This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-Ww2Ze2sq2v2pM_L6mAte2W3rVs.roa File: 1-Ww2Ze2sq2v2pM_L6mAte2W3rVs.roa (raw, json) Hash identifier: vmqxvrLFyXQ3PPH8g1YNS786D0Yd2y9W7lv4XmkCJp4= Subject key identifier: F9:6C:36:65:ED:AC:AB:6B:F6:A4:CF:CB:EA:60:2D:7B:65:B7:AD:5B Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C75024598806B4EC4886A3E0B48865 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-Ww2Ze2sq2v2pM_L6mAte2W3rVs.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 195.19.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:50:24:59:88:06:b4:ec:48:86:a3:e0:b4:88:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f96c3665edacab6bf6a4cfcbea602d7b65b7ad5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c2:e6:3c:39:1d:0e:9d:e9:16:42:f8:14:a9: d9:25:e9:bd:ee:8f:82:41:cb:30:39:53:b0:63:cc: 1f:97:d0:3c:58:57:d9:75:de:ce:f0:d3:42:64:7a: 41:da:93:95:2e:27:7c:dd:56:79:3b:c2:dd:c2:10: f2:11:dd:d1:53:65:2f:f5:3d:fe:54:de:1f:fe:fe: 07:db:4a:53:60:96:71:d6:c2:e8:ca:cd:df:59:7d: b1:dc:8e:3e:6f:3b:82:d4:e4:9e:75:4d:41:b3:43: 9a:9f:36:a3:65:2f:da:62:7c:72:f8:98:e8:93:25: fc:fd:3e:c2:87:c2:a8:e8:ce:4c:a8:a7:db:df:43: 9c:95:66:d8:6e:f5:fd:ba:82:d6:15:0e:8f:eb:ce: 3b:01:7f:2c:48:df:ad:62:76:ff:22:ac:b8:25:45: 24:df:28:22:4f:56:48:08:e6:8e:c8:8b:cc:63:17: 8e:8c:da:f1:14:6d:cb:22:75:66:d5:69:f2:29:1b: 07:e2:6f:27:a0:f7:23:ff:e3:0c:a0:cb:b9:c1:c8: 9a:ea:da:34:f7:86:6c:9e:64:57:9b:0a:2c:bc:54: c8:7b:e8:37:2b:9a:4e:bb:fa:11:68:3f:e6:20:46: 2b:39:b3:00:c3:44:17:bd:d9:74:bf:f0:23:5e:20: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6C:36:65:ED:AC:AB:6B:F6:A4:CF:CB:EA:60:2D:7B:65:B7:AD:5B X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-Ww2Ze2sq2v2pM_L6mAte2W3rVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.19.93.0/24 Signature Algorithm: sha256WithRSAEncryption 12:a4:39:73:40:46:c4:4c:4a:ae:a3:7d:38:5e:d3:9e:11:a8: 8a:2d:09:f9:35:f9:6d:fd:b5:87:28:0b:9b:b5:ac:d0:ad:6c: 5f:d5:cb:83:bd:82:01:4e:52:91:f9:60:51:5f:fd:ca:95:e4: 81:8c:8a:36:0f:51:f6:48:85:04:a7:4a:c0:15:54:9d:e3:70: c6:88:88:66:e0:c5:8d:71:80:6c:26:6e:8c:ae:22:0d:d0:f6: a1:ee:e8:0c:fb:b4:de:ae:11:35:e7:54:a7:f7:75:b6:29:7d: e5:f5:c1:49:b6:44:17:11:7b:c7:95:1e:9c:91:b4:c6:0f:72: 3a:de:7e:fe:fc:2c:de:eb:dd:84:58:18:4c:47:b8:4e:6f:1a: 93:ac:9e:4c:b8:c9:f6:4c:0b:f5:10:81:7f:f8:27:06:3b:68: 23:4e:12:59:92:02:f4:3d:a8:58:fa:d3:a6:4e:78:b7:0f:3d: bc:d9:fd:5e:81:45:b7:68:6f:ca:d2:e0:d3:66:73:09:ba:34: 39:f7:b7:f3:55:c3:4e:8c:2f:0c:ee:ec:0d:42:7d:44:38:a6: 2b:ee:1e:41:fb:5b:cb:3f:b2:30:91:33:99:7d:30:f1:7c:d3: b1:62:65:45:10:68:55:26:31:ed:0b:05:7c:94:5f:88:4a:d3: 9b:81:08:9a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x1AkWYgGtOxIhqPgtIhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTZjMzY2NWVkYWNhYjZiZjZhNGNmY2JlYTYwMmQ3YjY1YjdhZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68LmPDkdDp3pFkL4FKnZJem97o+C QcswOVOwY8wfl9A8WFfZdd7O8NNCZHpB2pOVLid83VZ5O8LdwhDyEd3RU2Uv9T3+ VN4f/v4H20pTYJZx1sLoys3fWX2x3I4+bzuC1OSedU1Bs0OanzajZS/aYnxy+Jjo kyX8/T7Ch8Ko6M5MqKfb30OclWbYbvX9uoLWFQ6P6847AX8sSN+tYnb/Iqy4JUUk 3ygiT1ZICOaOyIvMYxeOjNrxFG3LInVm1WnyKRsH4m8noPcj/+MMoMu5wcia6to0 94ZsnmRXmwosvFTIe+g3K5pOu/oRaD/mIEYrObMAw0QXvdl0v/AjXiCP2wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlsNmXtrKtr9qTPy+pgLXtlt61bMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvMS1XdzJaZTJzcTJ2MnBNX0w2bUF0ZTJXM3JWcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTEvOTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4 ZS8xL0pUbzdYMUdBZ1dqQ0VzQ1VvcnF2ODQ0V1Jrby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMTXTAN BgkqhkiG9w0BAQsFAAOCAQEAEqQ5c0BGxExKrqN9OF7TnhGoii0J+TX5bf21hygL m7Ws0K1sX9XLg72CAU5SkflgUV/9ypXkgYyKNg9R9kiFBKdKwBVUneNwxoiIZuDF jXGAbCZujK4iDdD2oe7oDPu03q4RNedUp/d1til95fXBSbZEFxF7x5UenJG0xg9y Ot5+/vws3uvdhFgYTEe4Tm8ak6yeTLjJ9kwL9RCBf/gnBjtoI04SWZIC9D2oWPrT pk54tw89vNn9XoFFt2hvytLg02ZzCbo0Ofe381XDTowvDO7sDUJ9RDimK+4eQftb yz+yMJEzmX0w8XzTsWJlRRBoVSYx7QsFfJRfiErTm4EImg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:01 2026 by rpki-client