This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa File: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (raw, json) Hash identifier: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0= Subject key identifier: A7:60:05:77:12:BE:64:74:EF:F8:85:24:34:EC:B1:5C:AF:FE:17:7E Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Certificate serial: 019B7F15F67A54E53648C0BDCD459044F0F9 Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9127 IP address blocks: 195.182.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f6:7a:54:e5:36:48:c0:bd:cd:45:90:44:f0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a760057712be6474eff8852434ecb15caffe177e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:a9:5c:fb:86:09:6a:29:79:72:c5:46:c3: 6d:a9:49:0a:cb:6a:0e:96:3e:02:2d:dd:64:75:8b: ea:63:63:12:2e:98:bc:b0:06:9a:fe:76:7b:14:d0: c7:6e:3f:e0:f7:f1:da:db:da:bb:cf:96:4e:25:51: c8:af:3a:be:75:e1:78:2d:18:6e:63:b6:d9:18:7e: fc:95:85:3d:f6:18:7e:7a:29:22:ab:94:a1:a5:7c: 23:1c:d0:2c:a0:a5:62:3d:21:83:b7:8b:62:28:9b: 9c:f5:94:3a:05:c5:01:7b:e5:f4:d3:d9:39:cc:25: b4:5a:c1:87:e1:26:d5:bd:13:c4:b7:31:8d:69:ca: 83:8f:ad:da:65:2f:a6:e6:4d:f6:5d:ab:09:4b:db: e4:53:0e:dc:a0:0d:b8:dc:38:c1:1a:bc:8d:bd:41: 8e:11:a4:0c:96:df:ae:d9:4f:69:14:fa:b1:97:b2: 01:c4:ee:35:5d:53:60:aa:78:11:98:d6:98:9c:6a: 0a:ec:b5:29:70:e6:a1:3f:57:5d:b8:e0:79:61:8d: af:d1:51:82:fd:e0:b9:51:37:32:11:f9:3b:3f:74: 0f:07:9e:30:85:f4:ea:41:4f:7e:f4:59:a4:1b:15: f5:01:d5:6c:24:80:30:86:66:5f:e0:49:ad:6f:89: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:05:77:12:BE:64:74:EF:F8:85:24:34:EC:B1:5C:AF:FE:17:7E X509v3 Authority Key Identifier: keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.41.0/24 Signature Algorithm: sha256WithRSAEncryption c6:3d:d8:96:26:04:ee:47:8d:99:f3:3c:73:0b:ab:ed:69:06: 74:0e:9e:92:43:47:3c:81:f1:1d:1f:6d:a9:39:f9:de:d1:0b: ef:12:f5:64:32:45:a6:bb:97:2b:83:4d:3a:a0:3f:cc:a3:50: d8:4c:aa:17:e8:96:bf:bd:24:9d:84:73:bd:29:b0:33:ca:dc: a4:42:58:a3:da:97:97:8c:c2:7f:32:ae:5f:1b:dd:b8:0b:7a: dd:c2:d8:f0:71:fb:48:19:10:d2:b4:e5:0a:33:bb:00:dd:d0: 30:e1:20:74:81:ba:aa:b5:1d:2b:f1:ff:0d:22:cf:f9:b3:dd: d4:74:86:b6:18:6f:0f:6c:99:3c:e7:f9:a7:bd:c1:ee:0e:41: 0b:83:40:cd:53:c0:b7:06:49:4c:43:e4:3a:b9:93:da:fc:8d: fd:9f:e1:10:c8:50:c1:2c:ff:c3:9c:cc:30:88:c2:08:21:55: 44:97:0b:0d:62:15:ba:e3:f3:c0:5b:0f:ad:6d:93:b0:e7:5d: 07:16:bc:b6:e7:a6:ea:0f:63:58:ff:59:d7:d0:2b:5d:c5:9e: 97:8c:8e:ba:a4:5b:bb:64:cd:2f:7b:4d:64:76:5b:a9:22:21: 2b:7f:4d:ae:b7:94:38:6d:17:7d:ff:e4:45:13:d3:ba:8f:1b: 5f:fc:e5:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfZ6VOU2SMC9zUWQRPD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy ZTFjYzkwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzYwMDU3NzEyYmU2NDc0ZWZmODg1MjQzNGVjYjE1Y2FmZmUxNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeGpXPuGCWopeXLFRsNtqUkKy2oO lj4CLd1kdYvqY2MSLpi8sAaa/nZ7FNDHbj/g9/Ha29q7z5ZOJVHIrzq+deF4LRhu Y7bZGH78lYU99hh+eikiq5ShpXwjHNAsoKViPSGDt4tiKJuc9ZQ6BcUBe+X009k5 zCW0WsGH4SbVvRPEtzGNacqDj63aZS+m5k32XasJS9vkUw7coA243DjBGryNvUGO EaQMlt+u2U9pFPqxl7IBxO41XVNgqngRmNaYnGoK7LUpcOahP1dduOB5YY2v0VGC /eC5UTcyEfk7P3QPB54whfTqQU9+9FmkGxX1AdVsJIAwhmZf4Emtb4kxewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdgBXcSvmR07/iFJDTssVyv/hd+MB8GA1UdIwQY MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt OTMyMGZlMTNlNWZlLzEvcDJBRmR4Sy1aSFR2LUlVa05PeXhYS18tRjM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YpMA0G CSqGSIb3DQEBCwUAA4IBAQDGPdiWJgTuR42Z8zxzC6vtaQZ0Dp6SQ0c8gfEdH22p Ofne0QvvEvVkMkWmu5crg006oD/Mo1DYTKoX6Ja/vSSdhHO9KbAzytykQlij2peX jMJ/Mq5fG924C3rdwtjwcftIGRDStOUKM7sA3dAw4SB0gbqqtR0r8f8NIs/5s93U dIa2GG8PbJk85/mnvcHuDkELg0DNU8C3BklMQ+Q6uZPa/I39n+EQyFDBLP/DnMww iMIIIVVElwsNYhW64/PAWw+tbZOw510HFry256bqD2NY/1nX0CtdxZ6XjI66pFu7 ZM0ve01kdlupIiErf02ut5Q4bRd9/+RFE9O6jxtf/OXt -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:56 2026 by rpki-client