This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa File: xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa (raw, json) Hash identifier: I2ugWtRwTmXPZXRdn73fmU0ZbGjpZ9U3l1aWJKFa53A= Subject key identifier: C4:2B:E5:85:FC:64:34:F4:41:07:3F:E2:E9:53:3D:53:8F:AD:D0:10 Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098 Certificate serial: 019B7A5B9B41F76806822D73B592ED309D15 Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29019 IP address blocks: 195.47.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9b:41:f7:68:06:82:2d:73:b5:92:ed:30:9d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42be585fc6434f441073fe2e9533d538fadd010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:e6:5f:36:99:dc:2e:23:43:79:3a:d9:ad: 51:35:ac:2b:4c:0e:24:f9:de:dc:1b:7d:f5:f0:90: 1a:14:59:20:56:d8:ad:88:2f:28:d9:6d:02:e9:d1: 22:19:81:c7:02:f1:e7:44:73:96:3e:62:b5:1d:eb: b0:b2:0b:fa:eb:d7:0d:15:18:be:4f:c5:fb:c6:7a: 16:b4:65:e7:2a:29:a8:cb:73:3e:e5:82:4c:58:28: aa:4b:47:75:30:8e:77:2a:a3:c4:3e:1d:62:e1:88: e4:ba:f4:2d:01:5b:00:a3:fb:fb:49:b2:96:2e:1e: 7c:86:fe:3f:33:2b:c4:2d:96:34:4b:39:26:2f:7b: 8d:f7:61:ad:3b:2e:d2:0d:0b:c2:ef:df:50:69:3a: 80:d4:72:6a:2a:a1:fa:da:a9:18:d3:65:3f:45:53: 32:44:36:1b:f5:24:c7:11:b8:0a:d8:57:45:94:f6: e5:9f:08:57:a8:89:5e:10:cc:e5:52:87:f1:34:8e: 59:8d:24:a1:63:a8:1d:7f:7d:2f:57:e2:37:27:c7: 2b:27:37:93:49:56:2f:88:c4:11:39:f3:7c:4b:9f: 7d:e3:dc:33:42:ce:2a:44:8b:2f:ac:39:ac:cc:18: 27:49:2d:79:84:9b:3e:4f:16:18:8d:1b:fc:d9:aa: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2B:E5:85:FC:64:34:F4:41:07:3F:E2:E9:53:3D:53:8F:AD:D0:10 X509v3 Authority Key Identifier: keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.237.0/24 Signature Algorithm: sha256WithRSAEncryption 03:7f:ce:f0:23:f4:fd:30:b8:cd:07:a7:b7:88:11:aa:a5:02: 5c:71:bb:76:58:61:eb:04:2a:72:9d:76:61:f2:81:12:fa:e5: 75:73:14:df:ce:28:ae:52:0c:82:cd:6d:aa:46:d8:79:23:6f: 78:e9:1e:62:aa:0a:5c:22:1d:04:e3:87:67:ad:c5:3b:b4:1f: 61:9e:84:b5:07:13:36:51:72:b7:e7:7d:8e:94:e0:0f:fa:9f: 46:6c:6d:2a:c9:fe:be:1c:a6:28:4f:a5:9e:4a:df:57:61:9a: 7a:99:59:e4:86:3b:55:54:cc:67:e7:9b:82:58:6c:fd:40:d6: 94:bf:ab:af:7d:80:be:4e:96:b3:c4:32:8e:1a:77:1c:c4:6f: 28:8e:87:8e:50:b9:df:9b:71:01:61:8a:58:a0:ac:d5:06:f4: 3b:49:f7:cc:cb:ce:aa:36:9d:28:fb:47:03:9e:ab:f9:70:9e: 22:87:e1:fe:e1:d6:1e:bd:7e:b0:5c:11:98:6e:a3:a6:d2:d7: b6:76:d4:d7:56:da:e1:0a:a9:b1:a6:b5:32:96:64:5a:3c:d3: 48:7a:29:b2:f5:15:06:e4:35:51:48:ee:95:fe:70:28:4a:5b: d2:49:be:cc:49:88:20:98:f2:da:02:82:11:3a:07:f2:67:77: 35:0a:fe:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5tB92gGgi1ztZLtMJ0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTE5NDA3ZWRhNmRiMDg2M2NkYzlmMTg1NzM0ODJkNmFk MTIwOTgwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDJiZTU4NWZjNjQzNGY0NDEwNzNmZTJlOTUzM2Q1MzhmYWRkMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKvmXzaZ3C4jQ3k62a1RNawrTA4k +d7cG3318JAaFFkgVtitiC8o2W0C6dEiGYHHAvHnRHOWPmK1Heuwsgv669cNFRi+ T8X7xnoWtGXnKimoy3M+5YJMWCiqS0d1MI53KqPEPh1i4YjkuvQtAVsAo/v7SbKW Lh58hv4/MyvELZY0SzkmL3uN92GtOy7SDQvC799QaTqA1HJqKqH62qkY02U/RVMy RDYb9STHEbgK2FdFlPblnwhXqIleEMzlUofxNI5ZjSShY6gdf30vV+I3J8crJzeT SVYviMQROfN8S59949wzQs4qRIsvrDmszBgnSS15hJs+TxYYjRv82ao4QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQr5YX8ZDT0QQc/4ulTPVOPrdAQMB8GA1UdIwQY MBaAFPOhlAftptsIY83J8YVzSC1q0SCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgt ZmFjOTA0YTRhYWI1LzEveEN2bGhmeGtOUFJCQnpfaTZWTTlVNC10MEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgtZmFjOTA0YTRhYWI1 LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy/tMA0G CSqGSIb3DQEBCwUAA4IBAQADf87wI/T9MLjNB6e3iBGqpQJccbt2WGHrBCpynXZh 8oES+uV1cxTfziiuUgyCzW2qRth5I2946R5iqgpcIh0E44dnrcU7tB9hnoS1BxM2 UXK3532OlOAP+p9GbG0qyf6+HKYoT6WeSt9XYZp6mVnkhjtVVMxn55uCWGz9QNaU v6uvfYC+TpazxDKOGnccxG8ojoeOULnfm3EBYYpYoKzVBvQ7SffMy86qNp0o+0cD nqv5cJ4ih+H+4dYevX6wXBGYbqOm0te2dtTXVtrhCqmxprUylmRaPNNIeimy9RUG 5DVRSO6V/nAoSlvSSb7MSYggmPLaAoIROgfyZ3c1Cv6l -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:24 2026 by rpki-client