This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa File: 1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa (raw, json) Hash identifier: OQAOpz82CSjUEMjy/IwaBDn+AK3uYtqBMtS2qxamScE= Subject key identifier: FB:37:EF:7A:56:B7:81:3B:52:53:46:71:93:FA:A6:32:A8:96:1B:2D Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B8FC78FE9B9376F659D0CBFFCDFA5E811 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa Signing time: Mon 05 Jan 2026 20:09:38 +0000 ROA not before: Mon 05 Jan 2026 20:09:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 195.226.82.0/24 maxlen: 24 195.226.83.0/24 maxlen: 24 195.226.84.0/24 maxlen: 24 195.226.85.0/24 maxlen: 24 195.226.86.0/24 maxlen: 24 195.226.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:c7:8f:e9:b9:37:6f:65:9d:0c:bf:fc:df:a5:e8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jan 5 20:09:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb37ef7a56b7813b5253467193faa632a8961b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:a9:70:01:c7:44:23:14:ad:65:7b:43:51: 4a:0c:8f:a1:f7:be:61:05:9b:4c:75:4e:5e:b2:fd: 0a:59:88:3d:7f:81:cb:d0:1b:dc:59:42:f3:70:41: a6:c7:4d:8d:b8:30:6c:79:53:5d:3b:7b:d3:40:39: 34:70:50:7c:57:6f:96:06:f4:7a:d0:e3:79:1f:f2: 0a:58:44:c5:f8:f8:5d:d7:63:5c:27:65:30:a8:c0: f2:1d:7a:e1:f6:30:1c:dd:be:2e:69:dd:7b:38:e0: a5:db:4d:e4:6e:a2:7d:fb:06:f5:3a:0c:d5:e4:e1: 8a:40:b3:6a:1e:7c:58:97:00:43:30:03:59:ce:48: 57:1d:f1:9e:e1:cc:73:1f:91:13:10:e6:8d:61:9a: 02:da:db:31:37:0b:5c:f3:e1:d2:c9:36:1c:8f:c8: a0:2e:f3:1f:63:dc:45:a3:fc:b7:32:a9:e3:7f:68: b4:91:df:43:27:72:3f:0a:63:4a:45:15:dd:7c:90: 9c:1d:80:2f:bd:4c:47:30:7b:c9:3e:1a:a3:43:70: ea:f4:35:46:a1:ec:bb:53:91:93:48:95:70:e4:68: b0:a2:c0:fe:95:c5:5f:57:3d:b9:e6:35:67:78:3b: 69:a1:55:40:e5:9a:ae:a3:60:13:d9:f5:68:04:7a: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:37:EF:7A:56:B7:81:3B:52:53:46:71:93:FA:A6:32:A8:96:1B:2D X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.82.0-195.226.87.255 Signature Algorithm: sha256WithRSAEncryption c4:61:8e:5f:ba:c8:3b:42:e2:be:11:b8:dd:12:7c:45:98:13: 61:be:1e:fc:f0:9b:7b:72:d1:e0:79:f0:a6:bb:5f:03:9c:a4: bf:34:a6:a5:2d:91:94:63:6d:86:e4:44:47:51:97:f6:a1:3a: 71:10:5c:78:3d:f7:f4:94:d0:af:0c:c5:9f:08:e0:46:9e:2b: a6:fa:3e:82:e2:e2:98:20:7f:08:3d:22:9c:e6:d2:d5:c5:37: 72:c7:ec:7b:39:30:3d:3e:4d:29:e1:1d:69:35:74:be:ff:01: bf:81:db:48:aa:a4:a5:43:cf:28:e8:c2:0a:dd:e1:8c:13:d0: 4e:62:52:27:d7:e1:2c:3a:f8:88:da:f3:ef:73:5e:2f:10:25: f3:58:36:3c:72:1b:76:3e:77:da:e0:85:c1:72:01:28:1f:75: 6e:50:17:bf:87:b4:4c:6c:c1:f8:03:68:b0:00:82:7e:00:78: a9:dd:62:af:4a:08:64:51:70:d6:06:70:83:fc:37:99:81:93: cc:f2:83:79:f2:45:0c:35:15:74:84:c0:85:9f:78:37:56:20: 6d:c5:77:b2:f1:74:94:76:33:0c:8c:f9:30:7f:20:05:19:74: 94:f0:96:cc:26:46:45:08:a2:a4:c2:d8:f8:d8:76:0b:ec:f6: b1:71:75:bd -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZuPx4/puTdvZZ0Mv/zfpegRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMTA1MjAwOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjM3ZWY3YTU2Yjc4MTNiNTI1MzQ2NzE5M2ZhYTYzMmE4OTYxYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdSpcAHHRCMUrWV7Q1FKDI+h975h BZtMdU5esv0KWYg9f4HL0BvcWULzcEGmx02NuDBseVNdO3vTQDk0cFB8V2+WBvR6 0ON5H/IKWETF+Phd12NcJ2UwqMDyHXrh9jAc3b4uad17OOCl203kbqJ9+wb1OgzV 5OGKQLNqHnxYlwBDMANZzkhXHfGe4cxzH5ETEOaNYZoC2tsxNwtc8+HSyTYcj8ig LvMfY9xFo/y3Mqnjf2i0kd9DJ3I/CmNKRRXdfJCcHYAvvUxHMHvJPhqjQ3Dq9DVG oey7U5GTSJVw5GiwosD+lcVfVz255jVneDtpoVVA5Zquo2AT2fVoBHpQyQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPs373pWt4E7UlNGcZP6pjKolhstMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMS16ZnZlbGEzZ1R0U1UwWnhrX3FtTXFpV0d5MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGMvMTVkMjcxLTA1Y2QtNDYxZS1hN2I2LTQzMDEzYjI4ZDlk Ni8xLzFMbFRNSE5NbXE5bTBSdk5LLTNUZ1BRUS1UOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQBw+JS AwQDw+JQMA0GCSqGSIb3DQEBCwUAA4IBAQDEYY5fusg7QuK+EbjdEnxFmBNhvh78 8Jt7ctHgefCmu18DnKS/NKalLZGUY22G5ERHUZf2oTpxEFx4Pff0lNCvDMWfCOBG nium+j6C4uKYIH8IPSKc5tLVxTdyx+x7OTA9Pk0p4R1pNXS+/wG/gdtIqqSlQ88o 6MIK3eGME9BOYlIn1+EsOviI2vPvc14vECXzWDY8cht2Pnfa4IXBcgEoH3VuUBe/ h7RMbMH4A2iwAIJ+AHip3WKvSghkUXDWBnCD/DeZgZPM8oN58kUMNRV0hMCFn3g3 ViBtxXey8XSUdjMMjPkwfyAFGXSU8JbMJkZFCKKkwtj42HYL7PaxcXW9 -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:58 2026 by rpki-client