This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/_TZJcz_b9cq-8luNUL6eEZRU19o.roa File: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (raw, json) Hash identifier: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw= Subject key identifier: FD:36:49:73:3F:DB:F5:CA:BE:F2:5B:8D:50:BE:9E:11:94:54:D7:DA Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Certificate serial: 019B7AC83CC97121A758AE49728A3372C727 Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/_TZJcz_b9cq-8luNUL6eEZRU19o.roa Signing time: Thu 01 Jan 2026 18:18:21 +0000 ROA not before: Thu 01 Jan 2026 18:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 195.43.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3c:c9:71:21:a7:58:ae:49:72:8a:33:72:c7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Validity Not Before: Jan 1 18:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd3649733fdbf5cabef25b8d50be9e119454d7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:a5:04:e4:29:97:e1:38:43:19:08:ca:96: ed:5c:7e:4a:2a:4f:86:a7:9b:5b:04:13:1b:0d:d9: 57:89:4a:ea:ce:af:8b:35:05:71:34:4c:f2:fe:b7: 8e:e1:bd:0e:3b:43:c2:30:b0:7a:5a:0f:de:72:11: 17:cd:d4:a0:45:92:d1:5b:05:07:ed:4d:d4:39:52: 4a:6f:6d:6a:23:bf:4c:f5:2b:fe:b3:e3:0a:38:ea: 18:86:3b:b9:29:e5:33:9e:9e:5f:89:25:e0:0e:97: cd:5a:c8:9f:5d:ec:01:e5:3d:00:d2:01:59:1a:81: 9b:ed:79:1a:95:ca:8f:a1:ff:c4:b3:71:5b:4a:2d: 4d:ac:7c:37:bb:32:75:3e:74:25:c4:9a:35:58:cb: db:46:7e:bc:e1:0b:49:c2:6d:1f:c1:d5:00:33:6e: 8e:d4:c5:ed:f3:53:d2:01:01:69:06:5f:5c:61:88: 93:5d:af:30:86:12:9b:ce:57:3b:19:db:f6:77:e4: 4e:19:a8:ab:64:7b:42:ab:d7:0f:b1:02:98:dc:b3: 2d:86:1f:c9:b7:ea:04:be:87:fe:82:0d:3d:0a:e6: 8b:80:42:70:a0:74:06:07:4c:39:50:b7:4b:19:01: 81:60:88:a2:6d:cf:5b:9a:db:49:dd:88:9c:70:c8: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:36:49:73:3F:DB:F5:CA:BE:F2:5B:8D:50:BE:9E:11:94:54:D7:DA X509v3 Authority Key Identifier: keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/_TZJcz_b9cq-8luNUL6eEZRU19o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.153.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:58:4e:a6:18:eb:19:9b:88:03:e8:e8:b4:7e:89:2d:f2:9b: 6f:6b:8c:80:a5:54:d6:63:a3:5d:6e:60:07:c2:d8:d5:8d:94: de:67:d1:be:25:27:c2:aa:26:dc:d2:a7:7e:f5:d7:02:83:ee: 0f:62:69:d8:fb:e8:4c:be:af:cd:3d:96:0e:e2:62:6e:39:91: 15:c9:dc:da:50:4b:32:00:02:d1:c6:89:94:2a:c5:d8:d2:2b: e1:dd:5c:18:30:1c:3d:93:e3:ce:3a:91:9f:3d:6d:a6:7b:dc: e0:4a:1b:a4:69:dd:e7:88:7e:7a:ea:7c:d1:14:9c:7f:86:f2: a0:0f:53:f0:c4:2d:09:8e:1a:c9:53:26:31:93:c4:95:d1:10: fc:fe:5e:da:8d:34:09:9d:ea:69:1f:ce:fe:42:a6:9a:3d:15: e8:4b:4e:cf:f3:ff:a1:67:03:52:8c:a3:b0:cc:a2:ac:dc:34: 54:8c:78:e3:0f:1d:e5:17:e4:10:04:c9:51:67:ad:89:77:d7: d3:9a:48:8a:c1:92:32:61:f0:de:7a:25:f0:27:f4:3d:57:d2: 49:1a:90:68:d6:7c:0f:47:fd:dc:16:51:c1:be:79:b4:9c:23: 2a:7e:2b:e6:ff:89:7a:0e:ad:f6:5b:42:0d:b1:05:ee:79:1f: 7a:1d:b3:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDzJcSGnWK5JcoozcscnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0 ZTdkYjYwHhcNMjYwMTAxMTgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDM2NDk3MzNmZGJmNWNhYmVmMjViOGQ1MGJlOWUxMTk0NTRkN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIilBOQpl+E4QxkIypbtXH5KKk+G p5tbBBMbDdlXiUrqzq+LNQVxNEzy/reO4b0OO0PCMLB6Wg/echEXzdSgRZLRWwUH 7U3UOVJKb21qI79M9Sv+s+MKOOoYhju5KeUznp5fiSXgDpfNWsifXewB5T0A0gFZ GoGb7XkalcqPof/Es3FbSi1NrHw3uzJ1PnQlxJo1WMvbRn684QtJwm0fwdUAM26O 1MXt81PSAQFpBl9cYYiTXa8whhKbzlc7Gdv2d+ROGairZHtCq9cPsQKY3LMthh/J t+oEvof+gg09CuaLgEJwoHQGB0w5ULdLGQGBYIiibc9bmttJ3YiccMjE+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP02SXM/2/XKvvJbjVC+nhGUVNfaMB8GA1UdIwQY MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt MWE1Yzc2MzU1ODhiLzEvX1RaSmN6X2I5Y3EtOGx1TlVMNmVFWlJVMTlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyuZMA0G CSqGSIb3DQEBCwUAA4IBAQCMWE6mGOsZm4gD6Oi0fokt8ptva4yApVTWY6NdbmAH wtjVjZTeZ9G+JSfCqibc0qd+9dcCg+4PYmnY++hMvq/NPZYO4mJuOZEVydzaUEsy AALRxomUKsXY0ivh3VwYMBw9k+POOpGfPW2me9zgShukad3niH566nzRFJx/hvKg D1PwxC0JjhrJUyYxk8SV0RD8/l7ajTQJneppH87+QqaaPRXoS07P8/+hZwNSjKOw zKKs3DRUjHjjDx3lF+QQBMlRZ62Jd9fTmkiKwZIyYfDeeiXwJ/Q9V9JJGpBo1nwP R/3cFlHBvnm0nCMqfivm/4l6Dq32W0INsQXueR96HbMF -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:33 2026 by rpki-client