This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/D1Th6lDEFurAx_pm_jDakn-9inM.roa File: D1Th6lDEFurAx_pm_jDakn-9inM.roa (raw, json) Hash identifier: YAb+UIUxPx/AiyjIq91kN/CI5H8M+CVNJCDl00VHGNw= Subject key identifier: 0F:54:E1:EA:50:C4:16:EA:C0:C7:FA:66:FE:30:DA:92:7F:BD:8A:73 Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae Certificate serial: 019B791064A985959A3E966EE7F53E9318AF Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/D1Th6lDEFurAx_pm_jDakn-9inM.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213241 IP address blocks: 195.22.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:64:a9:85:95:9a:3e:96:6e:e7:f5:3e:93:18:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f54e1ea50c416eac0c7fa66fe30da927fbd8a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:18:f7:e7:22:e3:60:82:a3:a1:81:63:2d: 9a:10:ef:46:13:66:b0:b1:dc:45:5e:83:6a:dc:09: 78:36:23:e7:47:75:b3:22:c6:13:60:b4:72:12:ee: bd:58:c5:8b:c2:2f:37:2c:80:7f:12:ee:37:38:0e: a1:6f:57:9a:b4:75:91:de:d4:a8:57:d7:e4:f5:4c: 0c:22:10:b7:31:01:74:ba:ec:1c:72:f8:b5:02:39: 18:d2:d0:27:5a:25:b2:63:10:7c:42:e9:9d:86:00: 69:d9:d3:5b:63:f8:cb:7f:8c:fa:c0:98:1b:ac:ee: 05:fe:b4:6d:f0:a1:be:f8:61:e6:19:6a:11:a9:4e: 91:b9:b5:ec:65:9e:03:ad:55:46:85:b5:f4:0a:f1: 9a:e5:08:8e:a8:47:cf:0a:b1:91:fd:b6:8f:ef:7a: 08:f2:71:15:a0:a9:77:58:65:95:d8:5d:33:b9:f2: e4:83:09:d0:f2:45:61:04:75:6d:c8:92:3d:67:f7: 5e:5f:a8:2a:dc:e3:6a:1a:f1:46:4c:e7:e0:61:e6: 32:27:46:36:cd:f8:61:83:4d:9d:fd:a6:b0:ed:7d: 82:a6:4f:16:eb:3a:7c:5b:dc:69:07:93:8f:dc:94: 01:75:e9:a7:8f:4e:94:e3:05:ef:2c:5c:b6:17:d8: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:54:E1:EA:50:C4:16:EA:C0:C7:FA:66:FE:30:DA:92:7F:BD:8A:73 X509v3 Authority Key Identifier: keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/D1Th6lDEFurAx_pm_jDakn-9inM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.22.146.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:fe:b3:5a:b4:a6:f1:df:82:8a:a9:66:a5:3d:ef:1c:cf:e7: 80:ae:90:2e:d7:86:bf:d2:70:83:10:6e:a8:83:9d:1e:e7:81: fb:f9:44:bb:3f:5f:26:08:56:a3:11:01:26:bb:46:c2:69:11: 38:ce:83:14:90:84:53:78:4e:aa:e1:54:5a:00:7a:52:db:55: 45:f6:43:4f:21:f5:71:ce:67:8c:6d:d6:0b:4f:3b:e4:0e:e7: 29:1c:c1:cb:fc:be:a7:15:60:c3:1f:c1:cb:80:e0:5c:5a:b5: 43:40:2f:72:91:e6:3a:9d:9d:40:55:8d:11:b9:eb:31:09:8b: d8:90:6f:ba:a3:d4:30:26:37:c2:e2:b0:bd:7f:e5:2d:7e:34: 44:47:5c:63:5d:3e:4d:b3:ab:c9:e6:c2:9c:2b:f8:f4:14:0a: 64:90:8b:f3:fc:aa:ed:42:28:c8:e3:71:4f:16:82:dd:a7:cd: be:78:07:b7:75:42:bd:fe:58:69:8e:c1:50:74:ad:f9:67:8e: bf:08:d6:39:26:44:67:40:8f:e4:f4:d7:cd:4f:48:67:02:9e: 1d:86:61:61:2b:9a:32:d1:91:ab:d4:af:b3:cc:3c:69:51:a3: 45:67:61:48:55:73:4d:28:40:88:f8:9e:63:3c:81:76:60:2f: 67:a0:01:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGSphZWaPpZu5/U+kxivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDc2ODBlNTNhZTU4OTc0Y2I2OTQxZDA4Njk1ZDNjMGRl Y2MyYWUwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjU0ZTFlYTUwYzQxNmVhYzBjN2ZhNjZmZTMwZGE5MjdmYmQ4YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshcY9+ci42CCo6GBYy2aEO9GE2aw sdxFXoNq3Al4NiPnR3WzIsYTYLRyEu69WMWLwi83LIB/Eu43OA6hb1eatHWR3tSo V9fk9UwMIhC3MQF0uuwccvi1AjkY0tAnWiWyYxB8QumdhgBp2dNbY/jLf4z6wJgb rO4F/rRt8KG++GHmGWoRqU6RubXsZZ4DrVVGhbX0CvGa5QiOqEfPCrGR/baP73oI 8nEVoKl3WGWV2F0zufLkgwnQ8kVhBHVtyJI9Z/deX6gq3ONqGvFGTOfgYeYyJ0Y2 zfhhg02d/aaw7X2Cpk8W6zp8W9xpB5OP3JQBdemnj06U4wXvLFy2F9ju+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA9U4epQxBbqwMf6Zv4w2pJ/vYpzMB8GA1UdIwQY MBaAFAVHaA5TrliXTLaUHQhpXTwN7MKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEt ZTRlNmY4ZDdlNzdjLzEvRDFUaDZsREVGdXJBeF9wbV9qRGFrbi05aW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEtZTRlNmY4ZDdlNzdj LzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxaSMA0G CSqGSIb3DQEBCwUAA4IBAQAd/rNatKbx34KKqWalPe8cz+eArpAu14a/0nCDEG6o g50e54H7+US7P18mCFajEQEmu0bCaRE4zoMUkIRTeE6q4VRaAHpS21VF9kNPIfVx zmeMbdYLTzvkDucpHMHL/L6nFWDDH8HLgOBcWrVDQC9ykeY6nZ1AVY0RuesxCYvY kG+6o9QwJjfC4rC9f+UtfjRER1xjXT5Ns6vJ5sKcK/j0FApkkIvz/KrtQijI43FP FoLdp82+eAe3dUK9/lhpjsFQdK35Z46/CNY5JkRnQI/k9NfNT0hnAp4dhmFhK5oy 0ZGr1K+zzDxpUaNFZ2FIVXNNKECI+J5jPIF2YC9noAGo -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:44 2026 by rpki-client