This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/M1Lf11eksEvqz34PbHYO7Z4jXHI.roa File: M1Lf11eksEvqz34PbHYO7Z4jXHI.roa (raw, json) Hash identifier: 1wwr1qMj1Er+C+R6P5FqGwBBlZMubvTHn7IuCGLNv1Q= Subject key identifier: 33:52:DF:D7:57:A4:B0:4B:EA:CF:7E:0F:6C:76:0E:ED:9E:23:5C:72 Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Certificate serial: 019B7C80AAE7DFDD3A97C2CD01A0746573D1 Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/M1Lf11eksEvqz34PbHYO7Z4jXHI.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41916 IP address blocks: 195.138.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:aa:e7:df:dd:3a:97:c2:cd:01:a0:74:65:73:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3352dfd757a4b04beacf7e0f6c760eed9e235c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:92:b3:f0:11:a8:1e:1b:da:9d:02:8f:20: 4e:a3:8e:a9:ee:71:82:6a:a4:99:3e:0d:41:ad:77: d0:f6:24:0c:fe:ee:94:cb:e5:7a:42:85:d3:dc:2d: 05:51:ab:62:bc:03:d0:a7:4b:d9:23:f4:45:cd:b6: 05:6b:b6:56:db:81:de:60:e7:3d:cb:6a:d7:d3:06: 8d:96:a6:57:e4:37:e5:fb:ea:8f:1b:0c:d9:a8:88: 93:c3:58:37:12:b2:ee:f9:83:05:e2:bc:e1:4b:08: db:35:4d:c9:0a:61:f9:f3:01:55:65:98:f8:fd:84: 30:f5:4a:80:39:51:c9:c5:36:91:e5:6d:aa:fc:90: cd:79:99:fa:82:0b:5c:dc:e3:43:b8:7f:11:bb:f1: de:25:5f:a1:7e:7e:3b:10:7d:a2:93:5f:b8:df:08: 33:2c:d7:55:05:12:f8:4d:82:74:ed:ca:c5:e7:bd: c2:1a:43:c2:40:b6:62:ac:64:d6:88:c3:fc:c1:cf: e4:66:cd:d9:0d:fb:3f:fa:92:26:eb:39:16:85:5f: e7:5e:bf:5b:c3:5f:a4:08:07:7b:2b:4c:41:51:4b: 43:35:8c:59:cf:4f:3b:c5:2e:b0:16:72:21:1e:9f: e9:78:fe:98:49:9c:39:64:c3:be:8c:8d:ed:67:14: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:52:DF:D7:57:A4:B0:4B:EA:CF:7E:0F:6C:76:0E:ED:9E:23:5C:72 X509v3 Authority Key Identifier: keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/M1Lf11eksEvqz34PbHYO7Z4jXHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.196.0/24 Signature Algorithm: sha256WithRSAEncryption 91:88:de:36:ca:70:06:66:bb:9f:85:0a:30:ae:01:87:73:99: 83:ae:b8:f4:94:04:df:0b:9e:42:cd:bc:2c:ea:59:82:a6:7c: 66:8d:f8:95:1a:bd:e2:ec:1f:8e:17:6a:57:94:46:81:cd:ad: 97:1a:60:4c:1b:4b:80:30:f6:6c:cc:ab:76:67:fa:32:7c:d6: 1b:61:97:1b:19:b5:0d:ba:23:f1:2e:6c:bc:97:76:85:ac:cd: f9:74:57:50:87:ef:75:85:6f:40:ca:1d:5b:23:d9:0a:3a:09: eb:75:48:fc:34:c1:f8:4e:af:af:23:20:80:03:e6:64:56:0a: cd:2b:5a:52:95:50:fd:28:ff:f9:8c:27:5f:a7:3e:0d:1f:4f: 7f:69:b5:7b:aa:eb:76:66:a1:4c:49:f0:35:93:1e:59:6e:0f: 33:79:f4:89:70:02:62:7a:ab:fc:58:6f:48:54:30:37:67:39: 11:de:76:de:7e:9a:44:62:63:b9:81:1a:53:fb:79:78:73:12: 29:0a:a9:65:8f:e1:e7:39:23:c4:44:14:50:bb:09:69:ff:25: 49:75:b3:eb:55:0d:f8:20:2a:8b:57:c4:75:2a:e7:a2:be:4f: 27:09:a4:a2:31:b4:d6:b0:c3:03:14:28:bf:e6:db:be:ce:99: 3a:8b:0a:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKrn3906l8LNAaB0ZXPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNjkyZDI5YWMzMTJkMmFiNjA2MWU0NGE5ZGUwZWQzNzUx YWVhN2UwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzUyZGZkNzU3YTRiMDRiZWFjZjdlMGY2Yzc2MGVlZDllMjM1YzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+SSs/ARqB4b2p0CjyBOo46p7nGC aqSZPg1BrXfQ9iQM/u6Uy+V6QoXT3C0FUativAPQp0vZI/RFzbYFa7ZW24HeYOc9 y2rX0waNlqZX5Dfl++qPGwzZqIiTw1g3ErLu+YMF4rzhSwjbNU3JCmH58wFVZZj4 /YQw9UqAOVHJxTaR5W2q/JDNeZn6ggtc3ONDuH8Ru/HeJV+hfn47EH2ik1+43wgz LNdVBRL4TYJ07crF573CGkPCQLZirGTWiMP8wc/kZs3ZDfs/+pIm6zkWhV/nXr9b w1+kCAd7K0xBUUtDNYxZz087xS6wFnIhHp/peP6YSZw5ZMO+jI3tZxQfmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNS39dXpLBL6s9+D2x2Du2eI1xyMB8GA1UdIwQY MBaAFIxpLSmsMS0qtgYeRKneDtN1Gup+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEt OTI2MmU1M2UxZDEwLzEvTTFMZjExZWtzRXZxejM0UGJIWU83WjRqWEhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEtOTI2MmU1M2UxZDEw LzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4rEMA0G CSqGSIb3DQEBCwUAA4IBAQCRiN42ynAGZrufhQowrgGHc5mDrrj0lATfC55Czbws 6lmCpnxmjfiVGr3i7B+OF2pXlEaBza2XGmBMG0uAMPZszKt2Z/oyfNYbYZcbGbUN uiPxLmy8l3aFrM35dFdQh+91hW9Ayh1bI9kKOgnrdUj8NMH4Tq+vIyCAA+ZkVgrN K1pSlVD9KP/5jCdfpz4NH09/abV7qut2ZqFMSfA1kx5Zbg8zefSJcAJieqv8WG9I VDA3ZzkR3nbefppEYmO5gRpT+3l4cxIpCqllj+HnOSPERBRQuwlp/yVJdbPrVQ34 ICqLV8R1Kueivk8nCaSiMbTWsMMDFCi/5tu+zpk6iwoY -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:24 2026 by rpki-client