This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa File: V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa (raw, json) Hash identifier: ry1QmNgsoyY18ZwPnwsZ1kzSR5GRuG7sj4PvQ3AErOM= Subject key identifier: 57:C6:68:0A:C5:83:F6:6B:A3:F0:D8:C5:16:07:3A:25:66:06:68:94 Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48 Certificate serial: 019B77592C0B48C6DE1CDE1C1D6F237C4810 Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29081 IP address blocks: 195.42.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2c:0b:48:c6:de:1c:de:1c:1d:6f:23:7c:48:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57c6680ac583f66ba3f0d8c516073a2566066894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b5:26:50:16:80:52:81:5a:8a:71:62:b6:08: f9:80:ec:46:16:40:e7:20:cf:09:5a:87:ce:2f:d4: dc:76:b6:94:44:02:22:0a:5a:56:f0:5b:55:55:10: c8:b4:7c:c9:bd:48:84:2f:1b:e4:a7:76:9e:94:62: 1f:c8:96:b0:da:dc:84:1e:a4:9b:bd:0d:84:b5:32: 2b:a9:68:ef:98:ab:a5:9e:0c:bb:df:98:4a:91:b9: c1:0d:ae:7b:28:b1:ca:a5:a3:71:8e:09:b2:b1:c9: a3:9d:e1:1d:6a:5b:71:d4:b9:86:1d:16:0b:b2:58: e3:d0:ac:ee:93:bc:97:c4:c8:dc:53:36:8f:19:de: 34:d4:37:35:73:ca:61:8b:22:b6:e1:56:49:18:1d: 17:f1:3f:e9:8a:f2:44:d7:36:b2:ca:23:79:c3:78: 2d:dd:ef:bc:a3:b5:4d:2f:fe:df:28:1d:8d:8b:ec: f5:75:47:46:fe:4f:54:39:7d:8e:0d:c6:0a:c7:13: 3e:7b:6a:ea:8c:cd:9a:42:cd:1f:2a:5a:14:7b:67: b5:0a:05:ba:41:a1:e8:21:08:2b:e7:9c:6d:aa:94: 37:ad:5d:8f:86:30:e4:fc:4e:3c:1b:00:55:e5:89: a2:c2:f0:d4:8b:3a:3f:2e:a7:e1:68:ca:48:e6:41: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C6:68:0A:C5:83:F6:6B:A3:F0:D8:C5:16:07:3A:25:66:06:68:94 X509v3 Authority Key Identifier: keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.106.0/23 Signature Algorithm: sha256WithRSAEncryption a5:92:c6:88:7d:97:79:c9:2b:ae:05:19:80:09:a9:63:97:c0: 8e:bc:56:a3:f3:34:95:a9:58:8f:24:b0:be:12:bb:fe:2e:e4: 57:d4:34:6d:35:d6:d8:a2:1e:9e:9b:fa:a0:e8:ac:9e:6a:64: df:86:74:b4:f6:db:b3:89:e8:76:58:2f:82:53:14:63:8a:31: ec:09:d3:e5:16:d7:f4:b9:18:b7:1c:23:58:20:0b:00:76:31: 9e:bc:37:a5:5e:23:e1:8d:29:04:73:2f:df:50:12:73:21:86: 22:26:65:4e:2b:92:40:15:a4:50:d7:32:23:20:84:a6:21:7a: 41:8b:a4:fe:65:88:55:44:55:09:c6:11:24:be:b0:66:9c:85: de:39:de:36:07:08:f1:dc:5b:c7:cb:d7:cf:6b:cf:03:e4:0a: ef:bb:1c:6b:47:af:85:99:e0:24:e5:96:72:17:b1:51:a1:89: 46:6d:5b:1c:5a:06:a3:8b:af:3d:c9:08:c8:48:0f:f2:7f:e7: 87:7f:85:60:8d:93:81:ca:c3:3b:c3:8b:a4:f8:ad:31:ea:16: d5:af:6e:fc:6d:97:c7:83:ec:36:5b:31:1a:18:9c:63:dd:3b: f2:45:8e:46:6f:c1:c8:56:00:0b:b8:55:54:60:37:14:72:ac: aa:87:e5:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSwLSMbeHN4cHW8jfEgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDRlMmZjMmI0MWU4NTZkYmE1YmE2MjIzNWJhNjQxYTBk ODFiNDgwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2M2NjgwYWM1ODNmNjZiYTNmMGQ4YzUxNjA3M2EyNTY2MDY2ODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LUmUBaAUoFainFitgj5gOxGFkDn IM8JWofOL9TcdraURAIiClpW8FtVVRDItHzJvUiELxvkp3aelGIfyJaw2tyEHqSb vQ2EtTIrqWjvmKulngy735hKkbnBDa57KLHKpaNxjgmyscmjneEdaltx1LmGHRYL sljj0Kzuk7yXxMjcUzaPGd401Dc1c8phiyK24VZJGB0X8T/pivJE1zayyiN5w3gt 3e+8o7VNL/7fKB2Ni+z1dUdG/k9UOX2ODcYKxxM+e2rqjM2aQs0fKloUe2e1CgW6 QaHoIQgr55xtqpQ3rV2PhjDk/E48GwBV5YmiwvDUizo/LqfhaMpI5kH4TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFfGaArFg/Zro/DYxRYHOiVmBmiUMB8GA1UdIwQY MBaAFFzU4vwrQehW26W6YiNbpkGg2BtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYt MTYzY2Q4YmJmNDMxLzEvVjhab0NzV0Q5bXVqOE5qRkZnYzZKV1lHYUpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYtMTYzY2Q4YmJmNDMx LzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwypqMA0G CSqGSIb3DQEBCwUAA4IBAQClksaIfZd5ySuuBRmACaljl8COvFaj8zSVqViPJLC+ Erv+LuRX1DRtNdbYoh6em/qg6KyeamTfhnS09tuzieh2WC+CUxRjijHsCdPlFtf0 uRi3HCNYIAsAdjGevDelXiPhjSkEcy/fUBJzIYYiJmVOK5JAFaRQ1zIjIISmIXpB i6T+ZYhVRFUJxhEkvrBmnIXeOd42Bwjx3FvHy9fPa88D5ArvuxxrR6+FmeAk5ZZy F7FRoYlGbVscWgaji689yQjISA/yf+eHf4VgjZOBysM7w4uk+K0x6hbVr278bZfH g+w2WzEaGJxj3TvyRY5Gb8HIVgALuFVUYDcUcqyqh+Uy -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:55 2026 by rpki-client