This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/svvoqJIRYC-HEv4mFDJ4yabrIfA.roa File: svvoqJIRYC-HEv4mFDJ4yabrIfA.roa (raw, json) Hash identifier: DylecbDSgd1YsXawir60/ZUXc9wMtcV4PzlLtSqtsUc= Subject key identifier: B2:FB:E8:A8:92:11:60:2F:87:12:FE:26:14:32:78:C9:A6:EB:21:F0 Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225 Certificate serial: 019B7C1207ECF99A4F09414BDB055FEF18AA Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/svvoqJIRYC-HEv4mFDJ4yabrIfA.roa Signing time: Fri 02 Jan 2026 00:18:34 +0000 ROA not before: Fri 02 Jan 2026 00:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 195.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:07:ec:f9:9a:4f:09:41:4b:db:05:5f:ef:18:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225 Validity Not Before: Jan 2 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2fbe8a89211602f8712fe26143278c9a6eb21f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:f7:46:ed:3f:db:2a:8f:e0:44:3e:22:a9: 1c:01:1e:4e:47:70:db:26:43:e9:b6:c9:a1:31:83: c1:89:41:ca:ad:e2:88:47:72:8d:2b:d9:f2:89:e6: b7:fc:7a:3d:63:a6:30:bb:10:51:2c:29:a8:68:eb: f8:e8:95:1e:af:a3:ae:00:f2:5f:0d:33:6a:db:25: 64:2e:cd:2f:62:96:2c:c2:63:a4:1b:1f:fe:b4:e6: 0b:c1:bf:06:ec:a7:c2:56:cf:24:86:ed:b5:ec:ee: e6:c8:98:b5:a5:0a:db:42:c5:dc:1c:eb:02:72:60: f4:ee:8c:9a:31:08:a5:60:9e:d4:79:65:ee:2e:c5: f9:5f:06:d5:4c:4f:75:c6:06:a0:b5:b9:0b:05:11: ec:9d:92:41:9a:46:da:8b:0a:cb:21:63:88:1c:d4: 89:d1:f0:d5:be:8d:09:66:e9:a3:c2:ac:66:ce:7c: 15:2c:70:fb:40:a7:aa:a7:45:57:c1:a3:d2:87:08: 00:91:7e:a1:06:de:58:60:d7:f6:18:fa:75:f7:95: 8d:36:08:e7:fc:95:0b:51:92:86:a7:cc:60:2f:49: 6c:59:64:40:97:3d:a9:59:5d:c2:d5:eb:59:98:42: 9d:7d:7f:e7:01:c2:8d:3e:e1:ec:b1:9d:65:7c:08: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:E8:A8:92:11:60:2F:87:12:FE:26:14:32:78:C9:A6:EB:21:F0 X509v3 Authority Key Identifier: keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/svvoqJIRYC-HEv4mFDJ4yabrIfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:c2:17:19:10:d7:37:6a:de:0c:34:32:66:6a:3b:ca:77:f6: 89:10:9e:07:92:2f:98:07:04:84:24:ab:9e:bc:ff:55:d0:8c: 53:d5:d8:14:b3:3b:c8:40:46:32:4b:07:ba:1e:94:d3:54:cf: e3:1c:b5:c3:3b:72:04:5d:a5:a4:9e:c7:f8:63:57:b6:6b:d3: 30:8e:17:a3:93:d2:04:07:53:b5:81:46:05:b2:a9:58:26:29: 7f:90:6c:5f:28:6b:a0:87:8a:4a:36:23:42:3d:39:00:71:56: 9a:49:af:4d:ee:7f:48:d9:37:1e:4a:8a:3c:ea:7a:b0:ae:fd: ad:45:b1:0b:87:76:0b:93:21:d7:c2:d8:75:5b:cc:b6:28:50: 82:eb:61:d2:a8:ab:43:9a:4a:db:df:69:2b:46:eb:54:04:f7: 4a:2a:d9:57:b5:d3:c4:e6:68:46:31:d7:33:11:3a:fb:26:eb: f5:5c:5a:66:c2:12:16:8d:39:c2:18:92:17:5c:3e:33:4c:9a: fe:7b:bc:c2:37:fd:95:b8:94:94:cd:ad:6f:a4:7e:c4:05:a0: 9e:4c:78:37:8f:34:b3:98:b7:cb:46:dc:12:28:b5:6d:62:1b: 21:94:54:01:cf:dd:d2:08:24:3e:da:f4:54:26:56:1c:cd:a2: e3:c1:4a:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Egfs+ZpPCUFL2wVf7xiqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOTI2OTE4NWY2M2RjMzM1NjAzN2Y3MTNjZThhMDkwOWZm MDcyMjUwHhcNMjYwMTAyMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmZiZThhODkyMTE2MDJmODcxMmZlMjYxNDMyNzhjOWE2ZWIyMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0n3Ru0/2yqP4EQ+IqkcAR5OR3Db JkPptsmhMYPBiUHKreKIR3KNK9nyiea3/Ho9Y6YwuxBRLCmoaOv46JUer6OuAPJf DTNq2yVkLs0vYpYswmOkGx/+tOYLwb8G7KfCVs8khu217O7myJi1pQrbQsXcHOsC cmD07oyaMQilYJ7UeWXuLsX5XwbVTE91xgagtbkLBRHsnZJBmkbaiwrLIWOIHNSJ 0fDVvo0JZumjwqxmznwVLHD7QKeqp0VXwaPShwgAkX6hBt5YYNf2GPp195WNNgjn /JULUZKGp8xgL0lsWWRAlz2pWV3C1etZmEKdfX/nAcKNPuHssZ1lfAgZowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLL76KiSEWAvhxL+JhQyeMmm6yHwMB8GA1UdIwQY MBaAFOySaRhfY9wzVgN/cTzooJCf8HIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUt YTZjOGJkODc0MmE0LzEvc3Z2b3FKSVJZQy1IRXY0bUZESjR5YWJySWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUtYTZjOGJkODc0MmE0 LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5AUMA0G CSqGSIb3DQEBCwUAA4IBAQBtwhcZENc3at4MNDJmajvKd/aJEJ4Hki+YBwSEJKue vP9V0IxT1dgUszvIQEYySwe6HpTTVM/jHLXDO3IEXaWknsf4Y1e2a9Mwjhejk9IE B1O1gUYFsqlYJil/kGxfKGugh4pKNiNCPTkAcVaaSa9N7n9I2TceSoo86nqwrv2t RbELh3YLkyHXwth1W8y2KFCC62HSqKtDmkrb32krRutUBPdKKtlXtdPE5mhGMdcz ETr7Juv1XFpmwhIWjTnCGJIXXD4zTJr+e7zCN/2VuJSUza1vpH7EBaCeTHg3jzSz mLfLRtwSKLVtYhshlFQBz93SCCQ+2vRUJlYczaLjwUpN -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:26 2026 by rpki-client