This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/tdM9a3Fj16C8DYivU329dA57WBk.roa File: tdM9a3Fj16C8DYivU329dA57WBk.roa (raw, json) Hash identifier: Q27C5bR4yI1LsWJLJXdVxidjEUUsntcFj8QxNJysAgw= Subject key identifier: B5:D3:3D:6B:71:63:D7:A0:BC:0D:88:AF:53:7D:BD:74:0E:7B:58:19 Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320 Certificate serial: 019B7B3589F08048686D7C6E642DFF6690FC Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/tdM9a3Fj16C8DYivU329dA57WBk.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212055 IP address blocks: 195.226.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:89:f0:80:48:68:6d:7c:6e:64:2d:ff:66:90:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5d33d6b7163d7a0bc0d88af537dbd740e7b5819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:8e:8d:d6:3a:f3:22:9f:dc:06:82:4e:5b: 8c:7d:12:ee:e6:28:c5:af:02:87:33:30:f5:d1:04: 3e:86:1a:a1:a5:77:c4:77:d1:63:8a:b8:d3:8b:04: 02:94:79:75:88:60:31:ea:43:17:8c:06:cd:3c:3c: 1e:85:0f:38:6e:0a:1b:b1:20:ac:3a:21:4d:c8:42: 17:7c:14:79:d7:6b:19:80:72:ad:25:e9:73:1c:cc: aa:62:56:59:90:5d:bc:bb:1e:51:ff:c2:6c:ee:08: 6b:01:fd:74:9b:1e:b4:c2:d9:45:18:62:16:24:ec: 07:74:d0:bd:5e:28:b6:b9:66:ff:e9:9b:ba:31:f2: 45:4a:ce:eb:bc:6b:ac:25:26:8f:a3:b7:5c:22:59: 26:21:8c:34:e5:0c:96:93:73:40:a3:c7:b6:8b:6b: f0:33:0c:40:c2:d9:2d:10:e5:3e:cb:8e:58:9e:01: dd:2c:17:d8:95:c8:78:11:39:66:44:90:0f:3c:6b: 6a:57:ef:c0:9a:9d:01:50:39:56:64:e6:96:80:41: 39:83:81:89:2b:f0:d0:42:23:cb:ba:55:98:0f:3d: ce:7d:21:3f:35:37:d5:4f:82:d4:e8:af:80:49:b3: 13:b0:f8:19:b0:8c:61:87:e1:86:33:24:c4:aa:14: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D3:3D:6B:71:63:D7:A0:BC:0D:88:AF:53:7D:BD:74:0E:7B:58:19 X509v3 Authority Key Identifier: keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/tdM9a3Fj16C8DYivU329dA57WBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.199.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:20:ed:54:5e:05:08:d5:4c:de:c9:6f:d4:74:32:0b:08:0a: 08:b4:40:de:85:23:32:84:bd:9f:dc:dc:9a:2c:e4:24:f3:76: 50:49:71:6a:92:46:71:c5:a4:39:22:63:d3:92:52:ff:55:9b: fe:07:3e:c8:ad:12:bd:6b:71:52:d6:79:bf:75:8a:f2:81:04: 64:48:7a:55:77:d4:4f:18:17:bb:da:b5:9f:ee:0a:a3:54:cd: 6b:26:f7:1f:ba:09:85:c2:85:42:a2:87:2f:d4:b0:d8:c8:c4: 19:16:3b:95:3f:e9:00:f7:4f:b0:48:8d:4d:99:83:33:bd:c6: 3f:6e:3f:d6:c3:ce:9e:64:bf:f6:45:af:56:c0:ff:9c:08:4e: b0:ad:fd:a3:5a:bc:65:71:63:b4:94:5d:e1:62:9f:4b:dc:8f: c0:f5:05:9b:b5:b5:6f:00:92:ae:22:5c:f1:1c:16:2b:e8:4c: 70:17:0a:01:eb:f1:3b:68:95:9c:fc:c3:36:15:ab:8d:d7:a2: dd:51:b9:31:85:d4:74:6a:58:7f:27:5c:92:f0:b0:28:b2:63: 4c:74:c3:b7:22:c4:13:0a:27:ea:f9:53:a7:a2:01:c2:86:53: 05:a0:20:d8:5b:cb:f5:10:26:a4:c8:9a:e4:72:a3:c2:1b:27: 0e:8d:fe:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NYnwgEhobXxuZC3/ZpD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MmM2YzNkMjJjZjZiMTAxZDcxNDgwMDZkYTdhNzI4NGRj YmIzMjAwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWQzM2Q2YjcxNjNkN2EwYmMwZDg4YWY1MzdkYmQ3NDBlN2I1ODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTmOjdY68yKf3AaCTluMfRLu5ijF rwKHMzD10QQ+hhqhpXfEd9FjirjTiwQClHl1iGAx6kMXjAbNPDwehQ84bgobsSCs OiFNyEIXfBR512sZgHKtJelzHMyqYlZZkF28ux5R/8Js7ghrAf10mx60wtlFGGIW JOwHdNC9Xii2uWb/6Zu6MfJFSs7rvGusJSaPo7dcIlkmIYw05QyWk3NAo8e2i2vw MwxAwtktEOU+y45YngHdLBfYlch4ETlmRJAPPGtqV+/Amp0BUDlWZOaWgEE5g4GJ K/DQQiPLulWYDz3OfSE/NTfVT4LU6K+ASbMTsPgZsIxhh+GGMyTEqhTw0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLXTPWtxY9egvA2Ir1N9vXQOe1gZMB8GA1UdIwQY MBaAFGYsbD0iz2sQHXFIAG2npyhNy7MgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQt ZjIxYjZhZTNiZTZjLzEvdGRNOWEzRmoxNkM4RFlpdlUzMjlkQTU3V0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQtZjIxYjZhZTNiZTZj LzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LHMA0G CSqGSIb3DQEBCwUAA4IBAQAfIO1UXgUI1UzeyW/UdDILCAoItEDehSMyhL2f3Nya LOQk83ZQSXFqkkZxxaQ5ImPTklL/VZv+Bz7IrRK9a3FS1nm/dYrygQRkSHpVd9RP GBe72rWf7gqjVM1rJvcfugmFwoVCoocv1LDYyMQZFjuVP+kA90+wSI1NmYMzvcY/ bj/Ww86eZL/2Ra9WwP+cCE6wrf2jWrxlcWO0lF3hYp9L3I/A9QWbtbVvAJKuIlzx HBYr6ExwFwoB6/E7aJWc/MM2FauN16LdUbkxhdR0alh/J1yS8LAosmNMdMO3IsQT Cifq+VOnogHChlMFoCDYW8v1ECakyJrkcqPCGycOjf4i -----END CERTIFICATE-----Generated at Tue Jan 27 08:35:17 2026 by rpki-client