This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/CAzUJBJl_S6fY4g8OpP_PRPQJAc.roa File: CAzUJBJl_S6fY4g8OpP_PRPQJAc.roa (raw, json) Hash identifier: 6YZqZyeQI2OCFKYEz3xohlsoJMTAW7st+b+x7M/6aO8= Subject key identifier: 08:0C:D4:24:12:65:FD:2E:9F:63:88:3C:3A:93:FF:3D:13:D0:24:07 Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7 Certificate serial: 019B7CED169141EA87CC094CEA45211D8CC5 Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/CAzUJBJl_S6fY4g8OpP_PRPQJAc.roa Signing time: Fri 02 Jan 2026 04:17:51 +0000 ROA not before: Fri 02 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39247 IP address blocks: 195.72.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:16:91:41:ea:87:cc:09:4c:ea:45:21:1d:8c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=080cd4241265fd2e9f63883c3a93ff3d13d02407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:ae:3c:fc:72:68:fe:a8:6d:16:d6:c1:55: 9d:93:c2:c3:3e:97:b5:25:94:a7:60:aa:56:7e:2c: 42:ec:9c:ac:14:9c:fc:ad:36:92:af:c9:ba:9f:1d: cc:af:5b:1e:ff:61:c0:91:44:2b:5c:95:a2:fd:80: bd:1e:90:58:68:b4:67:34:c6:f0:40:24:87:c7:88: 84:12:8a:bb:eb:8e:42:1f:6c:98:a9:cc:7a:d8:93: 76:81:a8:63:52:f3:e4:94:41:f6:b8:5b:78:1b:22: 4f:86:f8:ae:d0:98:6a:dc:c3:36:7b:f9:7c:89:0e: 0b:70:1e:41:7c:0f:ef:eb:8b:45:f2:6a:9e:d5:5f: 06:53:3c:75:1f:93:a2:11:89:45:ee:84:48:2d:8d: ef:d3:ae:92:58:23:25:74:eb:c1:65:8b:a1:b8:46: 89:c5:16:7f:49:85:0c:95:32:9b:ab:ac:49:e1:20: df:01:e6:41:8b:be:60:72:4e:7f:ce:45:39:59:09: 22:ef:ae:23:86:bb:92:67:2c:22:ed:62:dd:1a:ea: 0b:44:00:f9:74:c0:e7:f0:56:d6:98:88:35:6f:bb: 9c:e1:7d:3d:b3:b0:05:23:11:ab:28:95:18:d3:0a: 6b:88:cb:04:ff:d6:e3:02:48:62:e0:b3:95:25:f8: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:D4:24:12:65:FD:2E:9F:63:88:3C:3A:93:FF:3D:13:D0:24:07 X509v3 Authority Key Identifier: keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/CAzUJBJl_S6fY4g8OpP_PRPQJAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.72.147.0/24 Signature Algorithm: sha256WithRSAEncryption 77:85:9b:c7:2f:d4:71:79:b6:4e:d8:4b:6c:bf:18:4e:4e:a5: 1c:fb:d5:40:a5:d3:db:9a:36:49:18:35:ef:c5:57:19:e9:ca: e6:f0:be:db:07:43:9d:b1:d1:5a:c8:bb:3b:a0:11:b0:05:c3: fe:6e:dc:13:fe:2e:4d:2c:41:30:34:0a:71:08:18:51:80:a7: 24:e0:18:99:3d:69:cf:51:76:26:2f:b7:39:e6:85:1e:73:4d: e8:79:9b:d1:d0:aa:0d:cb:2f:00:e3:e4:6f:1f:be:94:5e:6a: 2f:a1:15:52:a8:29:a0:dc:ea:2d:6a:69:d8:ad:de:13:9f:05: 5d:24:8d:15:3c:db:c4:58:29:07:64:30:2a:3f:11:ad:c8:73: ef:fd:1e:7a:e0:3b:4a:bd:61:a2:6d:70:b4:13:7d:80:4e:4a: 21:a9:da:ab:2e:11:7f:4e:d7:a3:a6:3b:a0:3c:5e:bf:47:f3: 95:06:97:dd:62:83:5a:cf:7f:08:32:20:5d:59:55:16:96:9f: 6a:ab:38:9e:24:81:3c:e0:45:ad:85:d0:93:6c:d4:1a:f1:46: c9:3f:8f:9f:6e:50:38:1f:29:b4:44:07:da:80:0f:34:00:23: cd:c9:2f:b7:2c:d5:bf:6a:ce:4e:2f:b2:0b:15:16:9f:e1:39: af:59:48:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87RaRQeqHzAlM6kUhHYzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjUzNDAyZmE3NmZhMDYzNzZjZGVhNmJjZDM5NWUxODAw NzlkYjcwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODBjZDQyNDEyNjVmZDJlOWY2Mzg4M2MzYTkzZmYzZDEzZDAyNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHOuPPxyaP6obRbWwVWdk8LDPpe1 JZSnYKpWfixC7JysFJz8rTaSr8m6nx3Mr1se/2HAkUQrXJWi/YC9HpBYaLRnNMbw QCSHx4iEEoq7645CH2yYqcx62JN2gahjUvPklEH2uFt4GyJPhviu0Jhq3MM2e/l8 iQ4LcB5BfA/v64tF8mqe1V8GUzx1H5OiEYlF7oRILY3v066SWCMldOvBZYuhuEaJ xRZ/SYUMlTKbq6xJ4SDfAeZBi75gck5/zkU5WQki764jhruSZywi7WLdGuoLRAD5 dMDn8FbWmIg1b7uc4X09s7AFIxGrKJUY0wpriMsE/9bjAkhi4LOVJfhRxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgM1CQSZf0un2OIPDqT/z0T0CQHMB8GA1UdIwQY MBaAFPz1NAL6dvoGN2zeprzTleGAB523MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BVMEF2cDItZ1kzYk42bXZOT1Y0WUFIbmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzgzMTMtZWQxYy00MTRiLWI0Y2Mt NWVkMDU3MDI1NTE2LzEvQ0F6VUpCSmxfUzZmWTRnOE9wUF9QUlBRSkFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzgzMTMtZWQxYy00MTRiLWI0Y2MtNWVkMDU3MDI1NTE2 LzEvX1BVMEF2cDItZ1kzYk42bXZOT1Y0WUFIbmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0iTMA0G CSqGSIb3DQEBCwUAA4IBAQB3hZvHL9RxebZO2EtsvxhOTqUc+9VApdPbmjZJGDXv xVcZ6crm8L7bB0OdsdFayLs7oBGwBcP+btwT/i5NLEEwNApxCBhRgKck4BiZPWnP UXYmL7c55oUec03oeZvR0KoNyy8A4+RvH76UXmovoRVSqCmg3OotamnYrd4TnwVd JI0VPNvEWCkHZDAqPxGtyHPv/R564DtKvWGibXC0E32ATkohqdqrLhF/Ttejpjug PF6/R/OVBpfdYoNaz38IMiBdWVUWlp9qqzieJIE84EWthdCTbNQa8UbJP4+fblA4 Hym0RAfagA80ACPNyS+3LNW/as5OL7ILFRaf4TmvWUgn -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:55 2026 by rpki-client