This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/uEUz4h6ZqENXTJXH8rtJ5lPv1F0.roa File: uEUz4h6ZqENXTJXH8rtJ5lPv1F0.roa (raw, json) Hash identifier: 54u1I/fRE+8VFTlqpk42V75B+OAXNAqdlc2uX9YK3pM= Subject key identifier: B8:45:33:E2:1E:99:A8:43:57:4C:95:C7:F2:BB:49:E6:53:EF:D4:5D Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Certificate serial: 019B7CED05ADB8AE6FE1718E8C6A1F605BA7 Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/uEUz4h6ZqENXTJXH8rtJ5lPv1F0.roa Signing time: Fri 02 Jan 2026 04:17:46 +0000 ROA not before: Fri 02 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63018 IP address blocks: 195.137.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:05:ad:b8:ae:6f:e1:71:8e:8c:6a:1f:60:5b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Validity Not Before: Jan 2 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b84533e21e99a843574c95c7f2bb49e653efd45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:cd:8a:a3:38:c9:0e:90:02:fe:b9:2b:39: e3:a6:4b:f6:b2:c0:d9:9c:cd:7f:62:d0:1d:2e:91: 75:79:95:de:b6:b5:5d:f6:03:52:74:23:37:8b:c6: 7b:60:74:98:d5:52:4f:ee:3a:c6:45:4b:21:f6:af: 5c:99:0c:61:68:79:b3:42:73:75:1b:7b:c7:81:37: 86:90:e5:4a:bf:f0:2d:3c:42:d5:19:f9:fe:02:b6: 28:4a:39:4a:e3:48:b3:5e:5c:35:ee:28:14:36:ff: 86:4e:43:3d:be:69:ce:e5:bf:b4:2a:37:be:74:cb: 7a:1c:80:25:f9:9c:43:7d:74:5e:0d:7a:cf:95:aa: 5a:fd:d5:21:cf:b8:f4:91:b6:0b:47:d5:0e:32:64: 6c:46:9e:e5:a5:e6:94:72:29:9d:3e:1e:7c:76:0b: 6f:ac:97:e4:93:72:2d:07:a1:9b:cb:63:9d:97:df: b4:89:e1:41:27:c2:54:d6:36:86:1b:5d:2e:ef:54: 97:cc:3d:c6:0f:ad:ed:52:fa:95:2f:a9:1e:0b:40: ca:da:31:09:69:27:69:d5:ff:f9:d2:f6:1b:12:75: 85:36:b0:18:52:1e:ed:80:20:b7:ad:a6:47:0e:13: df:da:41:d2:fc:f4:80:68:cc:71:29:0e:4b:59:6c: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:45:33:E2:1E:99:A8:43:57:4C:95:C7:F2:BB:49:E6:53:EF:D4:5D X509v3 Authority Key Identifier: keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/uEUz4h6ZqENXTJXH8rtJ5lPv1F0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.220.0/24 Signature Algorithm: sha256WithRSAEncryption 72:af:2e:22:13:d6:5b:22:c4:9a:17:77:ae:27:86:77:12:38: 53:7a:fd:d5:8e:32:4f:cf:68:af:18:e3:fd:ca:70:c8:4e:d6: 8f:db:60:0f:58:c6:4b:bf:71:8b:d1:b3:ed:52:c0:aa:56:3d: af:79:57:0c:89:e5:fc:a5:56:a6:57:d4:44:27:e0:50:45:84: 32:a8:1a:50:02:f8:44:97:70:b0:c9:ba:19:4e:52:f8:c2:98: aa:fe:76:38:b2:9c:2a:7b:1b:3e:56:b8:17:fb:1f:b5:da:d5: 1c:03:17:22:90:90:de:91:45:e8:32:cf:a2:5d:59:74:b4:40: 95:01:a6:22:87:4f:50:f4:e7:f1:9f:f3:24:40:cb:2f:9a:77: 13:ea:31:f1:82:85:88:41:1a:e0:f9:31:64:9b:13:28:6b:7e: 9b:88:8c:1b:f0:c6:7b:4f:59:00:29:88:b1:96:cc:5f:93:e4: 4b:cd:84:2e:89:fa:00:b5:16:5b:80:7a:ea:6e:e6:19:0e:ae: dd:e2:96:bd:0a:ae:d1:df:57:37:9f:e4:b9:7a:d8:bb:3f:58: 00:44:78:d0:22:c1:19:77:34:5c:0d:d6:d4:85:31:46:1d:f7: 8a:1f:19:fe:36:01:56:74:4d:d0:81:a6:e4:9d:0f:7d:2d:59: d5:5f:9b:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QWtuK5v4XGOjGofYFunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5 Mzc3Y2QwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODQ1MzNlMjFlOTlhODQzNTc0Yzk1YzdmMmJiNDllNjUzZWZkNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rbNiqM4yQ6QAv65Kznjpkv2ssDZ nM1/YtAdLpF1eZXetrVd9gNSdCM3i8Z7YHSY1VJP7jrGRUsh9q9cmQxhaHmzQnN1 G3vHgTeGkOVKv/AtPELVGfn+ArYoSjlK40izXlw17igUNv+GTkM9vmnO5b+0Kje+ dMt6HIAl+ZxDfXReDXrPlapa/dUhz7j0kbYLR9UOMmRsRp7lpeaUcimdPh58dgtv rJfkk3ItB6Gby2Odl9+0ieFBJ8JU1jaGG10u71SXzD3GD63tUvqVL6keC0DK2jEJ aSdp1f/50vYbEnWFNrAYUh7tgCC3raZHDhPf2kHS/PSAaMxxKQ5LWWzVZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhFM+IemahDV0yVx/K7SeZT79RdMB8GA1UdIwQY MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt NzdjZjgxMDQxMDgzLzEvdUVVejRoNlpxRU5YVEpYSDhydEo1bFB2MUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4ncMA0G CSqGSIb3DQEBCwUAA4IBAQByry4iE9ZbIsSaF3euJ4Z3EjhTev3VjjJPz2ivGOP9 ynDITtaP22APWMZLv3GL0bPtUsCqVj2veVcMieX8pVamV9REJ+BQRYQyqBpQAvhE l3CwyboZTlL4wpiq/nY4spwqexs+VrgX+x+12tUcAxcikJDekUXoMs+iXVl0tECV AaYih09Q9Ofxn/MkQMsvmncT6jHxgoWIQRrg+TFkmxMoa36biIwb8MZ7T1kAKYix lsxfk+RLzYQuifoAtRZbgHrqbuYZDq7d4pa9Cq7R31c3n+S5eti7P1gARHjQIsEZ dzRcDdbUhTFGHfeKHxn+NgFWdE3QgabknQ99LVnVX5u3 -----END CERTIFICATE-----Generated at Wed Jan 21 02:31:52 2026 by rpki-client