This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/32xNrqfn_40-iDBmk-rm9VjKVfI.roa File: 32xNrqfn_40-iDBmk-rm9VjKVfI.roa (raw, json) Hash identifier: JPXRakEsfFUtjCtyDn2J8TNXfU3lMwghua3Q9mcoWwI= Subject key identifier: DF:6C:4D:AE:A7:E7:FF:8D:3E:88:30:66:93:EA:E6:F5:58:CA:55:F2 Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f Certificate serial: 019B7FF28EF3C7C894864468DB0F7AC0D98D Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/32xNrqfn_40-iDBmk-rm9VjKVfI.roa Signing time: Fri 02 Jan 2026 18:22:41 +0000 ROA not before: Fri 02 Jan 2026 18:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47369 IP address blocks: 195.248.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8e:f3:c7:c8:94:86:44:68:db:0f:7a:c0:d9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f Validity Not Before: Jan 2 18:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df6c4daea7e7ff8d3e88306693eae6f558ca55f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:ba:d0:d7:56:eb:2d:48:0d:eb:ea:9d:df: d1:96:c6:85:63:3c:16:12:95:e4:01:50:77:b0:95: b5:a4:8e:16:a8:75:67:a6:09:c7:2c:8f:27:8f:be: 0b:fc:bb:b5:b7:93:eb:5d:a7:81:9f:dc:d3:71:0d: e5:15:77:9c:f4:96:04:26:d3:c9:ee:d8:61:25:73: 9b:66:1e:a6:cd:a1:b0:65:9b:98:b0:3f:79:ed:50: 0b:c7:e9:9d:fe:ba:dc:3e:e6:95:96:c2:f8:74:a6: 83:ed:f0:36:94:7c:3a:56:13:3e:a3:d5:1a:f0:86: 42:2b:91:f0:1f:c1:21:64:0c:5c:b9:87:19:15:6a: 89:c8:8c:24:dc:f1:1e:16:e2:6f:a2:c4:ce:17:e8: bf:89:e5:d8:a4:e9:5f:e5:de:d9:7d:b1:44:17:df: 90:85:8b:74:99:2e:8a:c8:4c:c4:3a:fc:da:73:5e: f9:9a:e7:54:34:08:5d:ad:0b:9d:62:bd:38:7f:8b: c2:c3:1d:41:b5:45:ca:9a:19:eb:97:91:f5:7c:8d: f3:dc:2b:b1:ae:fb:8c:72:69:ef:94:89:d1:dd:45: dd:ac:62:ff:1b:5a:d1:17:25:4f:e5:62:8b:6b:ce: 9e:51:6a:07:70:d2:f8:ae:e3:29:25:58:65:fb:4a: 14:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6C:4D:AE:A7:E7:FF:8D:3E:88:30:66:93:EA:E6:F5:58:CA:55:F2 X509v3 Authority Key Identifier: keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/32xNrqfn_40-iDBmk-rm9VjKVfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.67.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:f4:24:85:09:57:ef:cf:04:3f:99:c9:4c:7c:c1:4c:14:09: 43:e0:f3:c4:3a:a4:04:1c:70:7d:65:b8:66:09:bd:f0:28:c9: 07:0a:99:86:a4:f6:03:4d:92:af:75:de:c7:26:a6:3d:d3:9c: f9:4d:5b:99:1c:d3:d8:3e:ef:42:c3:fa:dd:f9:23:b8:f7:a9: 45:db:51:1e:b4:ab:48:fa:25:5c:b9:06:ba:ab:90:0a:64:96: 52:02:e4:4e:6d:f7:8a:7a:fc:35:81:cd:e7:92:b2:16:cb:0a: 58:64:62:4d:e6:58:1a:62:f9:d8:25:81:22:f7:6f:7b:40:4d: 85:ae:3b:c3:bd:6b:dc:ed:5b:01:12:66:e7:e9:53:1e:6b:8e: aa:1e:b8:61:47:72:47:3e:70:0a:b1:72:ce:58:33:3b:47:d6: 8e:6e:f3:91:f6:97:af:bf:ac:29:01:19:c2:c7:bf:d9:19:98: 19:ff:eb:e6:74:7b:28:f4:3e:1d:f3:46:55:b0:a1:f9:88:b5: 17:62:6e:0e:02:88:b7:04:ab:18:f4:d1:52:2c:14:8d:00:27: 9c:2c:16:dd:d0:38:be:ab:7e:0c:11:b3:39:7a:54:77:99:87: 80:84:2e:b1:98:8c:66:fb:fa:cb:95:1b:e1:0f:00:ae:37:a6: 19:fe:14:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8o7zx8iUhkRo2w96wNmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NmE3N2VlNTJkY2VkNTI3Mzg5M2E3MWI5ZGJjYTNjNmU5 NjQ5NWYwHhcNMjYwMTAyMTgyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjZjNGRhZWE3ZTdmZjhkM2U4ODMwNjY5M2VhZTZmNTU4Y2E1NWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38O60NdW6y1IDevqnd/RlsaFYzwW EpXkAVB3sJW1pI4WqHVnpgnHLI8nj74L/Lu1t5PrXaeBn9zTcQ3lFXec9JYEJtPJ 7thhJXObZh6mzaGwZZuYsD957VALx+md/rrcPuaVlsL4dKaD7fA2lHw6VhM+o9Ua 8IZCK5HwH8EhZAxcuYcZFWqJyIwk3PEeFuJvosTOF+i/ieXYpOlf5d7ZfbFEF9+Q hYt0mS6KyEzEOvzac175mudUNAhdrQudYr04f4vCwx1BtUXKmhnrl5H1fI3z3Cux rvuMcmnvlInR3UXdrGL/G1rRFyVP5WKLa86eUWoHcNL4ruMpJVhl+0oUwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9sTa6n5/+NPogwZpPq5vVYylXyMB8GA1UdIwQY MBaAFHlqd+5S3O1Sc4k6cbnbyjxulklfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgt M2YzMGNhMDg2ODcyLzEvMzJ4TnJxZm5fNDAtaURCbWstcm05VmpLVmZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgtM2YzMGNhMDg2ODcy LzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/hDMA0G CSqGSIb3DQEBCwUAA4IBAQCM9CSFCVfvzwQ/mclMfMFMFAlD4PPEOqQEHHB9Zbhm Cb3wKMkHCpmGpPYDTZKvdd7HJqY905z5TVuZHNPYPu9Cw/rd+SO496lF21EetKtI +iVcuQa6q5AKZJZSAuRObfeKevw1gc3nkrIWywpYZGJN5lgaYvnYJYEi9297QE2F rjvDvWvc7VsBEmbn6VMea46qHrhhR3JHPnAKsXLOWDM7R9aObvOR9pevv6wpARnC x7/ZGZgZ/+vmdHso9D4d80ZVsKH5iLUXYm4OAoi3BKsY9NFSLBSNACecLBbd0Di+ q34MEbM5elR3mYeAhC6xmIxm+/rLlRvhDwCuN6YZ/hR3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:15 2026 by rpki-client