This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/9QydodLxK9rUXP9S5hg2oY8e164.roa File: 9QydodLxK9rUXP9S5hg2oY8e164.roa (raw, json) Hash identifier: 9FAzjdLFT8fn52nXr1/CoNt7SxfwNxZtFTZWh8c6oZI= Subject key identifier: F5:0C:9D:A1:D2:F1:2B:DA:D4:5C:FF:52:E6:18:36:A1:8F:1E:D7:AE Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f Certificate serial: 019B7DCA88D3D7401C61AA1C96E8A0638586 Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/9QydodLxK9rUXP9S5hg2oY8e164.roa Signing time: Fri 02 Jan 2026 08:19:43 +0000 ROA not before: Fri 02 Jan 2026 08:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29445 IP address blocks: 195.149.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:88:d3:d7:40:1c:61:aa:1c:96:e8:a0:63:85:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f Validity Not Before: Jan 2 08:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f50c9da1d2f12bdad45cff52e61836a18f1ed7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:17:ec:58:19:c9:3a:2a:c8:7b:86:15:7b: c1:ae:21:3b:d4:b2:2a:07:a0:62:aa:89:b7:e0:c9: b5:4f:6f:f5:fc:e2:c5:33:f4:63:2b:91:b2:4f:a1: 9f:79:e7:aa:9a:20:f2:3f:41:ce:70:fa:ba:c2:19: b1:a1:8f:4b:cd:17:88:7c:af:1c:17:ba:cb:4a:d8: 88:67:27:4d:1d:0e:69:51:71:8b:e6:3a:e2:9f:35: f5:f7:e6:f6:f3:ab:8b:44:a5:e8:8c:f3:5d:67:24: 7a:08:4a:97:93:5f:3a:72:a8:bf:2d:d8:df:61:22: 2c:d1:55:d1:e7:62:d8:c0:bb:fe:6e:47:84:8d:3a: 39:06:4c:12:f7:cd:2a:c5:2d:3a:98:53:16:d7:b1: bf:ed:28:a1:c1:42:3b:af:31:e0:20:1f:65:41:23: 8b:ad:43:10:f0:f6:e2:58:ed:ae:fe:57:67:a7:e4: 7c:3b:f2:59:95:1b:7e:be:a2:4a:39:b9:61:b5:51: 85:73:79:96:fa:9f:67:82:50:0f:82:fa:c1:2f:22: 9e:b5:3d:08:9a:80:d0:b2:1b:f7:0d:db:11:85:13: a3:0c:a5:1f:df:15:8f:73:10:fb:7c:4d:80:68:3c: 08:8c:44:b4:e5:58:1a:b7:af:27:68:7e:5d:02:5a: 7c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0C:9D:A1:D2:F1:2B:DA:D4:5C:FF:52:E6:18:36:A1:8F:1E:D7:AE X509v3 Authority Key Identifier: keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/9QydodLxK9rUXP9S5hg2oY8e164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.95.0/24 Signature Algorithm: sha256WithRSAEncryption 32:59:6f:2b:d9:1d:42:61:99:2b:7e:a7:de:d4:f9:73:64:78: 7f:a8:7c:29:66:4e:0e:04:37:de:dd:ba:a9:14:67:64:5d:1f: 4b:11:3e:5d:bd:82:99:b5:ad:b4:09:e9:c4:1b:60:50:36:b4: 4c:b4:ba:fa:9b:c4:30:f0:20:82:28:da:e3:1a:f3:dc:3b:d0: 14:36:19:78:12:4a:9d:86:18:15:ec:79:dd:58:5b:d2:73:10: 54:2e:64:e5:cc:a2:40:9b:a5:ce:99:26:b6:d1:90:18:66:c0: cd:d2:3c:58:78:ae:ee:34:63:a6:a1:e9:37:78:15:45:f1:be: a4:d8:b2:6a:7d:a2:79:1b:ad:0b:db:92:c8:5f:b5:ee:21:7e: 3c:dc:de:6a:76:68:9d:e6:4c:2e:ae:cb:7e:5b:0f:21:55:86: f7:6b:d3:a3:11:e3:21:35:77:15:2e:ba:ca:c1:75:85:13:00: 2e:88:bb:e9:d1:c6:6a:ad:fc:e7:29:96:9c:c2:ad:9c:05:f0: a8:4a:cc:fb:1f:94:b2:45:6c:e1:97:02:a0:56:6e:5e:af:2d: 8b:b4:36:d7:c5:2c:1a:86:d7:49:02:26:9f:d3:7f:16:da:b0: d5:93:aa:a4:3e:6a:b9:8a:ec:91:4c:55:40:ad:89:52:5b:f3: 47:df:f6:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yojT10AcYaocluigY4WGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTIyZGE5YmYwYTc0MTcxZWViYjRjZDk4ZmMyNWYzMDQx YWRkMmYwHhcNMjYwMTAyMDgxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTBjOWRhMWQyZjEyYmRhZDQ1Y2ZmNTJlNjE4MzZhMThmMWVkN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqswX7FgZyToqyHuGFXvBriE71LIq B6Biqom34Mm1T2/1/OLFM/RjK5GyT6GfeeeqmiDyP0HOcPq6whmxoY9LzReIfK8c F7rLStiIZydNHQ5pUXGL5jrinzX19+b286uLRKXojPNdZyR6CEqXk186cqi/Ldjf YSIs0VXR52LYwLv+bkeEjTo5BkwS980qxS06mFMW17G/7SihwUI7rzHgIB9lQSOL rUMQ8PbiWO2u/ldnp+R8O/JZlRt+vqJKOblhtVGFc3mW+p9nglAPgvrBLyKetT0I moDQshv3DdsRhROjDKUf3xWPcxD7fE2AaDwIjES05Vgat68naH5dAlp8UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUMnaHS8Sva1Fz/UuYYNqGPHteuMB8GA1UdIwQY MBaAFILiLam/CnQXHuu0zZj8JfMEGt0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjIt NWMyOTE5ZGE4ZGYzLzEvOVF5ZG9kTHhLOXJVWFA5UzVoZzJvWThlMTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjItNWMyOTE5ZGE4ZGYz LzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VfMA0G CSqGSIb3DQEBCwUAA4IBAQAyWW8r2R1CYZkrfqfe1PlzZHh/qHwpZk4OBDfe3bqp FGdkXR9LET5dvYKZta20CenEG2BQNrRMtLr6m8Qw8CCCKNrjGvPcO9AUNhl4Ekqd hhgV7HndWFvScxBULmTlzKJAm6XOmSa20ZAYZsDN0jxYeK7uNGOmoek3eBVF8b6k 2LJqfaJ5G60L25LIX7XuIX483N5qdmid5kwurst+Ww8hVYb3a9OjEeMhNXcVLrrK wXWFEwAuiLvp0cZqrfznKZacwq2cBfCoSsz7H5SyRWzhlwKgVm5ery2LtDbXxSwa htdJAiaf038W2rDVk6qkPmq5iuyRTFVArYlSW/NH3/YR -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:35 2026 by rpki-client