This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/w2P3BcFjrfdxxG4VtHiPJ_laC2M.roa File: w2P3BcFjrfdxxG4VtHiPJ_laC2M.roa (raw, json) Hash identifier: HT9A+onK5acSOVbTEnjJwceH2g7VgQ72G56c2cIYME8= Subject key identifier: C3:63:F7:05:C1:63:AD:F7:71:C4:6E:15:B4:78:8F:27:F9:5A:0B:63 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C72A28DD90D0AB3758A9CCD7D01913 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/w2P3BcFjrfdxxG4VtHiPJ_laC2M.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3200 IP address blocks: 195.209.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2a:28:dd:90:d0:ab:37:58:a9:cc:d7:d0:19:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c363f705c163adf771c46e15b4788f27f95a0b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4f:fc:45:33:f3:ca:ff:60:d6:ce:58:54:16: 10:76:99:b8:de:77:12:03:a1:b2:76:72:d1:2a:4a: f8:f4:0d:58:f4:cf:30:95:a9:23:03:8f:2e:8c:8e: 4c:6e:ed:e4:13:ac:b5:9c:38:a6:f9:84:0d:2c:38: 2b:74:e2:c8:4a:c9:8d:39:c4:db:2e:53:69:97:6d: 15:45:a9:9f:1f:f3:a9:f5:ae:37:e4:6e:85:92:23: f5:fc:f7:a8:3b:80:74:db:7e:46:32:6e:82:2c:9d: ae:d3:c5:98:ed:7b:71:c6:53:9c:ad:87:3c:6e:0d: 3a:3c:80:00:39:07:4c:cd:6a:eb:23:32:a6:89:ba: 8e:ce:b1:30:84:a2:2b:72:cb:2e:f5:49:e6:de:ab: 54:4a:97:5a:40:17:fe:53:d8:b0:29:bb:30:a2:ae: be:6e:d1:16:5c:52:09:9f:1c:77:29:0c:41:37:0a: 33:19:16:d6:84:78:06:8d:7d:45:76:69:cb:2e:aa: 1b:1b:d1:02:d7:5c:fa:43:04:00:77:fc:b9:eb:61: 2b:2f:1b:05:47:6a:69:c3:8b:13:8a:9a:28:47:44: de:28:69:67:58:a1:cf:3f:65:0e:1a:ca:ec:1d:df: 9e:be:2b:bd:57:9d:89:99:45:1f:ca:90:66:79:66: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:63:F7:05:C1:63:AD:F7:71:C4:6E:15:B4:78:8F:27:F9:5A:0B:63 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/w2P3BcFjrfdxxG4VtHiPJ_laC2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.209.138.0/24 Signature Algorithm: sha256WithRSAEncryption 44:4f:6b:8d:4d:7a:c3:d6:e6:cc:1a:0d:f1:1a:90:5e:0f:34: 5e:7d:43:a7:f4:f9:7b:39:a9:01:03:f7:c4:f8:ef:49:53:23: fb:f3:a4:66:38:28:ff:d0:cd:7f:0d:be:06:60:34:85:05:32: 1b:3b:01:28:e1:4f:b3:c2:df:0b:ff:eb:cb:52:30:e1:db:ee: 04:de:d9:45:1a:f6:77:a3:de:fa:59:d3:4a:3c:68:a2:2d:79: 78:dd:c5:76:9b:45:77:47:c6:17:66:ea:0c:05:3f:eb:b3:6f: fa:79:08:2e:9f:41:83:96:cf:74:e8:e6:0a:29:f8:c3:fa:bd: 5c:3f:14:78:ed:16:29:52:67:dd:3e:c5:10:de:c6:49:df:2b: 61:1f:7a:02:01:69:9d:e7:22:88:3b:d6:97:f2:30:0c:51:60: 9a:f6:d9:47:b5:5d:ae:60:db:7e:cb:df:40:70:29:90:11:e0: 20:56:65:00:7b:78:83:40:1e:88:2a:e4:7d:d2:92:ce:c3:a7: 77:57:a9:0b:9b:81:a3:94:e4:c8:6a:97:09:ca:ae:3c:9f:d7: b4:28:b0:a3:cd:42:76:e9:e2:63:8b:09:59:05:d2:49:07:65: 61:63:a7:5c:8d:e2:6f:10:69:32:95:ef:21:79:7b:29:ae:fd: a1:d6:53:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyoo3ZDQqzdYqczX0BkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzYzZjcwNWMxNjNhZGY3NzFjNDZlMTViNDc4OGYyN2Y5NWEwYjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E/8RTPzyv9g1s5YVBYQdpm43ncS A6GydnLRKkr49A1Y9M8wlakjA48ujI5Mbu3kE6y1nDim+YQNLDgrdOLISsmNOcTb LlNpl20VRamfH/Op9a435G6FkiP1/PeoO4B0235GMm6CLJ2u08WY7XtxxlOcrYc8 bg06PIAAOQdMzWrrIzKmibqOzrEwhKIrcssu9Unm3qtUSpdaQBf+U9iwKbswoq6+ btEWXFIJnxx3KQxBNwozGRbWhHgGjX1FdmnLLqobG9EC11z6QwQAd/y562ErLxsF R2ppw4sTipooR0TeKGlnWKHPP2UOGsrsHd+eviu9V52JmUUfypBmeWaRHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNj9wXBY633ccRuFbR4jyf5WgtjMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvdzJQM0JjRmpyZmR4eEc0VnRIaVBKX2xhQzJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9GKMA0G CSqGSIb3DQEBCwUAA4IBAQBET2uNTXrD1ubMGg3xGpBeDzRefUOn9Pl7OakBA/fE +O9JUyP786RmOCj/0M1/Db4GYDSFBTIbOwEo4U+zwt8L/+vLUjDh2+4E3tlFGvZ3 o976WdNKPGiiLXl43cV2m0V3R8YXZuoMBT/rs2/6eQgun0GDls906OYKKfjD+r1c PxR47RYpUmfdPsUQ3sZJ3ythH3oCAWmd5yKIO9aX8jAMUWCa9tlHtV2uYNt+y99A cCmQEeAgVmUAe3iDQB6IKuR90pLOw6d3V6kLm4GjlOTIapcJyq48n9e0KLCjzUJ2 6eJjiwlZBdJJB2VhY6dcjeJvEGkyle8heXsprv2h1lPl -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:16 2026 by rpki-client