This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/INecSgDNWHvp6sU-WpJihfiFh4s.roa File: INecSgDNWHvp6sU-WpJihfiFh4s.roa (raw, json) Hash identifier: PMEEstkE23N+oMl4zNZYpTJcYs3rPhZEK/XuV630Gno= Subject key identifier: 20:D7:9C:4A:00:CD:58:7B:E9:EA:C5:3E:5A:92:62:85:F8:85:87:8B Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019B76EB3DA9C5823B95889D33A2FD932198 Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/INecSgDNWHvp6sU-WpJihfiFh4s.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51619 IP address blocks: 195.210.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3d:a9:c5:82:3b:95:88:9d:33:a2:fd:93:21:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d79c4a00cd587be9eac53e5a926285f885878b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:70:86:45:b7:a6:cd:90:ef:c4:a0:69:67: 70:c5:f3:e4:dd:c1:93:f6:25:34:0d:f8:68:bf:cd: 2e:75:46:12:75:a4:9f:e4:6b:f5:7c:6b:7e:d7:f3: 6b:f7:3c:b8:84:ee:cf:37:6a:1c:1a:6e:09:46:ce: 97:eb:43:be:2e:4b:da:4d:77:65:6a:b9:13:8e:14: 45:ac:f0:26:4a:47:50:b5:ed:e0:bf:65:a6:90:0e: f7:40:69:df:fd:03:32:53:ec:2d:aa:8c:7e:64:9e: 19:60:5f:32:71:7d:43:af:7a:01:d4:7f:ee:d2:bf: 93:ed:2c:ec:d4:3a:78:a6:6e:1f:7c:7c:b7:3b:49: ac:d4:2d:8f:40:c3:3b:5f:96:ba:7c:f6:d0:a0:94: 0e:75:a0:b3:d2:4b:23:65:b4:06:d9:bb:b3:38:83: 95:1f:8d:18:b1:4a:26:b4:0e:0b:3d:0b:c7:1c:fc: 41:e6:5b:5a:a9:a5:ab:77:fe:ea:66:6c:45:c7:96: 63:8b:f9:09:8d:95:3a:0e:c9:ee:34:ba:e4:03:42: 28:69:43:31:90:e9:04:50:83:55:d9:48:9f:9e:d7: 3a:b3:1b:20:95:87:bd:e6:2c:ca:8d:82:4a:d0:5b: 3f:89:fa:56:65:d5:b4:0c:40:87:81:3d:58:b1:4d: 6b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D7:9C:4A:00:CD:58:7B:E9:EA:C5:3E:5A:92:62:85:F8:85:87:8B X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/INecSgDNWHvp6sU-WpJihfiFh4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.210.60.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:51:7f:54:bf:be:8c:cc:66:ac:a9:d8:bd:e5:e1:ab:c6:98: 3b:37:2c:ba:07:0c:1c:4a:e6:5b:8d:bb:7e:97:e7:3c:7a:04: 9d:8f:cc:9e:29:d0:fe:9b:39:06:3d:14:e4:43:0f:ab:a9:3f: 37:45:27:46:6e:d8:55:c9:87:35:d3:7e:c7:4d:74:05:a1:d6: 9d:83:2f:af:90:94:28:fd:2f:3e:69:89:4d:fb:72:43:05:10: e5:5d:8e:fa:39:b9:4e:68:9d:94:7a:16:c4:8a:d5:8f:ff:a6: a6:42:fe:5f:07:18:97:50:31:90:03:b3:3f:e0:b9:08:e8:a7: e8:3e:79:bf:d2:84:09:4d:01:60:b0:9d:02:72:f4:e7:90:20: a3:51:e7:04:91:03:31:1c:35:a3:c0:5b:23:39:79:c9:e5:8b: 83:0e:cc:2f:de:fe:4d:9b:1e:22:7c:4d:f2:ad:ae:29:25:4e: 0a:78:99:bd:7e:32:5e:e6:39:94:76:57:0d:fb:5b:ae:ae:61: 01:48:2b:f3:be:46:fa:ed:04:86:70:e6:3c:ea:3f:6b:2e:ca: 96:5c:30:25:c0:c3:a4:2a:c6:d5:0f:ae:1b:f6:bf:04:41:33: 37:91:39:71:e7:8c:8e:3f:6b:de:92:27:04:b1:41:19:69:5a: ea:78:12:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26z2pxYI7lYidM6L9kyGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQ3OWM0YTAwY2Q1ODdiZTllYWM1M2U1YTkyNjI4NWY4ODU4NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7dwhkW3ps2Q78SgaWdwxfPk3cGT 9iU0Dfhov80udUYSdaSf5Gv1fGt+1/Nr9zy4hO7PN2ocGm4JRs6X60O+LkvaTXdl arkTjhRFrPAmSkdQte3gv2WmkA73QGnf/QMyU+wtqox+ZJ4ZYF8ycX1Dr3oB1H/u 0r+T7Szs1Dp4pm4ffHy3O0ms1C2PQMM7X5a6fPbQoJQOdaCz0ksjZbQG2buzOIOV H40YsUomtA4LPQvHHPxB5ltaqaWrd/7qZmxFx5Zji/kJjZU6DsnuNLrkA0IoaUMx kOkEUINV2Uifntc6sxsglYe95izKjYJK0Fs/ifpWZdW0DECHgT1YsU1rawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCDXnEoAzVh76erFPlqSYoX4hYeLMB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEvSU5lY1NnRE5XSHZwNnNVLVdwSmloZmlGaDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw9I8MA0G CSqGSIb3DQEBCwUAA4IBAQA9UX9Uv76MzGasqdi95eGrxpg7Nyy6BwwcSuZbjbt+ l+c8egSdj8yeKdD+mzkGPRTkQw+rqT83RSdGbthVyYc1037HTXQFodadgy+vkJQo /S8+aYlN+3JDBRDlXY76OblOaJ2UehbEitWP/6amQv5fBxiXUDGQA7M/4LkI6Kfo Pnm/0oQJTQFgsJ0CcvTnkCCjUecEkQMxHDWjwFsjOXnJ5YuDDswv3v5Nmx4ifE3y ra4pJU4KeJm9fjJe5jmUdlcN+1uurmEBSCvzvkb67QSGcOY86j9rLsqWXDAlwMOk KsbVD64b9r8EQTM3kTlx54yOP2vekicEsUEZaVrqeBKp -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:47 2026 by rpki-client