This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa File: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (raw, json) Hash identifier: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA= Subject key identifier: 9D:DE:78:24:D7:B8:BC:86:7F:F8:67:9C:AB:B0:AE:4B:BC:FD:A2:E1 Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Certificate serial: 019B7AC8CD68C692CCC76C2A393EB23F10DD Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199871 IP address blocks: 195.149.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cd:68:c6:92:cc:c7:6c:2a:39:3e:b2:3f:10:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dde7824d7b8bc867ff8679cabb0ae4bbcfda2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:58:71:2e:ec:a0:77:4f:99:cf:45:3a:f5: ac:9b:f5:24:b0:d6:c5:f9:61:6e:51:70:e1:f2:a6: 04:b1:31:d2:13:b0:eb:49:64:9f:60:07:e9:46:93: fa:19:54:ea:fd:ea:a0:7a:c1:3b:99:b8:58:62:88: 5f:ee:1e:b0:06:01:2c:fc:77:0b:59:3a:7b:01:ff: 19:12:bd:a6:a0:5d:c5:a3:64:f7:9b:e6:69:ba:51: 9d:35:00:46:9d:3a:b1:d2:f3:80:24:04:73:33:18: bf:e0:c1:89:71:dd:5c:27:ec:a0:09:d1:8e:04:e4: d3:4a:fd:93:ec:54:e9:00:c0:cb:17:3a:4f:37:f7: 33:7e:ad:86:5f:83:ea:5c:14:36:54:32:b7:40:fb: 02:cf:d9:e9:41:11:10:02:18:e5:80:f4:86:ac:70: c8:e4:2c:26:83:6a:95:26:df:f0:c0:ad:2d:c9:96: b3:e4:75:02:10:1e:25:dd:f1:e1:78:b1:2d:02:9e: 1b:bb:18:0d:72:53:ab:a2:e3:0c:db:35:bc:7d:38: 9f:ab:73:ff:ea:e9:bc:7a:77:fd:45:03:b5:8d:b9: df:55:b3:51:eb:66:15:15:f3:89:46:69:ac:2b:8b: ac:a9:d2:c3:ea:98:ee:9e:a3:5b:9c:85:5e:56:40: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DE:78:24:D7:B8:BC:86:7F:F8:67:9C:AB:B0:AE:4B:BC:FD:A2:E1 X509v3 Authority Key Identifier: keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.71.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:71:2e:32:5c:5b:11:a5:49:9a:b1:55:d0:3b:90:9b:35:3e: 2a:34:a2:ae:ca:53:11:a8:a3:bb:71:ff:8c:b9:ef:27:04:e0: 7d:61:db:37:51:07:d0:29:25:d8:12:43:7c:51:27:cf:91:62: a3:62:12:9e:b1:e6:e1:68:b0:4f:ab:b3:08:cb:33:8d:81:5a: 1f:70:6e:53:09:06:b0:02:0b:2c:69:15:c3:33:91:85:ad:fb: a6:92:c8:8a:bf:6b:6a:e8:c7:df:cf:be:45:29:14:5a:84:0f: 11:d5:87:3e:43:3d:14:23:94:48:03:7c:0b:3d:f4:ea:4b:6c: b6:6d:29:52:e0:a3:bd:1b:c6:b5:bd:74:f9:19:7e:a0:c4:17: 2f:2b:c2:9e:0b:d8:69:50:38:51:d6:90:b5:2a:e6:9a:00:d7: fc:ff:38:4b:74:c0:35:e5:8c:de:c1:f5:2e:a5:bf:97:6c:17: 15:2c:e1:a1:0d:e5:bc:c9:8e:08:8d:27:d2:6e:a2:5f:80:1d: fe:1d:c9:f9:62:cf:93:76:ee:b0:76:39:03:bf:ea:2e:ae:37: 17:d6:c1:36:d0:05:fd:87:b9:b2:4a:73:6b:4b:f4:f5:a7:9f: af:b2:c1:c7:a4:bd:3d:fe:79:9a:67:fc:a5:66:40:7f:63:2b: a7:9d:69:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yM1oxpLMx2wqOT6yPxDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5 ZGE5MTgwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGRlNzgyNGQ3YjhiYzg2N2ZmODY3OWNhYmIwYWU0YmJjZmRhMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeNYcS7soHdPmc9FOvWsm/UksNbF +WFuUXDh8qYEsTHSE7DrSWSfYAfpRpP6GVTq/eqgesE7mbhYYohf7h6wBgEs/HcL WTp7Af8ZEr2moF3Fo2T3m+ZpulGdNQBGnTqx0vOAJARzMxi/4MGJcd1cJ+ygCdGO BOTTSv2T7FTpAMDLFzpPN/czfq2GX4PqXBQ2VDK3QPsCz9npQREQAhjlgPSGrHDI 5Cwmg2qVJt/wwK0tyZaz5HUCEB4l3fHheLEtAp4buxgNclOrouMM2zW8fTifq3P/ 6um8enf9RQO1jbnfVbNR62YVFfOJRmmsK4usqdLD6pjunqNbnIVeVkCtGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3eeCTXuLyGf/hnnKuwrku8/aLhMB8GA1UdIwQY MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct Y2RiMjgxYTJiM2E4LzEvbmQ1NEpOZTR2SVpfLUdlY3E3Q3VTN3o5b3VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4 LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VHMA0G CSqGSIb3DQEBCwUAA4IBAQCfcS4yXFsRpUmasVXQO5CbNT4qNKKuylMRqKO7cf+M ue8nBOB9Yds3UQfQKSXYEkN8USfPkWKjYhKesebhaLBPq7MIyzONgVofcG5TCQaw AgssaRXDM5GFrfumksiKv2tq6Mffz75FKRRahA8R1Yc+Qz0UI5RIA3wLPfTqS2y2 bSlS4KO9G8a1vXT5GX6gxBcvK8KeC9hpUDhR1pC1KuaaANf8/zhLdMA15YzewfUu pb+XbBcVLOGhDeW8yY4IjSfSbqJfgB3+Hcn5Ys+Tdu6wdjkDv+ourjcX1sE20AX9 h7mySnNrS/T1p5+vssHHpL09/nmaZ/ylZkB/YyunnWmc -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:41 2026 by rpki-client