This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dSi0VxORwR3UYLMIgEU6L5lcPtc.roa File: dSi0VxORwR3UYLMIgEU6L5lcPtc.roa (raw, json) Hash identifier: 9VfT6PLltCAsn+14+LcWDJ+JJi3nkBN1Qnwu1IS++8w= Subject key identifier: 75:28:B4:57:13:91:C1:1D:D4:60:B3:08:80:45:3A:2F:99:5C:3E:D7 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C740F6BA750345973F95C0F141F349 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dSi0VxORwR3UYLMIgEU6L5lcPtc.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60375 IP address blocks: 195.209.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:40:f6:ba:75:03:45:97:3f:95:c0:f1:41:f3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7528b4571391c11dd460b30880453a2f995c3ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:de:5c:0c:e7:1f:a0:6d:cb:b5:62:0e:80:02: 90:c5:59:6d:a7:55:0c:bf:49:65:15:df:a9:bb:dc: a8:5f:98:6e:6d:3a:10:37:7d:a5:7e:90:6f:90:1a: e8:d3:8d:18:eb:40:ed:fd:b5:2d:34:5f:57:6c:68: 07:38:94:7f:7f:55:97:72:7c:af:6c:36:e0:eb:52: 75:68:f7:6c:6a:5b:ec:78:08:f1:7d:19:d4:35:59: cb:e7:a3:1f:f3:f2:4b:7a:49:2b:ca:de:8b:32:9a: aa:ee:3d:7e:df:fb:30:b8:b6:3f:c6:0c:af:17:fe: a0:66:2f:48:40:df:1b:5a:af:76:21:5d:c5:25:c0: 4a:db:6c:b1:80:de:52:1f:6a:db:21:8f:d5:e7:37: 59:47:a2:d2:5f:b9:b0:27:60:b8:30:8c:c3:86:90: b2:7f:b2:10:92:04:05:77:c7:78:54:d9:69:ea:8b: ac:02:3f:47:61:c2:bf:5e:91:35:8a:31:53:24:84: 7f:bd:5b:a9:26:92:6a:17:8c:96:c7:b6:d1:71:4a: 7d:d1:15:42:53:79:ce:f1:0e:76:d0:50:e7:63:48: a3:c8:aa:f8:80:2b:14:3f:d0:b1:e2:5e:d8:db:04: ab:df:a8:5d:5e:ba:83:32:e6:c7:9a:66:4b:af:f5: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:28:B4:57:13:91:C1:1D:D4:60:B3:08:80:45:3A:2F:99:5C:3E:D7 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dSi0VxORwR3UYLMIgEU6L5lcPtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.209.104.0/24 Signature Algorithm: sha256WithRSAEncryption 83:a4:f8:2d:42:db:af:88:5a:bd:3a:5b:9e:09:3e:18:6f:b3: 30:7d:a1:af:a2:f5:09:bf:e6:62:2f:88:b6:89:d0:4b:af:23: fd:9a:9b:cc:c6:3a:72:b4:9e:df:31:6a:5d:66:7e:fe:89:13: 3b:84:00:5d:94:19:ac:2d:aa:0c:73:39:ac:9b:d8:b7:f3:19: 44:b3:d7:c2:1a:e8:b1:07:75:68:0d:73:6a:75:c8:5f:8d:56: f4:f5:1a:3c:73:a1:d2:df:4a:44:01:7b:2a:f2:5c:9a:b3:a2: bb:16:04:01:02:0a:f1:a6:01:76:21:63:ae:c4:80:b9:77:d4: 2f:62:41:07:64:8c:3f:ad:08:07:ce:a1:db:0d:65:21:62:f9: 6d:ba:5c:4d:36:4e:f4:8a:d8:a5:f8:4f:c6:48:40:f7:e4:db: 99:ff:f8:17:c2:0a:b3:fb:67:64:2a:da:b2:be:b4:3b:09:4a: 5f:bd:67:69:a3:88:20:f3:e6:f4:f7:10:dc:8d:d5:85:a0:cb: 87:b5:99:ab:31:17:86:9e:95:14:74:dc:58:1d:e6:8d:fe:e8: f2:44:41:df:bc:e1:97:4a:65:7b:a2:fd:6e:84:a4:0d:0f:26: fe:4b:4e:3c:d5:04:8a:cb:f5:0b:f7:46:18:81:55:66:d4:0c: 04:0e:1c:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0D2unUDRZc/lcDxQfNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTI4YjQ1NzEzOTFjMTFkZDQ2MGIzMDg4MDQ1M2EyZjk5NWMzZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t5cDOcfoG3LtWIOgAKQxVltp1UM v0llFd+pu9yoX5hubToQN32lfpBvkBro040Y60Dt/bUtNF9XbGgHOJR/f1WXcnyv bDbg61J1aPdsalvseAjxfRnUNVnL56Mf8/JLekkryt6LMpqq7j1+3/swuLY/xgyv F/6gZi9IQN8bWq92IV3FJcBK22yxgN5SH2rbIY/V5zdZR6LSX7mwJ2C4MIzDhpCy f7IQkgQFd8d4VNlp6ousAj9HYcK/XpE1ijFTJIR/vVupJpJqF4yWx7bRcUp90RVC U3nO8Q520FDnY0ijyKr4gCsUP9Cx4l7Y2wSr36hdXrqDMubHmmZLr/XAVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUotFcTkcEd1GCzCIBFOi+ZXD7XMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvZFNpMFZ4T1J3UjNVWUxNSWdFVTZMNWxjUHRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9FoMA0G CSqGSIb3DQEBCwUAA4IBAQCDpPgtQtuviFq9OlueCT4Yb7MwfaGvovUJv+ZiL4i2 idBLryP9mpvMxjpytJ7fMWpdZn7+iRM7hABdlBmsLaoMczmsm9i38xlEs9fCGuix B3VoDXNqdchfjVb09Ro8c6HS30pEAXsq8lyas6K7FgQBAgrxpgF2IWOuxIC5d9Qv YkEHZIw/rQgHzqHbDWUhYvltulxNNk70itil+E/GSED35NuZ//gXwgqz+2dkKtqy vrQ7CUpfvWdpo4gg8+b09xDcjdWFoMuHtZmrMReGnpUUdNxYHeaN/ujyREHfvOGX SmV7ov1uhKQNDyb+S0481QSKy/UL90YYgVVm1AwEDhy6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:31 2026 by rpki-client