This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/ps8p5Yxss_yS4gX9BmkqFddX40Q.roa File: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (raw, json) Hash identifier: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0= Subject key identifier: A6:CF:29:E5:8C:6C:B3:FC:92:E2:05:FD:06:69:2A:15:D7:57:E3:44 Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66 Certificate serial: 019B77591D5D9AE3413E28B21D34A4D0F6BB Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/ps8p5Yxss_yS4gX9BmkqFddX40Q.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 195.190.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1d:5d:9a:e3:41:3e:28:b2:1d:34:a4:d0:f6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6cf29e58c6cb3fc92e205fd06692a15d757e344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:14:81:47:49:b5:89:26:a6:93:91:04:78: 01:46:82:f6:75:57:73:b2:7c:a7:66:f8:ed:61:6d: 77:e5:14:15:5a:34:a3:06:d0:8e:10:77:da:7e:3f: f3:51:f4:0a:44:f2:ee:e0:1d:6c:b2:9e:ca:ac:ea: 45:41:5f:2b:11:9f:63:85:75:2c:ae:d8:3f:84:e3: fb:c4:29:83:76:9a:58:a5:61:7a:bd:ff:92:04:91: 57:aa:e4:74:45:55:d0:fe:e1:a7:1d:ce:c6:f2:31: c9:17:8c:23:19:1d:e9:fa:6b:62:8e:3d:f4:d2:62: c4:a0:e2:30:97:97:6e:4b:b9:24:4f:6c:8d:2a:01: 09:69:4e:10:16:89:6e:b8:26:31:f5:98:85:e6:51: 9f:be:98:07:27:ea:9f:a8:00:4d:1e:d9:3d:9a:9a: 20:32:e9:f7:ed:2e:fb:e7:67:28:79:c9:a8:bf:5c: 15:2f:31:c3:d2:5e:cf:73:c2:08:62:cc:79:e8:59: f4:e9:7c:36:83:09:a5:4e:24:8f:21:43:59:85:7f: 40:c2:38:eb:ea:c8:95:ef:e2:af:db:66:c7:16:60: fc:82:80:37:de:2a:5f:b5:50:34:3a:65:84:e5:d9: 5c:12:7e:76:e9:1a:a6:fe:d8:e3:db:c7:fc:09:bc: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CF:29:E5:8C:6C:B3:FC:92:E2:05:FD:06:69:2A:15:D7:57:E3:44 X509v3 Authority Key Identifier: keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/ps8p5Yxss_yS4gX9BmkqFddX40Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.146.0/24 Signature Algorithm: sha256WithRSAEncryption bc:c3:0e:c2:bd:a1:c2:fb:17:b2:c6:94:de:47:02:7e:d4:4d: 62:d4:db:85:a9:6f:db:8e:85:c4:14:ed:36:c4:69:cb:67:5b: 72:c4:5b:07:b4:d1:31:a8:c1:6a:6b:e7:4f:7f:fe:c1:b5:38: c5:e1:c4:ed:78:c3:69:10:d6:df:0e:9a:38:8e:c5:a8:7c:cd: ce:a8:f0:34:ef:da:d4:44:da:bb:ae:01:52:b3:7d:8d:b9:9c: c7:a4:a5:fd:46:14:10:1d:de:68:0a:b9:d7:88:ae:e8:61:d1: 45:e3:0b:97:8c:58:2d:47:8a:78:2d:09:78:2c:ae:79:11:68: 52:09:e8:c3:20:ec:66:94:ec:cc:41:a5:18:ab:d2:f7:d7:9b: b8:b2:da:05:fa:d3:77:ec:6f:75:d9:dc:87:6a:ee:d7:c9:8d: 80:17:2f:e8:78:05:10:e0:d2:46:48:4d:17:4a:dc:15:de:93: 08:85:c7:c2:fe:3e:9b:0f:61:da:3a:cb:3c:db:01:ee:0e:13: bb:7e:a1:2b:22:b9:a4:a8:ae:21:97:5d:50:aa:f1:2d:b5:58: e1:f1:c0:27:ed:5c:3c:c5:03:9e:d5:dd:eb:aa:96:45:7c:90: 4f:dc:56:29:f2:27:bf:67:8b:e3:6f:16:8c:99:85:b7:2f:b3: c7:de:13:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WR1dmuNBPiiyHTSk0Pa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez OGRjNjYwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmNmMjllNThjNmNiM2ZjOTJlMjA1ZmQwNjY5MmExNWQ3NTdlMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuEUgUdJtYkmppORBHgBRoL2dVdz snynZvjtYW135RQVWjSjBtCOEHfafj/zUfQKRPLu4B1ssp7KrOpFQV8rEZ9jhXUs rtg/hOP7xCmDdppYpWF6vf+SBJFXquR0RVXQ/uGnHc7G8jHJF4wjGR3p+mtijj30 0mLEoOIwl5duS7kkT2yNKgEJaU4QFoluuCYx9ZiF5lGfvpgHJ+qfqABNHtk9mpog Mun37S7752coecmov1wVLzHD0l7Pc8IIYsx56Fn06Xw2gwmlTiSPIUNZhX9Awjjr 6siV7+Kv22bHFmD8goA33ipftVA0OmWE5dlcEn526Rqm/tjj28f8CbwpkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKbPKeWMbLP8kuIF/QZpKhXXV+NEMB8GA1UdIwQY MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt YWMyYWU0ODM5NTVlLzEvcHM4cDVZeHNzX3lTNGdYOUJta3FGZGRYNDBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw76SMA0G CSqGSIb3DQEBCwUAA4IBAQC8ww7CvaHC+xeyxpTeRwJ+1E1i1NuFqW/bjoXEFO02 xGnLZ1tyxFsHtNExqMFqa+dPf/7BtTjF4cTteMNpENbfDpo4jsWofM3OqPA079rU RNq7rgFSs32NuZzHpKX9RhQQHd5oCrnXiK7oYdFF4wuXjFgtR4p4LQl4LK55EWhS CejDIOxmlOzMQaUYq9L315u4stoF+tN37G912dyHau7XyY2AFy/oeAUQ4NJGSE0X StwV3pMIhcfC/j6bD2HaOss82wHuDhO7fqErIrmkqK4hl11QqvEttVjh8cAn7Vw8 xQOe1d3rqpZFfJBP3FYp8ie/Z4vjbxaMmYW3L7PH3hNB -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:32 2026 by rpki-client