This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/Uz9TM-baJ3XQHq98E4_sczvBhQU.roa File: Uz9TM-baJ3XQHq98E4_sczvBhQU.roa (raw, json) Hash identifier: rSZ//pyykhfyoXS+8XiZOdmRQameb6KqxCKCpnB3YUw= Subject key identifier: 53:3F:53:33:E6:DA:27:75:D0:1E:AF:7C:13:8F:EC:73:3B:C1:85:05 Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c Certificate serial: 019B7BA3DEDEDABF4DE28DBA2B46AFB7537F Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/Uz9TM-baJ3XQHq98E4_sczvBhQU.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49072 IP address blocks: 195.230.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:de:de:da:bf:4d:e2:8d:ba:2b:46:af:b7:53:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=533f5333e6da2775d01eaf7c138fec733bc18505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:df:09:da:56:43:64:7f:09:cd:74:09:18: a3:72:ce:22:3b:01:7f:21:5a:52:fc:96:3b:4d:03: d2:b1:fb:c1:f2:33:bc:67:57:79:68:b2:df:1e:5d: 59:2c:46:a6:c6:f3:ab:69:6a:b3:44:98:07:3f:4a: 28:d3:58:9e:7b:ac:1e:15:72:c8:91:7f:52:fd:12: d3:24:ef:b1:70:37:8e:35:8c:e3:b2:80:88:01:71: 7a:eb:c2:2f:a5:ef:a8:11:de:1a:f3:c4:b9:61:20: 35:86:4f:ac:8f:bd:8c:b0:84:be:f1:17:ca:0c:1e: 7f:88:31:38:a8:2d:5b:4b:a1:30:98:5d:a8:e5:ec: 7a:41:8c:32:cb:c1:d0:57:3c:d1:f9:17:73:be:92: f6:05:cd:f3:e8:4e:ad:12:04:5a:b5:4a:a5:e6:10: 47:53:b3:10:fa:cd:0a:8d:d9:93:af:23:60:de:2a: be:b3:18:98:4d:65:49:44:b6:d3:14:24:96:73:38: 3d:af:93:e8:b5:37:b9:e7:97:f9:c2:b5:97:bc:40: 47:2b:c2:f3:5f:fe:61:30:6a:fc:ef:6d:cd:aa:4d: 54:c6:9b:65:d9:83:5d:07:dd:91:04:a7:51:ae:d5: 06:5e:86:a6:3b:63:55:3c:d6:1c:62:ba:cb:1d:8b: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3F:53:33:E6:DA:27:75:D0:1E:AF:7C:13:8F:EC:73:3B:C1:85:05 X509v3 Authority Key Identifier: keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/Uz9TM-baJ3XQHq98E4_sczvBhQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.26.0/24 Signature Algorithm: sha256WithRSAEncryption ac:d1:01:56:cf:59:f8:40:7d:b8:ef:b5:d2:6a:08:8a:5b:d0: 7f:2e:77:b4:74:87:41:18:b1:b2:80:49:f3:11:57:ae:ae:3e: 79:10:01:38:8a:d5:5c:88:a7:47:46:a3:b5:d9:f9:6c:5d:c5: 5d:82:b5:26:a0:48:2b:be:a2:ad:f3:82:9d:ee:4a:e8:1e:78: 5f:f3:d4:05:f4:b0:f9:54:7a:a1:e5:f7:57:61:22:b8:ec:e5: 42:0b:d4:aa:f5:70:63:8e:71:20:20:0d:9b:1a:f2:2a:e7:77: e8:a2:df:3c:2d:52:65:cf:4e:7d:d3:87:2d:b9:3f:45:56:03: e9:7e:30:7c:50:a0:b1:c3:18:9b:1c:66:c4:d9:b9:30:52:ed: dc:24:36:be:45:22:bb:a8:87:28:3d:3b:11:57:29:67:1a:64: 7a:57:50:f1:ed:c4:63:fa:2e:72:83:44:1a:3f:9d:0e:e4:74: 9e:ce:35:eb:62:d1:35:bd:8d:ef:31:c6:e6:be:4f:88:e0:31: f8:87:bd:b6:61:a9:ff:29:0b:7b:6d:d8:e6:4f:3e:fa:4d:e8: cb:06:91:98:c0:0a:65:c1:b6:d5:f1:be:4a:a6:7e:4b:85:17: 98:71:33:32:cd:6f:da:9f:85:48:cd:dc:df:b0:a7:84:34:7b: 2d:d5:5b:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o97e2r9N4o26K0avt1N/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyM2ViODQ5ZTBiNjk0MGU0ZmY1NDdkZTBiNDFiMDAzZjll MTEwNWMwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzNmNTMzM2U2ZGEyNzc1ZDAxZWFmN2MxMzhmZWM3MzNiYzE4NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09XfCdpWQ2R/Cc10CRijcs4iOwF/ IVpS/JY7TQPSsfvB8jO8Z1d5aLLfHl1ZLEamxvOraWqzRJgHP0oo01iee6weFXLI kX9S/RLTJO+xcDeONYzjsoCIAXF668Ivpe+oEd4a88S5YSA1hk+sj72MsIS+8RfK DB5/iDE4qC1bS6EwmF2o5ex6QYwyy8HQVzzR+RdzvpL2Bc3z6E6tEgRatUql5hBH U7MQ+s0KjdmTryNg3iq+sxiYTWVJRLbTFCSWczg9r5PotTe555f5wrWXvEBHK8Lz X/5hMGr8723Nqk1Uxptl2YNdB92RBKdRrtUGXoamO2NVPNYcYrrLHYt/jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFM/UzPm2id10B6vfBOP7HM7wYUFMB8GA1UdIwQY MBaAFLI+uEngtpQOT/VH3gtBsAP54RBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAt MTU1ZjQyZGNhYTczLzEvVXo5VE0tYmFKM1hRSHE5OEU0X3NjenZCaFFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAtMTU1ZjQyZGNhYTcz LzEvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+YaMA0G CSqGSIb3DQEBCwUAA4IBAQCs0QFWz1n4QH2477XSagiKW9B/Lne0dIdBGLGygEnz EVeurj55EAE4itVciKdHRqO12flsXcVdgrUmoEgrvqKt84Kd7kroHnhf89QF9LD5 VHqh5fdXYSK47OVCC9Sq9XBjjnEgIA2bGvIq53foot88LVJlz05904ctuT9FVgPp fjB8UKCxwxibHGbE2bkwUu3cJDa+RSK7qIcoPTsRVylnGmR6V1Dx7cRj+i5yg0Qa P50O5HSezjXrYtE1vY3vMcbmvk+I4DH4h722Yan/KQt7bdjmTz76TejLBpGYwApl wbbV8b5Kpn5LhReYcTMyzW/an4VIzdzfsKeENHst1Vvz -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:12 2026 by rpki-client