This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/gOX8D8p806A5CJ7mpndk-EXr948.roa File: gOX8D8p806A5CJ7mpndk-EXr948.roa (raw, json) Hash identifier: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E= Subject key identifier: 80:E5:FC:0F:CA:7C:D3:A0:39:08:9E:E6:A6:77:64:F8:45:EB:F7:8F Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa Certificate serial: 019B79ECCBDBE06446AE6185BD186D7C1047 Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/gOX8D8p806A5CJ7mpndk-EXr948.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 195.234.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cb:db:e0:64:46:ae:61:85:bd:18:6d:7c:10:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80e5fc0fca7cd3a039089ee6a67764f845ebf78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:e0:38:38:59:de:f9:35:b8:0b:ad:e8:23: 55:54:97:03:f9:3e:b1:06:52:5a:a2:54:07:77:22: 08:9f:9a:4e:17:f0:9a:e2:39:c8:34:37:fa:98:cb: 5f:38:17:98:29:ea:ab:bb:6a:e1:c3:4d:6c:e7:23: e9:55:0b:e4:c3:f9:67:c0:c9:84:2f:52:d8:99:dd: a4:5d:a4:a3:ef:27:67:65:40:5b:22:ee:51:52:b9: 2c:32:7d:7c:e7:e2:89:88:2e:9c:17:fe:7e:73:fe: 86:06:bb:c8:74:88:35:cf:76:b1:53:a9:45:42:ad: d8:f7:94:65:e5:90:18:7d:7d:42:28:c8:56:e3:30: 4f:a6:b1:81:21:f6:38:e3:a8:56:8f:1e:1a:0d:90: ec:e5:a1:17:b6:ac:59:2a:55:ba:ea:a8:74:df:57: ce:4c:9a:94:80:ca:bc:5c:fc:a4:41:3e:1b:69:25: 2d:37:a6:7c:c7:b2:04:3a:5e:a4:db:c3:60:c3:6c: 95:53:4c:73:fd:2d:36:17:c3:d8:99:93:d8:8f:f1: 14:51:09:3f:ad:79:2a:04:48:91:97:40:37:94:f0: f4:a6:d7:2b:e5:72:44:b4:db:c3:e9:84:36:74:e8: 2c:37:a2:e2:eb:36:69:20:04:0b:2b:87:e5:43:98: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E5:FC:0F:CA:7C:D3:A0:39:08:9E:E6:A6:77:64:F8:45:EB:F7:8F X509v3 Authority Key Identifier: keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/gOX8D8p806A5CJ7mpndk-EXr948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.41.0/24 Signature Algorithm: sha256WithRSAEncryption 83:58:8b:80:df:67:47:28:d6:9c:8f:2a:1b:0a:38:49:65:8e: 22:ac:86:fd:8e:4a:67:0f:3f:6a:d8:06:16:a6:8d:20:74:69: 01:a5:1c:ae:5c:f5:e4:d2:85:2d:b2:a9:04:24:37:a9:1f:d6: 15:19:6f:27:c0:8c:cd:e4:7d:2a:b2:f9:f4:71:1f:c1:f0:48: 2e:d6:17:58:78:2a:f8:e3:2e:cc:3d:c4:b1:f9:73:8a:0a:fc: 78:1c:86:bb:23:5e:22:a2:4e:83:28:9e:db:93:50:1a:9d:c7: ef:25:4d:3c:a5:56:3a:aa:ae:7b:aa:a1:b6:fa:26:dd:3d:be: 75:2a:37:8a:0d:15:aa:a7:92:57:61:b0:6b:22:08:97:f4:e8: ac:d0:e0:ef:7d:ef:83:ff:a5:82:a8:7e:7b:af:63:1d:63:e6: e2:b5:f9:5f:4c:e6:9e:62:e6:d6:85:bf:90:3b:8d:c4:78:d5: a1:49:95:4f:22:92:0c:43:2b:96:d2:5b:cb:4a:e5:65:2b:d2: 89:5b:63:3d:31:4f:3f:95:fa:3f:09:d2:50:30:df:85:29:ba: 95:97:a7:89:13:e4:3b:2e:13:aa:7b:81:1b:42:ec:47:16:80: 55:f3:c2:6f:b2:45:78:73:6e:cc:64:bb:70:27:fc:59:17:ac: 35:a0:aa:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Mvb4GRGrmGFvRhtfBBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTBiYzNlMzcxMTQwYjQyYTIxZDY5N2Q4MzAwZDk0MTBh MjQ5YWEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGU1ZmMwZmNhN2NkM2EwMzkwODllZTZhNjc3NjRmODQ1ZWJmNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+/gODhZ3vk1uAut6CNVVJcD+T6x BlJaolQHdyIIn5pOF/Ca4jnINDf6mMtfOBeYKeqru2rhw01s5yPpVQvkw/lnwMmE L1LYmd2kXaSj7ydnZUBbIu5RUrksMn185+KJiC6cF/5+c/6GBrvIdIg1z3axU6lF Qq3Y95Rl5ZAYfX1CKMhW4zBPprGBIfY446hWjx4aDZDs5aEXtqxZKlW66qh031fO TJqUgMq8XPykQT4baSUtN6Z8x7IEOl6k28Ngw2yVU0xz/S02F8PYmZPYj/EUUQk/ rXkqBEiRl0A3lPD0ptcr5XJEtNvD6YQ2dOgsN6Li6zZpIAQLK4flQ5jMJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDl/A/KfNOgOQie5qZ3ZPhF6/ePMB8GA1UdIwQY MBaAFL2QvD43EUC0KiHWl9gwDZQQokmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODct ZmViMGU1MTVjMDJjLzEvZ09YOEQ4cDgwNkE1Q0o3bXBuZGstRVhyOTQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODctZmViMGU1MTVjMDJj LzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+opMA0G CSqGSIb3DQEBCwUAA4IBAQCDWIuA32dHKNacjyobCjhJZY4irIb9jkpnDz9q2AYW po0gdGkBpRyuXPXk0oUtsqkEJDepH9YVGW8nwIzN5H0qsvn0cR/B8Egu1hdYeCr4 4y7MPcSx+XOKCvx4HIa7I14iok6DKJ7bk1AancfvJU08pVY6qq57qqG2+ibdPb51 KjeKDRWqp5JXYbBrIgiX9Ois0ODvfe+D/6WCqH57r2MdY+bitflfTOaeYubWhb+Q O43EeNWhSZVPIpIMQyuW0lvLSuVlK9KJW2M9MU8/lfo/CdJQMN+FKbqVl6eJE+Q7 LhOqe4EbQuxHFoBV88JvskV4c27MZLtwJ/xZF6w1oKrl -----END CERTIFICATE-----Generated at Wed Jan 21 06:08:44 2026 by rpki-client