This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa File: lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa (raw, json) Hash identifier: DS6+mQyyS1WgqS8CIrjWgik6/BiJxSFGFw65yEtb7os= Subject key identifier: 94:85:61:1C:CD:60:D5:35:B9:75:D7:CF:BE:46:39:FD:FC:C6:A0:A5 Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d Certificate serial: 019B783514C536B54C0B938AABBA08CED89D Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210547 IP address blocks: 195.96.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:14:c5:36:b5:4c:0b:93:8a:ab:ba:08:ce:d8:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9485611ccd60d535b975d7cfbe4639fdfcc6a0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ae:e0:80:c7:1f:57:0f:a7:26:2b:d5:d0:4c: 67:22:ce:ac:1f:58:67:fe:8a:65:cf:15:02:10:d6: c5:39:a0:7a:82:67:26:b9:fb:91:55:8b:72:f8:5d: e7:88:d7:5b:91:c0:8b:63:e9:1e:48:a6:2e:25:2d: f5:c8:78:5f:e4:66:4f:06:46:88:6d:ca:10:dc:a0: 9f:c7:83:84:9a:f8:0b:78:2b:7a:d0:48:f6:0b:d0: 6a:13:0a:5b:71:0a:53:bc:ad:b4:a5:7f:82:66:a1: d2:c5:6b:c1:6f:99:e4:95:61:cb:93:60:79:e6:22: e2:1f:ec:eb:0a:71:2a:a9:32:c4:03:20:9f:58:9b: 18:4f:56:2b:d5:96:15:47:ae:51:f4:0a:b8:c4:5b: c9:67:a2:dc:20:5c:03:0b:cd:1d:b0:5e:71:bd:9e: 6b:75:ba:7b:43:e4:c4:ea:b4:9e:34:16:94:29:d2: 16:50:6d:42:f5:66:96:7b:4c:e4:02:6f:e1:18:4a: 04:2c:63:b1:a7:3b:e9:ee:ba:cb:ce:92:ff:21:48: 86:3d:d8:7b:3b:37:0c:b1:97:89:6a:5d:6e:6b:fb: ec:c3:d4:71:5f:64:ff:81:01:8d:fd:08:57:00:b3: 90:bc:75:7f:a6:34:31:90:b8:87:9f:73:b3:79:d2: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:85:61:1C:CD:60:D5:35:B9:75:D7:CF:BE:46:39:FD:FC:C6:A0:A5 X509v3 Authority Key Identifier: keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.96.153.0/24 Signature Algorithm: sha256WithRSAEncryption b0:3d:01:bd:0c:bf:ca:c0:cf:7d:3d:8a:ec:dd:d4:95:fb:0a: 7d:cf:fd:e1:e5:4b:df:45:21:47:2c:bc:3e:ec:d9:07:35:ca: 78:0a:93:a1:c3:98:ef:1c:65:1f:cf:db:83:28:e1:1f:8e:0a: 3d:3b:41:42:22:29:33:12:d9:f2:79:2e:3a:83:44:b2:6c:51: 34:ac:92:f7:bd:77:11:f3:29:37:f7:29:4b:36:af:e7:ce:37: d2:09:ac:a9:fd:54:28:a7:91:01:bc:d0:d8:3b:76:1b:f8:93: a7:06:5e:6b:14:e9:b9:21:31:77:90:5d:b6:2b:ec:d0:a9:d7: 83:83:0d:96:13:a0:91:ad:81:46:a0:39:3d:7f:38:cb:3a:a3: ee:3a:b9:fc:f2:bc:bf:85:21:2b:7e:e4:66:fc:96:c9:17:65: bf:e9:2b:60:1c:3d:38:25:46:ff:fd:30:f6:98:34:ab:c1:66: 11:e2:1b:21:73:57:86:b7:e6:fa:a5:0b:61:73:a5:17:5b:5e: 01:7e:b7:60:03:ab:f9:a0:75:a9:32:ba:25:81:56:2a:42:b3: 95:58:63:11:89:1d:3a:23:73:0a:97:da:8f:6a:20:7a:aa:c0: ca:9b:f8:08:26:96:08:c3:da:18:b6:3f:02:0c:ba:0d:c8:aa: bc:e8:a4:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRTFNrVMC5OKq7oIztidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz NTJmNWQwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDg1NjExY2NkNjBkNTM1Yjk3NWQ3Y2ZiZTQ2MzlmZGZjYzZhMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja7ggMcfVw+nJivV0ExnIs6sH1hn /oplzxUCENbFOaB6gmcmufuRVYty+F3niNdbkcCLY+keSKYuJS31yHhf5GZPBkaI bcoQ3KCfx4OEmvgLeCt60Ej2C9BqEwpbcQpTvK20pX+CZqHSxWvBb5nklWHLk2B5 5iLiH+zrCnEqqTLEAyCfWJsYT1Yr1ZYVR65R9Aq4xFvJZ6LcIFwDC80dsF5xvZ5r dbp7Q+TE6rSeNBaUKdIWUG1C9WaWe0zkAm/hGEoELGOxpzvp7rrLzpL/IUiGPdh7 OzcMsZeJal1ua/vsw9RxX2T/gQGN/QhXALOQvHV/pjQxkLiHn3OzedKtWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSFYRzNYNU1uXXXz75GOf38xqClMB8GA1UdIwQY MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt MGRmN2RmNGQ1YjAxLzEvbElWaEhNMWcxVFc1ZGRmUHZrWTVfZnpHb0tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CZMA0G CSqGSIb3DQEBCwUAA4IBAQCwPQG9DL/KwM99PYrs3dSV+wp9z/3h5UvfRSFHLLw+ 7NkHNcp4CpOhw5jvHGUfz9uDKOEfjgo9O0FCIikzEtnyeS46g0SybFE0rJL3vXcR 8yk39ylLNq/nzjfSCayp/VQop5EBvNDYO3Yb+JOnBl5rFOm5ITF3kF22K+zQqdeD gw2WE6CRrYFGoDk9fzjLOqPuOrn88ry/hSErfuRm/JbJF2W/6StgHD04JUb//TD2 mDSrwWYR4hshc1eGt+b6pQthc6UXW14BfrdgA6v5oHWpMrolgVYqQrOVWGMRiR06 I3MKl9qPaiB6qsDKm/gIJpYIw9oYtj8CDLoNyKq86KS2 -----END CERTIFICATE-----Generated at Tue Jan 27 00:06:28 2026 by rpki-client