This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/R7vQI65gTXgD096Fp399u1cS500.roa File: R7vQI65gTXgD096Fp399u1cS500.roa (raw, json) Hash identifier: IXA5A3ZHv2Fl0EslRQpFmCFIqapjgNHWaVoxU2SjDaw= Subject key identifier: 47:BB:D0:23:AE:60:4D:78:03:D3:DE:85:A7:7F:7D:BB:57:12:E7:4D Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C73DDEF905AEF40335E102AB45ED4E Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/R7vQI65gTXgD096Fp399u1cS500.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56994 IP address blocks: 195.208.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3d:de:f9:05:ae:f4:03:35:e1:02:ab:45:ed:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47bbd023ae604d7803d3de85a77f7dbb5712e74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:8e:72:81:e9:1b:fb:49:b6:1b:60:a1:82: 54:92:e5:ab:30:7b:d2:07:7f:d2:f4:64:6f:35:e2: f9:fe:6e:63:7b:91:c2:6e:52:1e:db:e9:a3:02:13: f7:60:10:af:cd:2f:6c:cf:d7:e2:11:51:4a:50:4a: 15:23:dd:99:3c:5d:d4:53:78:48:3e:49:0d:99:2c: 08:25:aa:a0:55:f0:0a:17:ea:df:21:d4:e3:66:44: e2:44:6e:93:67:fc:90:d6:87:6c:f0:41:74:dd:e8: f4:75:04:77:31:d2:40:f8:d0:89:3d:e6:43:37:c1: c9:b8:d0:9c:d7:36:69:1a:87:13:f4:85:3d:e6:ed: 7d:e0:51:95:ec:2e:06:06:a6:65:1b:a2:1c:09:6d: e8:72:fb:c2:fc:ff:41:6e:76:41:83:f6:06:92:40: a6:f4:48:cd:0e:97:a2:bb:a3:57:3a:9a:50:9c:ce: 2a:32:53:22:2e:da:9f:04:d4:0a:1b:c9:4f:97:81: 41:5d:2b:50:cd:d6:ea:b0:81:ff:82:70:b3:a0:d5: e7:60:18:1a:e4:79:c0:2f:f3:6d:45:26:6b:b6:a2: c1:df:ff:d3:39:81:a7:b0:43:70:74:b2:6e:92:a8: 44:b8:72:e9:ee:1a:6d:e7:81:cc:49:2b:15:f3:0a: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BB:D0:23:AE:60:4D:78:03:D3:DE:85:A7:7F:7D:BB:57:12:E7:4D X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/R7vQI65gTXgD096Fp399u1cS500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.208.184.0/22 Signature Algorithm: sha256WithRSAEncryption 34:56:c2:e1:27:a7:90:5d:54:f8:6a:f2:f4:5b:66:15:71:09: ad:f9:09:56:15:3f:82:59:33:d7:24:55:e7:83:bb:32:d9:90: 72:44:4d:bb:9b:a1:da:6e:ca:18:9d:7d:ef:41:b0:30:c7:b0: 32:3c:dd:c6:a7:49:98:cc:e5:32:7b:ed:f9:f2:2a:37:31:b2: 4c:58:56:8a:4c:ed:7f:af:f4:38:c4:3f:df:25:62:f4:79:38: ba:3f:4c:2e:1d:1e:dc:57:78:6e:23:c6:48:a3:b7:18:06:79: 87:d1:54:10:ae:c9:ce:51:e1:6f:b2:16:e7:54:8b:09:d3:47: a7:50:da:8e:1d:0c:aa:bc:44:e8:44:9e:02:9a:f3:c1:8d:ca: 01:86:2d:f2:03:39:1e:d8:a1:8c:14:9d:32:1b:73:1c:7f:b5: f2:9c:d3:95:e5:d5:89:53:b9:4d:59:c5:3f:6a:bf:ad:61:e4: f9:d7:7e:66:77:59:f5:4f:10:b7:5a:32:51:f9:eb:90:06:5b: 88:8d:f7:4c:73:e5:60:4e:5f:12:a0:f8:a8:b1:f9:f9:b9:7f: 4c:3a:79:62:68:ab:8e:dc:6b:87:ec:61:fc:12:97:07:f0:20: 14:31:ab:27:41:06:f1:36:1a:b2:72:0d:29:a4:9e:57:32:c4: 7e:7b:0d:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xz3e+QWu9AM14QKrRe1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2JiZDAyM2FlNjA0ZDc4MDNkM2RlODVhNzdmN2RiYjU3MTJlNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuguOcoHpG/tJthtgoYJUkuWrMHvS B3/S9GRvNeL5/m5je5HCblIe2+mjAhP3YBCvzS9sz9fiEVFKUEoVI92ZPF3UU3hI PkkNmSwIJaqgVfAKF+rfIdTjZkTiRG6TZ/yQ1ods8EF03ej0dQR3MdJA+NCJPeZD N8HJuNCc1zZpGocT9IU95u194FGV7C4GBqZlG6IcCW3ocvvC/P9BbnZBg/YGkkCm 9EjNDpeiu6NXOppQnM4qMlMiLtqfBNQKG8lPl4FBXStQzdbqsIH/gnCzoNXnYBga 5HnAL/NtRSZrtqLB3//TOYGnsENwdLJukqhEuHLp7hpt54HMSSsV8wrLlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEe70COuYE14A9Pehad/fbtXEudNMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvUjd2UUk2NWdUWGdEMDk2RnAzOTl1MWNTNTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9C4MA0G CSqGSIb3DQEBCwUAA4IBAQA0VsLhJ6eQXVT4avL0W2YVcQmt+QlWFT+CWTPXJFXn g7sy2ZByRE27m6HabsoYnX3vQbAwx7AyPN3Gp0mYzOUye+358io3MbJMWFaKTO1/ r/Q4xD/fJWL0eTi6P0wuHR7cV3huI8ZIo7cYBnmH0VQQrsnOUeFvshbnVIsJ00en UNqOHQyqvEToRJ4CmvPBjcoBhi3yAzke2KGMFJ0yG3Mcf7XynNOV5dWJU7lNWcU/ ar+tYeT5135md1n1TxC3WjJR+euQBluIjfdMc+VgTl8SoPiosfn5uX9MOnliaKuO 3GuH7GH8EpcH8CAUMasnQQbxNhqycg0ppJ5XMsR+ew0Z -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:58 2026 by rpki-client