This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa File: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (raw, json) Hash identifier: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc= Subject key identifier: B2:E1:6B:FD:52:C9:EC:92:57:0D:52:C0:C6:E2:F6:77:A4:BC:AD:C8 Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e Certificate serial: 019B79EC4BE4C5A55AAC6991A98734B91220 Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39373 IP address blocks: 195.178.100.0/23 maxlen: 24 195.178.100.0/24 maxlen: 24 195.178.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4b:e4:c5:a5:5a:ac:69:91:a9:87:34:b9:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2e16bfd52c9ec92570d52c0c6e2f677a4bcadc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:b4:95:69:85:15:29:b2:3b:3b:d9:86:d8: 59:39:48:6a:31:02:3f:b3:2a:af:50:a9:1e:f5:5f: 61:01:4b:e3:9b:5c:ca:38:89:43:f5:61:9c:6b:eb: c8:7a:86:a3:ae:e1:19:74:25:9d:84:09:d7:2e:cc: 78:51:a1:60:a8:db:8d:fa:f3:82:25:13:03:1b:b7: f4:ac:6f:49:98:6e:54:e9:83:fb:0d:d1:85:54:90: 30:86:83:9a:3b:54:7b:fe:78:81:8e:82:c0:60:4e: 33:08:35:2e:d7:35:bf:ec:62:94:a4:35:02:fa:ea: 8c:1d:ea:2d:5d:2b:7a:3e:6d:a8:f3:d9:a4:37:21: 18:6d:55:b8:be:29:bc:4c:94:09:e9:05:1a:fc:bc: cd:6d:e3:3a:8c:5f:36:9a:4f:ca:10:ed:19:15:92: b6:28:b4:7a:3a:2e:69:e1:e5:23:5f:f3:dc:03:00: 3b:8d:d4:cb:69:52:32:9c:91:b9:20:18:9f:f7:1e: fb:33:01:1b:d1:6c:74:3b:5b:60:dc:d3:c1:a1:aa: a8:ad:f3:09:51:4b:37:d9:a2:3a:17:98:01:57:b4: d8:88:ef:e3:e0:8a:0b:a5:9b:99:6e:3b:58:99:1d: 20:b4:79:6e:3e:a2:f5:95:1e:dd:60:95:dd:47:8d: 97:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E1:6B:FD:52:C9:EC:92:57:0D:52:C0:C6:E2:F6:77:A4:BC:AD:C8 X509v3 Authority Key Identifier: keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.100.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:82:88:c0:41:2c:6e:d6:cc:48:91:5b:33:de:0b:bf:c9:86: ae:dd:c6:40:5d:f7:1b:94:59:bd:30:a7:9c:74:76:7c:fa:2c: 0f:8e:b8:60:83:d4:a6:7a:6a:12:b3:81:2b:47:78:57:d1:03: 94:05:37:ce:f7:f5:28:3e:c4:cf:61:0b:20:d5:57:16:b8:b8: c3:da:50:5a:ac:50:98:30:51:02:28:44:d9:3a:47:99:41:28: 6d:e3:8b:da:b6:15:20:62:40:a2:15:eb:0d:29:3b:2a:56:e8: d6:b2:e7:d0:27:ae:9e:b3:c3:dc:fb:c3:af:35:60:4d:a6:1d: ba:a8:25:ae:15:b4:7d:1a:ee:7a:82:f3:96:f8:d5:e5:f7:30: c6:d4:76:6b:75:8e:6b:8d:7f:89:b5:7d:0d:f0:cd:cf:c8:56: d2:82:8f:57:83:4a:d0:5f:e8:5e:7a:0e:3a:02:76:98:f1:07: 07:fe:6a:67:ac:3e:35:2a:2c:5b:33:b0:a9:85:dc:cd:dd:07: 1b:9b:23:cb:5b:94:52:c4:78:48:5e:00:d6:6e:29:ef:dc:8a: 04:0d:52:d3:64:23:58:54:8a:6f:89:d9:4d:c2:40:e4:0f:6f: 30:c5:bd:4a:55:c6:44:e0:5f:2e:a1:a4:8c:02:6e:07:2f:88: d7:3c:18:95 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57EvkxaVarGmRqYc0uRIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl MjQyM2UwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmUxNmJmZDUyYzllYzkyNTcwZDUyYzBjNmUyZjY3N2E0YmNhZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoC0lWmFFSmyOzvZhthZOUhqMQI/ syqvUKke9V9hAUvjm1zKOIlD9WGca+vIeoajruEZdCWdhAnXLsx4UaFgqNuN+vOC JRMDG7f0rG9JmG5U6YP7DdGFVJAwhoOaO1R7/niBjoLAYE4zCDUu1zW/7GKUpDUC +uqMHeotXSt6Pm2o89mkNyEYbVW4vim8TJQJ6QUa/LzNbeM6jF82mk/KEO0ZFZK2 KLR6Oi5p4eUjX/PcAwA7jdTLaVIynJG5IBif9x77MwEb0Wx0O1tg3NPBoaqorfMJ UUs32aI6F5gBV7TYiO/j4IoLpZuZbjtYmR0gtHluPqL1lR7dYJXdR42XZQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLLha/1SyeySVw1SwMbi9nekvK3IMB8GA1UdIwQY MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx LTY2OThiOTMyMzNkNi8xL3N1RnJfVkxKN0pKWERWTEF4dUwyZDZTOHJjZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIxLTY2OThiOTMyMzNk Ni8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHDsmQw DQYJKoZIhvcNAQELBQADggEBAGyCiMBBLG7WzEiRWzPeC7/Jhq7dxkBd9xuUWb0w p5x0dnz6LA+OuGCD1KZ6ahKzgStHeFfRA5QFN8739Sg+xM9hCyDVVxa4uMPaUFqs UJgwUQIoRNk6R5lBKG3ji9q2FSBiQKIV6w0pOypW6Nay59Anrp6zw9z7w681YE2m HbqoJa4VtH0a7nqC85b41eX3MMbUdmt1jmuNf4m1fQ3wzc/IVtKCj1eDStBf6F56 DjoCdpjxBwf+amesPjUqLFszsKmF3M3dBxubI8tblFLEeEheANZuKe/cigQNUtNk I1hUim+J2U3CQOQPbzDFvUpVxkTgXy6hpIwCbgcviNc8GJU= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:25 2026 by rpki-client