This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/smU8i9fq7WXQo3r_qHaX1sYt38g.roa File: smU8i9fq7WXQo3r_qHaX1sYt38g.roa (raw, json) Hash identifier: IYizUbbg90V8yjrYVaximz/in1TS9nR6lCk13HWuaKU= Subject key identifier: B2:65:3C:8B:D7:EA:ED:65:D0:A3:7A:FF:A8:76:97:D6:C6:2D:DF:C8 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA755C27C00097850855EF3AF93B1FB Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/smU8i9fq7WXQo3r_qHaX1sYt38g.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8382 IP address blocks: 195.46.126.0/24 maxlen: 24 213.228.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:55:c2:7c:00:09:78:50:85:5e:f3:af:93:b1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2653c8bd7eaed65d0a37affa87697d6c62ddfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f1:65:3e:4f:9e:83:2a:95:e5:71:87:79:60: 1c:56:cd:4e:6b:c9:b2:d3:7e:d3:04:88:a0:c1:0f: 95:a0:77:a4:1e:5d:f7:3a:e3:b3:02:c8:ac:54:3b: 78:3c:97:e2:f7:0d:2a:f9:7d:cf:27:cc:44:75:67: 6e:3d:05:01:03:94:db:2a:09:57:e2:22:75:48:b8: 00:8a:99:5b:4e:69:49:e2:0f:05:8a:17:3a:43:0b: 7d:7a:81:ef:b0:c3:d8:ab:18:0f:4c:40:5f:85:8a: 0a:bc:d1:3e:98:2a:80:3f:a4:56:b1:37:7c:e7:4f: 83:bb:34:11:d1:a1:1d:08:9a:50:fb:be:54:4d:c2: 05:c8:b5:61:81:6b:21:99:cd:a6:2b:66:0c:78:55: 06:32:6c:92:84:a5:cb:b8:0a:d8:a6:53:ef:68:07: 49:9d:74:e1:ff:ca:51:be:b7:a5:24:91:0b:81:9b: 8b:4e:66:ca:e5:72:4f:ca:0f:64:16:88:fa:4e:66: 20:d3:52:d1:b3:8a:e1:79:fb:36:5d:3e:bf:7e:ba: 51:86:f0:ee:c1:d6:e3:0b:b3:dd:57:df:0a:3c:65: 86:4a:0b:2a:27:40:39:f2:60:b1:e3:b6:4a:d4:a4: 65:92:12:75:18:7e:50:ce:42:26:21:f7:2a:67:89: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:65:3C:8B:D7:EA:ED:65:D0:A3:7A:FF:A8:76:97:D6:C6:2D:DF:C8 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/smU8i9fq7WXQo3r_qHaX1sYt38g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.46.126.0/24 213.228.120.0/21 Signature Algorithm: sha256WithRSAEncryption 60:6b:6c:86:d7:2f:f7:aa:52:94:8c:83:00:49:42:63:34:46: 99:6d:d5:0e:a7:9b:57:2a:c5:ca:a6:96:4b:49:31:ea:34:72: 5f:15:44:9e:0f:c2:09:8c:11:99:1b:02:7d:c0:39:4d:32:e6: fd:89:eb:e8:42:3e:39:a2:24:d9:3f:22:a0:8f:3a:e1:7d:0a: 36:3a:99:06:95:c0:2f:01:aa:ec:43:eb:fd:87:84:03:20:de: 68:e3:ee:ed:f8:2c:46:3b:14:7d:21:d3:dd:3f:e6:9e:a1:16: 8b:f1:84:92:06:57:5b:35:b5:6c:93:a9:c3:fa:44:1b:a3:3b: e0:33:a8:e8:44:96:d1:19:99:58:b2:77:a5:17:60:cf:f2:db: 5c:b4:a1:7e:41:b7:41:b3:d8:b8:f4:37:3a:0e:9f:82:50:28: 36:3a:f8:c3:fa:69:de:de:c2:5f:d3:f3:3c:1f:c0:46:c0:b5: 95:33:15:70:f5:1b:aa:82:1e:f0:e2:b0:66:0d:46:07:6d:ec: b8:10:b5:2a:83:17:65:53:36:72:a2:03:52:ec:a9:45:8b:c7: 91:07:35:be:1b:2d:8c:ba:31:36:9b:7d:68:35:e0:41:2d:1f: b1:ee:24:b9:5e:d4:0f:78:38:d0:b9:5c:14:ab:54:4e:ca:0c: f9:ab:1a:33 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p1XCfAAJeFCFXvOvk7H7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjY1M2M4YmQ3ZWFlZDY1ZDBhMzdhZmZhODc2OTdkNmM2MmRkZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/FlPk+egyqV5XGHeWAcVs1Oa8my 037TBIigwQ+VoHekHl33OuOzAsisVDt4PJfi9w0q+X3PJ8xEdWduPQUBA5TbKglX 4iJ1SLgAiplbTmlJ4g8Fihc6Qwt9eoHvsMPYqxgPTEBfhYoKvNE+mCqAP6RWsTd8 50+DuzQR0aEdCJpQ+75UTcIFyLVhgWshmc2mK2YMeFUGMmyShKXLuArYplPvaAdJ nXTh/8pRvrelJJELgZuLTmbK5XJPyg9kFoj6TmYg01LRs4rhefs2XT6/frpRhvDu wdbjC7PdV98KPGWGSgsqJ0A58mCx47ZK1KRlkhJ1GH5QzkImIfcqZ4nfuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLJlPIvX6u1l0KN6/6h2l9bGLd/IMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvc21VOGk5ZnE3V1hRbzNyX3FIYVgxc1l0MzhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwy5+AwQD 1eR4MA0GCSqGSIb3DQEBCwUAA4IBAQBga2yG1y/3qlKUjIMASUJjNEaZbdUOp5tX KsXKppZLSTHqNHJfFUSeD8IJjBGZGwJ9wDlNMub9ievoQj45oiTZPyKgjzrhfQo2 OpkGlcAvAarsQ+v9h4QDIN5o4+7t+CxGOxR9IdPdP+aeoRaL8YSSBldbNbVsk6nD +kQbozvgM6joRJbRGZlYsnelF2DP8ttctKF+QbdBs9i49Dc6Dp+CUCg2OvjD+mne 3sJf0/M8H8BGwLWVMxVw9Ruqgh7w4rBmDUYHbey4ELUqgxdlUzZyogNS7KlFi8eR BzW+Gy2MujE2m31oNeBBLR+x7iS5XtQPeDjQuVwUq1ROygz5qxoz -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:03 2026 by rpki-client