This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_wuL54Jul7zozRMV0z9G-8xBBQ0.roa File: _wuL54Jul7zozRMV0z9G-8xBBQ0.roa (raw, json) Hash identifier: /nUWSFtvn/YeOZS72PVpd6/xrqTDiIHRY4TLWa/jZMI= Subject key identifier: FF:0B:8B:E7:82:6E:97:BC:E8:CD:13:15:D3:3F:46:FB:CC:41:05:0D Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B5B38D4A1C11D1FDB0E07AFCA66DA7B49 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_wuL54Jul7zozRMV0z9G-8xBBQ0.roa Signing time: Fri 26 Dec 2025 15:13:29 +0000 ROA not before: Fri 26 Dec 2025 15:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 174 IP address blocks: 195.178.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 21:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:38:d4:a1:c1:1d:1f:db:0e:07:af:ca:66:da:7b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Dec 26 15:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff0b8be7826e97bce8cd1315d33f46fbcc41050d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:2f:66:a5:df:81:72:ca:98:de:a6:11:cb: 61:be:99:88:bb:42:16:ab:0a:44:1b:c6:15:94:c0: ed:ad:5c:19:25:10:dd:d7:18:b0:8e:4f:65:e8:b6: 31:32:76:c8:f2:9a:06:4d:d8:58:3b:af:83:89:0f: 8e:09:89:86:7d:34:5e:e5:e2:26:e2:f7:ec:ad:a6: c5:af:a1:a5:0e:ef:12:d9:09:a8:89:6d:45:1b:b3: c9:be:9b:e7:bf:6a:66:fe:8d:09:95:d6:70:74:8a: c6:eb:fe:09:e3:4f:69:82:3d:6f:60:5b:4f:79:7f: d5:45:c4:bc:35:3b:72:10:cb:ac:54:b8:85:ae:de: 7d:be:7c:23:a4:8c:7a:b5:fd:4c:fa:37:3f:4c:53: be:20:49:8f:9b:9d:5a:ea:f5:bf:59:43:63:ab:82: 8b:c5:1b:12:8d:d1:d1:24:5a:14:93:38:59:67:51: ee:d3:66:57:40:6a:c7:e6:98:91:7e:ea:7d:4e:39: 7c:58:75:c7:7c:92:1f:92:f2:cc:f9:a9:be:9a:a3: d0:b3:63:49:4c:dd:84:90:df:d8:af:9e:c5:64:dc: 8c:28:d6:ce:bc:6f:7f:76:6c:76:e3:01:87:b4:6a: 11:7e:a3:ac:89:d1:6a:43:dc:65:1b:62:c6:65:e9: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0B:8B:E7:82:6E:97:BC:E8:CD:13:15:D3:3F:46:FB:CC:41:05:0D X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_wuL54Jul7zozRMV0z9G-8xBBQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.142.0/24 Signature Algorithm: sha256WithRSAEncryption 95:c1:da:89:8e:ab:34:58:a8:97:68:55:1e:bd:57:66:99:bd: 55:a2:43:c3:cf:27:19:b7:bb:b0:63:74:2c:68:6d:5f:18:41: f3:18:2b:34:8f:49:0e:62:67:cb:0b:59:d4:0e:ab:73:75:e5: 1d:e9:e0:63:52:f9:ec:a9:2a:1a:1f:b0:2c:8d:8d:d8:0b:19: 88:6a:5d:15:49:fd:90:3f:f0:f5:81:0d:cc:88:5c:ca:af:40: 11:63:6b:86:1f:cb:44:c5:bc:7f:4c:c4:8b:08:23:bd:de:4b: 11:6c:e8:d7:90:84:b3:e7:90:aa:0e:61:62:83:f3:71:6b:de: 4a:e9:ff:fb:74:2a:a6:25:ba:8b:06:b7:ae:37:19:a8:d0:18: da:7a:c9:7a:ab:8c:f6:46:30:f3:c8:c4:6a:e0:3d:2a:4f:4c: c6:61:01:9d:5d:46:74:a9:74:7e:56:f8:dd:a2:59:59:0f:83: 3f:b9:f8:21:14:39:fc:52:33:d3:fd:21:94:ea:e5:5a:16:d2: b1:89:3e:25:c4:22:9f:f0:34:55:52:60:81:50:81:90:68:88: d0:a0:9d:41:c7:e9:9f:c5:65:39:dd:7e:61:a5:b5:49:6b:e1: 01:89:8b:1c:42:5f:e3:98:b7:91:51:a6:b5:a5:2a:08:8f:e1: 5d:fb:c9:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtbONShwR0f2w4Hr8pm2ntJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMjI2MTUxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjBiOGJlNzgyNmU5N2JjZThjZDEzMTVkMzNmNDZmYmNjNDEwNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8gvZqXfgXLKmN6mEcthvpmIu0IW qwpEG8YVlMDtrVwZJRDd1xiwjk9l6LYxMnbI8poGTdhYO6+DiQ+OCYmGfTRe5eIm 4vfsrabFr6GlDu8S2QmoiW1FG7PJvpvnv2pm/o0JldZwdIrG6/4J409pgj1vYFtP eX/VRcS8NTtyEMusVLiFrt59vnwjpIx6tf1M+jc/TFO+IEmPm51a6vW/WUNjq4KL xRsSjdHRJFoUkzhZZ1Hu02ZXQGrH5piRfup9Tjl8WHXHfJIfkvLM+am+mqPQs2NJ TN2EkN/Yr57FZNyMKNbOvG9/dmx24wGHtGoRfqOsidFqQ9xlG2LGZen+NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP8Li+eCbpe86M0TFdM/RvvMQQUNMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvX3d1TDU0SnVsN3pvelJNVjB6OUctOHhCQlEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KOMA0G CSqGSIb3DQEBCwUAA4IBAQCVwdqJjqs0WKiXaFUevVdmmb1VokPDzycZt7uwY3Qs aG1fGEHzGCs0j0kOYmfLC1nUDqtzdeUd6eBjUvnsqSoaH7AsjY3YCxmIal0VSf2Q P/D1gQ3MiFzKr0ARY2uGH8tExbx/TMSLCCO93ksRbOjXkISz55CqDmFig/Nxa95K 6f/7dCqmJbqLBreuNxmo0Bjaesl6q4z2RjDzyMRq4D0qT0zGYQGdXUZ0qXR+Vvjd ollZD4M/ufghFDn8UjPT/SGU6uVaFtKxiT4lxCKf8DRVUmCBUIGQaIjQoJ1Bx+mf xWU53X5hpbVJa+EBiYscQl/jmLeRUaa1pSoIj+Fd+8mD -----END CERTIFICATE-----Generated at Thu Jan 1 07:05:44 2026 by rpki-client