This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/VOdAaoK5rrL2aiIOKWb-yCi1KB0.roa File: VOdAaoK5rrL2aiIOKWb-yCi1KB0.roa (raw, json) Hash identifier: 3z55MUcCGHXgB/Y4YMi8pDAR10sJJt845t8wllcRG2A= Subject key identifier: 54:E7:40:6A:82:B9:AE:B2:F6:6A:22:0E:29:66:FE:C8:28:B5:28:1D Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b Certificate serial: 019B7CECE804275DB6E5A0C88347907941D8 Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/VOdAaoK5rrL2aiIOKWb-yCi1KB0.roa Signing time: Fri 02 Jan 2026 04:17:39 +0000 ROA not before: Fri 02 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25326 IP address blocks: 195.234.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e8:04:27:5d:b6:e5:a0:c8:83:47:90:79:41:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54e7406a82b9aeb2f66a220e2966fec828b5281d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:1e:08:85:e9:bc:d8:2e:f7:07:73:55:b5: 62:9c:6a:dc:65:80:4a:89:6b:37:2b:f0:17:60:f8: 40:93:a0:df:5c:ec:e4:b2:c9:5c:d4:62:8b:c0:80: 4c:74:d0:d1:8d:1a:15:4c:21:0d:10:87:fa:d0:e5: f7:2e:82:af:79:75:b1:a7:02:cd:f4:a1:f6:a1:c9: 6b:f8:32:f3:a3:e8:cd:a0:65:14:1d:12:b1:c7:47: 04:77:bb:72:b0:51:d5:74:da:7d:5b:5d:19:f0:55: 7e:74:8e:ba:48:91:4f:ed:5e:a9:8d:87:5d:4d:b8: d7:e8:a3:c0:67:3e:ec:93:22:8a:93:50:76:f8:2d: cc:76:98:58:ff:95:6c:7c:c2:fe:c3:53:49:d1:42: b9:ec:fb:35:5d:de:ed:39:e1:9a:0d:17:bd:c7:ef: a2:79:65:fd:18:06:63:51:5c:be:1e:47:bf:74:fd: 4e:23:d1:7a:b4:a8:7b:01:d2:86:66:05:b0:aa:49: 2e:06:13:b7:3b:bb:ba:e1:52:14:31:b2:31:1b:d8: eb:ae:0a:06:32:a1:db:ef:ed:89:36:d6:a9:26:f6: bb:b4:a6:cc:63:24:03:b3:c2:2e:f3:1c:04:38:49: bd:25:e5:ef:41:a5:81:af:f8:00:e6:38:38:0c:17: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E7:40:6A:82:B9:AE:B2:F6:6A:22:0E:29:66:FE:C8:28:B5:28:1D X509v3 Authority Key Identifier: keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/VOdAaoK5rrL2aiIOKWb-yCi1KB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.30.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:12:d6:15:63:97:2d:88:94:85:f0:23:ae:27:44:7c:5c:3c: e4:f0:0a:16:37:e7:7f:91:64:8f:dd:5f:59:71:82:81:c7:ff: 56:11:53:59:fe:ea:26:65:1f:57:d8:15:46:56:27:e8:99:d5: 6d:a5:0a:dd:d6:dc:79:a9:a0:d2:06:d8:80:8f:e1:5f:e0:62: f6:92:d4:e0:44:04:d8:57:f0:c2:39:72:04:09:51:21:7a:47: 07:7a:66:ca:aa:30:3e:e4:bb:e5:1c:d3:3e:49:a8:e3:0e:72: b1:db:9b:62:56:c0:a2:eb:ed:f8:ab:53:3e:7a:62:4c:5c:ab: 19:64:23:59:18:29:43:41:0d:90:9e:72:53:94:68:a9:8f:aa: 0c:11:d0:a4:71:27:50:df:2d:9d:8a:80:01:dc:9b:23:43:ae: b3:dd:de:9e:41:97:d9:09:f1:86:c4:fe:bf:df:0c:64:02:ae: b5:18:f4:ac:4f:3f:71:45:c9:fd:2b:ba:d4:b2:da:09:b0:3b: 69:bf:82:0c:99:56:9a:46:e6:a7:35:48:d1:65:6f:b4:90:55: 4b:fa:43:37:e9:4d:e0:10:0f:96:4b:fb:e4:1f:20:65:45:ca: 4c:1a:48:c0:c5:14:12:c4:ce:41:4b:38:cb:05:43:14:07:73: df:0b:57:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87OgEJ1225aDIg0eQeUHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTZhNDQzNzRmZWE1ZWM5OWYxMGZiOGQ2YzdkOGVmZTJh MzM0OGIwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGU3NDA2YTgyYjlhZWIyZjY2YTIyMGUyOTY2ZmVjODI4YjUyODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4keCIXpvNgu9wdzVbVinGrcZYBK iWs3K/AXYPhAk6DfXOzksslc1GKLwIBMdNDRjRoVTCENEIf60OX3LoKveXWxpwLN 9KH2oclr+DLzo+jNoGUUHRKxx0cEd7tysFHVdNp9W10Z8FV+dI66SJFP7V6pjYdd TbjX6KPAZz7skyKKk1B2+C3MdphY/5VsfML+w1NJ0UK57Ps1Xd7tOeGaDRe9x++i eWX9GAZjUVy+Hke/dP1OI9F6tKh7AdKGZgWwqkkuBhO3O7u64VIUMbIxG9jrrgoG MqHb7+2JNtapJva7tKbMYyQDs8Iu8xwEOEm9JeXvQaWBr/gA5jg4DBf7LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTnQGqCua6y9moiDilm/sgotSgdMB8GA1UdIwQY MBaAFEcWpEN0/qXsmfEPuNbH2O/iozSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQt NWQ0MDEwOTAwZTg2LzEvVk9kQWFvSzVyckwyYWlJT0tXYi15Q2kxS0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQtNWQ0MDEwOTAwZTg2 LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw+oeMA0G CSqGSIb3DQEBCwUAA4IBAQBeEtYVY5ctiJSF8COuJ0R8XDzk8AoWN+d/kWSP3V9Z cYKBx/9WEVNZ/uomZR9X2BVGVifomdVtpQrd1tx5qaDSBtiAj+Ff4GL2ktTgRATY V/DCOXIECVEhekcHembKqjA+5LvlHNM+SajjDnKx25tiVsCi6+34q1M+emJMXKsZ ZCNZGClDQQ2QnnJTlGipj6oMEdCkcSdQ3y2dioAB3JsjQ66z3d6eQZfZCfGGxP6/ 3wxkAq61GPSsTz9xRcn9K7rUstoJsDtpv4IMmVaaRuanNUjRZW+0kFVL+kM36U3g EA+WS/vkHyBlRcpMGkjAxRQSxM5BSzjLBUMUB3PfC1d1 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:43 2026 by rpki-client