This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/iAlVsYAfeyXYz_1uMV60y2Ryfds.roa File: iAlVsYAfeyXYz_1uMV60y2Ryfds.roa (raw, json) Hash identifier: jtM3bdjEHbWHHyELEbQ22EQKZ+IZ7PnI556Qy41j5xc= Subject key identifier: 88:09:55:B1:80:1F:7B:25:D8:CF:FD:6E:31:5E:B4:CB:64:72:7D:DB Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61 Certificate serial: 019B7F815ADE2A06B1830C11DD0FB4750C64 Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/iAlVsYAfeyXYz_1uMV60y2Ryfds.roa Signing time: Fri 02 Jan 2026 16:19:02 +0000 ROA not before: Fri 02 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200987 IP address blocks: 195.189.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:5a:de:2a:06:b1:83:0c:11:dd:0f:b4:75:0c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61 Validity Not Before: Jan 2 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=880955b1801f7b25d8cffd6e315eb4cb64727ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:f5:6e:dc:03:6a:fe:0b:88:d3:b4:9f:cf: f8:2b:a0:bd:ad:ff:71:93:e6:7b:46:90:61:59:30: 81:36:d9:e6:c0:63:97:f9:a7:ca:14:66:6c:39:8d: ea:4f:de:fe:97:1e:48:2d:93:62:42:67:9c:b0:79: 39:be:06:c6:fb:60:17:2a:96:cb:9f:ed:a1:06:2d: f3:a3:2a:0c:3c:5a:74:00:d0:d1:0d:f2:f0:99:cf: 83:f2:e8:2a:94:79:44:5a:fe:33:59:a0:03:6f:c7: 6b:9c:da:c1:91:0d:e0:0b:c8:5a:2e:5e:93:ee:3a: 47:cb:ca:07:39:23:0d:57:e4:67:f6:1b:97:82:9e: 1f:18:9f:88:dc:78:14:26:15:22:5e:8f:c6:22:71: 21:11:38:4b:bc:7e:a8:69:0f:6c:10:15:04:83:6b: 03:e7:ba:2f:b7:fa:c9:76:2a:a9:24:f5:74:f3:11: 59:ac:6a:e7:6e:49:84:04:dc:78:e1:d3:86:e2:d3: 6b:fa:82:31:d9:35:dd:b4:20:a4:7b:4c:92:d3:52: 52:da:8a:ba:61:03:00:f0:0f:0b:90:2b:d8:25:6c: b2:a7:40:65:ca:42:79:70:4a:21:b0:f2:91:06:9c: 78:f9:ba:af:f3:cb:04:4d:b6:35:f0:64:bc:62:25: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:09:55:B1:80:1F:7B:25:D8:CF:FD:6E:31:5E:B4:CB:64:72:7D:DB X509v3 Authority Key Identifier: keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/iAlVsYAfeyXYz_1uMV60y2Ryfds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.148.0/23 Signature Algorithm: sha256WithRSAEncryption 34:ca:23:47:4c:59:22:b7:5f:39:3e:19:71:15:b5:b4:a3:42: e0:ea:58:9c:a7:68:4c:ac:80:7e:b6:3e:7f:97:0e:8a:4b:b0: 34:99:14:fd:78:2c:2a:52:72:00:d9:12:8c:ad:c0:cc:e9:0d: 78:f3:b1:b3:c3:20:e6:26:ab:27:5c:b9:2b:c3:c6:8e:b3:c7: 6c:2d:be:93:b7:1d:83:31:6f:2a:d1:c3:ce:5d:45:f3:6b:f0: be:14:18:5f:78:ab:33:a5:d3:c8:cc:9d:f2:d0:ec:e1:92:c5: ea:32:b0:4c:be:b6:d1:5b:37:f4:01:3a:34:50:73:5f:a9:bd: fb:be:87:8b:ea:fe:f4:ae:99:9b:8b:80:cf:40:5b:8f:49:be: 22:a2:30:b2:0e:8e:0b:38:b6:5f:39:7c:2e:f5:d3:e3:8f:17: 85:64:0e:ee:a3:ef:3c:a3:86:3c:4f:cd:9f:5c:00:34:16:94: 10:2a:20:cc:4f:3f:b3:e0:d2:a9:7f:b0:29:a1:0c:cf:ce:e7: a2:d2:8f:a8:3f:57:57:47:70:1d:29:40:e7:ec:c4:42:75:e4: 56:3b:86:1b:95:37:9f:17:8b:d9:d3:3e:c6:3b:de:e8:85:b1: 2e:93:0e:5b:78:2c:d2:31:26:15:c3:26:93:90:41:f0:6f:52: c0:5f:21:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gVreKgaxgwwR3Q+0dQxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZjk0MTE3MzU2NGEwOWI3Y2Y4ZWZkZDk4NzU2MTQyNjJh N2RkNjEwHhcNMjYwMTAyMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODA5NTViMTgwMWY3YjI1ZDhjZmZkNmUzMTVlYjRjYjY0NzI3ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OD1btwDav4LiNO0n8/4K6C9rf9x k+Z7RpBhWTCBNtnmwGOX+afKFGZsOY3qT97+lx5ILZNiQmecsHk5vgbG+2AXKpbL n+2hBi3zoyoMPFp0ANDRDfLwmc+D8ugqlHlEWv4zWaADb8drnNrBkQ3gC8haLl6T 7jpHy8oHOSMNV+Rn9huXgp4fGJ+I3HgUJhUiXo/GInEhEThLvH6oaQ9sEBUEg2sD 57ovt/rJdiqpJPV08xFZrGrnbkmEBNx44dOG4tNr+oIx2TXdtCCke0yS01JS2oq6 YQMA8A8LkCvYJWyyp0BlykJ5cEohsPKRBpx4+bqv88sETbY18GS8YiWEXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIgJVbGAH3sl2M/9bjFetMtkcn3bMB8GA1UdIwQY MBaAFFL5QRc1ZKCbfPjv3Zh1YUJip91hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEt MDlkOGU0OTNjMWY5LzEvaUFsVnNZQWZleVhZel8xdU1WNjB5MlJ5ZmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEtMDlkOGU0OTNjMWY5 LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw72UMA0G CSqGSIb3DQEBCwUAA4IBAQA0yiNHTFkit185PhlxFbW0o0Lg6licp2hMrIB+tj5/ lw6KS7A0mRT9eCwqUnIA2RKMrcDM6Q1487GzwyDmJqsnXLkrw8aOs8dsLb6Ttx2D MW8q0cPOXUXza/C+FBhfeKszpdPIzJ3y0OzhksXqMrBMvrbRWzf0ATo0UHNfqb37 voeL6v70rpmbi4DPQFuPSb4iojCyDo4LOLZfOXwu9dPjjxeFZA7uo+88o4Y8T82f XAA0FpQQKiDMTz+z4NKpf7ApoQzPzuei0o+oP1dXR3AdKUDn7MRCdeRWO4YblTef F4vZ0z7GO97ohbEukw5beCzSMSYVwyaTkEHwb1LAXyGy -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:44 2026 by rpki-client