This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/1WBi4O0mvLv4eBmlkjen331LEKc.roa File: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (raw, json) Hash identifier: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc= Subject key identifier: D5:60:62:E0:ED:26:BC:BB:F8:78:19:A5:92:37:A7:DF:7D:4B:10:A7 Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe Certificate serial: 019B7CED214F6C1E0650952B866C097ECF62 Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/1WBi4O0mvLv4eBmlkjen331LEKc.roa Signing time: Fri 02 Jan 2026 04:17:53 +0000 ROA not before: Fri 02 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56798 IP address blocks: 195.8.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:21:4f:6c:1e:06:50:95:2b:86:6c:09:7e:cf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe Validity Not Before: Jan 2 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d56062e0ed26bcbbf87819a59237a7df7d4b10a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:09:12:34:11:5d:a1:fe:93:9c:10:fb:1a: 76:8f:37:72:d0:b8:04:a4:15:d4:70:08:28:2a:ec: b3:88:89:00:47:77:bc:92:21:61:48:16:60:30:1a: 5a:90:02:30:54:00:eb:75:fe:46:10:6d:27:1c:e2: bc:b9:eb:78:e3:ef:a6:92:06:fe:8c:4b:3d:4e:44: 69:51:60:08:01:b2:60:c2:2f:b1:65:7b:9e:33:4f: 4e:e5:64:73:50:b0:ae:0d:31:8c:58:b5:50:7c:86: dc:0c:31:80:4a:8a:bd:18:f9:02:2f:87:25:ff:65: b4:e5:5f:6e:9c:da:18:dc:5e:1f:6e:9c:64:31:13: 1f:20:34:13:1f:ba:7c:ce:c1:e9:3a:dc:a7:0c:fd: 90:36:c0:87:30:8b:5a:14:22:3d:40:a8:f6:d0:5c: be:c7:2a:94:c8:7e:a0:27:82:0b:6e:f9:da:32:df: a4:27:19:fc:f4:15:73:b9:c5:3a:e5:3a:42:43:84: f9:0a:c0:35:71:4d:07:59:8c:04:c5:f2:b9:4f:16: e5:c2:2f:b9:ac:a9:f7:c3:9c:22:43:af:29:7a:9b: 5f:58:d5:96:ca:52:7d:a3:7e:e6:6e:1a:28:11:29: 2e:c6:0a:ac:94:90:34:73:ba:41:27:ac:24:52:6c: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:60:62:E0:ED:26:BC:BB:F8:78:19:A5:92:37:A7:DF:7D:4B:10:A7 X509v3 Authority Key Identifier: keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/1WBi4O0mvLv4eBmlkjen331LEKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.203.0/24 Signature Algorithm: sha256WithRSAEncryption 00:ea:ad:d1:b9:ab:48:d8:85:36:44:c3:f6:d7:3d:a3:64:bb: b7:1c:a9:f3:14:aa:ee:31:c5:56:66:ee:60:e1:d5:3b:6c:5a: 8a:3d:f8:bc:0e:f1:b2:00:ff:72:88:7b:ba:81:7e:a0:8a:30: 19:c4:31:5c:a1:1e:c6:ec:20:24:05:c6:31:10:76:65:77:26: d0:a9:18:0f:84:3a:25:36:e7:45:1f:16:c7:78:30:98:de:f3: 2f:96:f1:98:a4:ee:95:6b:17:58:ce:36:2c:84:cc:19:02:a7: 3d:d3:e7:fa:fb:56:f4:d4:f8:95:1a:f9:61:29:6e:42:b5:a1: cc:18:6f:c9:ad:0d:6e:4c:c7:69:91:26:6b:7e:25:f5:49:38: ba:01:5b:b9:21:80:de:81:58:e4:90:26:78:67:b1:07:06:a6: e0:85:82:09:4b:59:41:b6:0d:19:f5:2c:1d:01:fb:b8:4e:67: ef:ee:fe:a6:91:c2:34:0f:73:9a:4b:33:5c:aa:6b:b1:aa:42: 67:7e:29:b5:63:bf:21:8e:4a:2b:ec:c1:ed:46:dc:d0:67:d2: 88:fa:5f:91:94:e6:80:ad:3d:6c:3e:fd:ec:a8:ba:0b:1b:74: 6d:69:58:dc:59:4b:22:c5:de:21:a9:92:76:a0:f7:17:c6:9e: c8:ea:9d:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87SFPbB4GUJUrhmwJfs9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMTM0M2E4ZWU5MmFlYzM2NTEwZGU5NzM4MmRjNmE0MjA4 ODhlZmUwHhcNMjYwMTAyMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTYwNjJlMGVkMjZiY2JiZjg3ODE5YTU5MjM3YTdkZjdkNGIxMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq8JEjQRXaH+k5wQ+xp2jzdy0LgE pBXUcAgoKuyziIkAR3e8kiFhSBZgMBpakAIwVADrdf5GEG0nHOK8uet44++mkgb+ jEs9TkRpUWAIAbJgwi+xZXueM09O5WRzULCuDTGMWLVQfIbcDDGASoq9GPkCL4cl /2W05V9unNoY3F4fbpxkMRMfIDQTH7p8zsHpOtynDP2QNsCHMItaFCI9QKj20Fy+ xyqUyH6gJ4ILbvnaMt+kJxn89BVzucU65TpCQ4T5CsA1cU0HWYwExfK5Txblwi+5 rKn3w5wiQ68peptfWNWWylJ9o37mbhooESkuxgqslJA0c7pBJ6wkUmyrGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNVgYuDtJry7+HgZpZI3p999SxCnMB8GA1UdIwQY MBaAFGETQ6jukq7DZRDelzgtxqQgiI7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85YTAxMTItYzY5YS00NTJhLTk1YjUt NzBiOTc3ZTc0YTU3LzEvMVdCaTRPMG12THY0ZUJtbGtqZW4zMzFMRUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS85YTAxMTItYzY5YS00NTJhLTk1YjUtNzBiOTc3ZTc0YTU3 LzEvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjLMA0G CSqGSIb3DQEBCwUAA4IBAQAA6q3RuatI2IU2RMP21z2jZLu3HKnzFKruMcVWZu5g 4dU7bFqKPfi8DvGyAP9yiHu6gX6gijAZxDFcoR7G7CAkBcYxEHZldybQqRgPhDol NudFHxbHeDCY3vMvlvGYpO6VaxdYzjYshMwZAqc90+f6+1b01PiVGvlhKW5CtaHM GG/JrQ1uTMdpkSZrfiX1STi6AVu5IYDegVjkkCZ4Z7EHBqbghYIJS1lBtg0Z9Swd Afu4Tmfv7v6mkcI0D3OaSzNcqmuxqkJnfim1Y78hjkor7MHtRtzQZ9KI+l+RlOaA rT1sPv3sqLoLG3RtaVjcWUsixd4hqZJ2oPcXxp7I6p2J -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client