This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/irMc3rrBTtXnxu6Y6x7SlrREl3k.roa File: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (raw, json) Hash identifier: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw= Subject key identifier: 8A:B3:1C:DE:BA:C1:4E:D5:E7:C6:EE:98:EB:1E:D2:96:B4:44:97:79 Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019B7AC95217C67C75A79AB60633FB7EF18F Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/irMc3rrBTtXnxu6Y6x7SlrREl3k.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43123 IP address blocks: 195.219.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:52:17:c6:7c:75:a7:9a:b6:06:33:fb:7e:f1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ab31cdebac14ed5e7c6ee98eb1ed296b4449779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:58:02:77:b8:d3:b2:22:15:dd:4d:d0:e8: cf:a0:96:b6:f9:51:5e:28:59:9c:2c:54:32:1d:b9: 64:72:19:36:3d:f4:e4:31:4e:71:09:8f:5d:75:41: f3:58:45:68:40:8e:08:05:61:c6:aa:f9:db:05:d2: 4d:53:ad:37:68:2e:3b:62:db:b7:9e:de:07:84:fe: c7:69:04:61:b5:a9:34:6a:a0:9d:3f:1f:d3:c2:4e: 46:f2:56:37:6f:2a:4d:c3:06:30:1a:dc:94:dc:41: da:36:f2:4a:b9:b1:c3:57:f0:a9:be:58:82:72:16: 16:49:85:54:9c:ef:3e:91:76:34:2b:e4:6e:12:88: d9:6d:6d:40:7f:97:65:f5:8c:01:1c:08:c2:22:93: 8a:37:76:b2:c1:81:59:14:49:53:09:1b:ca:23:94: aa:11:04:af:7f:9d:9f:1b:02:88:58:4d:ba:fc:8f: 23:05:3a:62:c6:9b:26:92:4b:83:ae:27:18:93:9f: 6e:0a:e9:11:ec:a7:f5:e6:0c:2b:e5:e0:4e:e0:b4: 12:dd:04:82:5e:fd:7a:3f:c8:43:64:8f:3a:65:35: 58:ac:c7:ae:0a:30:e2:23:bc:cd:aa:df:13:86:3b: 1c:a0:2b:e0:40:14:99:f7:c4:1f:10:ef:d1:0a:3f: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B3:1C:DE:BA:C1:4E:D5:E7:C6:EE:98:EB:1E:D2:96:B4:44:97:79 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/irMc3rrBTtXnxu6Y6x7SlrREl3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.219.39.0/24 Signature Algorithm: sha256WithRSAEncryption bc:0e:fd:07:9a:e7:38:82:e2:63:4d:e4:76:ce:89:54:cc:27: 4e:b5:33:53:47:1b:3a:1b:67:08:1d:d5:7a:de:1f:a1:58:04: fc:db:4a:73:d8:1e:7e:fc:6c:b8:18:58:05:90:a1:6c:27:88: 85:2f:27:75:b9:78:8f:e6:bc:97:82:7e:6e:2a:3d:b5:b4:62: 0d:ca:75:44:b1:c6:e3:ab:51:eb:82:a2:5b:90:47:52:2a:31: 8b:28:04:8a:b6:e0:fe:65:73:5a:29:18:8a:86:95:fe:08:9e: be:ce:65:65:e9:70:7c:73:ab:ac:1f:0d:49:2c:67:89:dd:82: b4:a5:3f:aa:86:9c:a0:a3:40:82:dd:3f:4b:2b:8f:a3:58:63: 14:59:36:f1:b6:33:6a:f8:1b:41:27:eb:82:c1:f6:3e:c5:9f: 47:da:b2:2f:8c:92:3a:44:31:3b:37:3f:b2:f6:39:da:b4:33: f0:18:9b:d8:1a:63:ee:85:8f:8b:d6:8b:96:7e:eb:95:74:5e: 4b:95:5e:3c:b0:8d:2c:f7:4f:ce:fb:18:3a:36:b4:5d:9e:55: 6c:11:a8:07:8b:e6:ab:f1:7c:33:c5:ff:02:a1:a3:4d:d4:0e: af:fc:63:3e:f6:e6:a1:9e:8b:73:e3:6b:58:a3:75:06:71:ef: ff:84:a9:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVIXxnx1p5q2BjP7fvGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWIzMWNkZWJhYzE0ZWQ1ZTdjNmVlOThlYjFlZDI5NmI0NDQ5Nzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8BYAne407IiFd1N0OjPoJa2+VFe KFmcLFQyHblkchk2PfTkMU5xCY9ddUHzWEVoQI4IBWHGqvnbBdJNU603aC47Ytu3 nt4HhP7HaQRhtak0aqCdPx/Twk5G8lY3bypNwwYwGtyU3EHaNvJKubHDV/CpvliC chYWSYVUnO8+kXY0K+RuEojZbW1Af5dl9YwBHAjCIpOKN3aywYFZFElTCRvKI5Sq EQSvf52fGwKIWE26/I8jBTpixpsmkkuDricYk59uCukR7Kf15gwr5eBO4LQS3QSC Xv16P8hDZI86ZTVYrMeuCjDiI7zNqt8ThjscoCvgQBSZ98QfEO/RCj9RPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIqzHN66wU7V58bumOse0pa0RJd5MB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvaXJNYzNyckJUdFhueHU2WTZ4N1NsclJFbDNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9snMA0G CSqGSIb3DQEBCwUAA4IBAQC8Dv0Hmuc4guJjTeR2zolUzCdOtTNTRxs6G2cIHdV6 3h+hWAT820pz2B5+/Gy4GFgFkKFsJ4iFLyd1uXiP5ryXgn5uKj21tGINynVEscbj q1HrgqJbkEdSKjGLKASKtuD+ZXNaKRiKhpX+CJ6+zmVl6XB8c6usHw1JLGeJ3YK0 pT+qhpygo0CC3T9LK4+jWGMUWTbxtjNq+BtBJ+uCwfY+xZ9H2rIvjJI6RDE7Nz+y 9jnatDPwGJvYGmPuhY+L1ouWfuuVdF5LlV48sI0s90/O+xg6NrRdnlVsEagHi+ar 8Xwzxf8CoaNN1A6v/GM+9uahnotz42tYo3UGce//hKlE -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:06 2026 by rpki-client