This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/PkSRo3CWKUx4NQN2EIynL2VXNY8.roa File: PkSRo3CWKUx4NQN2EIynL2VXNY8.roa (raw, json) Hash identifier: 7UyCEKaWuR4pgq0/Sue24UhPGmnjwf7e/JUg7VpH6TM= Subject key identifier: 3E:44:91:A3:70:96:29:4C:78:35:03:76:10:8C:A7:2F:65:57:35:8F Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7 Certificate serial: 019B78355A24816077BDDB3D445D1BAAE864 Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/PkSRo3CWKUx4NQN2EIynL2VXNY8.roa Signing time: Thu 01 Jan 2026 06:18:40 +0000 ROA not before: Thu 01 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207773 IP address blocks: 195.114.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5a:24:81:60:77:bd:db:3d:44:5d:1b:aa:e8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e4491a37096294c78350376108ca72f6557358f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:7b:18:3d:7e:36:e3:6a:72:4d:41:17:d8: 97:9f:a7:6f:cf:63:3d:94:15:bd:49:24:f2:48:60: d7:c5:c7:9d:12:3a:bd:d0:14:67:76:10:c8:0b:1c: 39:4e:42:8a:6e:80:42:e6:34:fa:f3:3e:fe:95:56: a5:0d:ed:c9:f3:24:71:f5:26:00:84:eb:2c:dc:1c: 9f:36:a2:56:4e:8e:3b:a9:a8:48:f0:2b:2b:4e:22: ef:da:48:f6:23:1a:4a:20:6c:63:ea:3c:1a:d4:46: bd:4e:14:f8:f9:f8:11:b1:fb:15:2b:cf:5b:1a:c7: 4c:7b:3b:27:cd:bf:9d:dd:3c:8e:35:44:2a:22:95: 17:af:28:80:f0:18:b6:f0:e6:45:9a:dd:87:e6:7b: 22:49:8b:3b:92:fb:e2:40:b7:dd:ee:65:59:12:e8: 07:77:5b:23:45:94:7f:a7:92:6a:70:ad:b8:de:02: 44:c1:b6:fb:e2:ed:9e:cd:d1:eb:2f:3e:e4:fa:d2: 80:bf:4a:0b:fc:68:fb:c2:39:52:54:f3:97:ee:db: ec:9a:f2:3e:ca:03:b9:62:b7:6e:48:a9:2d:4b:0d: e9:41:3c:4b:28:4a:19:8d:69:dc:e3:ab:80:21:89: cd:05:2f:dd:d9:4f:d4:29:96:d0:76:ad:73:14:3b: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:44:91:A3:70:96:29:4C:78:35:03:76:10:8C:A7:2F:65:57:35:8F X509v3 Authority Key Identifier: keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/PkSRo3CWKUx4NQN2EIynL2VXNY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.113.0/24 Signature Algorithm: sha256WithRSAEncryption 14:44:d3:3a:00:de:ef:ab:4d:d3:00:2a:bc:78:70:74:42:2d: 52:45:be:f7:6c:a0:09:97:7f:53:d9:26:c6:4f:ee:8c:91:77: 58:2e:57:cc:42:8b:b0:47:85:0a:56:16:98:83:95:88:4f:2c: 29:f8:2a:bb:22:e9:ae:5c:c5:7c:1b:a6:5f:1b:39:1c:49:2e: bb:98:bc:22:82:fc:9d:4a:0d:fd:8a:e8:6c:4a:b2:77:e1:50: 99:38:0f:6d:53:9d:53:cd:08:1d:f3:47:4e:e7:2a:c4:99:a8: 5e:95:9e:2f:0c:37:5e:91:60:e6:e0:18:32:0d:5f:55:83:37: 54:74:ef:c6:3c:78:b3:32:08:25:9c:57:f7:1d:bf:cc:64:6b: b2:f3:89:b6:d4:8c:26:73:a0:73:da:92:23:e5:10:0a:71:89: 69:f8:5b:7d:e0:b4:7f:63:d7:c2:4b:64:35:8b:73:96:f3:c1: 3a:6e:75:77:c2:8d:ce:05:59:04:1b:66:56:de:e3:a6:bd:fc: 14:88:aa:4c:3b:ab:90:ba:13:0e:97:bb:96:86:33:c9:b9:e4: 77:e8:b8:49:06:88:20:56:c3:ad:dd:f4:dd:4b:35:e7:9a:1b: 3c:a9:44:a7:8a:99:af:ba:33:25:a9:a9:09:1e:b0:e0:4b:20: d5:ea:76:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVokgWB3vds9RF0bquhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWNjMGI2MDg1NWNmZTE1YTkxZWJjYjBlZTU4NGM2MTcx MTZmYjcwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTQ0OTFhMzcwOTYyOTRjNzgzNTAzNzYxMDhjYTcyZjY1NTczNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJd7GD1+NuNqck1BF9iXn6dvz2M9 lBW9SSTySGDXxcedEjq90BRndhDICxw5TkKKboBC5jT68z7+lValDe3J8yRx9SYA hOss3ByfNqJWTo47qahI8CsrTiLv2kj2IxpKIGxj6jwa1Ea9ThT4+fgRsfsVK89b GsdMezsnzb+d3TyONUQqIpUXryiA8Bi28OZFmt2H5nsiSYs7kvviQLfd7mVZEugH d1sjRZR/p5JqcK243gJEwbb74u2ezdHrLz7k+tKAv0oL/Gj7wjlSVPOX7tvsmvI+ ygO5YrduSKktSw3pQTxLKEoZjWnc46uAIYnNBS/d2U/UKZbQdq1zFDt9qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5EkaNwlilMeDUDdhCMpy9lVzWPMB8GA1UdIwQY MBaAFFVcwLYIVc/hWpHryw7lhMYXEW+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTkt MmYzNTJkNjRhYWM4LzEvUGtTUm8zQ1dLVXg0TlFOMkVJeW5MMlZYTlk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTktMmYzNTJkNjRhYWM4 LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3JxMA0G CSqGSIb3DQEBCwUAA4IBAQAURNM6AN7vq03TACq8eHB0Qi1SRb73bKAJl39T2SbG T+6MkXdYLlfMQouwR4UKVhaYg5WITywp+Cq7IumuXMV8G6ZfGzkcSS67mLwigvyd Sg39iuhsSrJ34VCZOA9tU51TzQgd80dO5yrEmahelZ4vDDdekWDm4BgyDV9VgzdU dO/GPHizMgglnFf3Hb/MZGuy84m21Iwmc6Bz2pIj5RAKcYlp+Ft94LR/Y9fCS2Q1 i3OW88E6bnV3wo3OBVkEG2ZW3uOmvfwUiKpMO6uQuhMOl7uWhjPJueR36LhJBogg VsOt3fTdSzXnmhs8qUSnipmvujMlqakJHrDgSyDV6nZl -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:51 2026 by rpki-client