This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa File: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (raw, json) Hash identifier: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o= Subject key identifier: B5:2C:2E:FE:BB:3E:FD:3D:CE:0F:D3:E9:E4:74:20:F5:AF:1F:F8:5D Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Certificate serial: 019B7EA53FBEF1916BE6AC2FF583DC1EF3D0 Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa Signing time: Fri 02 Jan 2026 12:18:37 +0000 ROA not before: Fri 02 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208693 IP address blocks: 195.234.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3f:be:f1:91:6b:e6:ac:2f:f5:83:dc:1e:f3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Validity Not Before: Jan 2 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b52c2efebb3efd3dce0fd3e9e47420f5af1ff85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:22:87:51:3e:06:03:15:a7:76:92:0d:24:06: 3c:08:79:72:b7:45:b3:28:1f:e2:a4:ad:0a:3a:fa: 8a:63:4b:5a:47:72:dd:56:53:4a:09:78:74:55:4a: 68:cb:d6:16:27:ad:ac:07:8c:98:92:b1:ba:48:a2: 1e:93:28:04:ec:8c:da:92:dd:95:a3:9f:ed:82:38: 61:72:d5:00:27:d9:7c:7e:6f:c4:ed:22:02:27:d8: f9:2e:ec:3f:9b:d9:8b:f4:c6:c5:94:f6:a4:e6:6f: 52:5b:1e:1f:a7:dd:02:ea:4a:ee:a9:3f:5a:de:80: 5a:c1:6c:7e:28:d1:ac:bc:9d:27:16:23:94:6f:0d: 86:64:ea:f5:68:8a:ad:d8:0f:cb:d8:81:85:a1:89: d2:40:66:cd:74:17:47:a3:f4:22:d8:4a:05:c9:eb: 93:db:be:48:66:0d:91:ee:e4:32:4c:60:1f:28:60: 8e:07:3b:c5:3e:86:61:24:51:25:a6:8c:cf:65:7e: fe:ee:31:85:10:7d:d4:6a:87:9d:af:54:a0:9a:7c: 04:d0:1a:9d:65:f2:fc:45:33:6d:a0:e5:fa:f5:34: ef:1d:f7:a2:24:31:15:8d:61:0e:ea:04:60:75:7a: 13:a4:12:5d:6f:b9:f9:ec:2a:fc:0a:9b:d9:d3:f3: 94:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2C:2E:FE:BB:3E:FD:3D:CE:0F:D3:E9:E4:74:20:F5:AF:1F:F8:5D X509v3 Authority Key Identifier: keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.161.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:e6:13:70:aa:dc:90:de:4a:88:14:e0:ea:be:07:38:9f:ca: 87:5a:1b:20:46:14:86:cf:3c:5e:ca:69:62:32:b9:3f:ee:ce: 22:93:7e:70:51:5d:3d:7a:a1:85:d8:69:e4:e7:d5:64:aa:39: d7:d3:38:7d:ac:ee:96:33:f9:02:1b:4f:a5:aa:e2:a4:5d:4b: 36:7d:fb:45:54:06:b4:e7:6e:40:56:b7:00:fa:f5:b8:10:9e: 00:1a:87:f9:16:55:fb:c0:5e:55:5c:0d:49:c1:eb:be:0b:23: 26:c1:a6:34:cf:a8:ca:01:af:49:dd:b8:b7:da:39:18:11:f9: 07:87:53:5a:43:e2:e6:f0:50:cd:72:93:bf:c6:2e:e7:8d:e0: 5f:de:ee:db:fa:2b:6f:d4:b9:47:3e:56:04:2b:11:68:7b:14: 51:e9:e0:90:15:d1:04:3c:b9:ea:cb:ca:c0:bd:0d:3f:5e:1f: 75:20:1e:e5:2c:5a:38:10:c1:56:fb:5a:4c:51:30:c5:cb:ab: bd:bc:c0:6d:a8:28:69:79:f3:ce:1a:21:f7:94:fc:52:a7:0a: 50:ef:87:91:39:9d:81:59:95:9a:8f:6a:bb:59:84:02:77:93: 7b:92:fe:65:5e:b6:4c:ad:c7:9a:ab:6f:a7:0d:5a:24:ae:5a: a0:4b:2e:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pT++8ZFr5qwv9YPcHvPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3 M2NhZjIwHhcNMjYwMTAyMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTJjMmVmZWJiM2VmZDNkY2UwZmQzZTllNDc0MjBmNWFmMWZmODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiKHUT4GAxWndpINJAY8CHlyt0Wz KB/ipK0KOvqKY0taR3LdVlNKCXh0VUpoy9YWJ62sB4yYkrG6SKIekygE7Izakt2V o5/tgjhhctUAJ9l8fm/E7SICJ9j5Luw/m9mL9MbFlPak5m9SWx4fp90C6kruqT9a 3oBawWx+KNGsvJ0nFiOUbw2GZOr1aIqt2A/L2IGFoYnSQGbNdBdHo/Qi2EoFyeuT 275IZg2R7uQyTGAfKGCOBzvFPoZhJFElpozPZX7+7jGFEH3Uaoedr1SgmnwE0Bqd ZfL8RTNtoOX69TTvHfeiJDEVjWEO6gRgdXoTpBJdb7n57Cr8CpvZ0/OULwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUsLv67Pv09zg/T6eR0IPWvH/hdMB8GA1UdIwQY MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt NjQ4MjA0MWE4MjQ2LzEvdFN3dV9ycy1fVDNPRDlQcDVIUWc5YThmLUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2 LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qhMA0G CSqGSIb3DQEBCwUAA4IBAQCP5hNwqtyQ3kqIFODqvgc4n8qHWhsgRhSGzzxeymli Mrk/7s4ik35wUV09eqGF2Gnk59VkqjnX0zh9rO6WM/kCG0+lquKkXUs2fftFVAa0 525AVrcA+vW4EJ4AGof5FlX7wF5VXA1Jweu+CyMmwaY0z6jKAa9J3bi32jkYEfkH h1NaQ+Lm8FDNcpO/xi7njeBf3u7b+itv1LlHPlYEKxFoexRR6eCQFdEEPLnqy8rA vQ0/Xh91IB7lLFo4EMFW+1pMUTDFy6u9vMBtqChpefPOGiH3lPxSpwpQ74eROZ2B WZWaj2q7WYQCd5N7kv5lXrZMrceaq2+nDVokrlqgSy5f -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:13 2026 by rpki-client