: sha256WithRSAEncryption 30:dc:3d:63:b9:a8:94:1c:4d:2d:3f:21:7d:31:5d:60:c8:58: c7:cf:87:df:8b:f3:11:21:15:ad:46:3d:a5:1c:50:13:99:fe: 3b:c5:cd:e7:63:ef:d2:ac:57:41:9b:0e:fb:59:df:aa:cb:f1: 76:75:35:0f:f5:eb:47:26:61:72:00:21:cd:9d:a1:67:23:0c: 1d:fb:8a:1b:11:1c:2b:e5:95:75:99:80:e5:ed:a7:dd:05:98: 50:85:0d:cb:d4:29:17:53:a6:5f:e3:cb:7c:44:d8:fa:4d:e3: 7e:5c:58:3a:fc:7a:7d:91:be:d5:34:00:0f:24:35:a9:ea:d0: c8:18:ef:8b:7f:f7:43:6f:66:2f:02:92:23:59:c3:d4:59:db: 9d:71:7c:12:ca:3e:a5:6f:f4:c5:88:ff:49:95:ce:f1:a9:87: ed:3f:3f:01:d9:de:ce:b4:de:bd:ae:94:d8:ac:14:99:05:53: cf:3e:e2:03:5c:ad:44:9d:af:6e:90:01:3e:45:34:df:f5:6a: 0e:76:e5:c4:fa:e7:c0:91:58:77:c3:a5:75:cd:21:44:da:e9: b0:1d:f0:21:41:c5:1d:f0:e6:3d:78:34:47:f0:fe:d2:62:8a: f7:a9:fa:96:63:aa:ba:91:79:59:e0:9c:53:fe:f8:08:be:1a: a3:1e:f1:69 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OLE/J524Mp1oLgYGgVJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODk2Njc4NjA4MTAxM2Y0ZGI1ZThmMzliYzNkMjQxNmNkMmQ5ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10qgEWU59wxrr93C9ogU6KkGPS64 0V5213RFwtdqIqY5YorO/6S3TO9k5q1/AQCwZiHm1z9V5899z/6lIvuBCfX841Zl WhoiPQgJ6uGyuxheyitzDJaIuo04sDBSYFNuxcT5p2a1wN7cR8rgjyxcAt9fsQpK DuxPu+VysLE3DRsUb8hwKYjxBGGCwocrd8IBiFfGHJ5V1AS/s0lUFNyAIMVhcvtn m+W21brvof7BjVY90mY8bG7RQG8PThOsqdYxOZjng/YxqZaINkR1PpQ4tyoltS+6 ryk4WGsjO3GwGzbrRWckBifGDe6i8CEjvCaLvd2zyA22c2I0rkpi21iA0wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPiWZ4YIEBP0216PObw9JBbNLZ2WMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvMS1KWm5oZ2dRRV9UYlhvODV2RDBrRnMwdG5aWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2Mz NC8xL0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOynjAN BgkqhkiG9w0BAQsFAAOCAQEAMNw9Y7molBxNLT8hfTFdYMhYx8+H34vzESEVrUY9 pRxQE5n+O8XN52Pv0qxXQZsO+1nfqsvxdnU1D/XrRyZhcgAhzZ2hZyMMHfuKGxEc K+WVdZmA5e2n3QWYUIUNy9QpF1OmX+PLfETY+k3jflxYOvx6fZG+1TQADyQ1qerQ yBjvi3/3Q29mLwKSI1nD1FnbnXF8Eso+pW/0xYj/SZXO8amH7T8/AdnezrTeva6U 2KwUmQVTzz7iA1ytRJ2vbpABPkU03/VqDnblxPrnwJFYd8Oldc0hRNrpsB3wIUHF HfDmPXg0R/D+0mKK96n6lmOqupF5WeCcU/74CL4aox7xaQ== -----END CERTIFICATE-----Generated at Sat Jan 10 04:59:35 2026 by rpki-client