This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/i__p0JsHuiqPylXpC5Eh8HJk-q0.roa File: i__p0JsHuiqPylXpC5Eh8HJk-q0.roa (raw, json) Hash identifier: tD7G29bUtBn0T0NGAjmoXjsJogAe47kZEPeNJWkADNw= Subject key identifier: 8B:FF:E9:D0:9B:07:BA:2A:8F:CA:55:E9:0B:91:21:F0:72:64:FA:AD Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c Certificate serial: 019B7C8097C4C99EF5FAFB4777850023902C Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/i__p0JsHuiqPylXpC5Eh8HJk-q0.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25275 IP address blocks: 195.234.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:97:c4:c9:9e:f5:fa:fb:47:77:85:00:23:90:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bffe9d09b07ba2a8fca55e90b9121f07264faad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:72:2b:a1:eb:41:85:7f:f8:dc:8e:42:6f: fa:ef:7b:26:95:1e:d8:1e:d5:6c:fa:af:05:e7:50: 34:bc:88:d3:8d:6f:7e:b5:0e:fb:2f:63:fa:04:ea: 2c:c2:fa:63:34:97:0e:49:b1:bf:75:30:6e:b3:74: b0:d9:34:8d:3e:d5:bc:29:c6:5a:3c:cf:63:1f:51: 82:6a:71:fb:16:de:a3:d8:f6:cd:5f:7a:a7:46:6a: 5e:62:da:fb:8b:09:f3:e1:ae:5e:73:e7:d1:a6:df: 4e:bb:a0:4f:ca:ab:34:5d:25:d3:49:29:90:12:a6: 71:fd:82:4b:e3:ff:ea:57:fa:47:96:fb:b0:5e:f3: f0:b8:3c:4d:2d:40:f8:22:55:61:08:74:b2:37:a9: 5d:14:8d:83:93:42:fb:33:55:c8:7b:71:80:b7:c1: 46:d2:10:bc:25:a1:84:7d:00:35:61:9b:b2:5c:f6: 50:7f:55:46:86:e4:b3:dd:59:9b:cc:d2:e1:88:c3: 07:72:7d:0f:a8:65:1c:58:df:68:47:d9:be:48:41: 33:ae:c1:d6:3b:86:2e:d3:9e:1c:1e:84:2c:da:f0: 4a:13:8a:51:96:32:49:da:92:3b:b1:91:09:d1:26: da:85:a2:e1:cb:50:4c:38:fc:88:22:8b:b4:9f:52: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:E9:D0:9B:07:BA:2A:8F:CA:55:E9:0B:91:21:F0:72:64:FA:AD X509v3 Authority Key Identifier: keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/i__p0JsHuiqPylXpC5Eh8HJk-q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.224.0/22 Signature Algorithm: sha256WithRSAEncryption 26:c4:c1:67:a9:72:73:c6:2a:ec:a0:a3:5c:ba:b1:8f:6d:12: e9:ea:87:14:e1:3b:ff:8d:c5:a0:9c:05:db:aa:15:15:94:78: 28:5c:a3:a1:37:d7:49:ba:54:e8:be:c7:42:84:85:e4:29:16: 5a:24:62:b8:5b:cc:94:92:19:53:5d:0d:5b:5b:7e:da:9a:10: 07:c4:9c:59:5f:92:97:af:90:46:c4:7b:ba:55:76:d1:fa:a1: 1d:b5:3d:fb:42:04:59:14:cc:2f:ce:d2:03:d8:b7:8d:df:a7: 28:f6:2e:c4:1d:1c:b4:25:f0:bb:a8:86:02:a6:9f:47:d2:14: 3c:c5:f9:1e:79:ca:56:59:3d:5a:f5:cb:cd:fa:d3:99:f7:6a: 9e:eb:7b:0d:c3:02:aa:f3:c3:33:eb:54:49:d3:ed:1e:95:6a: ae:5a:d8:cc:73:63:99:28:b5:e2:57:a4:fc:51:1d:8b:29:ac: 56:9f:9b:e4:1a:6b:34:bb:73:4e:ab:08:98:e7:f8:3c:66:9b: 73:5c:80:01:08:38:18:9e:c5:ab:70:66:8a:76:c9:e5:04:3e: f9:40:b2:30:e3:e4:01:e6:88:8d:95:e9:60:35:6d:ef:51:c6: ae:64:df:8b:b5:0f:e5:75:42:d2:46:d6:13:8c:cb:37:56:67: 0c:85:37:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJfEyZ71+vtHd4UAI5AsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTZhYzI4Zjk1NGUxM2RjYjdkYjY5YmMyMjJiNzg1YjRk NzVmMmMwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmZmZTlkMDliMDdiYTJhOGZjYTU1ZTkwYjkxMjFmMDcyNjRmYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1pyK6HrQYV/+NyOQm/673smlR7Y HtVs+q8F51A0vIjTjW9+tQ77L2P6BOoswvpjNJcOSbG/dTBus3Sw2TSNPtW8KcZa PM9jH1GCanH7Ft6j2PbNX3qnRmpeYtr7iwnz4a5ec+fRpt9Ou6BPyqs0XSXTSSmQ EqZx/YJL4//qV/pHlvuwXvPwuDxNLUD4IlVhCHSyN6ldFI2Dk0L7M1XIe3GAt8FG 0hC8JaGEfQA1YZuyXPZQf1VGhuSz3VmbzNLhiMMHcn0PqGUcWN9oR9m+SEEzrsHW O4Yu054cHoQs2vBKE4pRljJJ2pI7sZEJ0SbahaLhy1BMOPyIIou0n1LQLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIv/6dCbB7oqj8pV6QuRIfByZPqtMB8GA1UdIwQY MBaAFL3mrCj5VOE9y322m8Iit4W0118sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEt Y2FlNmM3MjVkOTJmLzEvaV9fcDBKc0h1aXFQeWxYcEM1RWg4SEprLXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEtY2FlNmM3MjVkOTJm LzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+rgMA0G CSqGSIb3DQEBCwUAA4IBAQAmxMFnqXJzxirsoKNcurGPbRLp6ocU4Tv/jcWgnAXb qhUVlHgoXKOhN9dJulTovsdChIXkKRZaJGK4W8yUkhlTXQ1bW37amhAHxJxZX5KX r5BGxHu6VXbR+qEdtT37QgRZFMwvztID2LeN36co9i7EHRy0JfC7qIYCpp9H0hQ8 xfkeecpWWT1a9cvN+tOZ92qe63sNwwKq88Mz61RJ0+0elWquWtjMc2OZKLXiV6T8 UR2LKaxWn5vkGms0u3NOqwiY5/g8ZptzXIABCDgYnsWrcGaKdsnlBD75QLIw4+QB 5oiNlelgNW3vUcauZN+LtQ/ldULSRtYTjMs3VmcMhTcJ -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:55 2026 by rpki-client