This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/f87NuGp7A6DaRUC_zwqT_7O3tS4.roa File: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (raw, json) Hash identifier: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4= Subject key identifier: 7F:CE:CD:B8:6A:7B:03:A0:DA:45:40:BF:CF:0A:93:FF:B3:B7:B5:2E Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019B79ED35576710C59A208C0B07DEE6617E Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/f87NuGp7A6DaRUC_zwqT_7O3tS4.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 195.10.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:57:67:10:c5:9a:20:8c:0b:07:de:e6:61:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fcecdb86a7b03a0da4540bfcf0a93ffb3b7b52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:db:aa:b2:d6:bb:40:0f:2d:b0:42:3b:8a: 93:50:05:5c:da:d2:e0:ea:f7:c4:b7:36:af:11:e3: 38:ba:ed:76:5e:32:f1:bb:a0:c0:58:7d:94:46:ff: 0f:f0:d7:93:24:d9:61:7e:dd:d0:4d:6d:ae:e1:09: 60:8a:78:3b:62:e0:b0:72:db:57:25:0c:22:14:83: e2:36:9d:74:70:94:ff:dd:8d:88:d9:ef:0c:18:54: de:63:45:b5:67:4c:60:db:83:3b:ea:7b:13:0e:2d: 98:e6:78:4d:19:89:b5:2e:9a:ab:8b:fb:20:8a:b5: 1c:6f:4a:91:4d:f1:81:65:e8:6a:df:6e:5a:94:fb: b4:01:1e:a4:eb:b6:ef:c7:07:15:ba:19:d8:50:29: 9a:0e:2e:1e:7b:39:0a:bc:55:18:69:e2:99:0f:f1: 98:cc:72:8e:b9:e5:4b:50:b4:40:6d:a3:1d:41:91: 9e:03:46:f1:0a:7a:a1:74:5b:6e:d8:7a:44:e8:7c: dc:9a:ab:70:23:9d:f3:9e:84:a6:9b:6f:11:ac:42: a3:d9:2c:0f:f0:0c:73:80:5a:b2:d8:50:76:89:27: 81:ad:2f:06:70:83:2c:7d:b4:7b:69:7d:e9:e5:0d: 30:e6:b9:2e:c5:ff:be:34:6a:57:1e:7a:85:97:46: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CE:CD:B8:6A:7B:03:A0:DA:45:40:BF:CF:0A:93:FF:B3:B7:B5:2E X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/f87NuGp7A6DaRUC_zwqT_7O3tS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.205.0/24 Signature Algorithm: sha256WithRSAEncryption 16:1c:de:3d:8b:74:10:a5:7f:7b:cc:da:c0:d5:34:35:a4:0f: fd:7a:ed:97:ba:70:c7:eb:7f:50:03:10:f7:79:d8:ce:13:b1: 50:54:c6:aa:6f:02:0a:60:c7:0d:2d:0b:f7:e0:b1:12:95:0e: ce:91:48:85:4d:f4:59:4c:c9:74:2e:46:21:34:94:5d:b6:b5: b5:c1:1f:3a:3c:b4:17:5c:c4:c7:ed:6b:a7:38:b0:40:87:6f: 3f:a5:5f:18:b8:c0:33:af:75:84:a8:5f:07:db:cc:a8:e5:82: 62:cf:9e:93:90:b5:9f:58:f8:5b:5b:9d:c1:bc:e2:19:d8:49: f9:d1:8e:44:d0:16:b1:6f:f2:56:f2:7f:c4:01:4e:12:ef:06: 7e:e7:33:0b:20:a5:81:37:be:b6:da:23:33:6b:a9:bc:10:1d: f3:08:56:69:2b:87:fc:fd:03:71:0c:b5:1c:d4:55:73:87:c3: 28:46:73:07:86:c6:a6:53:71:fb:39:c4:b0:c9:cf:24:d9:89: 17:91:9b:77:54:51:d7:14:d3:0f:d8:0e:f5:ca:a6:4c:c0:59: 0e:1b:3a:57:fd:47:ac:db:11:d7:24:cd:be:bb:12:97:af:a4: b5:a6:1b:41:f1:db:99:e8:8c:6c:a1:3e:d3:3e:a3:24:06:94: c0:a5:ab:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TVXZxDFmiCMCwfe5mF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmNlY2RiODZhN2IwM2EwZGE0NTQwYmZjZjBhOTNmZmIzYjdiNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC7bqrLWu0APLbBCO4qTUAVc2tLg 6vfEtzavEeM4uu12XjLxu6DAWH2URv8P8NeTJNlhft3QTW2u4Qlging7YuCwcttX JQwiFIPiNp10cJT/3Y2I2e8MGFTeY0W1Z0xg24M76nsTDi2Y5nhNGYm1Lpqri/sg irUcb0qRTfGBZehq325alPu0AR6k67bvxwcVuhnYUCmaDi4eezkKvFUYaeKZD/GY zHKOueVLULRAbaMdQZGeA0bxCnqhdFtu2HpE6HzcmqtwI53znoSmm28RrEKj2SwP 8AxzgFqy2FB2iSeBrS8GcIMsfbR7aX3p5Q0w5rkuxf++NGpXHnqFl0bPTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/OzbhqewOg2kVAv88Kk/+zt7UuMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvZjg3TnVHcDdBNkRhUlVDX3p3cVRfN08zdFM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrNMA0G CSqGSIb3DQEBCwUAA4IBAQAWHN49i3QQpX97zNrA1TQ1pA/9eu2XunDH639QAxD3 edjOE7FQVMaqbwIKYMcNLQv34LESlQ7OkUiFTfRZTMl0LkYhNJRdtrW1wR86PLQX XMTH7WunOLBAh28/pV8YuMAzr3WEqF8H28yo5YJiz56TkLWfWPhbW53BvOIZ2En5 0Y5E0Baxb/JW8n/EAU4S7wZ+5zMLIKWBN7622iMza6m8EB3zCFZpK4f8/QNxDLUc 1FVzh8MoRnMHhsamU3H7OcSwyc8k2YkXkZt3VFHXFNMP2A71yqZMwFkOGzpX/Ues 2xHXJM2+uxKXr6S1phtB8duZ6IxsoT7TPqMkBpTApavt -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:41 2026 by rpki-client