This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/AoPgCevjaet1nmHheuN6SeeL1kc.roa File: AoPgCevjaet1nmHheuN6SeeL1kc.roa (raw, json) Hash identifier: 6xkXeVfyM+lok9O6WIPuoQpZtpps9f90d+FFQVcYVr4= Subject key identifier: 02:83:E0:09:EB:E3:69:EB:75:9E:61:E1:7A:E3:7A:49:E7:8B:D6:47 Certificate issuer: /CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9 Certificate serial: 019B7EA4E00D081902BBB07C18FE068E1F21 Authority key identifier: 9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/AoPgCevjaet1nmHheuN6SeeL1kc.roa Signing time: Fri 02 Jan 2026 12:18:13 +0000 ROA not before: Fri 02 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35067 IP address blocks: 195.16.76.0/22 maxlen: 22 195.16.76.0/24 maxlen: 24 195.16.77.0/24 maxlen: 24 195.16.78.0/24 maxlen: 24 195.16.79.0/24 maxlen: 24 2001:678:5f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:e0:0d:08:19:02:bb:b0:7c:18:fe:06:8e:1f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9 Validity Not Before: Jan 2 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0283e009ebe369eb759e61e17ae37a49e78bd647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:ed:eb:d0:06:c4:8c:27:d7:c9:d5:c9:85: ef:f8:aa:ca:f5:87:8b:94:2d:63:77:fa:1a:ae:5a: 26:07:59:e8:a3:f8:a9:b4:9e:fe:91:04:d7:da:c0: a3:c9:83:6b:6e:98:04:f7:49:84:06:08:d6:25:64: df:26:71:b7:fa:6e:98:e6:f4:ea:48:f3:0d:69:86: 4d:17:bd:9e:18:bb:ec:c9:1e:2b:27:82:b7:e9:b3: b6:31:81:58:d9:16:3d:92:3f:80:c3:bf:53:ce:ad: ab:c3:4c:7c:83:89:9c:26:3f:8e:6a:b7:9c:d5:d9: 5c:cc:eb:07:5f:76:c2:6a:b5:ee:18:91:86:97:3d: 05:dd:4b:89:0a:d1:49:55:df:5c:d2:cf:41:d7:36: 42:a4:66:c8:c6:50:b5:a8:20:09:3a:07:2c:03:5d: b9:6f:e3:e1:20:1f:6c:cc:12:d6:bb:59:f9:f7:39: e4:43:d1:87:75:27:27:33:b7:38:47:e6:15:d7:60: 45:04:fc:ac:e7:c7:5e:ed:35:af:99:1d:06:75:ad: 0a:ec:7a:19:f0:98:56:12:cd:de:78:fe:68:f4:56: 48:20:8d:f9:f8:cd:66:1b:a9:fe:71:a8:40:dc:22: ca:64:50:70:c9:0f:e3:6b:90:23:07:a0:19:82:82: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:E0:09:EB:E3:69:EB:75:9E:61:E1:7A:E3:7A:49:E7:8B:D6:47 X509v3 Authority Key Identifier: keyid:9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/AoPgCevjaet1nmHheuN6SeeL1kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.16.76.0/22 IPv6: 2001:678:5f0::/48 Signature Algorithm: sha256WithRSAEncryption 1c:92:b1:66:87:af:3f:97:46:5c:02:01:a1:62:05:b8:0d:17: b0:46:35:76:68:62:90:da:7f:7b:c2:b2:54:0e:b5:73:31:28: 