This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/IMJ8PXjvHYp3sYM7pTt44j4iGz0.roa File: IMJ8PXjvHYp3sYM7pTt44j4iGz0.roa (raw, json) Hash identifier: LK6FVEoC2H6z0sxVVFHHBKDtB1R0GqA07BwIefhcGkk= Subject key identifier: 20:C2:7C:3D:78:EF:1D:8A:77:B1:83:3B:A5:3B:78:E2:3E:22:1B:3D Certificate issuer: /CN=91521bd62c46e9943ec80cb774126d1da8393f3a Certificate serial: 019B32E5579A2746657678310451F1AEA9B0 Authority key identifier: 91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/IMJ8PXjvHYp3sYM7pTt44j4iGz0.roa Signing time: Thu 18 Dec 2025 19:17:29 +0000 ROA not before: Thu 18 Dec 2025 19:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51189 IP address blocks: 195.54.44.0/23 maxlen: 23 195.54.44.0/24 maxlen: 24 195.54.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:e5:57:9a:27:46:65:76:78:31:04:51:f1:ae:a9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91521bd62c46e9943ec80cb774126d1da8393f3a Validity Not Before: Dec 18 19:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=20c27c3d78ef1d8a77b1833ba53b78e23e221b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:c4:2a:ae:4b:51:51:21:b5:17:42:88:1f: 54:5f:5c:e8:f1:23:52:46:e7:46:62:09:bb:dd:b8: ed:6b:c7:f1:c5:1f:ba:aa:92:71:35:f1:13:66:bc: 88:6a:7f:f0:72:67:71:7b:f7:43:66:a2:4b:53:8e: 75:f5:0b:3e:e1:3a:f8:9f:c7:74:3c:fc:67:be:46: 6f:57:c0:0d:a0:09:40:34:b8:73:f9:27:82:a0:33: 92:f1:ad:9a:70:92:c9:93:88:a4:13:d6:b0:69:e2: 3f:67:b8:5c:81:84:1e:24:27:c2:f8:a9:ea:52:e9: 5d:26:73:4b:e5:90:8e:a4:6d:0a:0e:b6:9c:a9:12: d4:8c:dc:c1:e7:8d:39:36:48:21:f6:40:16:d6:2d: 24:47:fb:23:8a:3a:8a:98:d1:19:76:6d:1c:29:53: 49:83:1d:5a:95:e0:cd:99:a6:38:04:aa:08:92:0a: 21:0b:34:29:5a:a7:e7:30:a0:ab:02:a5:a6:5e:3b: da:2c:c1:c3:10:98:14:06:63:b8:a1:ff:96:bc:59: be:66:1a:95:5c:32:20:56:06:6e:ae:43:c0:a3:3b: 51:68:f2:a5:cb:0a:8f:69:63:ea:b5:43:a0:98:a2: 4d:be:95:8f:ae:03:d0:7a:f4:c9:e5:0d:b8:63:1d: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C2:7C:3D:78:EF:1D:8A:77:B1:83:3B:A5:3B:78:E2:3E:22:1B:3D X509v3 Authority Key Identifier: keyid:91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/IMJ8PXjvHYp3sYM7pTt44j4iGz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.44.0/23 Signature Algorithm: sha256WithRSAEncryption 55:d1:7b:23:74:7b:b7:c7:82:e8:55:bb:bf:fd:9c:a5:e5:f0: 11:c1:b0:97:f0:3e:31:65:cd:20:50:8d:b8:ea:df:96:ed:7d: