This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/Aj338RhXkgr6UJwL54dYD6EL_uA.roa File: Aj338RhXkgr6UJwL54dYD6EL_uA.roa (raw, json) Hash identifier: L6u8GmvhlsMn8ZhoCBvozLBVpXfmfa9tx+tUqGdETYw= Subject key identifier: 02:3D:F7:F1:18:57:92:0A:FA:50:9C:0B:E7:87:58:0F:A1:0B:FE:E0 Certificate issuer: /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2 Certificate serial: 019B7AC7D442B0529F1A63FFF3AE1B541CE3 Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/Aj338RhXkgr6UJwL54dYD6EL_uA.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51325 IP address blocks: 195.226.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d4:42:b0:52:9f:1a:63:ff:f3:ae:1b:54:1c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2 Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=023df7f11857920afa509c0be787580fa10bfee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0b:3f:1e:c1:4c:4a:33:09:a7:a8:ed:0a:41: 35:d4:74:ab:43:01:09:c1:31:2f:9a:dc:78:38:1c: 62:34:cb:53:a1:5c:f5:0b:d1:c5:74:85:5e:3e:18: 47:78:58:5a:db:0b:64:d0:13:e0:15:1b:90:dc:b8: e8:d4:89:bd:72:7c:e9:9b:02:00:89:66:63:b0:0d: a4:97:4d:f4:c3:c1:06:00:9c:9d:50:ba:9b:b4:a9: 70:91:ec:1c:2e:57:d0:cc:4a:b6:fb:aa:3b:70:55: df:c4:3a:43:d2:03:7a:be:a3:9a:35:cc:e0:6e:12: fe:be:0d:0f:c2:d3:d3:2e:ac:af:c4:25:08:0b:c7: 83:2a:31:a6:76:a0:1c:c6:3d:8d:47:3c:a6:f3:3a: d0:44:e7:9c:09:2d:4c:0b:4c:7b:65:9e:d9:3c:07: 05:3a:c3:f4:fc:19:4c:6a:e7:47:a5:ef:ed:ed:9b: 29:0d:d5:9e:d7:db:31:7e:26:64:27:be:f7:e9:2b: da:14:f3:0a:fa:30:57:07:e9:fb:25:62:6b:00:95: 3b:a2:62:26:11:62:a5:6d:7b:37:ea:f1:6b:e4:aa: 11:66:3b:09:53:ae:0d:8d:58:31:9c:94:58:7a:0e: 81:ef:7e:e9:12:f6:49:74:83:de:5a:b5:7d:c8:81: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3D:F7:F1:18:57:92:0A:FA:50:9C:0B:E7:87:58:0F:A1:0B:FE:E0 X509v3 Authority Key Identifier: keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/Aj338RhXkgr6UJwL54dYD6EL_uA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.214.0/24 Signature Algorithm: sha256WithRSAEncryption 85:1a:6b:0c:18:84:87:24:5e:5a:e9:2c:1c:75:15:d2:82:cf: 9b:fb:09:19:7f:43:f0:a2:6a:0b:90:72:be:04:16:b1:dd:31: d0:d4:f9:a1:1e:00:9d:3e:cc:65:48:04:3f:ef:58:1f:0b:f7: 76:e9:bf:52:12:10:a7:ea:85:e6:38:82:b8:04:65:33:52:9e: 8d:e5:ce:e9:ee:e6:c0:6d:91:02:c3:5d:93:52:fe:88:2b:ae: 6d:9f:3c:d5:66:3a:ac:05:17:3f:bd:8d:09:94:72:95:b9:c4: 21:b9:c9:f3:05:b9:3f:53:e7:bc:28:11:49:6b:a0:db:eb:11: 9e:a1:70:98:47:66:92:15:71:3b:1e:d6:4d:d5:1a:d4:0e:21: 06:0d:d7:9c:e1:fd:97:a6:8e:89:df:a1:91:f4:a8:c5:09:22: 74:a6:24:88:a4:ff:96:ed:f2:30:ca:9f:26:f5:39:df:d0:ac: 19:83:2f:fd:f8:02:d6:4f:a6:12:a2:13:db:89:c5:7d:10:34: b8:42:0a:26:ce:ff:7c:51:a6:c4:20:1f:cd:d0:00:28:b3:ec: 69:45:71:a3:ec:ca:15:59:46:ec:11:6c:e0:ae:3b:0f:d6:ec: 51:6b:b6:6a:b5:24:62:77:bc:98:e3:19:9b:2d:e0:aa:ad:83: c6:a5:2c:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9RCsFKfGmP/864bVBzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODE5OTBhOGE4Y2NkN2U4YTRmNDhiYjc2OGYzNWQyNjk5 Yjc4YjIwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjNkZjdmMTE4NTc5MjBhZmE1MDljMGJlNzg3NTgwZmExMGJmZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gs/HsFMSjMJp6jtCkE11HSrQwEJ wTEvmtx4OBxiNMtToVz1C9HFdIVePhhHeFha2wtk0BPgFRuQ3Ljo1Im9cnzpmwIA iWZjsA2kl030w8EGAJydULqbtKlwkewcLlfQzEq2+6o7cFXfxDpD0gN6vqOaNczg bhL+vg0PwtPTLqyvxCUIC8eDKjGmdqAcxj2NRzym8zrQROecCS1MC0x7ZZ7ZPAcF OsP0/BlMaudHpe/t7ZspDdWe19sxfiZkJ7736SvaFPMK+jBXB+n7JWJrAJU7omIm EWKlbXs36vFr5KoRZjsJU64NjVgxnJRYeg6B737pEvZJdIPeWrV9yIGTOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAI99/EYV5IK+lCcC+eHWA+hC/7gMB8GA1UdIwQY MBaAFB6BmQqKjM1+ik9Iu3aPNdJpm3iyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9HWkNvcU16WDZLVDBpN2RvODEwbW1iZUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yODhiY2MtMzYwMy00ZmMwLTgxMGEt NmYxNWE2ZWFkM2NjLzEvQWozMzhSaFhrZ3I2VUp3TDU0ZFlENkVMX3VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8yODhiY2MtMzYwMy00ZmMwLTgxMGEtNmYxNWE2ZWFkM2Nj LzEvSG9HWkNvcU16WDZLVDBpN2RvODEwbW1iZUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LWMA0G CSqGSIb3DQEBCwUAA4IBAQCFGmsMGISHJF5a6SwcdRXSgs+b+wkZf0PwomoLkHK+ BBax3THQ1PmhHgCdPsxlSAQ/71gfC/d26b9SEhCn6oXmOIK4BGUzUp6N5c7p7ubA bZECw12TUv6IK65tnzzVZjqsBRc/vY0JlHKVucQhucnzBbk/U+e8KBFJa6Db6xGe oXCYR2aSFXE7HtZN1RrUDiEGDdec4f2Xpo6J36GR9KjFCSJ0piSIpP+W7fIwyp8m 9Tnf0KwZgy/9+ALWT6YSohPbicV9EDS4Qgomzv98UabEIB/N0AAos+xpRXGj7MoV WUbsEWzgrjsP1uxRa7ZqtSRid7yY4xmbLeCqrYPGpSxM -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:39 2026 by rpki-client