This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa File: cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa (raw, json) Hash identifier: voL4FK/goy3Ucp4jv2hDvT1VmoRVg+99FBMAXu49zQk= Subject key identifier: 71:4B:BA:CC:FD:6A:0C:D2:73:74:1A:44:7C:E0:FB:B4:7F:59:12:AF Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019B79EBCB18C9AB2F32FB1863A08D8996B1 Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa Signing time: Thu 01 Jan 2026 14:17:34 +0000 ROA not before: Thu 01 Jan 2026 14:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41905 IP address blocks: 195.137.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cb:18:c9:ab:2f:32:fb:18:63:a0:8d:89:96:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Jan 1 14:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=714bbaccfd6a0cd273741a447ce0fbb47f5912af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:e3:3a:e3:28:2c:b6:dc:3a:e6:dc:e0:d0: c0:07:59:4a:02:9f:34:09:07:62:76:57:86:61:d6: 23:10:81:4c:83:65:b1:fb:38:19:2c:55:4e:cf:e9: 83:eb:a2:ad:5a:bd:b5:c6:5c:a9:81:09:05:74:03: d5:b6:7e:45:3a:bf:41:9b:36:16:3e:2b:c6:b8:ba: 26:b1:45:b1:ea:52:27:32:2d:d2:5f:3e:a1:7a:86: 76:cd:1f:c0:bd:85:ac:e0:43:3a:9c:8d:e0:a1:a9: 4e:13:66:3d:2c:fe:d6:94:68:a2:e4:0a:59:3f:4f: c4:1b:c1:67:10:94:1b:d8:af:4d:04:23:d6:2d:b8: 11:4f:dd:fc:65:6c:d0:a4:1b:e8:03:7c:e6:32:23: 8b:35:76:32:23:d6:a1:9f:7d:22:36:6f:30:52:3c: 21:d0:7d:64:5b:0b:3e:0c:9d:9c:10:38:fe:dc:51: 1b:55:68:f2:4b:a9:59:a4:c0:5a:c6:5b:3f:02:67: 6f:b3:98:d1:a3:74:62:5b:28:40:75:95:f0:cf:cd: 31:a8:d2:1d:db:a1:76:88:0b:df:ba:8e:55:bf:67: 73:fa:5b:5b:c3:78:a7:03:f5:3e:d2:d3:c4:16:42: 01:0d:3b:53:22:6a:0a:41:23:ab:88:3f:0a:2f:a5: bb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:BA:CC:FD:6A:0C:D2:73:74:1A:44:7C:E0:FB:B4:7F:59:12:AF X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.238.0/23 Signature Algorithm: sha256WithRSAEncryption 09:57:95:c9:ae:16:2b:71:16:74:13:2b:f7:cb:d8:7f:b8:52: 19:03:5f:b8:4a:c6:f9:91:ea:57:c9:bb:43:3f:a3:59:7c:98: 35:d3:2c:e3:09:c4:e1:be:c8:fd:5d:89:33:b8:38:82:c7:c4: f4:a7:26:c1:78:a5:b1:62:4b:c1:18:23:92:d5:6c:fe:70:b1: 2a:6f:2b:df:cb:10:d6:44:1d:40:9f:92:39:8c:ad:9d:24:d1: 7b:15:ae:b5:c4:41:df:05:d5:99:c5:e2:3a:41:1f:4f:ad:fc: 32:c4:9d:b8:b2:7b:ce:e5:ee:a6:1b:c2:af:e2:63:eb:46:e0: 1f:c4:3e:95:86:c3:4b:4d:e5:7f:44:29:3c:49:d4:cc:d5:96: 74:fd:ea:e6:9e:5c:28:be:80:9c:17:92:ea:c7:7f:70:04:2d: ba:96:2e:76:48:03:ac:c4:a4:c9:24:07:5d:90:cb:61:94:a3: da:1c:6c:02:70:83:92:bf:3a:01:bf:4d:d3:cd:24:22:81:71: 53:74:e3:3e:00:28:d5:f4:bf:4d:bb:9c:9e:fe:02:1b:72:8d: 5e:f0:ac:e8:5c:39:63:c6:11:33:3e:75:4c:6e:53:28:f4:03: 7f:39:fe:a7:74:34:15:cc:77:3a:5b:86:cf:e4:94:a1:01:ef: 2c:94:f6:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568sYyasvMvsYY6CNiZaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjYwMTAxMTQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTRiYmFjY2ZkNmEwY2QyNzM3NDFhNDQ3Y2UwZmJiNDdmNTkxMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJDjOuMoLLbcOubc4NDAB1lKAp80 CQdidleGYdYjEIFMg2Wx+zgZLFVOz+mD66KtWr21xlypgQkFdAPVtn5FOr9BmzYW PivGuLomsUWx6lInMi3SXz6heoZ2zR/AvYWs4EM6nI3goalOE2Y9LP7WlGii5ApZ P0/EG8FnEJQb2K9NBCPWLbgRT938ZWzQpBvoA3zmMiOLNXYyI9ahn30iNm8wUjwh 0H1kWws+DJ2cEDj+3FEbVWjyS6lZpMBaxls/Amdvs5jRo3RiWyhAdZXwz80xqNId 26F2iAvfuo5Vv2dz+ltbw3inA/U+0tPEFkIBDTtTImoKQSOriD8KL6W7hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHFLusz9agzSc3QaRHzg+7R/WRKvMB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEvY1V1NnpQMXFETkp6ZEJwRWZPRDd0SDlaRXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw4nuMA0G CSqGSIb3DQEBCwUAA4IBAQAJV5XJrhYrcRZ0Eyv3y9h/uFIZA1+4Ssb5kepXybtD P6NZfJg10yzjCcThvsj9XYkzuDiCx8T0pybBeKWxYkvBGCOS1Wz+cLEqbyvfyxDW RB1An5I5jK2dJNF7Fa61xEHfBdWZxeI6QR9PrfwyxJ24snvO5e6mG8Kv4mPrRuAf xD6VhsNLTeV/RCk8SdTM1ZZ0/ermnlwovoCcF5Lqx39wBC26li52SAOsxKTJJAdd kMthlKPaHGwCcIOSvzoBv03TzSQigXFTdOM+ACjV9L9Nu5ye/gIbco1e8KzoXDlj xhEzPnVMblMo9AN/Of6ndDQVzHc6W4bP5JShAe8slPbf -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:43 2026 by rpki-client