This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa File: I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa (raw, json) Hash identifier: P/ftwFa1S2VKjprGcKvJDhqUROD7iDtwsuNt3XMlEQ4= Subject key identifier: 23:45:19:A5:66:E8:73:97:10:D0:B1:A0:E8:F3:57:A8:5E:A5:48:1C Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744 Certificate serial: 019B7BA53DBE6C45A07119D65487896DC74A Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47336 IP address blocks: 195.182.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3d:be:6c:45:a0:71:19:d6:54:87:89:6d:c7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=234519a566e8739710d0b1a0e8f357a85ea5481c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:1c:85:bd:4b:4a:7d:3c:e6:f3:55:47:74: 1c:32:24:0a:cc:10:76:11:1f:38:c7:eb:9e:3c:38: 9a:a7:9d:09:f4:83:d4:86:a6:78:70:7f:1b:a9:7d: 92:e2:3f:1e:72:99:1d:af:74:03:e2:5f:a1:2b:eb: 50:df:56:56:af:d6:18:a2:d8:cb:f9:e7:dc:cf:7a: f1:16:97:ce:84:a5:32:7c:25:7f:9a:a2:5c:5e:c7: e1:1d:2b:3f:c1:27:b4:fa:9f:ef:6a:f3:35:ba:79: 90:a9:ad:d3:0e:45:18:dc:ef:d8:e0:42:a6:6e:1a: 69:69:a8:e9:07:7a:85:7d:d8:20:e1:0c:87:f9:8a: cc:3d:d4:f9:5d:fa:d9:e7:88:1d:9f:f5:10:e0:38: 8b:51:4a:cd:d0:1a:58:bd:05:9b:5f:45:08:98:a9: c2:4c:47:46:cd:ba:20:20:d6:86:0c:8d:b1:b2:f8: 45:c4:af:78:2f:39:80:8e:df:c8:9c:5f:0c:73:1e: e7:8a:b1:99:38:9e:6c:0b:71:26:b5:ef:08:dd:69: b0:5d:d7:4f:e5:41:f8:f6:8b:b1:6e:2d:55:03:1c: 32:57:3c:ad:aa:5f:df:73:8a:93:ae:76:67:7e:5f: 97:95:fe:80:3e:c4:97:b5:12:ce:b6:85:54:4c:f0: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:45:19:A5:66:E8:73:97:10:D0:B1:A0:E8:F3:57:A8:5E:A5:48:1C X509v3 Authority Key Identifier: keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.61.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:a0:9a:0c:0f:28:70:4c:b4:3f:c3:53:30:37:5c:56:31:e7: 3c:2c:8e:0c:95:04:6e:e8:5b:13:47:0c:ca:a0:5f:19:9a:f5: c4:fa:d6:f8:fd:e9:05:df:d1:d5:e4:fa:07:c3:9d:a6:0a:9e: 7e:d2:a6:af:41:6e:70:b2:a7:a0:70:78:06:9e:6c:a4:28:fc: 39:b7:68:a9:b3:81:08:1a:64:7c:6a:47:3c:8f:b4:b9:1e:d7: 54:f3:26:b7:61:fd:1f:28:db:79:01:85:ef:42:e5:bb:24:45: 21:b2:f2:f2:0f:be:25:4d:81:c8:35:a9:8e:6b:bc:aa:d7:3c: db:14:b8:f2:ce:75:27:84:bf:c2:64:6b:88:66:38:20:7a:b5: 5b:30:5b:d9:85:cf:c9:e9:17:ef:89:1a:ee:c0:65:fc:03:17: 5d:ae:0b:13:f9:b2:74:e1:32:a6:06:aa:0e:7b:5b:ac:97:e9: 5c:b8:07:57:ed:9d:83:c8:17:92:15:11:06:f2:bf:74:43:02: 8a:f4:07:8e:a6:d9:3c:af:e7:9d:d4:f8:75:bf:72:f3:bb:43: 5d:f3:12:a8:d2:b5:a0:6c:e9:de:38:72:3c:3f:5f:b9:61:55: ea:4b:38:c5:01:8d:9e:d9:27:7b:21:01:a5:6b:d4:1b:07:99: f9:c5:eb:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pT2+bEWgcRnWVIeJbcdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl ZGU3NDQwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzQ1MTlhNTY2ZTg3Mzk3MTBkMGIxYTBlOGYzNTdhODVlYTU0ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz8chb1LSn085vNVR3QcMiQKzBB2 ER84x+uePDiap50J9IPUhqZ4cH8bqX2S4j8ecpkdr3QD4l+hK+tQ31ZWr9YYotjL +efcz3rxFpfOhKUyfCV/mqJcXsfhHSs/wSe0+p/vavM1unmQqa3TDkUY3O/Y4EKm bhppaajpB3qFfdgg4QyH+YrMPdT5XfrZ54gdn/UQ4DiLUUrN0BpYvQWbX0UImKnC TEdGzbogINaGDI2xsvhFxK94LzmAjt/InF8Mcx7nirGZOJ5sC3Emte8I3WmwXddP 5UH49ouxbi1VAxwyVzytql/fc4qTrnZnfl+Xlf6APsSXtRLOtoVUTPCzywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNFGaVm6HOXENCxoOjzV6hepUgcMB8GA1UdIwQY MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt MjI2ZjNiODAzMWI3LzEvSTBVWnBXYm9jNWNRMExHZzZQTlhxRjZsU0J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3 LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7Y9MA0G CSqGSIb3DQEBCwUAA4IBAQCMoJoMDyhwTLQ/w1MwN1xWMec8LI4MlQRu6FsTRwzK oF8ZmvXE+tb4/ekF39HV5PoHw52mCp5+0qavQW5wsqegcHgGnmykKPw5t2ips4EI GmR8akc8j7S5HtdU8ya3Yf0fKNt5AYXvQuW7JEUhsvLyD74lTYHINamOa7yq1zzb FLjyznUnhL/CZGuIZjggerVbMFvZhc/J6RfviRruwGX8AxddrgsT+bJ04TKmBqoO e1usl+lcuAdX7Z2DyBeSFREG8r90QwKK9AeOptk8r+ed1Ph1v3Lzu0Nd8xKo0rWg bOneOHI8P1+5YVXqSzjFAY2e2Sd7IQGla9QbB5n5xevY -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:53 2026 by rpki-client