This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_LrY6RN7eMdJ30Yrj_mDWA2p7J0.roa File: _LrY6RN7eMdJ30Yrj_mDWA2p7J0.roa (raw, json) Hash identifier: dx/WFrkHwf7f+dLgk+cPLkwOMtUYBh/J65Ocl/T7qJI= Subject key identifier: FC:BA:D8:E9:13:7B:78:C7:49:DF:46:2B:8F:F9:83:58:0D:A9:EC:9D Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F846C11511065CA307D4AFA54FA86CD Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_LrY6RN7eMdJ30Yrj_mDWA2p7J0.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197654 IP address blocks: 195.33.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6c:11:51:10:65:ca:30:7d:4a:fa:54:fa:86:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcbad8e9137b78c749df462b8ff983580da9ec9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:3f:97:01:6f:69:c5:d9:b6:da:4d:9a:6f: 7b:3d:17:73:4c:fa:d8:04:6b:f1:25:2b:c5:ff:df: 39:31:65:9a:b4:e5:0b:74:43:56:14:4e:cc:ce:dc: 47:e6:45:a1:b8:e6:46:65:af:da:be:f2:ab:43:2f: b4:5c:75:8b:3b:c0:37:6e:c6:ea:f6:7a:c8:1a:13: 40:ff:84:96:4b:c9:58:5a:96:ea:6c:a1:57:30:e1: 56:90:15:23:8d:32:f9:b2:58:0a:8a:ef:40:f6:44: cf:d1:96:b7:31:c4:a6:d2:52:1e:a5:28:48:5d:d5: 57:1e:ab:b5:d0:e4:0c:93:84:ee:0a:6e:8b:4b:ea: 31:de:dd:30:03:27:69:0c:2d:c1:b2:df:b4:80:8d: 22:54:61:cc:cc:3a:fe:94:40:54:f8:c4:d1:2a:58: ac:49:99:ba:fe:8b:b6:d4:c3:8a:5a:0e:6c:67:71: 58:be:56:a5:74:a8:b5:21:c2:9e:da:29:ed:f5:a7: 96:94:1c:73:0a:38:91:aa:d6:02:a5:75:3b:a9:5a: d9:13:35:41:b7:06:c8:8c:4e:dd:ca:e9:35:26:47: 76:b8:3b:35:a3:0e:71:24:6b:22:78:7f:5d:73:6f: a0:82:d0:1f:46:9c:8e:aa:ef:30:12:7e:22:f3:88: c1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BA:D8:E9:13:7B:78:C7:49:DF:46:2B:8F:F9:83:58:0D:A9:EC:9D X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_LrY6RN7eMdJ30Yrj_mDWA2p7J0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.33.198.0/24 Signature Algorithm: sha256WithRSAEncryption 40:a3:77:c2:54:dc:dc:34:e4:c9:33:7e:09:8d:43:69:41:30: cb:3d:dd:2e:ce:43:16:ac:30:60:ca:5a:fc:ab:b2:a2:3f:f0: e1:70:bb:f2:ee:bc:51:7f:bb:6d:8d:2b:cd:96:b0:5e:f6:08: 90:4b:e5:e4:e1:a3:ca:4e:8f:3d:74:95:81:23:5b:f5:fd:c7: ca:cb:8f:ae:d1:f2:7d:61:ae:ed:f1:49:aa:b6:a2:fa:15:ce: 2f:98:c7:48:3a:39:84:5d:b9:77:6e:ce:13:80:41:1f:8f:db: 02:d8:67:17:f9:77:ed:63:73:25:31:b3:b4:fb:7b:ec:7d:03: a9:cb:cc:71:51:b0:be:2e:ae:9c:18:c6:f8:8a:11:7e:fe:89: e7:61:e2:d6:e0:37:1d:ae:94:e4:ea:d5:f5:e1:20:08:f4:af: 5b:cb:c3:24:7e:06:1b:6e:30:38:16:2d:f9:79:6a:54:01:c0: 33:c8:0f:ac:4d:3e:70:1b:d9:ff:a7:3f:72:3d:5d:17:84:58: 55:74:b6:f4:59:75:3d:34:eb:15:0f:03:64:e8:ae:64:81:47: 8a:29:69:ad:bd:b1:5c:68:de:79:82:da:4d:d3:e5:c4:63:e0: 5b:43:4b:3f:98:5e:e9:f1:02:0a:5c:43:fd:ee:ba:59:61:f6: 0c:2e:2a:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGwRURBlyjB9SvpU+obNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2JhZDhlOTEzN2I3OGM3NDlkZjQ2MmI4ZmY5ODM1ODBkYTllYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RA/lwFvacXZttpNmm97PRdzTPrY BGvxJSvF/985MWWatOULdENWFE7MztxH5kWhuOZGZa/avvKrQy+0XHWLO8A3bsbq 9nrIGhNA/4SWS8lYWpbqbKFXMOFWkBUjjTL5slgKiu9A9kTP0Za3McSm0lIepShI XdVXHqu10OQMk4TuCm6LS+ox3t0wAydpDC3Bst+0gI0iVGHMzDr+lEBU+MTRKlis SZm6/ou21MOKWg5sZ3FYvlaldKi1IcKe2int9aeWlBxzCjiRqtYCpXU7qVrZEzVB twbIjE7dyuk1Jkd2uDs1ow5xJGsieH9dc2+ggtAfRpyOqu8wEn4i84jBdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPy62OkTe3jHSd9GK4/5g1gNqeydMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvX0xyWTZSTjdlTWRKMzBZcmpfbURXQTJwN0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyHGMA0G CSqGSIb3DQEBCwUAA4IBAQBAo3fCVNzcNOTJM34JjUNpQTDLPd0uzkMWrDBgylr8 q7KiP/DhcLvy7rxRf7ttjSvNlrBe9giQS+Xk4aPKTo89dJWBI1v1/cfKy4+u0fJ9 Ya7t8UmqtqL6Fc4vmMdIOjmEXbl3bs4TgEEfj9sC2GcX+XftY3MlMbO0+3vsfQOp y8xxUbC+Lq6cGMb4ihF+/onnYeLW4DcdrpTk6tX14SAI9K9by8MkfgYbbjA4Fi35 eWpUAcAzyA+sTT5wG9n/pz9yPV0XhFhVdLb0WXU9NOsVDwNk6K5kgUeKKWmtvbFc aN55gtpN0+XEY+BbQ0s/mF7p8QIKXEP97rpZYfYMLiou -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:07 2026 by rpki-client