This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/SlA5tSP0JsNUjyJD0_sJwHDnin4.roa File: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (raw, json) Hash identifier: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM= Subject key identifier: 4A:50:39:B5:23:F4:26:C3:54:8F:22:43:D3:FB:09:C0:70:E7:8A:7E Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Certificate serial: 019B77C72FF4A9A8B5C24BE3EFDC440DC3AC Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/SlA5tSP0JsNUjyJD0_sJwHDnin4.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8455 IP address blocks: 195.95.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2f:f4:a9:a8:b5:c2:4b:e3:ef:dc:44:0d:c3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a5039b523f426c3548f2243d3fb09c070e78a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:2f:c9:63:53:4e:05:d1:9d:ab:d4:3f:1f: 11:bc:e4:db:c9:9b:21:59:c6:3f:7e:17:1e:ec:36: 2d:4d:6a:5d:3b:de:fc:6b:08:17:0b:55:f5:ac:e9: fd:97:0a:a8:d5:aa:82:fd:dc:1d:7c:0c:59:52:10: cb:7f:99:27:c4:05:d6:fa:5c:24:de:0b:90:84:49: e1:83:ec:6e:3b:13:97:8d:e2:70:08:1a:aa:66:4c: fa:80:64:00:87:78:c0:bb:b8:33:4a:9a:8f:76:be: 32:cf:67:67:44:87:9f:e3:d5:c0:9f:04:10:67:0a: 32:36:e5:21:32:75:97:c3:47:98:f9:e0:9c:99:52: 07:04:c8:e9:be:32:18:90:c0:3a:4e:f6:ed:8b:a2: e7:5a:68:96:e8:de:95:b0:98:e6:af:d2:66:be:1d: 51:e7:75:8e:e6:6c:39:b2:4e:70:3d:a5:9a:3f:a7: c4:63:a3:21:e1:36:d8:d9:3f:1b:7b:56:d4:79:5f: 8d:b4:cb:3c:bf:a0:d5:7a:b3:e4:ba:8a:b3:ee:b5: 73:b7:6b:66:3e:98:40:fd:88:16:07:4c:d5:64:dd: 4e:63:c9:18:07:6b:93:49:62:77:83:95:05:95:3b: 96:75:7b:26:4b:64:ba:14:36:bc:86:65:a0:2e:ce: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:39:B5:23:F4:26:C3:54:8F:22:43:D3:FB:09:C0:70:E7:8A:7E X509v3 Authority Key Identifier: keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/SlA5tSP0JsNUjyJD0_sJwHDnin4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.246.0/24 Signature Algorithm: sha256WithRSAEncryption 44:16:60:7f:e7:52:9c:a2:a9:f8:63:8e:50:f1:25:2a:49:c6: e4:73:bf:d7:17:c9:a1:57:5d:0e:13:53:5a:71:1a:53:0a:b1: cf:11:d5:2c:41:d6:e4:41:b7:59:c4:b9:47:ce:09:df:0f:5e: 32:f3:0b:03:0e:d0:aa:4b:3d:20:b5:d7:08:8c:f8:77:37:6f: 36:5f:f3:d4:a4:f8:90:68:98:fe:c4:14:90:cb:38:92:be:fe: df:4a:38:01:2f:ce:21:0f:b5:29:16:3d:18:c3:08:54:e8:8f: b2:c4:0b:1a:bd:37:43:cb:bf:4c:38:0a:49:58:dd:7e:67:8a: 2e:7d:40:4b:21:9d:79:86:10:f1:b5:58:d6:dc:a8:89:a3:b1: b3:f5:33:a6:7c:ed:f6:7f:66:a9:0e:b4:96:1a:74:f7:06:6d: f3:69:9f:66:dc:7d:6e:6d:85:00:8f:1a:db:ca:c9:bf:5f:d1: cc:e4:39:cf:0b:3e:99:f9:f2:87:1d:b8:f5:e4:25:05:66:74: 93:a0:04:07:a4:69:a5:6d:a8:8a:2b:10:c9:de:51:2b:a0:8b: 42:18:cf:02:53:92:72:f8:9c:7d:c7:ef:85:b1:26:04:b9:f0: 49:77:93:27:f8:d4:62:99:af:00:3f:86:8c:8c:a9:26:db:42: f9:81:55:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xy/0qai1wkvj79xEDcOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx ZWJjMDAwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTUwMzliNTIzZjQyNmMzNTQ4ZjIyNDNkM2ZiMDljMDcwZTc4YTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTQvyWNTTgXRnavUPx8RvOTbyZsh WcY/fhce7DYtTWpdO978awgXC1X1rOn9lwqo1aqC/dwdfAxZUhDLf5knxAXW+lwk 3guQhEnhg+xuOxOXjeJwCBqqZkz6gGQAh3jAu7gzSpqPdr4yz2dnRIef49XAnwQQ ZwoyNuUhMnWXw0eY+eCcmVIHBMjpvjIYkMA6Tvbti6LnWmiW6N6VsJjmr9Jmvh1R 53WO5mw5sk5wPaWaP6fEY6Mh4TbY2T8be1bUeV+NtMs8v6DVerPkuoqz7rVzt2tm PphA/YgWB0zVZN1OY8kYB2uTSWJ3g5UFlTuWdXsmS2S6FDa8hmWgLs70gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEpQObUj9CbDVI8iQ9P7CcBw54p+MB8GA1UdIwQY MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt NzA3NDllN2E0ZDk0LzEvU2xBNXRTUDBKc05VanlKRDBfc0p3SERuaW40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0 LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/2MA0G CSqGSIb3DQEBCwUAA4IBAQBEFmB/51Kcoqn4Y45Q8SUqScbkc7/XF8mhV10OE1Na cRpTCrHPEdUsQdbkQbdZxLlHzgnfD14y8wsDDtCqSz0gtdcIjPh3N282X/PUpPiQ aJj+xBSQyziSvv7fSjgBL84hD7UpFj0YwwhU6I+yxAsavTdDy79MOApJWN1+Z4ou fUBLIZ15hhDxtVjW3KiJo7Gz9TOmfO32f2apDrSWGnT3Bm3zaZ9m3H1ubYUAjxrb ysm/X9HM5DnPCz6Z+fKHHbj15CUFZnSToAQHpGmlbaiKKxDJ3lEroItCGM8CU5Jy +Jx9x++FsSYEufBJd5Mn+NRima8AP4aMjKkm20L5gVVm -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:03 2026 by rpki-client