This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/aC9Q_3qjddY1l6-wNmHh31rhiv4.roa File: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (raw, json) Hash identifier: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU= Subject key identifier: 68:2F:50:FF:7A:A3:75:D6:35:97:AF:B0:36:61:E1:DF:5A:E1:8A:FE Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019B797EA179A8010DFD1A41796374EDB36E Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/aC9Q_3qjddY1l6-wNmHh31rhiv4.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8264 IP address blocks: 195.20.160.0/19 maxlen: 19 212.197.0.0/17 maxlen: 17 2a00:ff80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a1:79:a8:01:0d:fd:1a:41:79:63:74:ed:b3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=682f50ff7aa375d63597afb03661e1df5ae18afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:bc:01:f1:d8:40:99:73:d2:6a:2a:b4:f1: a4:73:b6:45:75:31:94:8e:96:63:1c:02:9a:be:b2: 8c:10:59:d6:2d:48:58:9e:22:39:7a:96:24:85:c7: ae:0c:7f:65:30:eb:9d:8d:69:92:66:78:39:33:b9: 6c:88:ef:e6:88:92:5a:fb:19:d1:01:e2:28:74:dc: c6:8c:ac:56:8f:00:f9:eb:95:4a:9e:69:f4:5c:8f: 2c:41:49:2c:34:e6:e9:83:98:54:f6:b2:05:40:1f: 6f:e4:0b:44:5b:7a:b1:4d:86:c3:c7:53:77:8e:4c: 29:a5:a4:2c:66:7b:a0:c0:8c:bd:0b:81:a6:e5:fb: ed:58:27:8c:65:10:e7:ca:8d:6c:6b:b2:00:a7:c0: cc:1b:ac:06:42:51:d7:33:1d:6e:1f:8f:6c:c6:80: df:83:39:a6:fe:a6:cb:60:7e:4a:97:37:56:d2:da: e3:f6:a8:6e:dc:7d:01:a1:32:80:19:f7:6f:6d:c1: 93:aa:d3:80:23:77:62:72:54:f5:b7:02:d1:9d:79: 3a:cc:36:43:0a:cf:f7:e5:d0:72:a2:84:07:d2:ad: f4:1b:47:f3:72:82:ef:c0:02:55:22:69:43:6c:00: c2:17:94:e6:06:03:2b:38:dd:80:3a:fc:f4:48:41: 05:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2F:50:FF:7A:A3:75:D6:35:97:AF:B0:36:61:E1:DF:5A:E1:8A:FE X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/aC9Q_3qjddY1l6-wNmHh31rhiv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.160.0/19 212.197.0.0/17 IPv6: 2a00:ff80::/29 Signature Algorithm: sha256WithRSAEncryption a1:6d:d2:34:dc:60:13:f2:f2:5a:a1:12:2b:71:c6:2b:c6:dd: b6:70:9d:79:5b:fd:76:ac:68:b7:03:e6:2a:9f:36:f0:3b:26: fe:4b:31:74:86:ef:93:c4:8c:cd:4c:b0:95:81:40:a1:3c:a3: f1:45:95:f3:ec:6f:b4:a1:fc:06:77:c1:9f:ca:30:af:4e:bd: 55:b7:84:29:75:34:16:34:ce:14:09:f8:a3:13:e1:02:53:5a: 8e:8d:3a:38:27:cc:3f:18:6a:02:b3:59:e3:62:a6:2f:c8:59: d6:9a:fb:e8:db:0e:55:ca:62:2f:f8:82:97:ad:f3:71:30:20: f6:c3:1f:14:70:dd:56:63:ec:fb:92:d4:56:3e:2f:8a:50:74: ee:09:f6:00:04:f3:e9:a0:bb:1f:d5:f2:70:b9:38:f2:9c:16: db:f8:01:95:10:16:54:23:30:5a:83:fd:43:57:d5:36:56:d7: ab:6f:2f:52:bc:d7:7d:88:ec:dd:06:2c:6f:6f:c7:0c:63:a9: 16:86:43:93:dc:e2:60:7e:10:62:00:13:f8:34:ed:6a:5f:b2: 0c:f9:26:7e:b9:40:b0:6a:0c:a7:fa:69:49:31:98:3b:b5:f0: 44:25:87:54:93:91:a8:16:b3:71:70:d3:32:c2:ab:36:75:d8: d3:05:b1:b4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fqF5qAEN/RpBeWN07bNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODJmNTBmZjdhYTM3NWQ2MzU5N2FmYjAzNjYxZTFkZjVhZTE4YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmC8AfHYQJlz0moqtPGkc7ZFdTGU jpZjHAKavrKMEFnWLUhYniI5epYkhceuDH9lMOudjWmSZng5M7lsiO/miJJa+xnR AeIodNzGjKxWjwD565VKnmn0XI8sQUksNObpg5hU9rIFQB9v5AtEW3qxTYbDx1N3 jkwppaQsZnugwIy9C4Gm5fvtWCeMZRDnyo1sa7IAp8DMG6wGQlHXMx1uH49sxoDf gzmm/qbLYH5KlzdW0trj9qhu3H0BoTKAGfdvbcGTqtOAI3diclT1twLRnXk6zDZD Cs/35dByooQH0q30G0fzcoLvwAJVImlDbADCF5TmBgMrON2AOvz0SEEFrQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGgvUP96o3XWNZevsDZh4d9a4Yr+MB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvYUM5UV8zcWpkZFkxbDYtd05tSGgzMXJoaXY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFwxSgAwQH 1MUAMA0EAgACMAcDBQMqAP+AMA0GCSqGSIb3DQEBCwUAA4IBAQChbdI03GAT8vJa oRIrccYrxt22cJ15W/12rGi3A+YqnzbwOyb+SzF0hu+TxIzNTLCVgUChPKPxRZXz 7G+0ofwGd8GfyjCvTr1Vt4QpdTQWNM4UCfijE+ECU1qOjTo4J8w/GGoCs1njYqYv yFnWmvvo2w5VymIv+IKXrfNxMCD2wx8UcN1WY+z7ktRWPi+KUHTuCfYABPPpoLsf 1fJwuTjynBbb+AGVEBZUIzBag/1DV9U2Vterby9SvNd9iOzdBixvb8cMY6kWhkOT 3OJgfhBiABP4NO1qX7IM+SZ+uUCwagyn+mlJMZg7tfBEJYdUk5GoFrNxcNMywqs2 ddjTBbG0 -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:33 2026 by rpki-client