This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/iIdAzPtCqikbah21E-K0Mm8FQ_M.roa File: iIdAzPtCqikbah21E-K0Mm8FQ_M.roa (raw, json) Hash identifier: lyzsEh3CqWMd20FxkkU5rgZbDHljJ2MjfPiA4AST0rM= Subject key identifier: 88:87:40:CC:FB:42:AA:29:1B:6A:1D:B5:13:E2:B4:32:6F:05:43:F3 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA6623228DEDF37FADC3FFF7152ABFF Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/iIdAzPtCqikbah21E-K0Mm8FQ_M.roa Signing time: Fri 02 Jan 2026 12:19:51 +0000 ROA not before: Fri 02 Jan 2026 12:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30898 IP address blocks: 195.168.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:62:32:28:de:df:37:fa:dc:3f:ff:71:52:ab:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=888740ccfb42aa291b6a1db513e2b4326f0543f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:3c:f5:d8:51:3d:22:87:c8:d4:cb:2c:ad: 64:35:08:02:66:14:b8:ec:3e:7d:16:93:1b:e4:8c: f8:f1:68:ed:7a:1c:51:ba:34:2e:d8:5b:10:bc:14: 21:22:d7:13:e9:aa:5f:52:68:c4:4b:ee:7f:e3:a3: bd:0f:13:aa:f5:53:48:39:b9:11:9e:a0:b1:0c:08: c0:8e:be:d3:8b:0f:f0:35:86:6b:c7:8c:af:83:7c: f5:4e:a7:26:5d:14:36:4a:34:30:b8:40:c5:b7:f8: 4f:bb:4c:a2:84:da:9a:e1:a7:35:62:1d:7d:40:a2: bb:e4:40:93:d7:bd:e1:ff:ce:9d:42:2b:ea:6a:06: 4e:e1:c7:76:13:dd:e0:99:37:ce:f2:31:d0:24:0f: 23:37:50:67:d2:29:1f:d0:70:cb:03:ff:22:b1:e7: ac:15:5c:7f:13:1c:44:e5:b8:45:8d:b1:84:1a:40: 23:39:62:b0:dd:73:6b:ae:43:33:fc:bf:77:0b:e9: 8e:73:39:7e:d0:c3:b9:31:16:d8:34:d1:76:45:54: 85:b4:0a:14:73:ec:f8:d5:b7:78:2a:a0:01:fd:83: 73:41:04:cd:d1:ed:3e:70:d5:b2:3f:a4:ae:3b:c2: b9:6e:8e:22:cf:d2:2f:e5:82:20:fa:0b:b6:01:9c: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:87:40:CC:FB:42:AA:29:1B:6A:1D:B5:13:E2:B4:32:6F:05:43:F3 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/iIdAzPtCqikbah21E-K0Mm8FQ_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.168.240.0/24 Signature Algorithm: sha256WithRSAEncryption 26:21:c1:15:fc:a6:b6:e4:d6:7d:1e:54:e6:9e:35:ea:81:f0: 20:1d:60:72:60:b4:9a:9c:31:b6:17:83:66:b6:2d:6a:69:a2: d5:ca:13:8e:de:9e:c7:28:f3:ef:42:d2:59:ad:b0:b0:59:78: e6:32:97:7b:82:bd:f2:6b:b7:62:59:05:ec:c4:96:17:68:a5: 07:3d:37:14:ae:e2:07:1a:c2:70:9b:7c:d9:8e:15:7f:7d:0f: 84:9a:de:36:fa:c2:0b:7f:e1:b0:03:02:8e:8b:21:2b:88:00: 6e:d2:96:90:e3:a2:ec:b8:7e:f4:ea:58:8d:c0:92:9b:1a:39: 32:83:f3:77:12:26:85:1f:a4:40:89:23:a1:d2:76:2f:a2:90: fb:bf:25:5a:6d:2f:16:3a:90:69:12:75:20:67:6a:f6:e9:43: 5b:4c:8f:71:71:2d:53:11:a9:31:72:ac:d3:7b:b6:ce:a3:1f: 28:8e:3f:b7:52:d0:27:1d:82:d6:e5:2b:0d:e2:92:e0:19:74: ae:68:c6:86:64:00:5a:9f:7b:68:70:e7:d4:a3:d2:c4:0b:48: eb:16:5a:80:bb:d5:fb:ce:7d:5a:df:33:a2:7f:b7:96:84:a8: 51:4f:86:3d:39:cf:72:7b:a5:f5:54:77:04:27:71:b0:c0:e1: 94:b9:f3:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmIyKN7fN/rcP/9xUqv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODg3NDBjY2ZiNDJhYTI5MWI2YTFkYjUxM2UyYjQzMjZmMDU0M2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNk89dhRPSKHyNTLLK1kNQgCZhS4 7D59FpMb5Iz48WjtehxRujQu2FsQvBQhItcT6apfUmjES+5/46O9DxOq9VNIObkR nqCxDAjAjr7Tiw/wNYZrx4yvg3z1TqcmXRQ2SjQwuEDFt/hPu0yihNqa4ac1Yh19 QKK75ECT173h/86dQivqagZO4cd2E93gmTfO8jHQJA8jN1Bn0ikf0HDLA/8isees FVx/ExxE5bhFjbGEGkAjOWKw3XNrrkMz/L93C+mOczl+0MO5MRbYNNF2RVSFtAoU c+z41bd4KqAB/YNzQQTN0e0+cNWyP6SuO8K5bo4iz9Iv5YIg+gu2AZzocwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIiHQMz7QqopG2odtRPitDJvBUPzMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvaUlkQXpQdENxaWtiYWgyMUUtSzBNbThGUV9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6jwMA0G CSqGSIb3DQEBCwUAA4IBAQAmIcEV/Ka25NZ9HlTmnjXqgfAgHWByYLSanDG2F4Nm ti1qaaLVyhOO3p7HKPPvQtJZrbCwWXjmMpd7gr3ya7diWQXsxJYXaKUHPTcUruIH GsJwm3zZjhV/fQ+Emt42+sILf+GwAwKOiyEriABu0paQ46LsuH706liNwJKbGjky g/N3EiaFH6RAiSOh0nYvopD7vyVabS8WOpBpEnUgZ2r26UNbTI9xcS1TEakxcqzT e7bOox8ojj+3UtAnHYLW5SsN4pLgGXSuaMaGZABan3tocOfUo9LEC0jrFlqAu9X7 zn1a3zOif7eWhKhRT4Y9Oc9ye6X1VHcEJ3GwwOGUufNr -----END CERTIFICATE-----Generated at Mon Jan 26 12:16:39 2026 by rpki-client