This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/zUjhpvzG-Lc2pgcOBOyUOhZ_jQc.roa File: zUjhpvzG-Lc2pgcOBOyUOhZ_jQc.roa (raw, json) Hash identifier: hHpsqIho1J3apISkIRQoEpNvpz7x6zawHtlFWWSFpsI= Subject key identifier: CD:48:E1:A6:FC:C6:F8:B7:36:A6:07:0E:04:EC:94:3A:16:7F:8D:07 Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7 Certificate serial: 019B7EA5097A285562C6B6098E4BEE44A292 Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/zUjhpvzG-Lc2pgcOBOyUOhZ_jQc.roa Signing time: Fri 02 Jan 2026 12:18:23 +0000 ROA not before: Fri 02 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25419 IP address blocks: 195.190.138.0/24 maxlen: 24 2001:678:22c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:09:7a:28:55:62:c6:b6:09:8e:4b:ee:44:a2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7 Validity Not Before: Jan 2 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd48e1a6fcc6f8b736a6070e04ec943a167f8d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:0a:d7:81:eb:09:83:11:de:65:fb:f5:25: 1b:f0:44:79:fe:89:16:88:49:71:07:96:47:25:41: 66:c0:4d:7a:0c:62:4f:c7:b5:98:6c:21:db:37:83: 55:49:ad:f5:b1:4a:21:4c:f4:88:ef:d5:00:56:e5: bf:5c:22:29:14:f4:44:fc:c0:51:1a:ea:75:ef:38: cd:8f:6c:49:e9:81:bd:7f:98:b1:96:d6:4a:ef:0a: 98:75:36:2d:e0:5a:05:8f:34:4a:81:de:9a:01:49: 87:76:e8:b0:3b:1a:19:a5:fe:57:9b:b5:3b:1a:14: ce:59:e8:56:1c:30:c3:52:8c:1f:16:3d:3e:0d:bf: a3:67:b4:7b:ee:9e:2b:fb:dd:f7:6f:ae:6f:d8:06: 41:e0:2a:80:0b:93:4b:14:2d:49:b8:81:d9:12:c2: 48:91:6a:01:33:55:32:28:fa:d7:5f:b9:68:a7:85: 4d:95:6f:bc:4c:b8:23:4f:f1:0a:19:9f:f2:67:c0: 80:2e:11:64:d1:3a:a7:a9:58:43:99:fd:bb:10:a8: 32:e7:a3:5c:0d:02:f9:3e:ec:a1:3f:02:8d:49:a4: 27:8d:69:a2:fb:89:70:61:64:d9:65:47:f3:c0:99: 96:1f:f8:e1:13:56:03:50:86:db:6a:17:12:0e:27: 76:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:48:E1:A6:FC:C6:F8:B7:36:A6:07:0E:04:EC:94:3A:16:7F:8D:07 X509v3 Authority Key Identifier: keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/zUjhpvzG-Lc2pgcOBOyUOhZ_jQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.138.0/24 IPv6: 2001:678:22c::/48 Signature Algorithm: sha256WithRSAEncryption 6a:5e:0e:d5:1b:ee:78:af:fe:9c:8c:8b:33:b8:bb:c0:8f:fb: c8:f5:64:d3:fb:f1:1f:88:d4:77:c1:33:75:68:61:0c:fc:68: 0a:dc:11:b6:0b:1c:6a:d0:9e:36:30:14:72:50:63:27:21:56: 98:20:5f:a8:cb:da:e8:f8:6c:b6:4b:11:a6:a3:07:f6:c5:86: 22:42:31:38:1e:13:20:81:62:a5:53:a5:2b:70:1f:6c:59:f7: fc:d6:d2:5c:20:f8:f8:f8:5f:e8:88:35:58:0c:5d:41:3a:0e: a0:20:18:02:1a:af:7b:70:61:b0:00:0e:1d:88:49:a7:69:46: 3d:68:da:af:da:49:75:84:ae:5a:5d:21:56:d5:06:81:ca:94: 5e:ea:a5:05:26:fc:bc:b0:15:e1:08:c4:cc:5c:56:75:fe:5d: 11:27:49:09:c8:11:9f:41:f6:c2:df:ca:4b:bf:99:96:27:08: 41:a9:ba:19:a8:b3:15:08:bc:22:52:85:9b:67:0d:9f:35:e2: fa:c5:ec:2b:b4:fc:2a:85:35:12:9e:1c:5f:99:06:18:7d:93: 43:0c:d7:e1:8c:8d:3b:fb:cc:d9:8d:06:75:85:cf:e8:28:d5: 87:b1:f8:79:90:e9:33:d3:1f:8f:14:ce:bf:d2:23:46:cf:99: 7e:49:db:a0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pQl6KFVixrYJjkvuRKKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzJmZTg3MTViNjNhMTIwZWQ3ZDA2N2ViNTI1ZmU0YjZk ZTkwZjcwHhcNMjYwMTAyMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDQ4ZTFhNmZjYzZmOGI3MzZhNjA3MGUwNGVjOTQzYTE2N2Y4ZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukoK14HrCYMR3mX79SUb8ER5/okW iElxB5ZHJUFmwE16DGJPx7WYbCHbN4NVSa31sUohTPSI79UAVuW/XCIpFPRE/MBR Gup17zjNj2xJ6YG9f5ixltZK7wqYdTYt4FoFjzRKgd6aAUmHduiwOxoZpf5Xm7U7 GhTOWehWHDDDUowfFj0+Db+jZ7R77p4r+933b65v2AZB4CqAC5NLFC1JuIHZEsJI kWoBM1UyKPrXX7lop4VNlW+8TLgjT/EKGZ/yZ8CALhFk0TqnqVhDmf27EKgy56Nc DQL5PuyhPwKNSaQnjWmi+4lwYWTZZUfzwJmWH/jhE1YDUIbbahcSDid22wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM1I4ab8xvi3NqYHDgTslDoWf40HMB8GA1UdIwQY MBaAFJZy/ocVtjoSDtfQZ+tSX+S23pD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5MLWh4VzJPaElPMTlCbjYxSmY1TGJla1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85NmI1OTctY2EyYi00YTljLWJiODIt NWJiZTdiMjBmM2ZjLzEvelVqaHB2ekctTGMycGdjT0JPeVVPaFpfalFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85NmI1OTctY2EyYi00YTljLWJiODItNWJiZTdiMjBmM2Zj LzEvbG5MLWh4VzJPaElPMTlCbjYxSmY1TGJla1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw76KMA8E AgACMAkDBwAgAQZ4AiwwDQYJKoZIhvcNAQELBQADggEBAGpeDtUb7niv/pyMizO4 u8CP+8j1ZNP78R+I1HfBM3VoYQz8aArcEbYLHGrQnjYwFHJQYychVpggX6jL2uj4 bLZLEaajB/bFhiJCMTgeEyCBYqVTpStwH2xZ9/zW0lwg+Pj4X+iINVgMXUE6DqAg GAIar3twYbAADh2ISadpRj1o2q/aSXWErlpdIVbVBoHKlF7qpQUm/LywFeEIxMxc VnX+XREnSQnIEZ9B9sLfyku/mZYnCEGpuhmosxUIvCJShZtnDZ814vrF7Cu0/CqF NRKeHF+ZBhh9k0MM1+GMjTv7zNmNBnWFz+go1Yex+HmQ6TPTH48Uzr/SI0bPmX5J 26A= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:34 2026 by rpki-client