This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa File: cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa (raw, json) Hash identifier: FDKs6XQEKS17A+eX40GCtBIucy/T4VULlaGZ/uQb+zQ= Subject key identifier: 72:33:BE:25:22:9E:21:E2:9F:85:2A:FC:05:F9:02:F4:95:2B:B1:AC Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f Certificate serial: 019B7FF2031D6784B2438BBB5DDBA01B261E Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa Signing time: Fri 02 Jan 2026 18:22:05 +0000 ROA not before: Fri 02 Jan 2026 18:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48971 IP address blocks: 195.225.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:03:1d:67:84:b2:43:8b:bb:5d:db:a0:1b:26:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f Validity Not Before: Jan 2 18:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7233be25229e21e29f852afc05f902f4952bb1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:bd:a4:9b:3c:15:f5:19:ec:f4:ec:e8:7f: 1e:a8:8d:74:95:5c:df:8c:cb:03:bb:51:7d:9b:21: 88:97:2e:c9:90:2f:1f:0f:86:a2:bb:cc:ab:c7:1d: d1:f1:3b:50:65:f0:b9:ec:f2:5e:5f:4e:09:eb:18: 91:5d:95:8f:dc:e3:82:c3:fb:f1:fc:7e:90:4a:31: 63:82:1d:eb:11:e7:9c:a0:96:02:12:af:f7:01:07: 5b:78:ea:a5:5a:00:56:47:aa:97:1a:4d:66:5b:1a: a2:73:c4:c2:29:0c:34:4c:08:48:72:d0:55:f2:34: 23:09:c3:9f:f2:68:23:6b:5d:1e:b6:02:61:1e:e9: f6:c3:94:c8:7f:4d:ab:71:26:ac:62:ad:4f:33:db: 35:40:f6:46:d4:d2:a6:0b:bf:a3:bf:d8:82:9c:4b: 8d:d1:30:f0:7f:94:f0:f5:ae:40:c2:ed:0a:69:39: a4:f1:01:75:bf:a1:b3:d3:30:e9:16:dc:07:38:a1: 1a:3f:1a:0b:84:79:ca:de:0d:6b:7e:d8:a9:f7:e8: 38:c9:d1:b4:e0:d7:d4:7f:74:ba:02:b3:2a:5e:68: df:5e:e7:a1:e0:f9:9e:ec:8a:79:41:49:db:a5:06: 44:63:1a:f5:3b:5b:44:05:ea:aa:87:f9:fd:08:ef: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:BE:25:22:9E:21:E2:9F:85:2A:FC:05:F9:02:F4:95:2B:B1:AC X509v3 Authority Key Identifier: keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.116.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:44:1c:c8:c1:34:75:b6:02:59:a8:ba:54:71:05:b3:3a:b8: f7:e4:19:62:e5:bb:ae:37:6f:19:74:e1:c1:05:0c:1d:92:43: 7d:a6:d9:72:ca:aa:bc:a0:0d:ec:35:da:61:99:50:a0:ae:2e: 32:72:17:a8:e8:40:41:f1:72:fe:6d:a9:49:9c:e6:c6:fc:ee: ab:a5:78:6f:41:b1:55:52:1c:6b:97:24:c3:66:16:00:2d:5b: bd:49:2c:8a:81:bd:83:0d:24:cf:7b:ff:1d:bb:94:78:35:0f: 62:75:9c:13:8d:40:16:03:e0:84:f1:26:49:82:79:d1:be:5f: 99:67:62:d7:1a:7f:47:e3:b8:0f:6c:55:bf:a6:d0:db:80:61: 66:67:97:08:19:80:d2:06:7c:11:6b:4a:d0:9f:32:a1:92:1a: 5d:f6:ad:13:84:3b:79:a7:57:e5:7e:0e:25:01:e3:63:30:f9: 60:51:d4:3e:92:c7:83:e6:d9:4e:9c:44:8f:6b:17:ef:1b:5c: 0b:de:1b:4d:81:d8:02:c8:2e:8e:c6:e1:65:bb:52:37:5f:6c: 9e:98:4b:5e:77:68:76:b1:71:14:19:01:92:1f:5f:e6:35:4c: ca:54:44:63:76:14:85:93:1f:70:17:96:78:86:dc:8c:3b:dd: d0:42:09:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8gMdZ4SyQ4u7XdugGyYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDAyZmY4MTVlZWJjNjFhOTNjZjFiMGQwYmNkY2VjN2Ey OWYxOWYwHhcNMjYwMTAyMTgyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjMzYmUyNTIyOWUyMWUyOWY4NTJhZmMwNWY5MDJmNDk1MmJiMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXC9pJs8FfUZ7PTs6H8eqI10lVzf jMsDu1F9myGIly7JkC8fD4aiu8yrxx3R8TtQZfC57PJeX04J6xiRXZWP3OOCw/vx /H6QSjFjgh3rEeecoJYCEq/3AQdbeOqlWgBWR6qXGk1mWxqic8TCKQw0TAhIctBV 8jQjCcOf8mgja10etgJhHun2w5TIf02rcSasYq1PM9s1QPZG1NKmC7+jv9iCnEuN 0TDwf5Tw9a5Awu0KaTmk8QF1v6Gz0zDpFtwHOKEaPxoLhHnK3g1rftip9+g4ydG0 4NfUf3S6ArMqXmjfXueh4Pme7Ip5QUnbpQZEYxr1O1tEBeqqh/n9CO+SrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIzviUiniHin4Uq/AX5AvSVK7GsMB8GA1UdIwQY MBaAFHdAL/gV7rxhqTzxsNC83Ox6KfGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBBdi1CWHV2R0dwUFBHdzBMemM3SG9wOFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZGZiZjAtMGMwNy00YTA3LTg5NTQt OWQ4YTE4ZTdiMjUyLzEvY2pPLUpTS2VJZUtmaFNyOEJma0M5SlVyc2F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZGZiZjAtMGMwNy00YTA3LTg5NTQtOWQ4YTE4ZTdiMjUy LzEvZDBBdi1CWHV2R0dwUFBHdzBMemM3SG9wOFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+F0MA0G CSqGSIb3DQEBCwUAA4IBAQCdRBzIwTR1tgJZqLpUcQWzOrj35Bli5buuN28ZdOHB BQwdkkN9ptlyyqq8oA3sNdphmVCgri4ycheo6EBB8XL+balJnObG/O6rpXhvQbFV UhxrlyTDZhYALVu9SSyKgb2DDSTPe/8du5R4NQ9idZwTjUAWA+CE8SZJgnnRvl+Z Z2LXGn9H47gPbFW/ptDbgGFmZ5cIGYDSBnwRa0rQnzKhkhpd9q0ThDt5p1flfg4l AeNjMPlgUdQ+kseD5tlOnESPaxfvG1wL3htNgdgCyC6OxuFlu1I3X2yemEted2h2 sXEUGQGSH1/mNUzKVERjdhSFkx9wF5Z4htyMO93QQgmf -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:11 2026 by rpki-client