This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/cJYpXB_oLGSwXDizlOh5NTU415c.roa File: cJYpXB_oLGSwXDizlOh5NTU415c.roa (raw, json) Hash identifier: mZv4pxKg6JT+luM0hXV3CCOhtyIkDC3zPkMJ6EEFxgY= Subject key identifier: 70:96:29:5C:1F:E8:2C:64:B0:5C:38:B3:94:E8:79:35:35:38:D7:97 Certificate issuer: /CN=196d587a405a1904966321a10f3989b6866f5e63 Certificate serial: 019BFA029225EF391CA0D8208ABD16ED3543 Authority key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/cJYpXB_oLGSwXDizlOh5NTU415c.roa Signing time: Mon 26 Jan 2026 11:13:51 +0000 ROA not before: Mon 26 Jan 2026 11:13:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 195.226.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:02:92:25:ef:39:1c:a0:d8:20:8a:bd:16:ed:35:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196d587a405a1904966321a10f3989b6866f5e63 Validity Not Before: Jan 26 11:13:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7096295c1fe82c64b05c38b394e879353538d797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:7b:a2:ef:65:ba:3d:57:6e:a7:86:3a:ca: 3f:c0:21:86:b7:d9:f8:c4:76:b0:b5:4c:0e:9f:fb: 5c:c2:a9:1a:e8:2d:35:4d:98:55:5d:ef:4c:c3:e7: 45:8d:54:4f:ab:0e:1e:77:f7:83:02:2e:bd:a9:84: 36:65:78:e2:10:05:a1:af:db:c0:1d:0f:f0:cf:16: b6:28:f2:c5:8c:37:51:61:9b:16:8a:51:89:a9:a2: 48:90:ca:48:a9:c4:b8:76:0d:9f:a9:a6:91:1e:96: 4b:df:a5:ce:6d:d7:d4:0a:5e:01:4a:53:95:07:a2: 72:34:38:47:89:33:2b:15:ba:b0:e8:09:2f:74:44: fb:19:2f:af:2d:c4:f2:87:70:04:d0:ea:76:4e:1e: 13:84:0a:5d:16:ef:14:fc:e6:75:f8:e2:16:9a:f9: c6:0f:7d:a9:58:46:38:ba:76:5a:b3:13:41:67:a3: 53:96:8c:e6:00:9d:34:51:e3:a6:1f:86:c6:78:0f: ef:cb:e5:cb:b4:27:7f:05:57:18:fb:be:20:74:e6: 97:a9:f1:75:f1:e8:f9:37:34:d3:0d:2f:7c:e9:b6: c6:55:0a:90:ba:aa:2c:ac:5e:8a:87:4f:29:62:50: ba:6f:08:8e:ef:0d:9e:d0:e0:50:57:1f:7a:42:1f: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:96:29:5C:1F:E8:2C:64:B0:5C:38:B3:94:E8:79:35:35:38:D7:97 X509v3 Authority Key Identifier: keyid:19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/cJYpXB_oLGSwXDizlOh5NTU415c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.200.0/24 Signature Algorithm: sha256WithRSAEncryption 77:a6:8d:48:8b:9c:d9:db:dd:b5:52:f4:48:21:62:59:71:cc: f3:23:19:6e:46:6d:45:46:da:d0:57:31:41:bc:32:dd:56:5e: c2:43:fb:29:e4:b8:28:09:46:6a:9f:58:95:c4:1d:2a:1d:95: ea:97:1f:79:02:f2:ef:fd:a6:aa:ee:83:1e:cc:d0:b6:db:cd: 26:29:0e:5e:b5:06:eb:39:a0:c8:b1:80:65:0c:03:23:a2:9c: 9c:28:7f:e0:24:21:70:a6:0a:b7:08:17:b8:5a:cd:c4:b8:01: a3:fd:90:7a:61:42:22:e5:cf:17:ee:4b:d9:7e:c8:13:ba:73: d7:3f:de:64:d2:ff:f0:eb:84:07:37:a0:06:c1:3c:b3:74:0a: 81:8f:ec:9a:47:d5:8d:26:5a:de:ad:6a:99:c5:f4:0e:42:4f: 31:63:aa:83:0f:59:af:44:f3:38:64:af:f8:1b:8f:45:c4:ac: c7:81:ad:63:a9:33:6b:ad:9c:68:a0:cf:92:39:ed:0b:3f:44: 30:ea:83:62:7c:d4:c6:25:95:1c:90:4b:c9:81:de:b8:57:89: a7:a2:48:77:a6:ed:92:6a:bf:da:f4:00:25:3d:c0:f7:32:91: 8d:86:b5:14:10:b0:fd:80:b4:d2:d7:64:bf:4d:13:9b:c0:c1: 75:60:85:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6ApIl7zkcoNggir0W7TVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NmQ1ODdhNDA1YTE5MDQ5NjYzMjFhMTBmMzk4OWI2ODY2 ZjVlNjMwHhcNMjYwMTI2MTExMzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk2Mjk1YzFmZTgyYzY0YjA1YzM4YjM5NGU4NzkzNTM1MzhkNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcl7ou9luj1XbqeGOso/wCGGt9n4 xHawtUwOn/tcwqka6C01TZhVXe9Mw+dFjVRPqw4ed/eDAi69qYQ2ZXjiEAWhr9vA HQ/wzxa2KPLFjDdRYZsWilGJqaJIkMpIqcS4dg2fqaaRHpZL36XObdfUCl4BSlOV B6JyNDhHiTMrFbqw6AkvdET7GS+vLcTyh3AE0Op2Th4ThApdFu8U/OZ1+OIWmvnG D32pWEY4unZasxNBZ6NTlozmAJ00UeOmH4bGeA/vy+XLtCd/BVcY+74gdOaXqfF1 8ej5NzTTDS986bbGVQqQuqosrF6Kh08pYlC6bwiO7w2e0OBQVx96Qh8bzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCWKVwf6CxksFw4s5ToeTU1ONeXMB8GA1UdIwQY MBaAFBltWHpAWhkElmMhoQ85ibaGb15jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1cxWWVrQmFHUVNXWXlHaER6bUp0b1p2WG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YTlhYTAtNWM1NC00NDg0LWE1OTQt NjVlMjNlM2ZmOWM4LzEvY0pZcFhCX29MR1N3WERpemxPaDVOVFU0MTVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84YTlhYTAtNWM1NC00NDg0LWE1OTQtNjVlMjNlM2ZmOWM4 LzEvR1cxWWVrQmFHUVNXWXlHaER6bUp0b1p2WG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LIMA0G CSqGSIb3DQEBCwUAA4IBAQB3po1Ii5zZ2921UvRIIWJZcczzIxluRm1FRtrQVzFB vDLdVl7CQ/sp5LgoCUZqn1iVxB0qHZXqlx95AvLv/aaq7oMezNC2280mKQ5etQbr OaDIsYBlDAMjopycKH/gJCFwpgq3CBe4Ws3EuAGj/ZB6YUIi5c8X7kvZfsgTunPX P95k0v/w64QHN6AGwTyzdAqBj+yaR9WNJlrerWqZxfQOQk8xY6qDD1mvRPM4ZK/4 G49FxKzHga1jqTNrrZxooM+SOe0LP0Qw6oNifNTGJZUckEvJgd64V4mnokh3pu2S ar/a9AAlPcD3MpGNhrUUELD9gLTS12S/TRObwMF1YIV0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:13 2026 by rpki-client