This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/56OuJAFLxYLycHQelVfe38ZXJQ4.roa File: 56OuJAFLxYLycHQelVfe38ZXJQ4.roa (raw, json) Hash identifier: nQFqa95YTGbs99rbUDdgmLON/4oj050R+MJmxkQyzH8= Subject key identifier: E7:A3:AE:24:01:4B:C5:82:F2:70:74:1E:95:57:DE:DF:C6:57:25:0E Certificate issuer: /CN=3f8138fea066d6f504436001cc9d7f339db734c8 Certificate serial: 019B7BA332BD486DFD094C01D2CC8916F791 Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/56OuJAFLxYLycHQelVfe38ZXJQ4.roa Signing time: Thu 01 Jan 2026 22:17:31 +0000 ROA not before: Thu 01 Jan 2026 22:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199579 IP address blocks: 195.43.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:32:bd:48:6d:fd:09:4c:01:d2:cc:89:16:f7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8 Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7a3ae24014bc582f270741e9557dedfc657250e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:84:f7:9e:a0:dc:17:36:af:bb:9b:0f:62: a8:6e:bf:2b:57:0d:1d:1a:a3:5e:03:f6:28:09:a9: db:0c:b1:92:97:27:a1:e2:70:b0:4e:45:f2:4a:83: 07:1d:04:42:03:dd:9c:32:04:77:c3:2d:22:c4:e6: 8c:e8:b0:e6:21:80:fb:b7:05:89:05:17:70:7a:f5: fd:89:c4:b1:9a:ec:65:78:73:50:bf:f9:5f:3d:6e: f1:74:e8:ec:00:c6:f2:b0:f5:db:dd:52:01:a4:74: bc:9c:b7:24:4d:fb:64:98:73:54:ba:96:3c:8c:0c: 99:3c:16:ee:c0:57:d9:51:3a:c6:70:2a:c3:3a:75: 52:92:a6:7d:bc:f5:d1:54:09:3d:7c:42:88:87:51: 38:9a:7a:a4:b1:af:01:f6:6b:89:fc:6a:ed:bd:8b: 50:7e:7d:a5:ff:3b:ed:13:47:45:b1:2b:d9:88:fc: 38:ef:4b:5d:d2:4c:48:ae:6e:5e:00:1f:71:2c:dd: 5d:b0:5e:ab:95:a8:10:26:0a:35:e5:6e:13:a0:17: cf:7d:c5:99:f9:c5:b8:d8:36:75:b9:4d:e1:5d:54: a4:52:50:a5:bd:01:a4:66:07:3c:28:8f:0a:b7:61: 0a:70:14:bd:6e:a0:f5:fc:0f:f8:f8:27:ce:4a:9f: 9c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A3:AE:24:01:4B:C5:82:F2:70:74:1E:95:57:DE:DF:C6:57:25:0E X509v3 Authority Key Identifier: keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/56OuJAFLxYLycHQelVfe38ZXJQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.150.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ec:b3:17:7b:16:a0:b5:8a:b3:76:fe:42:0b:fb:bc:36:1d: 4c:92:a9:75:08:d5:72:37:dc:be:ab:7d:2f:41:ac:5a:ed:fc: 93:c2:82:9b:61:c7:01:0f:c2:ae:95:d3:f8:64:e7:15:d8:55: be:3e:4e:82:d6:3e:ac:6a:61:e7:76:02:af:f1:93:91:71:9d: dc:0f:ce:b1:04:9f:a5:76:37:e8:ae:a6:0b:03:95:e3:63:a1: 1f:25:96:17:12:0d:db:f0:0e:6b:5b:50:cc:64:23:28:f1:b5: d5:ad:fa:51:bc:53:0e:39:81:69:36:e7:e2:f7:a8:72:0e:c3: c3:08:46:4e:e0:a0:20:44:f1:16:1b:41:57:b8:a3:09:8d:ee: f1:24:64:42:3c:2d:de:c4:7a:0d:1f:44:47:1e:62:ac:99:3c: 1f:4a:8a:43:d8:f1:d4:a4:bc:60:2b:cf:da:33:49:ea:16:fe: bb:d5:a6:6a:a8:55:57:27:fc:f1:43:2b:69:4b:49:37:81:29: 45:49:2d:b4:d9:59:10:b2:1b:57:75:67:b4:55:8c:dc:eb:06: bb:c2:44:af:7e:bc:2e:31:e3:4e:a9:30:54:6e:58:31:05:a4: fd:52:c2:53:f7:2d:95:39:b7:e0:76:70:5a:d2:3e:61:f7:23: 46:f0:8c:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozK9SG39CUwB0syJFveRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmODEzOGZlYTA2NmQ2ZjUwNDQzNjAwMWNjOWQ3ZjMzOWRi NzM0YzgwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2EzYWUyNDAxNGJjNTgyZjI3MDc0MWU5NTU3ZGVkZmM2NTcyNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5KE956g3Bc2r7ubD2Kobr8rVw0d GqNeA/YoCanbDLGSlyeh4nCwTkXySoMHHQRCA92cMgR3wy0ixOaM6LDmIYD7twWJ BRdwevX9icSxmuxleHNQv/lfPW7xdOjsAMbysPXb3VIBpHS8nLckTftkmHNUupY8 jAyZPBbuwFfZUTrGcCrDOnVSkqZ9vPXRVAk9fEKIh1E4mnqksa8B9muJ/GrtvYtQ fn2l/zvtE0dFsSvZiPw470td0kxIrm5eAB9xLN1dsF6rlagQJgo15W4ToBfPfcWZ +cW42DZ1uU3hXVSkUlClvQGkZgc8KI8Kt2EKcBS9bqD1/A/4+CfOSp+c6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOejriQBS8WC8nB0HpVX3t/GVyUOMB8GA1UdIwQY MBaAFD+BOP6gZtb1BENgAcydfzOdtzTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgt ZTMyN2U1MjI3MDY2LzEvNTZPdUpBRkx4WUx5Y0hRZWxWZmUzOFpYSlE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgtZTMyN2U1MjI3MDY2 LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyuWMA0G CSqGSIb3DQEBCwUAA4IBAQAr7LMXexagtYqzdv5CC/u8Nh1Mkql1CNVyN9y+q30v Qaxa7fyTwoKbYccBD8KuldP4ZOcV2FW+Pk6C1j6samHndgKv8ZORcZ3cD86xBJ+l djforqYLA5XjY6EfJZYXEg3b8A5rW1DMZCMo8bXVrfpRvFMOOYFpNufi96hyDsPD CEZO4KAgRPEWG0FXuKMJje7xJGRCPC3exHoNH0RHHmKsmTwfSopD2PHUpLxgK8/a M0nqFv671aZqqFVXJ/zxQytpS0k3gSlFSS202VkQshtXdWe0VYzc6wa7wkSvfrwu MeNOqTBUblgxBaT9UsJT9y2VObfgdnBa0j5h9yNG8IzO -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:22 2026 by rpki-client