This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/A6OsoYIYGh2Z_D1_x4aYKOVS478.roa File: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (raw, json) Hash identifier: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw= Subject key identifier: 03:A3:AC:A1:82:18:1A:1D:99:FC:3D:7F:C7:86:98:28:E5:52:E3:BF Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84 Certificate serial: 019B7CED7A3A1026A215B2DDEC5603514D01 Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/A6OsoYIYGh2Z_D1_x4aYKOVS478.roa Signing time: Fri 02 Jan 2026 04:18:16 +0000 ROA not before: Fri 02 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44980 IP address blocks: 195.242.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7a:3a:10:26:a2:15:b2:dd:ec:56:03:51:4d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84 Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03a3aca182181a1d99fc3d7fc7869828e552e3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:62:7a:79:e4:ad:d1:84:dd:cc:23:6f:1d: 38:8c:18:5a:2c:c2:49:f9:c9:b3:d8:a4:12:9a:de: cf:39:65:8e:e7:f7:65:21:63:0e:83:3f:c6:1c:45: 57:57:57:83:41:de:1c:b4:31:ed:ec:31:c0:12:0d: 86:16:ee:43:07:78:31:41:8d:a1:01:61:77:fe:06: 07:de:0e:42:de:9c:a0:fc:5b:c4:22:10:a3:62:49: 06:5b:28:21:7b:13:c3:02:54:46:82:7c:9c:9c:c1: d5:d7:31:ae:7c:d7:e8:7d:2b:d2:2b:1e:5e:48:32: a3:d8:81:cb:db:3f:10:83:a6:d7:b3:0c:85:10:75: 97:90:c6:f3:3f:38:f2:45:fb:bd:d6:42:fc:39:52: bd:60:6d:a9:80:0d:41:3a:1a:df:3d:1c:e5:ac:72: 32:5a:7b:d7:a6:26:14:8f:38:8b:68:ea:28:b8:60: c1:b2:3f:ad:c2:55:0c:c6:4f:42:69:64:0f:e3:9a: 52:9a:de:84:cd:7f:2d:5c:9d:9a:a3:39:8e:7f:24: 2e:09:31:dc:13:37:40:20:9f:07:b4:48:99:b0:a0: cd:fb:43:ee:61:88:7a:27:4c:7f:dc:8f:d7:85:54: a5:5d:b5:68:ae:1c:54:1f:76:96:a2:8c:10:31:da: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A3:AC:A1:82:18:1A:1D:99:FC:3D:7F:C7:86:98:28:E5:52:E3:BF X509v3 Authority Key Identifier: keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/A6OsoYIYGh2Z_D1_x4aYKOVS478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.156.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:ee:20:aa:59:f4:18:fc:a7:4a:5c:28:ab:85:d0:8c:d6:40: d7:bb:06:68:53:c6:ef:ef:ce:f3:b1:51:fe:f5:c0:26:62:04: 38:24:8a:20:31:27:7d:b0:6b:6f:b8:6b:2c:92:76:53:a1:8d: 4a:66:28:73:79:e0:49:03:5c:7e:95:4b:87:a5:cd:99:03:b1: 79:89:a5:a2:18:1c:5d:ad:56:b7:d4:7c:82:a2:10:eb:a8:ae: e7:7f:51:8e:cc:a7:c4:58:1d:19:8d:5d:51:b6:2d:2b:c5:8a: eb:1c:9b:5a:85:27:a6:4c:a1:4e:d9:e1:d7:65:f0:4a:f7:2f: 58:f9:07:d7:5d:16:86:79:13:2b:09:be:38:a6:e1:74:23:f0: 28:9a:ea:d8:66:00:c8:ca:0c:f2:8e:93:b7:93:92:c8:d1:2e: 76:06:58:61:94:d6:3f:21:d9:25:51:1f:07:c0:6a:30:95:fc: 09:02:43:7d:17:12:c1:cb:a9:8c:cd:b6:24:ab:bd:fe:9f:1b: 31:c0:be:dc:f9:37:eb:ec:e2:e0:41:23:00:c3:ce:49:02:12: 3f:c3:2d:f8:53:d6:7d:b2:0d:14:f9:e7:03:ab:cc:fd:8f:fc: ce:de:c4:f1:26:d7:4b:0e:62:f1:08:01:46:e2:6f:cb:05:f0: 0c:41:91:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Xo6ECaiFbLd7FYDUU0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh MGRmODQwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2EzYWNhMTgyMTgxYTFkOTlmYzNkN2ZjNzg2OTgyOGU1NTJlM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh5iennkrdGE3cwjbx04jBhaLMJJ +cmz2KQSmt7POWWO5/dlIWMOgz/GHEVXV1eDQd4ctDHt7DHAEg2GFu5DB3gxQY2h AWF3/gYH3g5C3pyg/FvEIhCjYkkGWyghexPDAlRGgnycnMHV1zGufNfofSvSKx5e SDKj2IHL2z8Qg6bXswyFEHWXkMbzPzjyRfu91kL8OVK9YG2pgA1BOhrfPRzlrHIy WnvXpiYUjziLaOoouGDBsj+twlUMxk9CaWQP45pSmt6EzX8tXJ2aozmOfyQuCTHc EzdAIJ8HtEiZsKDN+0PuYYh6J0x/3I/XhVSlXbVorhxUH3aWoowQMdoO0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOjrKGCGBodmfw9f8eGmCjlUuO/MB8GA1UdIwQY MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct NzczY2ZjNDMzM2UxLzEvQTZPc29ZSVlHaDJaX0QxX3g0YVlLT1ZTNDc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/KcMA0G CSqGSIb3DQEBCwUAA4IBAQAc7iCqWfQY/KdKXCirhdCM1kDXuwZoU8bv787zsVH+ 9cAmYgQ4JIogMSd9sGtvuGssknZToY1KZihzeeBJA1x+lUuHpc2ZA7F5iaWiGBxd rVa31HyCohDrqK7nf1GOzKfEWB0ZjV1Rti0rxYrrHJtahSemTKFO2eHXZfBK9y9Y +QfXXRaGeRMrCb44puF0I/AomurYZgDIygzyjpO3k5LI0S52BlhhlNY/IdklUR8H wGowlfwJAkN9FxLBy6mMzbYkq73+nxsxwL7c+Tfr7OLgQSMAw85JAhI/wy34U9Z9 sg0U+ecDq8z9j/zO3sTxJtdLDmLxCAFG4m/LBfAMQZH8 -----END CERTIFICATE-----Generated at Mon Feb 2 07:59:57 2026 by rpki-client