This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/A2iR7wBI4WsWOWxk0yIEXCMnkKY.roa File: A2iR7wBI4WsWOWxk0yIEXCMnkKY.roa (raw, json) Hash identifier: pmcJfdZ5WR1prZx2M0Vbhr4nYAqdO1+A5gfYqn4i1XE= Subject key identifier: 03:68:91:EF:00:48:E1:6B:16:39:6C:64:D3:22:04:5C:23:27:90:A6 Certificate issuer: /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1 Certificate serial: 019B7CEE2724CF0D4D8884A26B9C83CC239C Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/A2iR7wBI4WsWOWxk0yIEXCMnkKY.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214651 IP address blocks: 195.42.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:27:24:cf:0d:4d:88:84:a2:6b:9c:83:cc:23:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=036891ef0048e16b16396c64d322045c232790a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:93:29:e6:db:6a:ae:44:1d:66:46:4d:5a: 39:8a:50:be:74:7d:3e:65:50:da:5f:57:39:eb:8b: b7:5e:5b:cf:a7:51:d6:04:d5:db:65:71:ba:be:53: 2c:d9:42:f6:2f:39:f5:8f:b3:4e:e4:b1:44:28:72: c4:98:03:07:4c:cb:65:4f:bb:6b:bc:8c:f0:db:2f: 5e:00:c8:99:ff:a3:b4:7d:b1:cf:c9:99:f2:3f:1a: 72:0b:46:a7:8f:a8:6b:f7:20:08:f3:54:f0:bd:33: 5b:c8:73:58:29:90:7d:42:ce:c6:93:ec:f0:b6:79: 43:f1:eb:5f:9a:4e:ee:03:74:37:70:e1:62:dc:fa: 24:52:9d:ca:26:6f:49:75:a6:e0:1e:c7:60:72:60: 1f:ab:0b:1e:7f:eb:46:11:4c:71:d1:e4:90:4c:55: b7:35:97:d8:eb:f7:08:93:01:21:7f:60:a8:16:41: ce:ff:0e:ed:1e:57:81:bc:55:16:bc:53:78:39:61: f8:6a:a4:eb:90:2c:01:34:ef:79:bd:3c:0b:f1:82: cb:d9:ed:97:a2:25:42:c7:91:40:1b:d4:96:b6:73: ae:d6:f8:e1:af:62:1c:a7:51:33:86:27:e0:4b:4a: 47:2a:a5:ee:6e:3a:83:e9:30:94:74:9c:39:0a:0f: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:68:91:EF:00:48:E1:6B:16:39:6C:64:D3:22:04:5C:23:27:90:A6 X509v3 Authority Key Identifier: keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/A2iR7wBI4WsWOWxk0yIEXCMnkKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.115.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:97:b8:3e:89:e5:29:9e:25:44:cd:60:9f:ff:43:c0:2b:44: 41:1c:f2:e2:fb:46:5d:01:4b:d3:13:f3:2f:ab:fc:c1:26:bb: 70:b9:35:d4:0c:25:95:67:26:43:d0:9c:1a:29:73:e5:e7:56: 69:98:d8:b0:4d:59:99:d9:b3:89:fa:5a:79:5f:df:f9:73:a9: 37:43:ac:d7:a8:ff:a0:82:1f:bd:97:6f:46:de:01:18:e1:37: 7f:85:cd:4f:46:15:58:72:06:9b:01:02:4a:b2:f6:dd:4d:d6: ce:52:ac:04:55:04:29:dd:79:d4:48:4e:f3:44:72:22:05:9b: 9f:67:95:e4:9c:ed:d3:13:ce:50:78:b8:89:c0:e9:03:76:a1: 0d:79:93:4f:48:74:eb:4f:d6:bf:ab:2f:8f:d8:c8:ad:cc:ab: a7:f6:b8:8f:39:9c:44:25:6f:b6:ec:31:5e:3d:d5:b2:47:6b: d1:fc:bd:22:8a:92:b1:66:84:f0:aa:44:c5:bb:2e:a2:c1:ab: 45:21:75:f6:7e:59:b0:8f:82:e0:c1:c5:5d:2e:ea:2e:7b:67: 9f:59:7e:b5:48:6b:5d:38:7c:bd:c3:4f:85:c4:c4:93:07:e5: a1:22:65:57:ea:f3:c5:5f:ff:a4:06:46:20:e6:77:4c:c7:8a: 43:e0:e8:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ickzw1NiISia5yDzCOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDliNzYyM2EwODU0NTdkOGM3NmI0OTRlY2Q4ODRkOGZl ZmE0ZDEwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzY4OTFlZjAwNDhlMTZiMTYzOTZjNjRkMzIyMDQ1YzIzMjc5MGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw+TKebbaq5EHWZGTVo5ilC+dH0+ ZVDaX1c564u3XlvPp1HWBNXbZXG6vlMs2UL2Lzn1j7NO5LFEKHLEmAMHTMtlT7tr vIzw2y9eAMiZ/6O0fbHPyZnyPxpyC0anj6hr9yAI81TwvTNbyHNYKZB9Qs7Gk+zw tnlD8etfmk7uA3Q3cOFi3PokUp3KJm9JdabgHsdgcmAfqwsef+tGEUxx0eSQTFW3 NZfY6/cIkwEhf2CoFkHO/w7tHleBvFUWvFN4OWH4aqTrkCwBNO95vTwL8YLL2e2X oiVCx5FAG9SWtnOu1vjhr2Icp1EzhifgS0pHKqXubjqD6TCUdJw5Cg9flwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANoke8ASOFrFjlsZNMiBFwjJ5CmMB8GA1UdIwQY MBaAFHoJt2I6CFRX2MdrSU7NiE2P76TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMDcwMzUtNjE5Mi00NWVmLTg4YWQt ZTg5ZTQxYzViMTA2LzEvQTJpUjd3Qkk0V3NXT1d4azB5SUVYQ01ua0tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kMDcwMzUtNjE5Mi00NWVmLTg4YWQtZTg5ZTQxYzViMTA2 LzEvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwypzMA0G CSqGSIb3DQEBCwUAA4IBAQCfl7g+ieUpniVEzWCf/0PAK0RBHPLi+0ZdAUvTE/Mv q/zBJrtwuTXUDCWVZyZD0JwaKXPl51ZpmNiwTVmZ2bOJ+lp5X9/5c6k3Q6zXqP+g gh+9l29G3gEY4Td/hc1PRhVYcgabAQJKsvbdTdbOUqwEVQQp3XnUSE7zRHIiBZuf Z5XknO3TE85QeLiJwOkDdqENeZNPSHTrT9a/qy+P2MitzKun9riPOZxEJW+27DFe PdWyR2vR/L0iipKxZoTwqkTFuy6iwatFIXX2flmwj4LgwcVdLuoue2efWX61SGtd OHy9w0+FxMSTB+WhImVX6vPFX/+kBkYg5ndMx4pD4Ogo -----END CERTIFICATE-----Generated at Wed Jan 21 10:35:10 2026 by rpki-client