This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/CiMQMlsaob6RUwchgCgnZuTjr8s.roa File: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (raw, json) Hash identifier: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y= Subject key identifier: 0A:23:10:32:5B:1A:A1:BE:91:53:07:21:80:28:27:66:E4:E3:AF:CB Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D7EAED75675DAD9AD098B3A734C7 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/CiMQMlsaob6RUwchgCgnZuTjr8s.roa Signing time: Fri 02 Jan 2026 16:18:28 +0000 ROA not before: Fri 02 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 195.39.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d7:ea:ed:75:67:5d:ad:9a:d0:98:b3:a7:34:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a2310325b1aa1be9153072180282766e4e3afcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e3:12:d4:8f:6b:30:9d:e2:1d:40:72:d5:3a: b6:a2:57:56:2d:76:6f:25:04:8d:ef:2d:7d:b3:21: 16:bd:cc:16:84:77:9f:4a:eb:c3:a4:31:9b:03:7f: 3c:89:af:95:46:76:ef:1b:db:6e:d9:76:17:d5:15: 65:f3:b9:18:cc:8a:0a:c7:2c:ae:bd:8d:9d:b3:ad: bf:dc:7b:37:e8:60:09:1d:bf:e5:70:6c:90:19:eb: 1e:c0:39:78:25:80:4f:bf:2c:26:80:b8:80:5f:58: 2f:01:9c:fe:16:72:f9:7e:34:bb:0b:2b:48:27:8f: 97:f1:6c:74:41:e3:7e:42:fc:d4:db:c3:8c:be:ca: 45:3b:02:e3:4f:bb:15:ab:1d:1c:b0:23:ab:66:17: b2:1d:c9:28:94:f7:c7:84:7b:0d:a2:b1:56:6e:d5: d5:56:10:74:a6:da:91:6a:1b:f0:30:20:d3:26:e9: 90:b8:8a:14:6b:67:34:46:99:f2:e7:fd:d4:0f:5b: 39:ae:07:1f:ac:7a:fa:bb:66:73:45:da:df:48:b3: 73:2a:8d:ac:8e:33:12:83:48:10:95:a1:90:d8:03: db:06:d2:78:27:b0:7e:92:14:7a:8f:0a:69:8e:2e: de:01:ea:44:7d:bb:af:a9:b1:4f:9f:3f:92:36:c7: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:23:10:32:5B:1A:A1:BE:91:53:07:21:80:28:27:66:E4:E3:AF:CB X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/CiMQMlsaob6RUwchgCgnZuTjr8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.39.214.0/24 Signature Algorithm: sha256WithRSAEncryption 98:77:25:4e:8d:c1:f5:ef:83:31:77:83:a5:f8:02:49:81:70: 24:c5:6e:ad:58:51:b5:f6:0c:0a:20:2d:c0:5e:09:7c:42:61: 99:8d:b7:af:d5:26:05:60:17:d7:ef:c5:7d:a9:69:22:9e:60: 3a:79:97:9c:3e:6a:dd:7a:60:59:fb:dd:8b:2f:f8:33:0e:a0: f4:50:4f:6d:3d:66:ec:06:4e:8f:45:20:76:f7:99:87:50:a0: 7c:8f:06:48:01:78:e7:c1:72:f3:6c:89:53:83:ac:4f:70:8e: c4:3b:ad:ac:d3:18:57:cd:08:0f:ee:d3:1b:ef:3c:af:03:ab: b8:d9:fe:81:15:1f:03:2f:15:0c:81:ff:c5:5a:dd:09:aa:7e: 7f:69:b4:e5:fd:da:bc:f7:34:cc:25:33:05:0e:67:44:df:77: 1c:62:f8:69:19:8c:6b:01:92:6a:7d:b7:e8:35:5c:32:2a:da: 83:8d:63:d0:69:ee:6b:74:4c:be:b1:c4:7d:6f:c2:68:17:a1: e8:8a:ea:46:88:6e:1b:69:3e:5c:16:60:49:4d:40:df:fe:44: b2:40:00:65:c6:81:16:9b:c9:f5:d5:66:df:09:15:3a:d6:f4: 37:9e:ba:1b:0a:d1:92:7f:f7:57:58:08:9e:3d:16:ea:17:b2: c7:e5:68:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gNfq7XVnXa2a0JizpzTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTIzMTAzMjViMWFhMWJlOTE1MzA3MjE4MDI4Mjc2NmU0ZTNhZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OMS1I9rMJ3iHUBy1Tq2oldWLXZv JQSN7y19syEWvcwWhHefSuvDpDGbA388ia+VRnbvG9tu2XYX1RVl87kYzIoKxyyu vY2ds62/3Hs36GAJHb/lcGyQGesewDl4JYBPvywmgLiAX1gvAZz+FnL5fjS7CytI J4+X8Wx0QeN+QvzU28OMvspFOwLjT7sVqx0csCOrZheyHckolPfHhHsNorFWbtXV VhB0ptqRahvwMCDTJumQuIoUa2c0Rpny5/3UD1s5rgcfrHr6u2ZzRdrfSLNzKo2s jjMSg0gQlaGQ2APbBtJ4J7B+khR6jwppji7eAepEfbuvqbFPnz+SNsfhwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAojEDJbGqG+kVMHIYAoJ2bk46/LMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvQ2lNUU1sc2FvYjZSVXdjaGdDZ25adVRqcjhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyfWMA0G CSqGSIb3DQEBCwUAA4IBAQCYdyVOjcH174Mxd4Ol+AJJgXAkxW6tWFG19gwKIC3A Xgl8QmGZjbev1SYFYBfX78V9qWkinmA6eZecPmrdemBZ+92LL/gzDqD0UE9tPWbs Bk6PRSB295mHUKB8jwZIAXjnwXLzbIlTg6xPcI7EO62s0xhXzQgP7tMb7zyvA6u4 2f6BFR8DLxUMgf/FWt0Jqn5/abTl/dq89zTMJTMFDmdE33ccYvhpGYxrAZJqfbfo NVwyKtqDjWPQae5rdEy+scR9b8JoF6HoiupGiG4baT5cFmBJTUDf/kSyQABlxoEW m8n11WbfCRU61vQ3nrobCtGSf/dXWAiePRbqF7LH5Wju -----END CERTIFICATE-----Generated at Mon Jan 19 10:58:19 2026 by rpki-client