This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rlpkrsQk033pi_7xJt_GRXmNmrI.roa File: rlpkrsQk033pi_7xJt_GRXmNmrI.roa (raw, json) Hash identifier: b5dO27Rv5jwrKpHVnmrjKi3HLNlChUlN6UqJqCrv7ew= Subject key identifier: AE:5A:64:AE:C4:24:D3:7D:E9:8B:FE:F1:26:DF:C6:45:79:8D:9A:B2 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A23AA68ADA77A120FAFC49A621D9E7 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rlpkrsQk033pi_7xJt_GRXmNmrI.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 195.40.145.0/24 maxlen: 24 195.40.146.0/23 maxlen: 24 195.40.148.0/22 maxlen: 24 195.40.192.0/18 maxlen: 24 195.172.0.0/18 maxlen: 24 195.172.64.0/19 maxlen: 24 195.172.224.0/19 maxlen: 24 212.134.29.0/24 maxlen: 24 212.134.30.0/24 maxlen: 24 212.134.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3a:a6:8a:da:77:a1:20:fa:fc:49:a6:21:d9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae5a64aec424d37de98bfef126dfc645798d9ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:0a:49:e8:33:83:f6:8e:1b:84:23:ea:52: 92:08:7d:52:cb:24:59:2c:33:a6:9f:cd:b2:67:6e: a1:cd:f0:f2:c0:62:f4:68:66:49:cf:82:94:33:5e: f2:f0:ae:fb:e9:97:a4:b1:ef:49:72:9d:fc:de:19: d8:f7:bb:64:a2:35:6f:e8:79:4a:9b:60:10:41:00: 88:c8:b8:0b:8c:12:8b:df:fe:c3:27:bb:31:38:c5: 0c:3a:f0:33:96:f9:78:ae:c4:a6:10:52:97:3a:14: e6:12:ac:98:58:c3:01:bb:97:6e:28:d6:18:f8:da: 23:46:14:11:7d:37:07:3f:f9:9d:a3:c9:ed:50:20: 7f:58:7c:95:a6:ec:11:02:54:e5:00:e7:bb:c2:09: 0a:a9:72:cb:3b:65:04:b8:94:40:1a:f1:9f:e3:76: 40:12:7e:b9:86:da:b1:39:d4:9c:1a:22:ca:ae:76: fc:de:cb:63:c4:8e:99:c7:89:30:c0:a1:44:9c:ee: b2:ef:df:d8:39:a6:15:51:1a:ff:30:7a:9b:26:aa: 11:f2:ee:b2:b5:07:67:3a:86:2c:23:cc:58:50:64: 59:39:07:96:84:f6:3e:8b:69:11:97:1a:71:40:3b: f3:81:68:db:9b:5d:e0:bc:15:c3:cd:8d:57:be:8a: 4c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5A:64:AE:C4:24:D3:7D:E9:8B:FE:F1:26:DF:C6:45:79:8D:9A:B2 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rlpkrsQk033pi_7xJt_GRXmNmrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.145.0-195.40.151.255 195.40.192.0/18 195.172.0.0-195.172.95.255 195.172.224.0/19 212.134.29.0-212.134.31.255 Signature Algorithm: sha256WithRSAEncryption 29:0e:d9:2f:84:b6:ae:6f:c5:07:c0:c5:c5:52:12:6b:c5:db: 27:90:5d:eb:ee:9e:66:47:e5:1c:6d:79:bc:8f:4c:0b:c9:80: 1a:f9:85:d4:a4:31:4d:75:15:e9:ae:dd:b0:16:69:a5:1f:ef: 57:ad:a9:bb:b0:f2:eb:ee:d0:64:dd:7a:aa:6f:62:52:1f:52: 40:23:a1:46:3b:98:8a:43:02:eb:d9:a4:9c:27:fa:5d:24:d2: 25:2a:98:6a:69:69:8c:c6:39:aa:30:ba:51:3a:1d:f5:5b:37: c2:bf:07:33:c7:37:27:82:6d:65:c0:76:85:12:7d:06:ee:32: b4:e1:69:2d:6d:4c:20:64:7d:f7:5f:11:72:5e:9e:38:9f:14: ed:b4:92:a1:20:07:b5:6e:48:90:f5:3b:0d:1a:1c:4d:5e:96: 61:d4:f8:f2:28:14:4e:e0:d8:30:e3:28:4a:1c:a8:91:77:fa: 8a:73:1f:57:ff:37:32:6f:3b:dc:7a:f6:1b:73:44:50:b2:3c: 04:dc:6e:f0:40:ed:90:c9:57:61:8f:83:75:03:c0:2b:1b:ee: d5:ee:33:c6:b6:2c:6e:4c:aa:c9:e4:00:05:0f:3c:38:de:08: 98:56:46:3d:1c:4a:04:61:36:51:41:8d:55:4b:40:5b:e9:d7: 44:c7:ad:f3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt4ojqmitp3oSD6/EmmIdnnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTVhNjRhZWM0MjRkMzdkZTk4YmZlZjEyNmRmYzY0NTc5OGQ5YWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWEKSegzg/aOG4Qj6lKSCH1SyyRZ LDOmn82yZ26hzfDywGL0aGZJz4KUM17y8K776Zekse9Jcp383hnY97tkojVv6HlK m2AQQQCIyLgLjBKL3/7DJ7sxOMUMOvAzlvl4rsSmEFKXOhTmEqyYWMMBu5duKNYY +NojRhQRfTcHP/mdo8ntUCB/WHyVpuwRAlTlAOe7wgkKqXLLO2UEuJRAGvGf43ZA En65htqxOdScGiLKrnb83stjxI6Zx4kwwKFEnO6y79/YOaYVURr/MHqbJqoR8u6y tQdnOoYsI8xYUGRZOQeWhPY+i2kRlxpxQDvzgWjbm13gvBXDzY1XvopMgQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFK5aZK7EJNN96Yv+8SbfxkV5jZqyMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvcmxwa3JzUWswMzNwaV83eEp0X0dSWG1ObXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1MAwDBADDKJED BAPDKJADBAbDKMAwCwMDAsOsAwQFw6xAAwQFw6zgMAwDBADUhh0DBAXUhgAwDQYJ KoZIhvcNAQELBQADggEBACkO2S+Etq5vxQfAxcVSEmvF2yeQXevunmZH5RxtebyP TAvJgBr5hdSkMU11Femu3bAWaaUf71etqbuw8uvu0GTdeqpvYlIfUkAjoUY7mIpD AuvZpJwn+l0k0iUqmGppaYzGOaowulE6HfVbN8K/BzPHNyeCbWXAdoUSfQbuMrTh aS1tTCBkffdfEXJenjifFO20kqEgB7VuSJD1Ow0aHE1elmHU+PIoFE7g2DDjKEoc qJF3+opzH1f/NzJvO9x69htzRFCyPATcbvBA7ZDJV2GPg3UDwCsb7tXuM8a2LG5M qsnkAAUPPDjeCJhWRj0cSgRhNlFBjVVLQFvp10THrfM= -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:32 2026 by rpki-client