ad:a5:03:0c:48:e9:20:de:a8:e4:db:29:f0:88:ef:e3:9c:09: f5:1f:b6:d3:55:3f:c0:a1:2f:37:3f:2b:1c:f1:46:7a:ea:30: a7:7d:1c:83:65:b4:96:8d:51:17:af:84:c0:f9:c1:27:7d:3e: c4:c7:7f:a3:fc:53:9d:5e:1a:0d:fc:f8:db:da:f8:29:c9:31: 88:09:81:23:01:6d:12:21:50:36:d8:b1:6a:0d:4a:a8:9d:33: 2c:3e:35:81:c2:75:bb:75:77:89:d2:40:91:80:23:40:83:eb: 5c:c9:c8:4a:bd:c3:e6:f3:32:ce:43:8f:be:9b:d1:bc:b7:31: 77:23:52:a2:19:3e:d9:3b:95:48:fa:74:12:34:22:0c:0e:3e: f4:c4:8b:13:5e:af:eb:ce:ba:99:58:a1:f7:34:f7:d9:a9:56: b0:3f:28:00:4b:ca:0f:77:a9:11:89:fa:cd:f9:29:d3:a1:d5: 93:58:a6:5b:bd:91:4a:2d:56:16:51:5a:57:6c:6d:19:cc:23: 22:c1:08:26:c9:46:d2:46:0e:5d:e7:d3:82:4e:11:8e:3c:dc: 3e:95:f5:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsy5VeaJ0ZldngxBFHxrqmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNTIxYmQ2MmM0NmU5OTQzZWM4MGNiNzc0MTI2ZDFkYTgz OTNmM2EwHhcNMjUxMjE4MTkxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGMyN2MzZDc4ZWYxZDhhNzdiMTgzM2JhNTNiNzhlMjNlMjIxYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh77EKq5LUVEhtRdCiB9UX1zo8SNS RudGYgm73bjta8fxxR+6qpJxNfETZryIan/wcmdxe/dDZqJLU4519Qs+4Tr4n8d0 PPxnvkZvV8ANoAlANLhz+SeCoDOS8a2acJLJk4ikE9awaeI/Z7hcgYQeJCfC+Knq UuldJnNL5ZCOpG0KDracqRLUjNzB5405Nkgh9kAW1i0kR/sjijqKmNEZdm0cKVNJ gx1aleDNmaY4BKoIkgohCzQpWqfnMKCrAqWmXjvaLMHDEJgUBmO4of+WvFm+ZhqV XDIgVgZurkPAoztRaPKlywqPaWPqtUOgmKJNvpWPrgPQevTJ5Q24Yx1hvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCDCfD147x2Kd7GDO6U7eOI+Ihs9MB8GA1UdIwQY MBaAFJFSG9YsRumUPsgMt3QSbR2oOT86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ZJYjFpeEc2WlEteUF5M2RCSnRIYWc1UHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yMDhjMTUtYmYwZC00ZmJjLWEwZTYt YTM5M2RjN2RlYzU4LzEvSU1KOFBYanZIWXAzc1lNN3BUdDQ0ajRpR3owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yMDhjMTUtYmYwZC00ZmJjLWEwZTYtYTM5M2RjN2RlYzU4 LzEva1ZJYjFpeEc2WlEteUF5M2RCSnRIYWc1UHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzYsMA0G CSqGSIb3DQEBCwUAA4IBAQBV0XsjdHu3x4LoVbu//Zyl5fARwbCX8D4xZc0gUI24 6t+W7X2tpQMMSOkg3qjk2ynwiO/jnAn1H7bTVT/AoS83Pysc8UZ66jCnfRyDZbSW jVEXr4TA+cEnfT7Ex3+j/FOdXhoN/Pjb2vgpyTGICYEjAW0SIVA22LFqDUqonTMs PjWBwnW7dXeJ0kCRgCNAg+tcychKvcPm8zLOQ4++m9G8tzF3I1KiGT7ZO5VI+nQS NCIMDj70xIsTXq/rzrqZWKH3NPfZqVawPygAS8oPd6kRifrN+SnTodWTWKZbvZFK LVYWUVpXbG0ZzCMiwQgmyUbSRg5d59OCThGOPNw+lfWx -----END CERTIFICATE-----Generated at Fri Dec 19 13:54:57 2025 by rpki-client