This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/IIlVo0fidTvQqKtqFi9ULMHfipo.roa File: IIlVo0fidTvQqKtqFi9ULMHfipo.roa (raw, json) Hash identifier: kjOe1mZ+Dl42eBxnVxbtE/VrvseR8cEoFJ+of+SOdBo= Subject key identifier: 20:89:55:A3:47:E2:75:3B:D0:A8:AB:6A:16:2F:54:2C:C1:DF:8A:9A Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Certificate serial: 019B78A365FC0933128B285590AA4114030F Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/IIlVo0fidTvQqKtqFi9ULMHfipo.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35625 IP address blocks: 195.95.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:65:fc:09:33:12:8b:28:55:90:aa:41:14:03:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=208955a347e2753bd0a8ab6a162f542cc1df8a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:90:8e:74:41:a0:f6:d7:9a:60:73:71:e9: 68:c6:2c:73:b4:ec:a8:df:18:fa:06:7d:47:45:71: b9:fb:d2:3d:66:a1:df:61:94:84:2a:b8:c6:42:1d: 45:33:a3:09:7c:cd:28:d3:a6:04:1c:89:ee:f5:c8: 08:ee:57:bc:d4:81:ae:6a:31:cb:c4:bd:77:e4:e2: d2:b7:66:96:72:e1:bc:ce:a4:8d:4f:99:7a:64:53: db:5b:71:ca:0e:a1:b4:81:f9:23:85:43:7b:a1:d1: f5:d7:44:5f:36:0c:cd:cf:8e:ea:c9:e6:ba:07:1b: 11:93:51:bc:ac:66:7d:67:c0:45:1f:84:ea:2c:21: 43:29:14:60:e8:65:22:96:f8:15:b7:2c:3d:e5:73: 1c:23:c1:ef:24:f2:67:e6:b7:b9:26:f8:b5:d7:58: 74:7d:db:09:b1:d1:6b:9d:63:e6:bf:19:a4:8c:6e: 8b:a3:81:3b:1d:f9:76:06:e9:07:4a:af:5e:52:fa: 5f:d0:b0:39:82:64:6b:3f:6e:ed:8c:c4:9d:14:1c: ad:64:de:74:cb:39:44:97:c1:bc:3b:d0:3d:55:0e: d6:6f:f0:fb:71:48:46:0d:d0:5c:1d:d8:bb:48:61: 44:3a:e5:b9:98:97:bf:a7:42:24:33:15:1b:4c:f3: 77:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:89:55:A3:47:E2:75:3B:D0:A8:AB:6A:16:2F:54:2C:C1:DF:8A:9A X509v3 Authority Key Identifier: keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/IIlVo0fidTvQqKtqFi9ULMHfipo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.168.0/24 Signature Algorithm: sha256WithRSAEncryption 13:a4:40:81:b4:76:a2:55:81:6b:fa:80:ac:01:49:96:5a:9b: 7b:9d:4a:f9:49:b2:28:26:1c:a2:04:fb:3e:7e:9b:f5:cd:cd: 32:24:17:80:ed:9a:2a:4b:05:69:22:08:8d:be:5b:be:8e:a0: c1:37:fb:dd:b5:93:ce:73:0a:a2:97:98:01:89:ce:e3:e6:95: 56:7a:30:af:db:b7:a5:a2:87:1b:ee:9a:47:f2:aa:7d:26:af: 7d:90:ca:48:76:10:fa:6a:ab:08:5e:c0:86:12:5e:ad:6b:99: e6:d9:33:d1:b5:3e:7c:d9:f1:8a:ae:85:0b:f1:cf:84:5d:20: 7d:9a:c5:e3:06:70:11:8f:44:70:ee:8d:57:8c:57:bb:58:c1: 0c:db:9f:8f:67:fe:a2:fa:db:92:c6:95:6e:a6:0d:da:03:a0: 74:03:ce:b2:23:0b:25:71:20:68:7e:3e:16:96:ea:00:16:08: a8:ef:83:e7:ac:3d:33:28:2a:8e:2f:0f:1f:56:c4:1b:18:48: ad:cd:40:a4:fd:f6:ee:99:3d:1a:a8:ab:6c:94:27:43:8c:bb: 5c:67:50:ca:a3:60:61:69:c7:05:9b:cd:33:48:44:8f:f2:69: 48:a0:b5:77:68:f6:21:1f:61:09:a7:d9:b7:02:b1:65:ed:62: 59:39:62:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2X8CTMSiyhVkKpBFAMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz YzAyYzgwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDg5NTVhMzQ3ZTI3NTNiZDBhOGFiNmExNjJmNTQyY2MxZGY4YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwqQjnRBoPbXmmBzceloxixztOyo 3xj6Bn1HRXG5+9I9ZqHfYZSEKrjGQh1FM6MJfM0o06YEHInu9cgI7le81IGuajHL xL135OLSt2aWcuG8zqSNT5l6ZFPbW3HKDqG0gfkjhUN7odH110RfNgzNz47qyea6 BxsRk1G8rGZ9Z8BFH4TqLCFDKRRg6GUilvgVtyw95XMcI8HvJPJn5re5Jvi111h0 fdsJsdFrnWPmvxmkjG6Lo4E7Hfl2BukHSq9eUvpf0LA5gmRrP27tjMSdFBytZN50 yzlEl8G8O9A9VQ7Wb/D7cUhGDdBcHdi7SGFEOuW5mJe/p0IkMxUbTPN3RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCJVaNH4nU70KirahYvVCzB34qaMB8GA1UdIwQY MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et YzFjNjYwNzhlNWJhLzEvSUlsVm8wZmlkVHZRcUt0cUZpOVVMTUhmaXBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1+oMA0G CSqGSIb3DQEBCwUAA4IBAQATpECBtHaiVYFr+oCsAUmWWpt7nUr5SbIoJhyiBPs+ fpv1zc0yJBeA7ZoqSwVpIgiNvlu+jqDBN/vdtZPOcwqil5gBic7j5pVWejCv27el oocb7ppH8qp9Jq99kMpIdhD6aqsIXsCGEl6ta5nm2TPRtT582fGKroUL8c+EXSB9 msXjBnARj0Rw7o1XjFe7WMEM25+PZ/6i+tuSxpVupg3aA6B0A86yIwslcSBofj4W luoAFgio74PnrD0zKCqOLw8fVsQbGEitzUCk/fbumT0aqKtslCdDjLtcZ1DKo2Bh accFm80zSESP8mlIoLV3aPYhH2EJp9m3ArFl7WJZOWJ0 -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:18 2026 by rpki-client