This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/X1amwEDuQaQ9Rw6xzdG2J44ATp0.roa File: X1amwEDuQaQ9Rw6xzdG2J44ATp0.roa (raw, json) Hash identifier: 5+HdgIGCjhP0J0udjFN1moTOmgGZaQiNHsZcrs+TRCY= Subject key identifier: 5F:56:A6:C0:40:EE:41:A4:3D:47:0E:B1:CD:D1:B6:27:8E:00:4E:9D Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019B77589E550E5D2F4E0A4B088D666EAD72 Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/X1amwEDuQaQ9Rw6xzdG2J44ATp0.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6663 IP address blocks: 195.146.0.0/20 maxlen: 20 195.146.8.0/24 maxlen: 24 195.146.11.0/24 maxlen: 24 195.146.12.0/24 maxlen: 24 195.146.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9e:55:0e:5d:2f:4e:0a:4b:08:8d:66:6e:ad:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f56a6c040ee41a43d470eb1cdd1b6278e004e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:a6:d0:4f:31:ce:7f:3a:a7:95:bc:63:54: 70:8a:1a:43:41:95:f1:fe:32:d4:55:f7:0a:19:35: 08:05:95:2d:2b:40:7f:17:89:6a:b2:64:11:63:10: ee:68:83:bb:f4:61:76:4f:85:39:50:82:69:27:e1: 7e:47:17:a9:0e:82:ec:8c:7d:2b:2e:84:37:a8:88: 5b:89:1f:88:ff:cc:31:63:8b:42:6a:07:35:61:8e: f9:03:44:1b:9b:c7:e5:fa:3f:05:f9:79:73:3c:9f: 7e:9b:1e:2d:e2:e9:05:3b:84:c7:d0:c3:95:b4:3c: 99:ba:ef:f9:d1:8e:c4:ec:8a:f6:7a:ff:a0:67:16: 8e:6d:7b:ca:17:4f:9c:d8:7e:2f:f7:f2:d2:66:b7: 2e:03:ea:bc:cb:73:5b:ef:7a:bb:d4:79:fc:97:d8: 8a:01:a0:77:d5:97:2a:b1:87:49:4c:76:9a:eb:78: 5b:36:81:a1:e4:46:d5:94:d2:2c:28:d7:17:27:79: 5c:43:4d:47:13:5c:57:c3:89:0a:5b:4f:d2:2d:c7: ab:e1:39:f5:40:26:ad:29:85:2d:4c:b0:c0:d5:ce: d6:76:0a:f4:ec:35:d3:48:d5:83:99:45:35:3a:26: 54:e2:a0:1b:71:7d:3d:49:5c:e8:7b:1b:a0:39:71: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:56:A6:C0:40:EE:41:A4:3D:47:0E:B1:CD:D1:B6:27:8E:00:4E:9D X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/X1amwEDuQaQ9Rw6xzdG2J44ATp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.146.0.0/19 Signature Algorithm: sha256WithRSAEncryption 33:39:3e:99:30:a2:8d:a0:f6:30:a8:62:91:dc:f4:9a:fd:2b: b1:32:9a:f5:e1:4f:8b:8a:fa:65:25:1b:f1:2f:9c:cd:7e:b5: 5c:a8:2d:d6:c4:94:a6:64:39:26:0b:7d:09:b3:dc:4d:ae:ec: a4:91:4a:0b:be:ed:5d:d2:03:5e:28:36:af:c2:ee:85:e6:30: 5f:c9:86:39:44:07:f5:6d:d2:3f:95:82:31:7e:f5:62:ae:1a: 0c:0c:55:41:55:7b:15:b8:b7:d9:b9:9d:e8:33:c9:5e:31:c0: 08:d9:5e:16:87:7c:70:48:b8:12:5a:a0:e9:28:df:8d:38:e3: 5e:ff:5f:63:32:94:03:0a:6e:48:d9:b4:91:64:ea:e9:f2:ef: 70:e1:5b:c5:5b:4f:82:88:74:05:23:ee:29:72:9a:2c:c7:42: b8:36:ab:d8:c4:a2:1a:2d:94:e7:65:08:83:8e:ce:67:65:ca: eb:88:34:6b:aa:ca:cb:c8:62:dd:35:10:44:9b:64:68:67:a2: df:6d:e1:72:82:52:21:dd:70:c8:45:09:fe:45:87:84:6b:9b: c8:4a:12:c7:15:1c:3c:02:9d:64:9c:cb:9b:50:f6:24:aa:d4: 32:61:af:2c:19:cc:7c:5d:fd:91:72:95:df:ba:5c:f5:24:5f: 7d:45:e6:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJ5VDl0vTgpLCI1mbq1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjU2YTZjMDQwZWU0MWE0M2Q0NzBlYjFjZGQxYjYyNzhlMDA0ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJum0E8xzn86p5W8Y1RwihpDQZXx /jLUVfcKGTUIBZUtK0B/F4lqsmQRYxDuaIO79GF2T4U5UIJpJ+F+RxepDoLsjH0r LoQ3qIhbiR+I/8wxY4tCagc1YY75A0Qbm8fl+j8F+XlzPJ9+mx4t4ukFO4TH0MOV tDyZuu/50Y7E7Ir2ev+gZxaObXvKF0+c2H4v9/LSZrcuA+q8y3Nb73q71Hn8l9iK AaB31ZcqsYdJTHaa63hbNoGh5EbVlNIsKNcXJ3lcQ01HE1xXw4kKW0/SLcer4Tn1 QCatKYUtTLDA1c7Wdgr07DXTSNWDmUU1OiZU4qAbcX09SVzoexugOXFUzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9WpsBA7kGkPUcOsc3RtieOAE6dMB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvWDFhbXdFRHVRYVE5Unc2eHpkRzJKNDRBVHAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFw5IAMA0G CSqGSIb3DQEBCwUAA4IBAQAzOT6ZMKKNoPYwqGKR3PSa/SuxMpr14U+LivplJRvx L5zNfrVcqC3WxJSmZDkmC30Js9xNruykkUoLvu1d0gNeKDavwu6F5jBfyYY5RAf1 bdI/lYIxfvVirhoMDFVBVXsVuLfZuZ3oM8leMcAI2V4Wh3xwSLgSWqDpKN+NOONe /19jMpQDCm5I2bSRZOrp8u9w4VvFW0+CiHQFI+4pcposx0K4NqvYxKIaLZTnZQiD js5nZcrriDRrqsrLyGLdNRBEm2RoZ6LfbeFyglIh3XDIRQn+RYeEa5vIShLHFRw8 Ap1knMubUPYkqtQyYa8sGcx8Xf2RcpXfulz1JF99ReZT -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:16 2026 by rpki-client