This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/fdsXyKST1NSooA0SOdWNXyrQKIE.roa File: fdsXyKST1NSooA0SOdWNXyrQKIE.roa (raw, json) Hash identifier: q49gBnA2IZuUpW1nTeMLqaXrULLEsizhuzjfeilzgRw= Subject key identifier: 7D:DB:17:C8:A4:93:D4:D4:A8:A0:0D:12:39:D5:8D:5F:2A:D0:28:81 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED24E31719DD4985D2C729222D1DC8 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/fdsXyKST1NSooA0SOdWNXyrQKIE.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204388 IP address blocks: 195.187.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:24:e3:17:19:dd:49:85:d2:c7:29:22:2d:1d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ddb17c8a493d4d4a8a00d1239d58d5f2ad02881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:c3:4a:fe:ae:71:29:e5:9a:23:ef:42:c3: e6:27:e8:cc:91:b2:e1:dd:0b:93:30:f6:25:4c:24: bc:c9:20:15:cc:b6:a5:8c:81:eb:55:96:97:af:c3: 61:c3:88:06:81:20:87:46:00:71:c2:62:cd:a1:89: d4:85:c2:cc:af:bc:b8:cb:c1:1d:c1:26:50:45:82: d7:34:df:da:bc:5c:1b:d5:fe:f6:74:f2:fd:7b:ba: 60:95:35:29:60:1b:5e:c7:a3:10:f9:5a:79:39:b4: 65:e7:78:b3:a4:46:ad:b2:54:53:bc:eb:6d:59:da: 61:06:3a:16:8e:61:0d:1d:42:ff:a8:34:7e:71:50: 23:47:ca:ff:a7:fa:de:d3:cb:9a:a3:3a:8e:ef:13: ce:a2:71:dd:82:27:da:fc:21:0e:08:36:04:8f:4d: ad:b6:1e:1f:63:53:2b:5c:3f:a8:aa:d8:31:e2:f4: 84:18:60:29:8d:a6:03:df:1f:2d:80:99:ae:d2:df: 5d:f6:a1:69:e8:51:86:6c:a0:6d:de:d0:8e:ad:ed: d3:bb:1c:56:af:d9:39:e4:01:4c:b4:13:7f:fe:96: cb:77:55:1c:03:c6:fd:ba:65:5e:53:9d:a3:86:3b: e8:e1:8d:94:ef:5c:db:5e:21:02:dd:ca:e3:8b:c8: 6a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DB:17:C8:A4:93:D4:D4:A8:A0:0D:12:39:D5:8D:5F:2A:D0:28:81 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/fdsXyKST1NSooA0SOdWNXyrQKIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.187.42.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:71:f8:14:de:3f:2a:e5:34:2a:14:68:da:41:92:0c:9b:6e: 6b:ce:65:3c:08:7b:8b:db:db:02:bd:bc:58:a7:4e:86:f3:cb: fa:c7:cc:2a:14:b9:09:13:7b:7a:3b:e6:28:21:92:6a:fb:c9: 9f:4a:c8:e6:60:fc:f6:19:94:dc:dd:53:c9:52:9b:a2:df:7e: 44:39:5a:b5:e7:d6:e9:cb:71:5c:37:70:27:06:a3:e8:a0:b3: 59:da:ff:8a:39:a3:31:bb:f3:c2:9e:e9:e0:a8:39:9e:57:54: 7d:10:e8:ab:ac:98:93:75:63:1f:3f:24:91:5b:4c:5b:9d:ed: e3:27:94:bc:c3:b3:61:3b:4f:d9:a0:36:63:3f:46:53:d0:d8: bd:ab:52:6b:3b:7e:d0:97:37:c8:ed:69:2c:74:6e:77:60:69: 81:40:04:42:fa:fe:93:c9:c1:b9:b8:cb:3f:9a:f1:3d:1d:88: 12:7d:ea:88:49:d4:e8:ed:d9:43:e2:ad:29:c8:60:c6:53:5c: bf:70:fd:d6:3a:ed:0f:7d:67:81:7c:17:1c:68:0d:ad:2f:97: 9b:4a:2a:cf:08:8b:3a:1d:b6:e2:b8:5d:4a:9b:af:9d:43:3a: 9a:ce:22:6b:05:0f:49:08:60:56:cf:b6:a9:5c:8d:21:eb:d2: 6d:1d:97:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57STjFxndSYXSxykiLR3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGRiMTdjOGE0OTNkNGQ0YThhMDBkMTIzOWQ1OGQ1ZjJhZDAyODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMzDSv6ucSnlmiPvQsPmJ+jMkbLh 3QuTMPYlTCS8ySAVzLaljIHrVZaXr8Nhw4gGgSCHRgBxwmLNoYnUhcLMr7y4y8Ed wSZQRYLXNN/avFwb1f72dPL9e7pglTUpYBtex6MQ+Vp5ObRl53izpEatslRTvOtt WdphBjoWjmENHUL/qDR+cVAjR8r/p/re08uaozqO7xPOonHdgifa/CEOCDYEj02t th4fY1MrXD+oqtgx4vSEGGApjaYD3x8tgJmu0t9d9qFp6FGGbKBt3tCOre3TuxxW r9k55AFMtBN//pbLd1UcA8b9umVeU52jhjvo4Y2U71zbXiEC3crji8hq3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH3bF8ikk9TUqKANEjnVjV8q0CiBMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvZmRzWHlLU1QxTlNvb0EwU09kV05YeXJRS0lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7sqMA0G CSqGSIb3DQEBCwUAA4IBAQAucfgU3j8q5TQqFGjaQZIMm25rzmU8CHuL29sCvbxY p06G88v6x8wqFLkJE3t6O+YoIZJq+8mfSsjmYPz2GZTc3VPJUpui335EOVq159bp y3FcN3AnBqPooLNZ2v+KOaMxu/PCnungqDmeV1R9EOirrJiTdWMfPySRW0xbne3j J5S8w7NhO0/ZoDZjP0ZT0Ni9q1JrO37QlzfI7WksdG53YGmBQARC+v6TycG5uMs/ mvE9HYgSfeqISdTo7dlD4q0pyGDGU1y/cP3WOu0PfWeBfBccaA2tL5ebSirPCIs6 HbbiuF1Km6+dQzqaziJrBQ9JCGBWz7apXI0h69JtHZfk -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:49 2026 by rpki-client