This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/pXJZQxbSBDqofTDE9vannCeqPHU.roa File: pXJZQxbSBDqofTDE9vannCeqPHU.roa (raw, json) Hash identifier: ukAqHZV/xMM8uN5SZsafy/GsPc0EqLT+NakATV+Zg88= Subject key identifier: A5:72:59:43:16:D2:04:3A:A8:7D:30:C4:F6:F6:A7:9C:27:AA:3C:75 Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019B7F85128A03E737A5EE8B3755AD80BC36 Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/pXJZQxbSBDqofTDE9vannCeqPHU.roa Signing time: Fri 02 Jan 2026 16:23:06 +0000 ROA not before: Fri 02 Jan 2026 16:23:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5488 IP address blocks: 195.66.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:12:8a:03:e7:37:a5:ee:8b:37:55:ad:80:bc:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Jan 2 16:23:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a572594316d2043aa87d30c4f6f6a79c27aa3c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:85:af:b7:71:7c:42:05:1c:fa:34:82:9a:06: 87:c4:0b:88:76:4f:93:91:19:be:7d:5c:06:5c:29: f6:49:90:44:5d:5d:30:fc:22:d2:18:81:3e:4c:a5: 4d:ab:be:58:59:71:07:1c:f6:84:9c:6b:c2:8e:6d: 6a:31:ef:66:07:35:9b:36:7a:14:ea:3c:ca:b8:0e: cf:a2:5d:2b:cb:23:75:27:1a:c0:cf:7e:ae:73:ed: 99:08:8a:34:fa:38:6e:85:72:f0:e4:3c:f2:42:6a: 0c:08:ed:3e:c0:6d:26:a2:70:d1:76:d7:5d:65:72: 8a:59:f7:d4:2a:de:3f:a3:05:ae:c4:e5:fc:1b:2c: 11:e7:d2:68:81:10:12:8a:c5:c1:c0:6f:55:35:55: fa:ad:52:35:7a:49:ad:98:b0:aa:74:2c:01:d0:7c: b8:7e:1a:ea:48:4d:b1:20:5a:83:86:cc:f9:d0:0c: a3:24:98:cd:51:2d:6f:c3:bd:ea:07:3b:ca:27:93: 9d:f4:68:68:ba:22:52:72:23:44:0a:19:56:fa:06: 7e:64:77:2c:83:01:d0:c5:16:46:52:3c:69:3a:b2: b3:9a:95:42:41:5d:3d:52:ee:52:d6:ed:57:66:c8: d3:19:41:48:9f:91:c5:f3:e0:5a:79:e9:af:a9:d7: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:72:59:43:16:D2:04:3A:A8:7D:30:C4:F6:F6:A7:9C:27:AA:3C:75 X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/pXJZQxbSBDqofTDE9vannCeqPHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.107.0/24 Signature Algorithm: sha256WithRSAEncryption 49:6f:48:c1:72:b0:08:73:70:75:ba:c0:46:d7:f4:3a:2e:d2: d2:60:53:3d:5d:c3:06:5b:37:18:c1:51:60:22:71:84:e7:b2: 99:4d:cf:df:bd:2f:24:14:ea:eb:96:de:12:20:94:84:98:3d: f9:39:60:31:06:69:7e:f7:56:8b:5a:76:b0:a2:ff:85:39:75: 8d:a1:af:fb:b9:3c:b4:ab:f2:e7:81:3d:2f:8d:37:24:f0:57: 09:58:83:55:40:27:61:45:fd:31:e3:00:d7:f8:49:e6:88:10: 29:a2:dc:81:0c:99:40:ee:4d:43:b2:ac:42:00:5e:fc:15:4d: 40:c5:4b:78:1b:74:ca:d9:90:0b:ae:50:54:a1:e6:b1:bb:e6: a1:ed:8b:63:82:3c:ea:e3:bb:4d:16:17:45:e3:3b:1d:51:0c: fe:34:7c:dd:68:04:a5:6f:59:c2:5e:cd:c2:91:05:e0:a4:ec: c1:01:ce:18:34:20:6c:b5:27:54:96:f5:65:c4:d3:2b:2b:c9: 0e:c6:71:a8:4e:98:e3:1d:d6:94:dd:f1:1e:ef:ff:13:80:63: bd:1d:55:33:63:bc:7f:9e:50:cd:36:b1:74:bb:e7:76:d7:b2: c9:cc:95:81:79:48:f7:93:52:74:1b:55:68:87:32:67:19:93: 89:79:b5:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRKKA+c3pe6LN1WtgLw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjYwMTAyMTYyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTcyNTk0MzE2ZDIwNDNhYTg3ZDMwYzRmNmY2YTc5YzI3YWEzYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oWvt3F8QgUc+jSCmgaHxAuIdk+T kRm+fVwGXCn2SZBEXV0w/CLSGIE+TKVNq75YWXEHHPaEnGvCjm1qMe9mBzWbNnoU 6jzKuA7Pol0ryyN1JxrAz36uc+2ZCIo0+jhuhXLw5DzyQmoMCO0+wG0monDRdtdd ZXKKWffUKt4/owWuxOX8GywR59JogRASisXBwG9VNVX6rVI1ekmtmLCqdCwB0Hy4 fhrqSE2xIFqDhsz50AyjJJjNUS1vw73qBzvKJ5Od9GhouiJSciNEChlW+gZ+ZHcs gwHQxRZGUjxpOrKzmpVCQV09Uu5S1u1XZsjTGUFIn5HF8+Baeemvqdc5BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVyWUMW0gQ6qH0wxPb2p5wnqjx1MB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvcFhKWlF4YlNCRHFvZlRERTl2YW5uQ2VxUEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JrMA0G CSqGSIb3DQEBCwUAA4IBAQBJb0jBcrAIc3B1usBG1/Q6LtLSYFM9XcMGWzcYwVFg InGE57KZTc/fvS8kFOrrlt4SIJSEmD35OWAxBml+91aLWnawov+FOXWNoa/7uTy0 q/LngT0vjTck8FcJWINVQCdhRf0x4wDX+EnmiBApotyBDJlA7k1DsqxCAF78FU1A xUt4G3TK2ZALrlBUoeaxu+ah7Ytjgjzq47tNFhdF4zsdUQz+NHzdaASlb1nCXs3C kQXgpOzBAc4YNCBstSdUlvVlxNMrK8kOxnGoTpjjHdaU3fEe7/8TgGO9HVUzY7x/ nlDNNrF0u+d217LJzJWBeUj3k1J0G1VohzJnGZOJebW7 -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:09 2026 by rpki-client