This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/IF9Q2mJv-D2RGLIuOuKfNMWVngw.roa File: IF9Q2mJv-D2RGLIuOuKfNMWVngw.roa (raw, json) Hash identifier: kjzPy/2bPn68qL6lDttpNzisPWOLObsMw4ZdNbjMTQs= Subject key identifier: 20:5F:50:DA:62:6F:F8:3D:91:18:B2:2E:3A:E2:9F:34:C5:95:9E:0C Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED1DA7AC7AD3002CCEDC361CEE09A6 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/IF9Q2mJv-D2RGLIuOuKfNMWVngw.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199794 IP address blocks: 195.187.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1d:a7:ac:7a:d3:00:2c:ce:dc:36:1c:ee:09:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=205f50da626ff83d9118b22e3ae29f34c5959e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:60:2b:27:25:9f:59:36:1e:20:88:27:2f: 24:8f:a2:e3:67:1e:ce:c8:aa:6d:fb:c8:e0:a4:eb: 18:ee:76:d4:33:d2:01:7f:4d:cc:85:f8:a7:d7:d6: 4d:9c:dd:f7:14:a0:10:e8:2a:d3:4d:bb:ff:75:0b: d6:9c:4d:64:85:fc:15:ed:b3:bf:4e:40:fa:f0:2d: 58:52:0f:4a:4f:9d:d0:d8:fd:5e:5e:46:dd:44:7f: 7f:ae:98:ca:7d:1e:df:04:e3:5d:f8:fd:2f:fc:7d: 34:39:6a:9a:39:f9:b3:2b:fc:00:93:71:87:09:c2: f0:80:af:87:eb:3d:fa:9e:ec:8c:a8:9a:2e:28:d0: 9e:14:86:7e:a3:bf:2e:1a:d0:56:70:da:e8:be:e9: 1d:f1:e5:13:f4:72:e5:93:c9:f0:bf:6e:9a:03:46: 1a:c3:22:db:ec:36:b0:0a:52:01:88:11:58:27:5e: a9:13:52:30:8a:f4:63:3a:2c:6b:28:04:a5:c1:6d: 23:1b:17:3d:c1:e3:b9:74:44:03:05:f4:66:91:dd: 83:e6:b2:76:8d:6b:66:7c:b9:8c:30:a2:2c:07:b1: 81:9c:b6:81:6a:20:18:76:fa:a8:93:c5:aa:09:6d: 20:e6:98:71:c6:ae:46:f0:80:8e:d6:5d:58:ba:1c: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:50:DA:62:6F:F8:3D:91:18:B2:2E:3A:E2:9F:34:C5:95:9E:0C X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/IF9Q2mJv-D2RGLIuOuKfNMWVngw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.187.159.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:37:c7:5a:51:29:95:d7:4f:64:f7:80:0c:dd:ad:d5:84:c5: d7:c9:ae:19:24:3d:82:40:3b:c7:c2:f1:e8:14:81:29:69:bc: e2:24:0c:94:7f:cd:82:49:b1:d8:09:6e:12:be:54:6b:03:54: 8a:ef:c2:6c:35:63:a4:1d:44:74:49:91:0d:50:74:cf:07:b6: 29:a5:b4:89:fd:0b:bd:52:7b:0f:8f:fe:b6:f5:cc:6c:8c:4f: 41:4f:3d:12:66:08:24:34:80:d7:f7:8a:bf:84:4f:30:39:cf: 81:7b:c9:75:fb:67:f1:7e:cd:fc:40:b0:33:02:e8:68:de:c7: f4:90:8b:95:92:3f:6e:17:66:c6:fb:fc:65:ab:7e:54:b1:27: d4:9f:03:0e:f6:bd:0c:72:0d:ed:49:6a:73:c0:43:7c:18:d4: e3:47:dd:88:e1:aa:23:ea:d1:89:33:7b:6f:b5:0a:e5:d7:51: 4e:f4:e3:2e:9f:8f:f6:e5:3d:7e:f0:6a:00:58:3f:06:66:9e: ea:e3:e7:4d:9f:57:3e:37:06:d8:cc:f6:f4:91:a9:e0:0f:54: 43:26:b6:99:84:81:7a:74:34:d8:0e:17:68:53:11:f4:43:3e: 00:f1:81:ea:3b:9e:ab:3e:e1:93:e0:d1:78:7f:00:48:2f:9e: d0:0f:de:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57R2nrHrTACzO3DYc7gmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDVmNTBkYTYyNmZmODNkOTExOGIyMmUzYWUyOWYzNGM1OTU5ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrpgKycln1k2HiCIJy8kj6LjZx7O yKpt+8jgpOsY7nbUM9IBf03Mhfin19ZNnN33FKAQ6CrTTbv/dQvWnE1khfwV7bO/ TkD68C1YUg9KT53Q2P1eXkbdRH9/rpjKfR7fBONd+P0v/H00OWqaOfmzK/wAk3GH CcLwgK+H6z36nuyMqJouKNCeFIZ+o78uGtBWcNrovukd8eUT9HLlk8nwv26aA0Ya wyLb7DawClIBiBFYJ16pE1IwivRjOixrKASlwW0jGxc9weO5dEQDBfRmkd2D5rJ2 jWtmfLmMMKIsB7GBnLaBaiAYdvqok8WqCW0g5phxxq5G8ICO1l1YuhzrsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCBfUNpib/g9kRiyLjrinzTFlZ4MMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvSUY5UTJtSnYtRDJSR0xJdU91S2ZOTVdWbmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7ufMA0G CSqGSIb3DQEBCwUAA4IBAQCNN8daUSmV109k94AM3a3VhMXXya4ZJD2CQDvHwvHo FIEpabziJAyUf82CSbHYCW4SvlRrA1SK78JsNWOkHUR0SZENUHTPB7YppbSJ/Qu9 UnsPj/629cxsjE9BTz0SZggkNIDX94q/hE8wOc+Be8l1+2fxfs38QLAzAuho3sf0 kIuVkj9uF2bG+/xlq35UsSfUnwMO9r0Mcg3tSWpzwEN8GNTjR92I4aoj6tGJM3tv tQrl11FO9OMun4/25T1+8GoAWD8GZp7q4+dNn1c+NwbYzPb0kangD1RDJraZhIF6 dDTYDhdoUxH0Qz4A8YHqO56rPuGT4NF4fwBIL57QD96U -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:37 2026 by rpki-client