This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/pXDB3JZOfxhx6kB_B6yjlms4hgg.roa File: pXDB3JZOfxhx6kB_B6yjlms4hgg.roa (raw, json) Hash identifier: 7CjufhrAy5+5Le+UMiFmAE/OHHfY94923x+MRoCs0Dc= Subject key identifier: A5:70:C1:DC:96:4E:7F:18:71:EA:40:7F:07:AC:A3:96:6B:38:86:08 Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Certificate serial: 019B7D5CD1CA81FDE49188C9E0555666CF6E Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/pXDB3JZOfxhx6kB_B6yjlms4hgg.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25506 IP address blocks: 195.245.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d1:ca:81:fd:e4:91:88:c9:e0:55:56:66:cf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a570c1dc964e7f1871ea407f07aca3966b388608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:a4:38:3a:ee:63:33:4b:e3:1a:c7:dd:16: db:a2:6a:b0:d9:e5:d2:76:d2:78:d3:cb:11:af:67: 89:cb:31:28:4c:a9:7c:30:bb:32:03:7f:de:d0:77: f4:b7:0b:cb:20:8b:9b:cc:bf:73:1c:4d:ed:8a:aa: a4:44:67:7d:c5:79:79:0b:f3:98:06:14:37:2b:60: 8d:ee:96:90:2c:9f:66:34:5f:f3:02:db:ea:0f:66: a1:cd:b6:c4:75:47:bb:cb:e4:2d:4e:4b:3c:01:95: be:17:35:d5:85:8d:9d:ba:a4:df:10:9d:f7:19:3f: 9c:28:d8:08:23:d9:c6:ed:9c:56:81:25:89:fc:db: 0a:c2:13:7c:29:2b:2b:f8:9c:76:00:00:00:cf:7c: 08:e3:46:7e:c9:d9:20:7c:91:24:7e:d0:c1:51:1e: bb:2b:8b:84:20:40:c2:78:08:e0:1f:d9:c4:92:c9: 57:80:da:85:9d:a9:8e:5f:f3:95:13:58:2a:17:8d: e3:af:cf:2e:05:77:9d:27:35:e6:c9:30:1a:3b:6b: d4:76:28:e9:16:2d:fd:ea:a1:4d:61:a7:74:da:8b: df:d8:53:29:4c:dd:16:a5:17:4e:df:b0:9b:75:ec: a9:9a:5f:64:c9:29:de:f2:da:5a:f4:7f:dc:53:79: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:C1:DC:96:4E:7F:18:71:EA:40:7F:07:AC:A3:96:6B:38:86:08 X509v3 Authority Key Identifier: keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/pXDB3JZOfxhx6kB_B6yjlms4hgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.213.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:37:e6:18:b3:b3:a6:ab:68:d2:32:c7:3e:db:65:0e:18:fa: fa:b9:51:19:4d:24:b1:b5:2c:b9:03:72:ca:e8:70:cb:91:09: d1:b3:a9:92:c8:9a:b6:10:a0:99:82:6f:a0:9b:0c:2b:78:df: 4d:9d:d4:30:0d:25:e9:80:9b:a8:4a:b0:2a:22:4a:35:34:bb: 2e:9d:f0:23:8b:87:0d:5f:2f:d2:ca:39:8c:a5:a7:d1:d7:43: 77:fd:b9:9e:8c:68:50:4f:db:9f:63:1b:a1:c8:f4:6a:fb:63: fe:1c:36:8b:73:7f:99:7f:a9:76:ef:94:33:41:a3:1c:19:d6: 90:1d:b9:55:d7:ba:86:95:7d:9e:b6:a8:ba:c0:32:6d:c7:8f: 4f:ec:8c:bd:54:b4:fa:35:73:a9:55:a1:d6:94:cd:7d:4c:1c: ac:a4:26:97:df:18:d7:42:df:bb:46:b6:7a:46:e2:e4:40:3b: 56:bb:f8:c6:f2:ab:40:64:89:81:50:c8:8b:64:2f:03:20:ac: 37:43:58:cf:0f:a7:cb:09:ba:a7:56:f4:01:38:84:1d:c1:53: a3:7a:d4:ca:cb:3c:19:ed:34:9d:39:cf:18:00:6a:af:b4:e6: 5b:0c:a9:dd:82:e4:05:f9:11:5e:b2:05:8f:f4:d8:ab:64:e3: 47:01:27:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNHKgf3kkYjJ4FVWZs9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNGQ1OTFjMjNhZDJjNjk0NzdkN2Y3YTFkNGNlOGViY2Vl OTU5NmMwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTcwYzFkYzk2NGU3ZjE4NzFlYTQwN2YwN2FjYTM5NjZiMzg4NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAikODruYzNL4xrH3Rbbomqw2eXS dtJ408sRr2eJyzEoTKl8MLsyA3/e0Hf0twvLIIubzL9zHE3tiqqkRGd9xXl5C/OY BhQ3K2CN7paQLJ9mNF/zAtvqD2ahzbbEdUe7y+QtTks8AZW+FzXVhY2duqTfEJ33 GT+cKNgII9nG7ZxWgSWJ/NsKwhN8KSsr+Jx2AAAAz3wI40Z+ydkgfJEkftDBUR67 K4uEIEDCeAjgH9nEkslXgNqFnamOX/OVE1gqF43jr88uBXedJzXmyTAaO2vUdijp Fi396qFNYad02ovf2FMpTN0WpRdO37Cbdeypml9kySne8tpa9H/cU3mtmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVwwdyWTn8YcepAfweso5ZrOIYIMB8GA1UdIwQY MBaAFH9NWRwjrSxpR31/eh1M6OvO6VlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQt ZDRmNWM5MmQ5MDk1LzEvcFhEQjNKWk9meGh4NmtCX0I2eWpsbXM0aGdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQtZDRmNWM5MmQ5MDk1 LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/XVMA0G CSqGSIb3DQEBCwUAA4IBAQBfN+YYs7Omq2jSMsc+22UOGPr6uVEZTSSxtSy5A3LK 6HDLkQnRs6mSyJq2EKCZgm+gmwwreN9NndQwDSXpgJuoSrAqIko1NLsunfAji4cN Xy/SyjmMpafR10N3/bmejGhQT9ufYxuhyPRq+2P+HDaLc3+Zf6l275QzQaMcGdaQ HblV17qGlX2etqi6wDJtx49P7Iy9VLT6NXOpVaHWlM19TByspCaX3xjXQt+7RrZ6 RuLkQDtWu/jG8qtAZImBUMiLZC8DIKw3Q1jPD6fLCbqnVvQBOIQdwVOjetTKyzwZ 7TSdOc8YAGqvtOZbDKndguQF+RFesgWP9NirZONHASfo -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:10 2026 by rpki-client