This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/sjQCjerjRwfah-q2hwwOmAstMTo.roa File: sjQCjerjRwfah-q2hwwOmAstMTo.roa (raw, json) Hash identifier: N10Zo0ylNZWVNpGxcYshMOYMt1EH12p203A0DA3EChs= Subject key identifier: B2:34:02:8D:EA:E3:47:07:DA:87:EA:B6:87:0C:0E:98:0B:2D:31:3A Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103FE196ED28EC4E81C3DD6D97A460 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/sjQCjerjRwfah-q2hwwOmAstMTo.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214294 IP address blocks: 195.216.178.0/24 maxlen: 24 195.216.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3f:e1:96:ed:28:ec:4e:81:c3:dd:6d:97:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b234028deae34707da87eab6870c0e980b2d313a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:0d:70:79:c7:9e:2f:ac:11:cb:53:60:7e: 30:eb:29:f4:7b:39:e4:ed:e7:7a:9e:42:a4:85:79: 0f:57:ef:bc:bb:3f:e6:9b:27:68:54:b1:22:7b:8c: e7:a8:59:e1:79:f3:cc:e8:cc:50:44:0c:65:e6:82: 8e:bb:66:08:a5:ad:21:c1:75:26:51:d0:20:4c:89: 2c:83:31:14:cf:cc:5b:08:9c:48:3a:2b:3e:29:76: 92:3b:d9:7c:a2:f9:c9:4e:4b:1a:11:bf:1b:17:48: d9:53:05:d3:dd:f1:fa:5c:5e:4b:2c:22:29:43:95: b3:42:11:5e:c8:a7:08:96:9b:ad:13:36:5a:59:71: 5c:25:20:79:15:4d:90:5a:30:81:a9:89:92:3d:e7: 54:62:42:a6:ca:24:57:88:18:59:51:46:89:37:29: 83:66:ed:b3:4e:a3:a6:df:b6:0b:29:e7:d9:89:5a: ec:88:11:41:dd:10:ec:11:f8:1c:3e:ff:47:9c:85: df:a5:5a:66:0c:8e:d2:6f:66:c1:f1:98:7e:f5:b8: 66:15:6b:1a:21:43:0d:2b:de:f4:8a:1e:12:4e:84: d4:71:3c:fe:be:a2:c6:e2:4a:bf:44:5b:fc:9a:98: 60:46:6f:65:12:a0:ad:23:c1:64:dc:da:e2:7c:bb: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:02:8D:EA:E3:47:07:DA:87:EA:B6:87:0C:0E:98:0B:2D:31:3A X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/sjQCjerjRwfah-q2hwwOmAstMTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.178.0/23 Signature Algorithm: sha256WithRSAEncryption 11:87:02:8f:0e:db:a9:c6:ae:95:83:90:a9:59:f0:3f:5b:2f: a8:2f:62:8a:c2:fe:59:82:b7:ab:4a:f7:55:f4:15:c5:78:46: e8:aa:3c:0c:f2:ef:b6:21:5c:5d:0c:dd:12:6f:ae:06:d1:dc: aa:d5:b4:e2:f8:a7:8c:9c:db:cf:6e:14:5e:71:3a:93:d1:cd: f0:11:9a:78:49:21:21:41:b1:a9:37:2d:3c:24:04:a8:d6:33: 41:2a:26:10:35:86:cc:c7:26:0a:cd:d2:66:8a:08:51:61:9c: a5:cd:64:10:da:31:3f:a4:55:1f:d3:eb:59:4f:0b:84:5f:0a: 9a:a2:50:88:b2:3c:6e:d2:e5:1f:c9:1e:96:1b:40:de:6b:93: 86:17:64:cd:7c:ec:f7:a6:99:e5:fe:da:c2:54:e4:c3:6e:61: ea:39:d0:3e:4c:8f:f1:6e:9a:af:f2:72:d5:a5:30:d8:a9:19: ed:16:13:bd:08:0b:0b:18:b4:9c:98:9b:02:67:b7:bb:5b:2f: 04:78:56:a0:76:0a:fe:d7:0b:7a:fe:6d:82:36:92:00:d4:f1: e2:44:53:35:45:b1:bf:89:fa:3e:fe:f6:d3:0c:24:0c:25:a0: c8:f5:9f:0b:9a:e7:ea:6f:b5:0c:41:d8:c3:3c:5c:a5:3e:52: 43:5f:3e:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ED/hlu0o7E6Bw91tl6RgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjM0MDI4ZGVhZTM0NzA3ZGE4N2VhYjY4NzBjMGU5ODBiMmQzMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApssNcHnHni+sEctTYH4w6yn0eznk 7ed6nkKkhXkPV++8uz/mmydoVLEie4znqFnhefPM6MxQRAxl5oKOu2YIpa0hwXUm UdAgTIksgzEUz8xbCJxIOis+KXaSO9l8ovnJTksaEb8bF0jZUwXT3fH6XF5LLCIp Q5WzQhFeyKcIlputEzZaWXFcJSB5FU2QWjCBqYmSPedUYkKmyiRXiBhZUUaJNymD Zu2zTqOm37YLKefZiVrsiBFB3RDsEfgcPv9HnIXfpVpmDI7Sb2bB8Zh+9bhmFWsa IUMNK970ih4SToTUcTz+vqLG4kq/RFv8mphgRm9lEqCtI8Fk3NrifLvSRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLI0Ao3q40cH2ofqtocMDpgLLTE6MB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvc2pRQ2plcmpSd2ZhaC1xMmh3d09tQXN0TVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw9iyMA0G CSqGSIb3DQEBCwUAA4IBAQARhwKPDtupxq6Vg5CpWfA/Wy+oL2KKwv5ZgrerSvdV 9BXFeEboqjwM8u+2IVxdDN0Sb64G0dyq1bTi+KeMnNvPbhRecTqT0c3wEZp4SSEh QbGpNy08JASo1jNBKiYQNYbMxyYKzdJmighRYZylzWQQ2jE/pFUf0+tZTwuEXwqa olCIsjxu0uUfyR6WG0Dea5OGF2TNfOz3ppnl/trCVOTDbmHqOdA+TI/xbpqv8nLV pTDYqRntFhO9CAsLGLScmJsCZ7e7Wy8EeFagdgr+1wt6/m2CNpIA1PHiRFM1RbG/ ifo+/vbTDCQMJaDI9Z8Lmufqb7UMQdjDPFylPlJDXz7X -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:13 2026 by rpki-client