This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/_xb7dLIH6IMlpZq1SYlWl6nvqS4.roa File: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (raw, json) Hash identifier: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI= Subject key identifier: FF:16:FB:74:B2:07:E8:83:25:A5:9A:B5:49:89:56:97:A9:EF:A9:2E Certificate issuer: /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Certificate serial: 019B7E3819DD4553577BA76C67C485D0B62A Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/_xb7dLIH6IMlpZq1SYlWl6nvqS4.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61418 IP address blocks: 195.206.236.0/24 maxlen: 24 2a10:2cc0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:19:dd:45:53:57:7b:a7:6c:67:c4:85:d0:b6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff16fb74b207e88325a59ab549895697a9efa92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:15:17:2f:78:85:27:cc:0f:e6:3c:3a:b8:d8: a0:b9:ec:a5:e1:ca:dc:c5:35:ee:cd:01:15:64:59: ff:94:0a:3a:b8:c9:38:ca:9e:de:92:77:92:c7:f6: 5a:2c:b2:56:cc:b5:5e:7e:43:cf:2e:44:44:e6:e6: 37:b1:9d:0c:4d:d5:68:47:63:9f:9a:00:67:00:fe: 6e:9b:a1:8c:71:44:86:c8:17:fa:1e:15:88:03:f1: 50:5b:81:a1:2a:cb:df:8d:c8:a3:5c:ba:d0:29:77: b0:e9:31:66:09:69:e7:2d:a9:cb:15:d8:34:ef:69: 4f:e4:2d:12:31:37:00:7a:0b:90:58:4f:f1:5f:f8: af:b4:28:d4:28:26:7b:8c:a2:16:5b:6c:57:67:7c: ad:de:6c:b8:89:4f:e6:21:41:36:80:34:09:80:9f: ef:80:af:76:79:4b:6f:57:a1:f1:c2:eb:b5:c5:db: 60:02:f9:a1:87:5c:1b:19:49:37:6d:f1:fe:8c:e7: db:b1:90:d2:62:59:b3:db:69:20:08:a6:92:e6:70: 65:4f:67:18:90:37:6c:8b:af:07:bd:18:96:8d:0b: 93:69:46:88:48:b7:ac:7a:72:92:51:68:74:7e:cf: bf:62:da:b3:04:cc:da:2f:3c:f3:ba:b5:78:50:bf: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:16:FB:74:B2:07:E8:83:25:A5:9A:B5:49:89:56:97:A9:EF:A9:2E X509v3 Authority Key Identifier: keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/_xb7dLIH6IMlpZq1SYlWl6nvqS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.206.236.0/24 IPv6: 2a10:2cc0::/29 Signature Algorithm: sha256WithRSAEncryption 95:9a:b9:ae:1d:5c:e5:b6:fd:14:24:5f:64:33:e1:28:8a:5b: 10:82:68:79:de:0e:fd:a6:1d:9e:bf:44:4e:1a:eb:cc:5f:00: ba:5b:57:b2:f0:b1:a4:b0:88:fd:4e:b2:c8:67:4b:d8:da:bc: 8b:3c:17:aa:72:7b:c0:9e:48:89:15:8a:6d:cd:8f:4e:df:57: da:ec:30:78:c5:b6:cf:5a:1f:76:f3:09:a7:ae:1f:b5:a5:36: 01:5f:ba:79:dd:05:70:a6:74:43:e0:38:0c:ad:bc:ec:57:ff: 8b:a8:77:e0:2b:5e:61:a3:3c:26:da:de:a3:6b:c6:21:86:0d: cf:79:19:86:71:da:66:1b:9a:f6:e1:1f:bd:73:dd:1c:05:42: 4b:75:15:67:50:73:3a:5a:2a:c9:e8:8a:76:dd:c0:6d:62:0a: b4:30:70:b0:cb:ab:c8:26:c2:ea:5a:c0:47:04:c0:cb:96:2e: ad:ad:13:5a:06:d3:90:73:dd:ab:4c:ef:5c:76:61:c4:74:06: 90:2b:85:64:b5:ba:28:00:82:52:71:ef:24:47:22:59:b1:01: e2:34:4d:fe:32:f4:0c:be:4d:ba:8e:de:e0:20:ae:b2:84:8e: d4:81:6d:4f:b0:d3:a2:cf:18:e7:21:b7:cd:8c:6f:8b:33:d9: 72:d2:cf:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OBndRVNXe6dsZ8SF0LYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NmNkNTc4ZjQyZjhkZTA2NzIzNjc2N2M2Y2ZjMmJhY2Jj MTZlMDUwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjE2ZmI3NGIyMDdlODgzMjVhNTlhYjU0OTg5NTY5N2E5ZWZhOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xUXL3iFJ8wP5jw6uNigueyl4crc xTXuzQEVZFn/lAo6uMk4yp7ekneSx/ZaLLJWzLVefkPPLkRE5uY3sZ0MTdVoR2Of mgBnAP5um6GMcUSGyBf6HhWIA/FQW4GhKsvfjcijXLrQKXew6TFmCWnnLanLFdg0 72lP5C0SMTcAeguQWE/xX/ivtCjUKCZ7jKIWW2xXZ3yt3my4iU/mIUE2gDQJgJ/v gK92eUtvV6Hxwuu1xdtgAvmhh1wbGUk3bfH+jOfbsZDSYlmz22kgCKaS5nBlT2cY kDdsi68HvRiWjQuTaUaISLesenKSUWh0fs+/YtqzBMzaLzzzurV4UL/aXwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP8W+3SyB+iDJaWatUmJVpep76kuMB8GA1UdIwQY MBaAFOVs1Xj0L43gZyNnZ8bPwrrLwW4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQt YjdhNTY0YWZiMDRiLzEvX3hiN2RMSUg2SU1scFpxMVNZbFdsNm52cVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQtYjdhNTY0YWZiMDRi LzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw87sMA0E AgACMAcDBQMqECzAMA0GCSqGSIb3DQEBCwUAA4IBAQCVmrmuHVzltv0UJF9kM+Eo ilsQgmh53g79ph2ev0ROGuvMXwC6W1ey8LGksIj9TrLIZ0vY2ryLPBeqcnvAnkiJ FYptzY9O31fa7DB4xbbPWh928wmnrh+1pTYBX7p53QVwpnRD4DgMrbzsV/+LqHfg K15hozwm2t6ja8Yhhg3PeRmGcdpmG5r24R+9c90cBUJLdRVnUHM6WirJ6Ip23cBt Ygq0MHCwy6vIJsLqWsBHBMDLli6trRNaBtOQc92rTO9cdmHEdAaQK4VktbooAIJS ce8kRyJZsQHiNE3+MvQMvk26jt7gIK6yhI7UgW1PsNOizxjnIbfNjG+LM9ly0s9D -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:10 2026 by rpki-client