This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/v38vnXS7MFs5Wkz96Z1hk-0G0Ds.roa File: v38vnXS7MFs5Wkz96Z1hk-0G0Ds.roa (raw, json) Hash identifier: Jcz9P2Y4QeuqZOaA28xqXNYGZV40OskOqiuBj2qNWnE= Subject key identifier: BF:7F:2F:9D:74:BB:30:5B:39:5A:4C:FD:E9:9D:61:93:ED:06:D0:3B Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D1CA5FAE6CDC1A95A197F6C5ADD23 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/v38vnXS7MFs5Wkz96Z1hk-0G0Ds.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43711 IP address blocks: 195.56.170.0/24 maxlen: 24 195.56.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1c:a5:fa:e6:cd:c1:a9:5a:19:7f:6c:5a:dd:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf7f2f9d74bb305b395a4cfde99d6193ed06d03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:68:6b:73:46:1e:d3:51:d5:a7:02:7f:4e:43: 7f:65:83:5e:fc:6f:a0:80:e9:c4:9f:5e:8d:a9:c0: 45:56:ac:b4:65:1b:e0:51:b0:64:39:6e:67:0f:e5: 70:45:d5:0d:98:cf:12:56:14:6d:1e:ba:87:2c:1b: 36:8f:d1:07:46:da:df:43:3e:60:28:d6:bb:6a:cc: 81:09:f9:25:bd:c9:8f:c5:1a:e8:7c:e1:ef:11:65: d9:17:e0:58:fa:32:2e:71:4a:ea:8c:90:72:87:ce: 91:3c:68:8f:7b:df:11:54:c8:bc:8a:2e:bd:17:a7: fe:46:d3:bb:de:b3:b6:00:42:a8:d1:4a:e7:d9:8c: 9f:82:bd:dd:23:86:94:a0:62:50:e3:46:2d:93:45: ac:00:25:67:31:9f:b4:24:24:dd:a2:38:90:7b:5a: da:75:d2:83:d8:19:c5:a6:8b:08:c1:26:ca:77:94: 5c:e5:e3:2f:d0:ee:b6:05:aa:23:03:07:ea:ee:b4: 15:2d:13:f7:5a:83:9c:3a:c2:50:06:ae:5d:ab:57: a2:fc:49:30:bf:61:0e:5f:bb:aa:d1:14:47:7b:9f: e4:fe:d5:07:f1:b7:23:e7:40:08:a0:4e:c1:24:a8: a6:3b:45:ff:f4:a5:77:48:c3:06:38:35:d9:fe:f7: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7F:2F:9D:74:BB:30:5B:39:5A:4C:FD:E9:9D:61:93:ED:06:D0:3B X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/v38vnXS7MFs5Wkz96Z1hk-0G0Ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.56.170.0/24 195.56.172.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:96:d4:8f:ed:6e:8d:cb:81:6f:70:00:2e:76:95:01:4e:15: 86:d9:52:c0:60:04:4e:a6:fc:c0:48:a2:77:ff:38:dd:8c:b3: 5a:db:a5:9a:56:16:c0:00:29:6d:13:24:6d:00:fd:61:a7:3d: a5:69:0d:a1:91:2f:ad:7e:6b:0a:03:93:db:b7:13:d3:6e:28: 71:22:2c:e3:e8:26:d2:ff:df:ee:2d:ce:89:61:06:13:0c:34: 5d:d8:4d:59:a4:b6:74:62:ff:b6:36:8c:4c:b2:ed:92:d2:1d: 73:bd:02:0a:eb:d8:e9:ec:97:81:77:9b:f7:2e:d2:f1:a6:9a: d3:f6:c4:f3:bc:78:0d:99:32:c8:c4:bc:ff:09:46:5e:9c:c8: 44:d4:82:18:f1:a6:98:70:dd:a2:ee:35:45:35:3f:26:80:23: d5:53:3f:ca:13:a3:43:cf:33:af:ad:97:bf:d2:32:f7:53:c0: 0c:3e:03:84:a7:a8:89:03:4d:71:65:f2:4b:10:2b:6d:12:c4: 05:ac:29:a9:b0:ba:b7:65:79:ce:98:59:df:50:0a:a1:2a:8c: 0a:d7:d3:5c:d8:06:47:78:bb:8b:60:81:66:96:0b:1b:d6:24: f7:1c:ed:ad:4a:1b:63:5d:01:23:9a:82:02:66:f9:41:8e:a9: 02:72:16:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XRyl+ubNwalaGX9sWt0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjdmMmY5ZDc0YmIzMDViMzk1YTRjZmRlOTlkNjE5M2VkMDZkMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWhrc0Ye01HVpwJ/TkN/ZYNe/G+g gOnEn16NqcBFVqy0ZRvgUbBkOW5nD+VwRdUNmM8SVhRtHrqHLBs2j9EHRtrfQz5g KNa7asyBCfklvcmPxRrofOHvEWXZF+BY+jIucUrqjJByh86RPGiPe98RVMi8ii69 F6f+RtO73rO2AEKo0Urn2Yyfgr3dI4aUoGJQ40Ytk0WsACVnMZ+0JCTdojiQe1ra ddKD2BnFposIwSbKd5Rc5eMv0O62BaojAwfq7rQVLRP3WoOcOsJQBq5dq1ei/Ekw v2EOX7uq0RRHe5/k/tUH8bcj50AIoE7BJKimO0X/9KV3SMMGODXZ/vdNbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL9/L510uzBbOVpM/emdYZPtBtA7MB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvdjM4dm5YUzdNRnM1V2t6OTZaMWhrLTBHMERzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwziqAwQA wzisMA0GCSqGSIb3DQEBCwUAA4IBAQAfltSP7W6Ny4FvcAAudpUBThWG2VLAYARO pvzASKJ3/zjdjLNa26WaVhbAACltEyRtAP1hpz2laQ2hkS+tfmsKA5PbtxPTbihx Iizj6CbS/9/uLc6JYQYTDDRd2E1ZpLZ0Yv+2NoxMsu2S0h1zvQIK69jp7JeBd5v3 LtLxpprT9sTzvHgNmTLIxLz/CUZenMhE1IIY8aaYcN2i7jVFNT8mgCPVUz/KE6ND zzOvrZe/0jL3U8AMPgOEp6iJA01xZfJLECttEsQFrCmpsLq3ZXnOmFnfUAqhKowK 19Nc2AZHeLuLYIFmlgsb1iT3HO2tShtjXQEjmoICZvlBjqkCchZ4 -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:02 2026 by rpki-client