This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/s-9ueeReTpNKAE3HS3J0gGLNBNk.roa File: s-9ueeReTpNKAE3HS3J0gGLNBNk.roa (raw, json) Hash identifier: rhOPYPtCKBB38nBngB4ZeEKDv/nk6RxHer5pZjY8bWc= Subject key identifier: B3:EF:6E:79:E4:5E:4E:93:4A:00:4D:C7:4B:72:74:80:62:CD:04:D9 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F631AB2C4C66484DF8A4B7AF74E0A Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/s-9ueeReTpNKAE3HS3J0gGLNBNk.roa Signing time: Fri 02 Jan 2026 02:18:01 +0000 ROA not before: Fri 02 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206838 IP address blocks: 195.167.148.0/24 maxlen: 24 195.167.149.0/24 maxlen: 24 2001:1a68:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:63:1a:b2:c4:c6:64:84:df:8a:4b:7a:f7:4e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3ef6e79e45e4e934a004dc74b72748062cd04d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b2:17:49:5d:ec:ae:9d:07:43:79:3e:e9:97: 7a:c3:7b:ba:c8:9e:fe:f0:a2:a9:89:90:62:db:e9: 57:9d:b1:bb:b0:97:11:31:24:43:db:d7:18:84:45: 58:c2:c0:51:2f:34:40:2b:b0:94:86:84:ac:2b:30: 38:b1:66:f4:59:3f:75:60:c6:fe:5c:af:73:23:9e: 96:4c:b0:88:2f:2a:89:e9:59:cc:7d:8e:2c:80:71: 7d:da:5f:5d:17:e4:97:18:57:0c:2f:b2:f5:ee:59: e4:19:76:03:45:e0:91:21:2f:66:d8:ca:a8:57:cf: 26:24:c2:32:b5:a6:88:26:0c:71:99:f8:65:36:68: fb:ed:35:0c:6b:b4:46:cf:15:62:5f:ee:fe:ae:79: 40:81:37:1f:76:45:03:fb:7e:7f:42:1d:d0:3b:cc: c1:b2:93:a1:a2:fb:90:87:8e:71:50:ce:dd:78:e0: 84:41:57:8b:53:6f:13:a4:5e:cb:11:c2:ce:ae:af: 75:f6:fb:f3:ea:68:15:82:83:07:16:7e:2f:9c:aa: a3:00:81:db:10:c1:12:10:57:6d:29:5a:e0:fb:fb: 0f:36:df:6b:87:dd:95:36:24:22:58:1e:a1:65:da: 14:86:1b:06:f7:3f:b7:37:5f:be:65:a0:62:f4:e6: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EF:6E:79:E4:5E:4E:93:4A:00:4D:C7:4B:72:74:80:62:CD:04:D9 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/s-9ueeReTpNKAE3HS3J0gGLNBNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.167.148.0/23 IPv6: 2001:1a68:2a::/48 Signature Algorithm: sha256WithRSAEncryption 9d:b7:27:b2:49:f1:08:d1:ce:fb:ff:de:9c:24:44:09:01:b1: 4c:0b:f4:e9:8a:fd:0d:3b:1a:66:77:82:19:86:b3:09:14:f3: 2e:32:f5:4a:57:14:73:72:8a:47:9a:3a:a0:9a:15:45:44:cf: 4b:7a:67:3b:1f:c1:a2:62:7d:1d:ca:59:05:9c:12:ff:fe:12: 6c:16:9a:b4:06:99:f1:9d:c5:8f:c9:bf:10:69:d7:51:b9:47: dc:fe:14:63:90:6b:05:20:ab:1f:18:e5:dc:52:39:6f:5e:52: fa:da:75:a4:df:81:73:5c:5c:78:8f:79:5b:0f:d5:7a:a5:e3: 96:cb:3e:29:26:7b:52:fd:e8:43:dd:cc:f1:4d:48:13:08:1d: 0b:93:00:9c:7f:dc:3f:e9:66:b5:54:88:60:1f:56:ba:f2:a6: b0:26:18:c4:0b:76:68:4b:b0:78:a4:93:60:38:9f:54:2e:d0: 3a:5b:23:b6:f8:86:ef:fa:cc:a5:2a:5f:5a:6c:5d:10:28:89: ef:99:7f:7e:50:6f:e8:a5:ae:e4:f6:28:26:49:89:1a:ff:3f: e5:a1:52:68:b4:66:bd:0e:ec:ec:95:00:8a:1e:1f:8c:92:40: d9:ad:13:df:1d:99:fd:49:70:b4:d2:43:8a:6a:9c:e9:1b:cb: a1:25:28:34 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8f2MassTGZITfikt6904KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2VmNmU3OWU0NWU0ZTkzNGEwMDRkYzc0YjcyNzQ4MDYyY2QwNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rIXSV3srp0HQ3k+6Zd6w3u6yJ7+ 8KKpiZBi2+lXnbG7sJcRMSRD29cYhEVYwsBRLzRAK7CUhoSsKzA4sWb0WT91YMb+ XK9zI56WTLCILyqJ6VnMfY4sgHF92l9dF+SXGFcML7L17lnkGXYDReCRIS9m2Mqo V88mJMIytaaIJgxxmfhlNmj77TUMa7RGzxViX+7+rnlAgTcfdkUD+35/Qh3QO8zB spOhovuQh45xUM7deOCEQVeLU28TpF7LEcLOrq919vvz6mgVgoMHFn4vnKqjAIHb EMESEFdtKVrg+/sPNt9rh92VNiQiWB6hZdoUhhsG9z+3N1++ZaBi9OZ55wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLPvbnnkXk6TSgBNx0tydIBizQTZMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvcy05dWVlUmVUcE5LQUUzSFMzSjBnR0xOQk5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw6eUMA8E AgACMAkDBwAgARpoACowDQYJKoZIhvcNAQELBQADggEBAJ23J7JJ8QjRzvv/3pwk RAkBsUwL9OmK/Q07GmZ3ghmGswkU8y4y9UpXFHNyikeaOqCaFUVEz0t6ZzsfwaJi fR3KWQWcEv/+EmwWmrQGmfGdxY/JvxBp11G5R9z+FGOQawUgqx8Y5dxSOW9eUvra daTfgXNcXHiPeVsP1Xql45bLPikme1L96EPdzPFNSBMIHQuTAJx/3D/pZrVUiGAf VrryprAmGMQLdmhLsHikk2A4n1Qu0DpbI7b4hu/6zKUqX1psXRAoie+Zf35Qb+il ruT2KCZJiRr/P+WhUmi0Zr0O7OyVAIoeH4ySQNmtE98dmf1JcLTSQ4pqnOkby6El KDQ= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:51 2026 by rpki-client