This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/aZFOkLjs0r0-rRh1vdE-DfBMgvw.roa File: aZFOkLjs0r0-rRh1vdE-DfBMgvw.roa (raw, json) Hash identifier: 59/7mJvpFngGfl1MeWjTYVHHdedKaNfpchig8vCqutM= Subject key identifier: 69:91:4E:90:B8:EC:D2:BD:3E:AD:18:75:BD:D1:3E:0D:F0:4C:82:FC Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c Certificate serial: 019B7BA3DDF41D4F5E2E149014A31E74DED0 Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/aZFOkLjs0r0-rRh1vdE-DfBMgvw.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8431 IP address blocks: 195.230.0.0/20 maxlen: 24 195.230.1.0/24 maxlen: 24 195.230.3.0/24 maxlen: 24 195.230.4.0/24 maxlen: 24 195.230.5.0/24 maxlen: 24 195.230.16.0/23 maxlen: 23 195.230.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:dd:f4:1d:4f:5e:2e:14:90:14:a3:1e:74:de:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69914e90b8ecd2bd3ead1875bdd13e0df04c82fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:20:7b:4e:e8:e3:b1:e8:d1:6c:95:43:0e: f5:25:35:71:d1:4d:d0:5d:78:c6:77:0a:0c:a1:ec: b4:35:08:91:d2:77:d3:f1:2d:bd:ed:85:2b:ad:7f: cc:9e:40:80:d8:d6:b8:b6:1e:16:e8:df:8f:02:03: 77:f9:c6:7d:a6:8a:23:b8:ee:b5:c6:ae:8c:fc:85: 7d:d5:16:a3:eb:37:bd:81:11:36:49:c2:fd:00:18: 9f:ed:ce:25:9c:57:bf:f1:42:ef:26:92:f5:95:97: f4:fa:41:8a:f8:44:a1:4d:03:b7:43:53:68:44:4b: 2a:a6:9d:8b:17:8a:53:93:b7:89:e1:e6:52:39:fe: 7d:9b:65:61:2d:64:9c:d3:a3:ec:5f:00:e5:32:f6: c8:56:39:6c:a8:98:a6:c9:34:99:69:d3:65:9d:bd: 11:f2:cd:f1:0d:23:a8:8c:98:ac:ef:21:4a:0d:67: cc:5b:0d:03:06:96:74:e5:ba:fa:ca:11:5d:6b:eb: 58:18:87:d2:06:0f:39:e0:eb:c9:da:69:c6:aa:27: 8e:c9:6a:16:e3:62:e4:68:5d:af:03:72:c6:47:48: 4e:ab:6c:e4:e7:7d:6e:1f:e3:98:6b:dc:22:ce:0f: ad:b1:94:73:46:05:fa:55:74:f9:1a:00:4d:38:4f: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:91:4E:90:B8:EC:D2:BD:3E:AD:18:75:BD:D1:3E:0D:F0:4C:82:FC X509v3 Authority Key Identifier: keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/aZFOkLjs0r0-rRh1vdE-DfBMgvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.0.0-195.230.18.255 Signature Algorithm: sha256WithRSAEncryption a2:ff:2c:bf:1a:0b:85:61:00:96:26:ab:70:d3:1a:22:2b:db: b1:eb:3e:b1:a1:78:7b:71:b6:3b:4b:9c:0e:d8:b2:25:b6:8e: 26:7c:d0:db:9b:02:0f:09:bd:3a:22:24:9d:44:e6:bc:f6:9b: c4:ff:be:56:81:a4:60:b8:63:ac:53:bf:11:39:f4:26:9d:fa: ba:c9:e8:01:3a:07:17:9f:2f:49:f1:c4:3a:68:7c:0e:22:33: a7:a6:a6:16:89:73:34:52:d1:78:8a:1d:c4:42:a3:ef:3f:0c: 50:18:35:0a:6b:b8:88:b9:20:23:fc:36:67:0f:17:a8:e5:71: a7:62:2a:0a:58:6c:94:35:00:a0:94:d6:59:8f:96:8c:b9:8e: c8:50:7f:72:81:3c:e4:f2:a9:93:e2:74:dd:22:2a:45:a8:c1: 6e:7d:9d:d3:5b:45:0c:58:69:76:f5:a5:65:2d:15:19:6a:2c: 5c:47:82:02:27:46:e7:67:a3:64:ac:51:b0:75:7d:45:f7:47: 5c:d7:ac:69:5d:5b:39:39:62:c7:46:31:bd:e2:3b:62:b9:8f: cc:56:0c:cb:bb:6c:69:63:47:65:b9:5b:3e:3c:b8:f4:3c:e2: f7:99:08:dc:ea:20:8f:da:38:84:95:ed:0b:c3:38:17:b6:75: bc:2b:f8:81 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt7o930HU9eLhSQFKMedN7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyM2ViODQ5ZTBiNjk0MGU0ZmY1NDdkZTBiNDFiMDAzZjll MTEwNWMwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTkxNGU5MGI4ZWNkMmJkM2VhZDE4NzViZGQxM2UwZGYwNGM4MmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxwge07o47Ho0WyVQw71JTVx0U3Q XXjGdwoMoey0NQiR0nfT8S297YUrrX/MnkCA2Na4th4W6N+PAgN3+cZ9poojuO61 xq6M/IV91Raj6ze9gRE2ScL9ABif7c4lnFe/8ULvJpL1lZf0+kGK+EShTQO3Q1No REsqpp2LF4pTk7eJ4eZSOf59m2VhLWSc06PsXwDlMvbIVjlsqJimyTSZadNlnb0R 8s3xDSOojJis7yFKDWfMWw0DBpZ05br6yhFda+tYGIfSBg854OvJ2mnGqieOyWoW 42LkaF2vA3LGR0hOq2zk531uH+OYa9wizg+tsZRzRgX6VXT5GgBNOE8rawIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFGmRTpC47NK9Pq0Ydb3RPg3wTIL8MB8GA1UdIwQY MBaAFLI+uEngtpQOT/VH3gtBsAP54RBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAt MTU1ZjQyZGNhYTczLzEvYVpGT2tManMwcjAtclJoMXZkRS1EZkJNZ3Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAtMTU1ZjQyZGNhYTcz LzEvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwHD5gME AMPmEjANBgkqhkiG9w0BAQsFAAOCAQEAov8svxoLhWEAliarcNMaIivbses+saF4 e3G2O0ucDtiyJbaOJnzQ25sCDwm9OiIknUTmvPabxP++VoGkYLhjrFO/ETn0Jp36 usnoAToHF58vSfHEOmh8DiIzp6amFolzNFLReIodxEKj7z8MUBg1Cmu4iLkgI/w2 Zw8XqOVxp2IqClhslDUAoJTWWY+WjLmOyFB/coE85PKpk+J03SIqRajBbn2d01tF DFhpdvWlZS0VGWosXEeCAidG52ejZKxRsHV9RfdHXNesaV1bOTlix0YxveI7YrmP zFYMy7tsaWNHZblbPjy49Dzi95kI3Oogj9o4hJXtC8M4F7Z1vCv4gQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:36 2026 by rpki-client