This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa File: sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa (raw, json) Hash identifier: izWuWKp2wnvE2HYeue8Y8Mj2HM1TQYV8MhNOeFXRVUw= Subject key identifier: B0:FE:C8:56:C3:42:36:79:FF:07:61:AD:53:A4:A0:EF:D6:70:85:EC Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720 Certificate serial: 019B7BA3E86DED8BF028B6A3E446B53FA959 Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa Signing time: Thu 01 Jan 2026 22:18:18 +0000 ROA not before: Thu 01 Jan 2026 22:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 195.254.170.0/24 maxlen: 24 195.254.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e8:6d:ed:8b:f0:28:b6:a3:e4:46:b5:3f:a9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720 Validity Not Before: Jan 1 22:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0fec856c3423679ff0761ad53a4a0efd67085ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:21:9a:90:99:76:2f:14:cb:df:da:ab:2f: ee:50:1b:a8:46:ed:c8:dc:ef:8f:4f:9c:44:d2:47: af:7d:01:81:67:57:06:fc:f1:61:b1:5e:dd:a3:41: 93:aa:7a:6b:b4:ff:57:c5:b9:93:4f:1e:92:5c:1a: 3c:28:f7:be:5a:f8:8e:9e:18:fb:2d:7a:e4:7a:83: d8:e8:ad:68:a0:19:3f:10:6a:a3:af:c3:cb:8b:db: 3d:b9:f4:ba:32:42:8d:7a:97:26:9f:e7:9b:3d:dd: d2:bc:ea:b6:6d:78:dc:40:4f:45:08:fb:88:b5:b8: f4:1b:f6:e9:84:09:04:d5:58:ac:e4:d9:e9:06:21: 48:02:78:c7:9d:01:3e:4e:92:36:5d:e9:fd:4a:0d: eb:6f:41:f5:7e:42:1c:79:1e:86:3f:c7:d4:6d:72: 4b:d4:4d:2c:53:0d:fb:ae:64:44:34:69:63:cd:07: e8:f1:b4:1e:72:a0:15:aa:10:aa:d6:fd:5a:8f:ec: 76:6e:8b:6d:af:5e:2a:6b:b3:3a:9f:a6:2b:d5:73: cf:a5:40:74:f7:25:84:0d:5d:60:83:61:4a:9b:f3: 2d:f0:0d:fb:91:c5:63:7a:93:f7:7f:08:6e:19:ff: fd:0f:95:f5:9d:25:fb:e9:64:a5:37:42:1f:fd:af: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FE:C8:56:C3:42:36:79:FF:07:61:AD:53:A4:A0:EF:D6:70:85:EC X509v3 Authority Key Identifier: keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.170.0/23 Signature Algorithm: sha256WithRSAEncryption 95:fa:4d:8a:5d:ca:39:dd:c6:0d:f2:70:25:b0:0c:9e:48:05: f6:6c:d2:26:0c:c0:c1:4f:df:c7:2d:cb:80:14:76:5a:ce:44: 45:da:b0:fc:89:20:75:56:b3:48:11:8a:80:e0:67:03:a3:25: 7d:90:06:ba:be:08:7f:7a:a8:d5:54:e7:9d:d3:58:ca:32:d7: f2:58:02:5e:47:bb:b8:02:2e:c1:40:e0:b9:46:3a:c7:74:fa: be:1a:1f:07:80:2b:d7:b1:5a:dd:fa:f9:5b:87:28:3f:be:a9: 8b:9e:a4:68:76:1c:36:4a:7b:0c:1e:ce:44:9c:9b:a3:dc:81: 82:6e:65:82:de:9c:bd:c9:f5:96:08:7e:58:9d:3c:d4:3f:ee: fe:58:d5:01:bf:6b:99:ef:d1:37:e6:df:7a:b0:bc:3b:a4:70: 2f:8a:0d:0c:98:59:32:a8:2e:c5:5e:09:4d:33:bf:09:b3:27: 37:74:97:ad:f2:07:53:36:db:65:72:ec:ac:4c:09:a8:ef:86: 5d:a0:b6:c1:ae:35:b9:88:2f:35:4e:6f:33:90:9a:b4:f8:0b: 56:a7:cd:7f:ec:8a:be:e8:bd:d7:60:cc:62:56:c3:74:5b:6b: 51:a4:e5:c4:cd:d8:8b:1f:f4:b3:6b:d7:14:93:52:75:9a:f8: 20:c4:57:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+ht7YvwKLaj5Ea1P6lZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmRlNzJiZjVhMDBiZGVjNGQxZWZkZDdkMDIwMjllZTc5 ZTQ3MjAwHhcNMjYwMTAxMjIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGZlYzg1NmMzNDIzNjc5ZmYwNzYxYWQ1M2E0YTBlZmQ2NzA4NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGohmpCZdi8Uy9/aqy/uUBuoRu3I 3O+PT5xE0kevfQGBZ1cG/PFhsV7do0GTqnprtP9XxbmTTx6SXBo8KPe+WviOnhj7 LXrkeoPY6K1ooBk/EGqjr8PLi9s9ufS6MkKNepcmn+ebPd3SvOq2bXjcQE9FCPuI tbj0G/bphAkE1Vis5NnpBiFIAnjHnQE+TpI2Xen9Sg3rb0H1fkIceR6GP8fUbXJL 1E0sUw37rmRENGljzQfo8bQecqAVqhCq1v1aj+x2bottr14qa7M6n6Yr1XPPpUB0 9yWEDV1gg2FKm/Mt8A37kcVjepP3fwhuGf/9D5X1nSX76WSlN0If/a96DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLD+yFbDQjZ5/wdhrVOkoO/WcIXsMB8GA1UdIwQY MBaAFPX95yv1oAvexNHv3X0CAp7nnkcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYt MDgzOGY3OGMwMjU5LzEvc1A3SVZzTkNObm5fQjJHdFU2U2c3OVp3aGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYtMDgzOGY3OGMwMjU5 LzEvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/6qMA0G CSqGSIb3DQEBCwUAA4IBAQCV+k2KXco53cYN8nAlsAyeSAX2bNImDMDBT9/HLcuA FHZazkRF2rD8iSB1VrNIEYqA4GcDoyV9kAa6vgh/eqjVVOed01jKMtfyWAJeR7u4 Ai7BQOC5RjrHdPq+Gh8HgCvXsVrd+vlbhyg/vqmLnqRodhw2SnsMHs5EnJuj3IGC bmWC3py9yfWWCH5YnTzUP+7+WNUBv2uZ79E35t96sLw7pHAvig0MmFkyqC7FXglN M78Jsyc3dJet8gdTNttlcuysTAmo74ZdoLbBrjW5iC81Tm8zkJq0+AtWp81/7Iq+ 6L3XYMxiVsN0W2tRpOXEzdiLH/Sza9cUk1J1mvggxFd5 -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:50 2026 by rpki-client