This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/iWhsduS23m90Fn4lDMKgSgk15_o.roa File: iWhsduS23m90Fn4lDMKgSgk15_o.roa (raw, json) Hash identifier: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw= Subject key identifier: 89:68:6C:76:E4:B6:DE:6F:74:16:7E:25:0C:C2:A0:4A:09:35:E7:FA Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Certificate serial: 019B79EC3FD5B01EAD68E616A3C39E4D5391 Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/iWhsduS23m90Fn4lDMKgSgk15_o.roa Signing time: Thu 01 Jan 2026 14:18:04 +0000 ROA not before: Thu 01 Jan 2026 14:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51278 IP address blocks: 195.226.217.0/24 maxlen: 24 2001:67c:278::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3f:d5:b0:1e:ad:68:e6:16:a3:c3:9e:4d:53:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Validity Not Before: Jan 1 14:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89686c76e4b6de6f74167e250cc2a04a0935e7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:84:70:d5:07:78:f9:e8:bf:0e:bd:84:ca: 28:0d:78:6f:1b:89:9b:62:2b:d6:0e:dd:c6:ac:f5: 06:34:56:05:90:32:13:43:7b:0c:92:e4:46:c1:e6: 71:40:fe:18:d9:70:41:7f:f1:05:df:75:b8:15:94: 53:04:1b:20:3e:c1:06:10:94:e0:bc:24:9d:0f:46: 57:5c:2c:2a:6c:68:90:56:11:d8:4d:1a:d8:27:74: 32:d5:de:e2:50:f3:38:6f:a8:93:f1:30:eb:32:97: 48:66:85:84:8c:c5:c0:38:1e:4a:9c:88:e3:3b:39: b3:cd:60:53:aa:bc:f0:01:28:af:a4:1f:ae:94:68: 2e:74:3e:c1:d8:f4:7b:2b:9c:df:81:4b:60:00:fe: 45:7e:ef:ce:8a:a7:25:dc:84:64:b0:00:e5:fc:b6: af:84:86:6d:eb:03:6c:94:34:b4:cf:a1:97:33:5a: 09:f8:bc:6d:bb:c5:7e:83:ff:56:6c:43:87:2b:75: 28:cc:53:59:96:00:23:60:c9:2f:35:86:bc:52:ae: 4c:75:80:71:6f:10:85:29:ea:e5:a5:e1:0b:13:54: 1e:10:16:2e:53:d2:e0:c0:4b:23:6a:9e:18:01:83: 74:6e:b4:0c:a5:0f:b7:99:d4:ff:4e:33:e4:07:09: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:68:6C:76:E4:B6:DE:6F:74:16:7E:25:0C:C2:A0:4A:09:35:E7:FA X509v3 Authority Key Identifier: keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/iWhsduS23m90Fn4lDMKgSgk15_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.217.0/24 IPv6: 2001:67c:278::/48 Signature Algorithm: sha256WithRSAEncryption 3b:8b:e8:96:52:eb:6f:5e:9b:a1:74:3d:1e:cc:e5:ec:96:3f: 0f:b2:8b:62:55:4d:82:90:c7:1b:5f:c5:0d:bb:26:43:7a:6d: bd:71:75:73:1d:02:6b:e4:ac:b5:6a:5d:c2:12:a6:0b:dd:26: ed:9d:51:2c:f5:d0:ec:99:0c:17:78:02:61:97:3e:34:d8:f7: 03:ff:0c:ac:df:9c:1a:be:05:f2:a4:0f:a4:af:d7:87:d5:a8: 0a:c5:af:0d:d9:75:3d:d3:29:0e:7b:84:8c:1b:5b:a0:18:b9: e7:ac:57:27:7a:df:73:7d:e5:3d:36:71:55:4e:6f:69:94:61: bf:67:9b:3b:1a:31:4d:d9:3b:29:9a:46:57:d2:b5:89:3c:54: 05:87:04:23:6f:fc:a0:00:30:86:26:22:9f:03:e9:29:d8:51: 86:79:dc:cd:e2:0c:63:00:6a:84:10:dc:91:28:1e:78:d5:6a: 56:9d:60:a3:89:57:c2:83:35:81:a1:62:0d:e4:da:b0:d9:f7: 98:35:fb:a2:87:78:4d:e9:70:23:c7:d5:1c:86:57:f5:76:d6: a8:f5:c1:19:12:11:82:00:7e:58:a0:e8:75:fa:ba:93:59:b3: f6:c5:05:6a:0b:75:e3:c0:61:52:c4:55:23:55:84:88:6c:55: c6:fd:dd:5b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57D/VsB6taOYWo8OeTVORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz NmZmMTAwHhcNMjYwMTAxMTQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTY4NmM3NmU0YjZkZTZmNzQxNjdlMjUwY2MyYTA0YTA5MzVlN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoOEcNUHePnovw69hMooDXhvG4mb YivWDt3GrPUGNFYFkDITQ3sMkuRGweZxQP4Y2XBBf/EF33W4FZRTBBsgPsEGEJTg vCSdD0ZXXCwqbGiQVhHYTRrYJ3Qy1d7iUPM4b6iT8TDrMpdIZoWEjMXAOB5KnIjj OzmzzWBTqrzwASivpB+ulGgudD7B2PR7K5zfgUtgAP5Ffu/Oiqcl3IRksADl/Lav hIZt6wNslDS0z6GXM1oJ+Lxtu8V+g/9WbEOHK3UozFNZlgAjYMkvNYa8Uq5MdYBx bxCFKerlpeELE1QeEBYuU9LgwEsjap4YAYN0brQMpQ+3mdT/TjPkBwkFkQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIlobHbktt5vdBZ+JQzCoEoJNef6MB8GA1UdIwQY MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt YjUzYjY0Y2YwZDk1LzEvaVdoc2R1UzIzbTkwRm40bERNS2dTZ2sxNV9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1 LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw+LZMA8E AgACMAkDBwAgAQZ8AngwDQYJKoZIhvcNAQELBQADggEBADuL6JZS629em6F0PR7M 5eyWPw+yi2JVTYKQxxtfxQ27JkN6bb1xdXMdAmvkrLVqXcISpgvdJu2dUSz10OyZ DBd4AmGXPjTY9wP/DKzfnBq+BfKkD6Sv14fVqArFrw3ZdT3TKQ57hIwbW6AYuees Vyd633N95T02cVVOb2mUYb9nmzsaMU3ZOymaRlfStYk8VAWHBCNv/KAAMIYmIp8D 6SnYUYZ53M3iDGMAaoQQ3JEoHnjValadYKOJV8KDNYGhYg3k2rDZ95g1+6KHeE3p cCPH1RyGV/V21qj1wRkSEYIAflig6HX6upNZs/bFBWoLdePAYVLEVSNVhIhsVcb9 3Vs= -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:06 2026 by rpki-client