This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-GtTbprQD1Kv6Yqw6aSMwpstr9Q.roa File: 1-GtTbprQD1Kv6Yqw6aSMwpstr9Q.roa (raw, json) Hash identifier: 9iaQekmMLfNoC2uYpwnc1m3S0CyzvBPzv4TggZXiujc= Subject key identifier: F8:6B:53:6E:9A:D0:0F:52:AF:E9:8A:B0:E9:A4:8C:C2:9B:2D:AF:D4 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C13064C12CDC881F35A9BC6BD8A9B44 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-GtTbprQD1Kv6Yqw6aSMwpstr9Q.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208305 IP address blocks: 195.65.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:06:4c:12:cd:c8:81:f3:5a:9b:c6:bd:8a:9b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f86b536e9ad00f52afe98ab0e9a48cc29b2dafd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:33:aa:48:71:91:54:56:89:de:bd:60:de:38: d9:34:a3:ad:11:e0:88:3a:ac:90:b7:32:2d:d1:fe: 37:72:b9:86:4d:16:5d:4d:82:7e:f3:0c:cd:96:5f: 56:ae:4e:d2:b2:85:71:48:74:2e:91:b0:30:69:a2: 80:79:45:8c:24:5c:c4:21:72:e4:7c:60:95:8d:c7: 75:4e:98:ed:90:64:a6:a4:01:93:64:f9:eb:48:9e: f2:b2:9e:5a:85:23:5a:4c:33:97:4f:31:53:60:a1: 50:b5:f7:74:21:ff:d3:a3:e5:f1:d5:98:6d:06:37: 1c:72:50:30:2e:c7:88:e6:40:a3:03:c1:c7:5e:2f: 3f:4b:f9:5e:b2:ed:c1:ef:50:47:6a:73:15:34:7b: a6:e8:fb:83:03:6b:7e:7d:58:51:1a:1a:11:fd:74: 12:c3:61:94:2f:c2:53:8a:19:ce:98:41:aa:36:d2: ea:75:fe:78:7b:e6:a5:c6:29:cb:6e:e0:af:3a:69: f4:04:87:6f:61:d3:3b:25:5b:f9:16:fa:c4:b3:28: 89:7d:da:c8:f8:af:91:28:ad:76:3f:d8:0e:9a:bb: a1:10:bf:82:01:f4:b4:04:65:57:ae:31:01:a6:97: 95:91:dc:04:fc:56:ba:ad:e4:39:79:8a:3c:4a:ff: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:53:6E:9A:D0:0F:52:AF:E9:8A:B0:E9:A4:8C:C2:9B:2D:AF:D4 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-GtTbprQD1Kv6Yqw6aSMwpstr9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.65.0.0/24 Signature Algorithm: sha256WithRSAEncryption 82:40:b6:32:16:c9:65:c4:50:6e:ed:46:7a:e1:db:df:26:73: 1f:1d:bc:f2:da:68:f6:54:f6:5e:15:05:fd:57:99:db:00:95: 57:14:47:49:05:64:dd:f0:b1:75:7c:92:2d:b5:cf:1c:8f:96: c0:d6:d3:77:c6:17:5a:76:84:9d:e9:af:3f:94:bc:b5:ca:08: f6:fb:ed:6f:b3:63:2f:91:66:d4:35:e4:94:57:1c:ca:ac:e5: 9f:fd:b1:88:a2:47:36:98:2c:57:8c:72:93:2c:db:d1:af:a7: c1:1e:c6:a9:5b:b4:2a:0e:05:ee:d4:f3:e7:15:08:f4:09:5c: f3:51:ba:7c:e3:ea:94:ba:3e:42:8c:43:73:83:6f:64:67:c6: 46:1f:40:c4:84:60:f0:20:7b:f5:b3:61:86:f6:90:4c:be:63: 79:99:4d:f5:06:b9:25:1a:4c:2d:3d:36:bb:74:37:81:44:c3: b3:f0:a5:64:7d:d9:ad:85:14:7d:d5:f2:61:63:fa:1b:56:d2: 7f:6b:4d:9e:8a:0b:ab:c3:3e:f5:b2:bf:cf:c8:46:40:65:8b: 04:52:8e:4c:7a:b1:46:35:fa:29:66:44:bb:d4:d1:5f:3c:7c: 49:e2:80:f8:db:3b:44:bb:9c:a8:8d:9a:3d:ca:de:74:4c:39: c6:6b:9d:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EwZMEs3IgfNam8a9iptEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODZiNTM2ZTlhZDAwZjUyYWZlOThhYjBlOWE0OGNjMjliMmRhZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zOqSHGRVFaJ3r1g3jjZNKOtEeCI OqyQtzIt0f43crmGTRZdTYJ+8wzNll9Wrk7SsoVxSHQukbAwaaKAeUWMJFzEIXLk fGCVjcd1TpjtkGSmpAGTZPnrSJ7ysp5ahSNaTDOXTzFTYKFQtfd0If/To+Xx1Zht BjccclAwLseI5kCjA8HHXi8/S/lesu3B71BHanMVNHum6PuDA2t+fVhRGhoR/XQS w2GUL8JTihnOmEGqNtLqdf54e+alxinLbuCvOmn0BIdvYdM7JVv5FvrEsyiJfdrI +K+RKK12P9gOmruhEL+CAfS0BGVXrjEBppeVkdwE/Fa6reQ5eYo8Sv9AXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhrU26a0A9Sr+mKsOmkjMKbLa/UMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvMS1HdFRicHJRRDFLdjZZcXc2YVNNd3BzdHI5US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjkvYzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2Yzli Yi8xL0ptUHoyeFV1QlZyQlJiMjdRcDRCaGxRZ1RJMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNBADAN BgkqhkiG9w0BAQsFAAOCAQEAgkC2MhbJZcRQbu1GeuHb3yZzHx288tpo9lT2XhUF /VeZ2wCVVxRHSQVk3fCxdXySLbXPHI+WwNbTd8YXWnaEnemvP5S8tcoI9vvtb7Nj L5Fm1DXklFccyqzln/2xiKJHNpgsV4xykyzb0a+nwR7GqVu0Kg4F7tTz5xUI9Alc 81G6fOPqlLo+QoxDc4NvZGfGRh9AxIRg8CB79bNhhvaQTL5jeZlN9Qa5JRpMLT02 u3Q3gUTDs/ClZH3ZrYUUfdXyYWP6G1bSf2tNnooLq8M+9bK/z8hGQGWLBFKOTHqx RjX6KWZEu9TRXzx8SeKA+Ns7RLucqI2aPcredEw5xmudfA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:02 2026 by rpki-client