This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa File: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (raw, json) Hash identifier: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U= Subject key identifier: D5:2D:9B:D2:A7:C0:FA:DC:D7:3E:28:C9:F5:0C:74:B9:99:1A:54:76 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019B76EADA0AE6EC79C8F6B51A2C7E6F8AE1 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62220 IP address blocks: 195.244.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:da:0a:e6:ec:79:c8:f6:b5:1a:2c:7e:6f:8a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d52d9bd2a7c0fadcd73e28c9f50c74b9991a5476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:82:23:98:76:e2:86:68:fe:cb:3a:a2:0d: e1:54:23:0e:57:e8:fd:71:a7:a4:a5:32:6d:b8:fa: e2:f8:3b:72:e8:a0:87:c7:89:99:ce:33:49:1f:ba: a6:ec:b4:70:da:42:a7:e9:69:73:d8:ae:4e:e1:02: 73:4a:bb:ea:f0:d2:c6:e4:29:0c:eb:02:d2:b3:09: e9:b4:28:4c:3f:76:9f:f8:85:1a:ce:13:88:8f:d7: 2f:79:e0:77:7a:a9:de:93:cb:3d:09:23:df:70:76: 72:7b:2c:44:bd:44:1f:f4:83:1f:33:64:e2:b7:dc: 39:e5:54:b6:47:ba:dd:f1:e1:5c:88:71:bd:b8:08: 09:d3:30:9e:a5:9a:1b:d6:71:fc:ed:7e:f0:0f:a4: 4c:88:23:d6:19:b4:00:1f:80:33:57:45:70:c8:79: 32:ea:1f:ad:2d:f7:cd:69:e9:93:0e:96:a5:98:36: c4:32:b4:f8:21:b3:30:ef:9f:5e:d1:8e:3f:14:35: b7:0c:9d:80:76:95:e2:eb:de:45:4c:2f:41:96:c8: 55:84:b1:05:8c:48:ed:12:8c:7a:59:11:19:70:41: a7:59:82:5d:38:5e:2a:b0:aa:8d:36:4e:0b:aa:bc: a3:e1:7b:03:2e:5b:eb:f6:ed:b5:4e:5b:79:65:9f: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2D:9B:D2:A7:C0:FA:DC:D7:3E:28:C9:F5:0C:74:B9:99:1A:54:76 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.158.0/24 Signature Algorithm: sha256WithRSAEncryption 48:c1:b4:d3:6b:57:05:c3:e4:4d:32:64:12:aa:1b:d8:1a:92: 4e:b2:96:6b:e8:d5:9a:8b:06:1f:14:f6:d5:ac:02:62:57:98: 3c:f9:20:2b:2e:44:15:33:3f:3a:40:6c:73:d1:bc:6e:45:03: 17:2f:af:8b:f5:8f:22:34:a4:ff:0a:88:15:42:0a:f2:10:44: 1a:db:22:da:d3:27:51:fe:f1:63:61:57:f6:bc:8f:98:dd:44: b7:d3:a1:9e:50:43:ca:4e:c5:d4:38:54:a9:3e:7a:30:1c:04: 85:44:22:3a:60:ad:1b:3e:07:d4:a2:3f:24:44:4d:12:fb:fb: e0:8e:13:e5:52:11:67:fb:f1:75:2b:9e:ce:d1:86:98:b2:1b: 25:c7:9a:19:83:43:4b:5b:f3:96:94:35:b5:88:bb:eb:16:e3: f7:c3:a9:64:a9:e5:6a:0d:7c:99:02:00:32:60:6c:c6:e5:2a: 99:f5:b3:b0:f5:33:0f:10:27:4e:5b:3c:35:eb:49:86:2b:5c: c8:4a:6f:aa:4b:d7:db:ca:6b:5c:27:4f:47:0d:6f:a4:5e:a0: b5:04:e8:2b:d9:84:7c:a7:ae:af:2c:37:d5:a9:db:d7:dd:70: a6:77:92:f1:7d:7e:ca:fd:f1:c5:9e:18:99:44:37:84:b4:dc: 59:13:fa:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26toK5ux5yPa1Gix+b4rhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTJkOWJkMmE3YzBmYWRjZDczZTI4YzlmNTBjNzRiOTk5MWE1NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5WCI5h24oZo/ss6og3hVCMOV+j9 caekpTJtuPri+Dty6KCHx4mZzjNJH7qm7LRw2kKn6Wlz2K5O4QJzSrvq8NLG5CkM 6wLSswnptChMP3af+IUazhOIj9cveeB3eqnek8s9CSPfcHZyeyxEvUQf9IMfM2Ti t9w55VS2R7rd8eFciHG9uAgJ0zCepZob1nH87X7wD6RMiCPWGbQAH4AzV0VwyHky 6h+tLffNaemTDpalmDbEMrT4IbMw759e0Y4/FDW3DJ2AdpXi695FTC9BlshVhLEF jEjtEox6WREZcEGnWYJdOF4qsKqNNk4Lqryj4XsDLlvr9u21Tlt5ZZ+n5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUtm9KnwPrc1z4oyfUMdLmZGlR2MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvMVMyYjBxZkEtdHpYUGlqSjlReDB1WmthVkhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/SeMA0G CSqGSIb3DQEBCwUAA4IBAQBIwbTTa1cFw+RNMmQSqhvYGpJOspZr6NWaiwYfFPbV rAJiV5g8+SArLkQVMz86QGxz0bxuRQMXL6+L9Y8iNKT/CogVQgryEEQa2yLa0ydR /vFjYVf2vI+Y3US306GeUEPKTsXUOFSpPnowHASFRCI6YK0bPgfUoj8kRE0S+/vg jhPlUhFn+/F1K57O0YaYshslx5oZg0NLW/OWlDW1iLvrFuP3w6lkqeVqDXyZAgAy YGzG5SqZ9bOw9TMPECdOWzw160mGK1zISm+qS9fbymtcJ09HDW+kXqC1BOgr2YR8 p66vLDfVqdvX3XCmd5LxfX7K/fHFnhiZRDeEtNxZE/oO -----END CERTIFICATE-----Generated at Tue Jan 27 09:56:28 2026 by rpki-client