This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/iujWRUoo9sqR1r7tuLxEKo6wYv8.roa File: iujWRUoo9sqR1r7tuLxEKo6wYv8.roa (raw, json) Hash identifier: bcnhfN7pQHiijOh8fgkY93QAeP9iw9rTIA5uyoESOq4= Subject key identifier: 8A:E8:D6:45:4A:28:F6:CA:91:D6:BE:ED:B8:BC:44:2A:8E:B0:62:FF Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Certificate serial: 019B7D5B845CDA1FA099CA74C16F6357DE4F Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/iujWRUoo9sqR1r7tuLxEKo6wYv8.roa Signing time: Fri 02 Jan 2026 06:18:28 +0000 ROA not before: Fri 02 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57222 IP address blocks: 195.162.5.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:84:5c:da:1f:a0:99:ca:74:c1:6f:63:57:de:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Validity Not Before: Jan 2 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ae8d6454a28f6ca91d6beedb8bc442a8eb062ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:02:19:cd:d3:76:f6:0c:e0:76:4c:ed:09: c9:60:fb:e8:17:37:42:41:72:bb:75:0a:79:56:d3: 5e:27:b6:02:01:fc:50:22:21:3d:94:94:0f:dc:e6: 9b:18:d0:9d:8c:23:31:84:d5:be:99:25:0d:6a:b1: 27:e3:29:c3:42:bb:8f:68:8e:8d:76:bc:0f:ed:91: b1:37:f5:49:53:7d:f1:5f:84:f7:21:4c:bf:c3:75: 46:81:58:15:d1:9d:0c:cf:24:ff:23:31:76:82:d5: 7a:f8:77:95:16:7b:90:0e:83:d2:3d:00:bc:a9:31: a2:a3:49:7e:a2:b9:af:b4:cb:b9:c0:c8:f6:1f:df: 9b:c2:ae:e6:53:28:f5:e1:1d:2b:ad:a1:59:8d:5b: 3c:7c:98:f8:34:64:8a:67:a6:62:c8:8b:12:cb:64: a1:38:f0:1c:e7:b4:ed:9b:e7:c6:8a:36:b3:9b:27: 86:84:ca:0c:92:b0:86:62:a0:ac:08:c6:b4:6b:df: eb:c5:65:e5:81:32:bb:5c:46:18:4b:e7:25:84:eb: 4e:a3:c9:3a:eb:c5:93:ea:bd:6a:e7:10:c1:82:7f: db:13:92:10:4b:b4:40:1e:43:e8:63:2c:46:be:84: 14:ec:a2:8b:70:61:52:0b:36:cb:38:5f:0d:e1:9b: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E8:D6:45:4A:28:F6:CA:91:D6:BE:ED:B8:BC:44:2A:8E:B0:62:FF X509v3 Authority Key Identifier: keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/iujWRUoo9sqR1r7tuLxEKo6wYv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.162.5.0/24 Signature Algorithm: sha256WithRSAEncryption 63:fc:d1:6f:22:82:8e:df:c0:8f:c5:38:44:5d:0b:2d:ae:7a: d5:c3:47:c6:b4:70:07:45:8d:4e:aa:c4:47:33:1e:d9:14:21: 9c:c8:0e:83:25:25:c1:49:7b:9b:69:76:1d:f3:3a:24:60:85: f9:ae:e9:0e:a0:ce:44:66:b3:f4:d5:e4:26:79:3d:5f:30:6a: 93:e7:63:19:4f:4f:c2:16:ad:be:cb:9f:bf:ca:f2:d6:69:5e: bb:ee:5f:c3:fb:90:9c:aa:4f:ea:aa:6a:41:86:5e:36:92:4d: ab:a1:db:d1:43:4b:df:39:ba:00:71:94:ae:7d:85:0d:b0:ea: f4:da:96:91:bd:72:09:29:ac:5c:2e:56:2c:2a:b6:9e:af:b3: 91:48:f3:9f:5c:f0:d7:db:2c:1c:4f:1c:0c:6c:e8:4e:e1:7e: 76:20:f8:35:a9:c7:bc:98:a2:fa:c7:4a:85:67:40:c1:c1:34: aa:40:37:e3:fc:25:dc:63:6d:99:b0:77:5a:ac:95:38:fa:6f: a3:6c:34:11:7c:2c:1f:d5:88:37:25:41:69:99:32:25:30:53: b0:cf:75:87:bc:02:be:a6:85:9e:e5:5f:43:3e:cf:c9:b9:54: d5:be:de:ce:27:16:37:7e:37:27:69:c0:25:ce:5f:c4:03:1e: b7:82:52:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W4Rc2h+gmcp0wW9jV95PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDZiZmZmOGI5MGUzNzQ4NTU1YmExNDQ3ZmQ0ZWRlY2Mz NDBhMTMwHhcNMjYwMTAyMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWU4ZDY0NTRhMjhmNmNhOTFkNmJlZWRiOGJjNDQyYThlYjA2MmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwMCGc3TdvYM4HZM7QnJYPvoFzdC QXK7dQp5VtNeJ7YCAfxQIiE9lJQP3OabGNCdjCMxhNW+mSUNarEn4ynDQruPaI6N drwP7ZGxN/VJU33xX4T3IUy/w3VGgVgV0Z0MzyT/IzF2gtV6+HeVFnuQDoPSPQC8 qTGio0l+ormvtMu5wMj2H9+bwq7mUyj14R0rraFZjVs8fJj4NGSKZ6ZiyIsSy2Sh OPAc57Ttm+fGijazmyeGhMoMkrCGYqCsCMa0a9/rxWXlgTK7XEYYS+clhOtOo8k6 68WT6r1q5xDBgn/bE5IQS7RAHkPoYyxGvoQU7KKLcGFSCzbLOF8N4ZvStwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIro1kVKKPbKkda+7bi8RCqOsGL/MB8GA1UdIwQY MBaAFMxGv/+LkON0hVW6FEf9Tt7MNAoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAt NGRjOWJmNjQyZGQyLzEvaXVqV1JVb285c3FSMXI3dHVMeEVLbzZ3WXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAtNGRjOWJmNjQyZGQy LzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6IFMA0G CSqGSIb3DQEBCwUAA4IBAQBj/NFvIoKO38CPxThEXQstrnrVw0fGtHAHRY1OqsRH Mx7ZFCGcyA6DJSXBSXubaXYd8zokYIX5rukOoM5EZrP01eQmeT1fMGqT52MZT0/C Fq2+y5+/yvLWaV677l/D+5Ccqk/qqmpBhl42kk2rodvRQ0vfOboAcZSufYUNsOr0 2paRvXIJKaxcLlYsKraer7ORSPOfXPDX2ywcTxwMbOhO4X52IPg1qce8mKL6x0qF Z0DBwTSqQDfj/CXcY22ZsHdarJU4+m+jbDQRfCwf1Yg3JUFpmTIlMFOwz3WHvAK+ poWe5V9DPs/JuVTVvt7OJxY3fjcnacAlzl/EAx63glKf -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:15 2026 by rpki-client