71:0d:31:03:65:68:d3:f7:d0:45:67:a6:86:33:c3:81:b6:6a: 72:73:94:f5:59:c5:db:a6:c9:1f:98:a3:a1:1b:ee:88:35:1f: 88:91:25:55:48:db:76:fe:46:41:cd:e1:8d:41:d2:87:31:da: 8c:b4:3d:e3:e2:35:fa:65:2e:59:e4:71:e5:0e:dd:a2:ba:ab: 95:25:e4:d9:78:1a:b9:ab:be:60:26:8f:94:c0:8d:90:e3:f9: 2f:8f:12:35:db:46:93:c8:41:5b:0c:37:3f:d9:3d:52:b0:6d: 42:b6:bd:1c:52:76:a4:2f:16:d2:99:52:18:ae:df:cb:e9:0a: ab:2e:90:71:c9:04:11:1d:f9:16:f5:c9:2d:64:0f:f7:bc:28: 7c:76:18:3c:a3:d5:1e:1a:d7:7d:05:3a:63:6a:0c:f2:fe:f7: 5b:6b:41:2b:3f:34:e5:8a:d3:d9:f5:05:d2:9d:51:dd:f0:59: b2:43:bb:e1:71:35:90:c8:45:97:ab:58:65:67:2f:d1:81:b6: a3:45:98:fe:8c:39:b3:b9:22:aa:72:7b:25:03:05:54:3b:30: 09:7b:ad:3c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pOANCBkCu7B8GP4Gjh8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNGIzMDg2NjE0ZjQ3ODM4YTNlODBhM2U2ZTA1MWQzZDhh NjkyZjkwHhcNMjYwMTAyMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjgzZTAwOWViZTM2OWViNzU5ZTYxZTE3YWUzN2E0OWU3OGJkNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaHt69AGxIwn18nVyYXv+KrK9YeL lC1jd/oarlomB1noo/iptJ7+kQTX2sCjyYNrbpgE90mEBgjWJWTfJnG3+m6Y5vTq SPMNaYZNF72eGLvsyR4rJ4K36bO2MYFY2RY9kj+Aw79Tzq2rw0x8g4mcJj+Oarec 1dlczOsHX3bCarXuGJGGlz0F3UuJCtFJVd9c0s9B1zZCpGbIxlC1qCAJOgcsA125 b+PhIB9szBLWu1n59znkQ9GHdScnM7c4R+YV12BFBPys58de7TWvmR0Gda0K7HoZ 8JhWEs3eeP5o9FZIII35+M1mG6n+cahA3CLKZFBwyQ/ja5AjB6AZgoL0yQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAKD4Anr42nrdZ5h4Xrjeknni9ZHMB8GA1UdIwQY MBaAFJxLMIZhT0eDij6Ao+bgUdPYppL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVzd2htRlBSNE9LUG9DajV1QlIwOWlta3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82Mjk2ZDctYzAwOC00YzMxLWFlN2Et ODRlZjljYWJiOWI2LzEvQW9QZ0NldmphZXQxbm1IaGV1TjZTZWVMMWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82Mjk2ZDctYzAwOC00YzMxLWFlN2EtODRlZjljYWJiOWI2 LzEvbkVzd2htRlBSNE9LUG9DajV1QlIwOWlta3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwxBMMA8E AgACMAkDBwAgAQZ4BfAwDQYJKoZIhvcNAQELBQADggEBABySsWaHrz+XRlwCAaFi BbgNF7BGNXZoYpDaf3vCslQOtXMxKHENMQNlaNP30EVnpoYzw4G2anJzlPVZxdum yR+Yo6Eb7og1H4iRJVVI23b+RkHN4Y1B0ocx2oy0PePiNfplLlnkceUO3aK6q5Ul 5Nl4GrmrvmAmj5TAjZDj+S+PEjXbRpPIQVsMNz/ZPVKwbUK2vRxSdqQvFtKZUhiu 38vpCqsukHHJBBEd+Rb1yS1kD/e8KHx2GDyj1R4a130FOmNqDPL+91trQSs/NOWK 09n1BdKdUd3wWbJDu+FxNZDIRZerWGVnL9GBtqNFmP6MObO5IqpyeyUDBVQ7MAl7 rTw= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:52 2026 by rpki-client